openssl/providers
Matt Caswell 899e25643d Implement EVP_PKEY_param_check_quick() and use it in libssl
The low level DH API has two functions for checking parameters:
DH_check_ex() and DH_check_params_ex(). The former does a "full" check,
while the latter does a "quick" check. Most importantly it skips the
check for a safe prime. We're ok without using safe primes here because
we're doing ephemeral DH.

Now that libssl is fully using the EVP API, we need a way to specify that
we want a quick check instead of a full check. Therefore we introduce
EVP_PKEY_param_check_quick() and use it.

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/14146)
2021-02-15 14:17:36 +10:00
..
common ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 2021-02-12 19:05:17 +01:00
fips Move the PROV_R reason codes to a public header 2021-02-11 09:34:31 +01:00
implementations Implement EVP_PKEY_param_check_quick() and use it in libssl 2021-02-15 14:17:36 +10:00
baseprov.c PROV: Re-implement all the keypair encoders 2020-11-11 12:43:27 +01:00
build.info providers/build.info: Tag the FIPS module, for the build file 2020-10-08 11:29:23 +02:00
decoders.inc PROV: Add SM2 encoders and decoders, as well as support functionality 2021-02-01 23:02:20 +01:00
defltprov.c Avoid races by caching exported ciphers in the init function 2021-02-02 12:21:21 +00:00
encoders.inc PROV: Add SM2 encoders and decoders, as well as support functionality 2021-02-01 23:02:20 +01:00
legacyprov.c Rename some occurrences of 'library_context' and 'lib_ctx' to 'libctx' 2020-10-15 12:00:21 +01:00
nullprov.c null prov: fix gettable param array type. 2020-10-16 10:33:38 +10:00
prov_running.c keygen: add FIPS error state management to conditional self tests 2020-09-12 16:46:51 +10:00
stores.inc prov: prefix all OSSL_DISPATCH tables names with ossl_ 2020-09-29 16:31:46 +10:00