Star0
26
代码
代码
Issues
Pull Requests
流水线
项目讨论
Wiki
分析
Star0
26
kang1024kang1024Add ML-KEM and ML-DSA support from OpenSSL 3.5.6
c4fb8d51创建于 4月23日历史提交
文件最后提交记录最后更新时间
__DECC_INCLUDE_EPILOGUE.H
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
__DECC_INCLUDE_PROLOGUE.H
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
aes_platform.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
aria.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
asn1.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
asn1_dsa.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
asn1err.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
async.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
asyncerr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
bioerr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
bn.h
Fix timing side-channel in ECDSA signature computation There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This can happen with significant probability only for some of the supported elliptic curves. In particular the NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located in the same physical computer or must have a very fast network connection with low latency. Attacks on ECDSA nonce are also known as Minerva attack. Fixes CVE-2024-13176 Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/26429) (cherry picked from commit 63c40a66c5dc287485705d06122d3a6e74a6a203) Signed-off-by: lcc <lichaochen@huawei.com>
1 年前
bn_conf.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
bn_dh.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
bn_srp.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
bnerr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
buffererr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
chacha.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
cmll_platform.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
cmperr.h
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
2 年前
cmserr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
comperr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
conferr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
crmferr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
cryptlib.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
cryptoerr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
cterr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ctype.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
decoder.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
decodererr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
des_platform.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
dh.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
dherr.h
Make DH_check_pub_key() and DH_generate_key() safer yet We already check for an excessively large P in DH_generate_key(), but not in DH_check_pub_key(), and none of them check for an excessively large Q. This change adds all the missing excessive size checks of P and Q. It's to be noted that behaviours surrounding excessively sized P and Q differ. DH_check() raises an error on the excessively sized P, but only sets a flag for the excessively sized Q. This behaviour is mimicked in DH_check_pub_key(). Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22518) (cherry picked from commit ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6) Signed-off-by: code4lala <fengziteng2@huawei.com>
2 年前
dsa.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
dsaerr.h
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
2 年前
dso_conf.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ec.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ecerr.h
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
2 年前
ecx.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
encoder.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
encodererr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
engine.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
engineerr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
err.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ess.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
esserr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
evp.h
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
2 年前
evperr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
httperr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
lhash.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
md32_common.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ml_dsa.h
Add ML-KEM and ML-DSA support from OpenSSL 3.5.6 Port ML-KEM (FIPS 203) and ML-DSA (FIPS 204) post-quantum cryptography from OpenSSL 3.5.6 to OpenSSL 3.0.9 with API compatibility adaptations. Key compatibility shims: - Add include/openssl/byteorder.h (OPENSSL_load/store_u{16,32,64}_le) - Add include/internal/fips.h (ossl_fips_self_testing() inline stub) - Map EVP_DigestSqueeze() to EVP_DigestFinalXOF() + large buffer - Map EVP_MD_xof() to EVP_MD flags check - Map OSSL_FUNC_SIGNATURE_SIGN/VERIFY_MESSAGE_INIT dispatch IDs to existing SIGN_INIT/VERIFY_INIT (2/4) - Map EVP_PKEY_sign/verify_message_init() to sign/verify_init_ex() - Add OSSL_SIGNATURE_PARAM_MU constant - Add OSSL_FUNC typedef + OSSL_DISPATCH_END macro - Use correct NID names (NID_id_alg_ml_dsa_44 vs NID_ML_DSA_44) Provider registrations: - ML-KEM KEM, ML-KEM/ML-DSA keymgmt, ML-DSA signature providers - ML-KEM/ML-DSA encoders/decoders (der/pem/text for pub/priv/pkcs8) - ML-KEM TLS group capabilities Build system fixes: - Add providers/common/provider_ctx.c with get_param/bool_param stubs - Fix DER build.info $COMMON variable override order - Fix decode_der2key.c PROV_CTX vs OSSL_LIB_CTX type mismatch (6 calls) - Link ML tests against libcrypto.a (not .so) for internal symbols - Remove references to missing der_ml_kem_{gen,key}.c Adapt BUILD.gn for OpenHarmony: - Add 18 new source files across three build sections (libcommon, libdefault, crypto_source) to support ML-KEM/ML-DSA in the OpenHarmony/OHOS build system. Test infrastructure: - Add 3 test recipes (evp_extra_ml_kem, internal_ml_kem, ml_dsa) - Add #include "internal/nelem.h" for OSSL_NELEM in test files - Add LABELED_BUF_PRINT_WIDTH definition for codec text output All 253 tests pass (3374 test cases), 0 compilation warnings. Signed-off-by: kang1024 <yangjiankang3@huawei.com>
3 个月前
ml_kem.h
Add ML-KEM and ML-DSA support from OpenSSL 3.5.6 Port ML-KEM (FIPS 203) and ML-DSA (FIPS 204) post-quantum cryptography from OpenSSL 3.5.6 to OpenSSL 3.0.9 with API compatibility adaptations. Key compatibility shims: - Add include/openssl/byteorder.h (OPENSSL_load/store_u{16,32,64}_le) - Add include/internal/fips.h (ossl_fips_self_testing() inline stub) - Map EVP_DigestSqueeze() to EVP_DigestFinalXOF() + large buffer - Map EVP_MD_xof() to EVP_MD flags check - Map OSSL_FUNC_SIGNATURE_SIGN/VERIFY_MESSAGE_INIT dispatch IDs to existing SIGN_INIT/VERIFY_INIT (2/4) - Map EVP_PKEY_sign/verify_message_init() to sign/verify_init_ex() - Add OSSL_SIGNATURE_PARAM_MU constant - Add OSSL_FUNC typedef + OSSL_DISPATCH_END macro - Use correct NID names (NID_id_alg_ml_dsa_44 vs NID_ML_DSA_44) Provider registrations: - ML-KEM KEM, ML-KEM/ML-DSA keymgmt, ML-DSA signature providers - ML-KEM/ML-DSA encoders/decoders (der/pem/text for pub/priv/pkcs8) - ML-KEM TLS group capabilities Build system fixes: - Add providers/common/provider_ctx.c with get_param/bool_param stubs - Fix DER build.info $COMMON variable override order - Fix decode_der2key.c PROV_CTX vs OSSL_LIB_CTX type mismatch (6 calls) - Link ML tests against libcrypto.a (not .so) for internal symbols - Remove references to missing der_ml_kem_{gen,key}.c Adapt BUILD.gn for OpenHarmony: - Add 18 new source files across three build sections (libcommon, libdefault, crypto_source) to support ML-KEM/ML-DSA in the OpenHarmony/OHOS build system. Test infrastructure: - Add 3 test recipes (evp_extra_ml_kem, internal_ml_kem, ml_dsa) - Add #include "internal/nelem.h" for OSSL_NELEM in test files - Add LABELED_BUF_PRINT_WIDTH definition for codec text output All 253 tests pass (3374 test cases), 0 compilation warnings. Signed-off-by: kang1024 <yangjiankang3@huawei.com>
3 个月前
modes.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
objects.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
objectserr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ocsperr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
pem.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
pemerr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
pkcs12err.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
pkcs7.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
pkcs7err.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
poly1305.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ppc_arch.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
punycode.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
rand.h
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
2 年前
rand_pool.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
randerr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
rsa.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
rsaerr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
security_bits.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
sha.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
siphash.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
siv.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
sm2.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
sm2err.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
sm4.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
sparc_arch.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
sparse_array.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
store.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
storeerr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
tserr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
types.h
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
2 年前
uierr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
x509.h
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
2 年前
x509err.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
x509v3err.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前