[openssl/openssl] 85a970: Fixed typos in EVP_PKEY_decrypt.pod and RSA_public...

[Tomáš Mráz]

  Branch: refs/heads/openssl-3.3
  Home:   https://github.com/openssl/openssl
  Commit: 85a97087a3beb9d4b9f7fbe14d96034d5d9dcee4
      https://github.com/openssl/openssl/commit/85a97087a3beb9d4b9f7fbe14d96034d5d9dcee4
  Author: sapph2c <arn4006 at g.rit.edu>
  Date:   2024-05-01 (Wed, 01 May 2024)

  Changed paths:
    M doc/man3/EVP_PKEY_decrypt.pod
    M doc/man3/RSA_public_encrypt.pod

  Log Message:
  -----------
  Fixed typos in EVP_PKEY_decrypt.pod and RSA_public_encrypt.pod

CLA: trivial

Reviewed-by: Paul Dale <ppzgs1 at gmail.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24304)

(cherry picked from commit f4601b6de709a89120c86ad825b70f65b332deed)


  Commit: 86ce09a10d01834a82f696b221a01d9e2ca21a18
      https://github.com/openssl/openssl/commit/86ce09a10d01834a82f696b221a01d9e2ca21a18
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2024-05-02 (Thu, 02 May 2024)

  Changed paths:
    M crypto/bn/bn_lib.c
    M crypto/bn/bn_local.h
    M crypto/bn/bn_rand.c
    M include/internal/constant_time.h

  Log Message:
  -----------
  Make BN_generate_dsa_nonce() constant time and non-biased

Co-authored-by: Paul Dale <ppzgs1 at gmail.com>

Reviewed-by: Paul Dale <ppzgs1 at gmail.com>
Reviewed-by: Neil Horman <nhorman at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24265)

(cherry picked from commit d7d1bdcb6aa3d5000bf7f5ebc5518be5c91fd5a5)


  Commit: 2c1c0aacbd3fa7cfd706e7df6a73344f99b3c538
      https://github.com/openssl/openssl/commit/2c1c0aacbd3fa7cfd706e7df6a73344f99b3c538
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2024-05-02 (Thu, 02 May 2024)

  Changed paths:
    M crypto/bn/bn_lib.c
    M crypto/bn/bn_local.h
    M crypto/bn/bn_rand.c
    M crypto/bn/bn_shift.c
    M crypto/deterministic_nonce.c
    M include/crypto/bn.h
    M include/internal/constant_time.h

  Log Message:
  -----------
  Make ossl_gen_deterministic_nonce_rfc6979() constant time

Reviewed-by: Paul Dale <ppzgs1 at gmail.com>
Reviewed-by: Neil Horman <nhorman at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24265)

(cherry picked from commit 2d285fa873028f6cff9484a0cdf690fe05d7fb16)


  Commit: d99332f612a4ccead17ba5d63c3976aa6bcb68b6
      https://github.com/openssl/openssl/commit/d99332f612a4ccead17ba5d63c3976aa6bcb68b6
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2024-05-02 (Thu, 02 May 2024)

  Changed paths:
    M crypto/bn/bn_rand.c
    M crypto/dsa/dsa_ossl.c
    M crypto/ec/ecdsa_ossl.c
    M include/crypto/bn.h

  Log Message:
  -----------
  Add ossl_bn_priv_rand_range_fixed_top() and use it for EC/DSA

Reviewed-by: Paul Dale <ppzgs1 at gmail.com>
Reviewed-by: Neil Horman <nhorman at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24265)

(cherry picked from commit 13b3ca5c998e6db4f7251a56c43541cb1a422bd0)


  Commit: 1c3286a3c7a4361ab57536e7e752850e42d71650
      https://github.com/openssl/openssl/commit/1c3286a3c7a4361ab57536e7e752850e42d71650
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2024-05-02 (Thu, 02 May 2024)

  Changed paths:
    M crypto/bn/bn_rand.c
    M crypto/dsa/dsa_ossl.c
    M crypto/ec/ecdsa_ossl.c
    M include/crypto/bn.h

  Log Message:
  -----------
  Rename BN_generate_dsa_nonce() to ossl_bn_gen_dsa_nonce_fixed_top()

And create a new BN_generate_dsa_nonce() that corrects the BIGNUM top.
We do this to avoid leaking fixed top numbers via the public API.

Also add a slight optimization in ossl_bn_gen_dsa_nonce_fixed_top()
and make it LE/BE agnostic.

Reviewed-by: Paul Dale <ppzgs1 at gmail.com>
Reviewed-by: Neil Horman <nhorman at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24265)

(cherry picked from commit 9c85f6cd2d6debe5ef6ef475ff4bf17e0985f7a2)


  Commit: d39f5746d4c45931b5ba34eab617327e880fb5af
      https://github.com/openssl/openssl/commit/d39f5746d4c45931b5ba34eab617327e880fb5af
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2024-05-02 (Thu, 02 May 2024)

  Changed paths:
    M providers/fips/self_test_data.inc

  Log Message:
  -----------
  Adjust FIPS EC/DSA self test data for different nonce generation

Reviewed-by: Paul Dale <ppzgs1 at gmail.com>
Reviewed-by: Neil Horman <nhorman at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24265)

(cherry picked from commit 8a1f65468064e39f65ef4918c62db73a9eef80e4)


  Commit: 375447bac3ba98b97fe2a4c8b3c797fc0b2f4234
      https://github.com/openssl/openssl/commit/375447bac3ba98b97fe2a4c8b3c797fc0b2f4234
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2024-05-02 (Thu, 02 May 2024)

  Changed paths:
    M crypto/bn/bn_rand.c
    M crypto/deterministic_nonce.c

  Log Message:
  -----------
  Correct top for EC/DSA nonces if BN_DEBUG is on

Otherwise following operations would bail out in bn_check_top().

Reviewed-by: Paul Dale <ppzgs1 at gmail.com>
Reviewed-by: Neil Horman <nhorman at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24265)

(cherry picked from commit a380ae85be287045b1eaa64d23942101a426c080)


Compare: https://github.com/openssl/openssl/compare/91d5fd54ee3a...375447bac3ba

To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications