[openssl/openssl] d735f1: Fixed typos in EVP_PKEY_decrypt.pod and RSA_public...

[Tomáš Mráz]

  Branch: refs/heads/openssl-3.2
  Home:   https://github.com/openssl/openssl
  Commit: d735f108d9319840ce79409825bd7f06b4f21077
      https://github.com/openssl/openssl/commit/d735f108d9319840ce79409825bd7f06b4f21077
  Author: sapph2c <arn4006 at g.rit.edu>
  Date:   2024-05-01 (Wed, 01 May 2024)

  Changed paths:
    M doc/man3/EVP_PKEY_decrypt.pod
    M doc/man3/RSA_public_encrypt.pod

  Log Message:
  -----------
  Fixed typos in EVP_PKEY_decrypt.pod and RSA_public_encrypt.pod

CLA: trivial

Reviewed-by: Paul Dale <ppzgs1 at gmail.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24304)

(cherry picked from commit f4601b6de709a89120c86ad825b70f65b332deed)


  Commit: 4688a4507956c9686dfa80b8dd25f4b06e3d7ff8
      https://github.com/openssl/openssl/commit/4688a4507956c9686dfa80b8dd25f4b06e3d7ff8
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2024-05-02 (Thu, 02 May 2024)

  Changed paths:
    M crypto/bn/bn_lib.c
    M crypto/bn/bn_local.h
    M crypto/bn/bn_rand.c
    M include/internal/constant_time.h

  Log Message:
  -----------
  Make BN_generate_dsa_nonce() constant time and non-biased

Co-authored-by: Paul Dale <ppzgs1 at gmail.com>

Reviewed-by: Paul Dale <ppzgs1 at gmail.com>
Reviewed-by: Neil Horman <nhorman at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24265)

(cherry picked from commit d7d1bdcb6aa3d5000bf7f5ebc5518be5c91fd5a5)


  Commit: e35181427355e1a6f18011786a3bb07b18217b82
      https://github.com/openssl/openssl/commit/e35181427355e1a6f18011786a3bb07b18217b82
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2024-05-02 (Thu, 02 May 2024)

  Changed paths:
    M crypto/bn/bn_lib.c
    M crypto/bn/bn_local.h
    M crypto/bn/bn_rand.c
    M crypto/bn/bn_shift.c
    M crypto/deterministic_nonce.c
    M include/crypto/bn.h
    M include/internal/constant_time.h

  Log Message:
  -----------
  Make ossl_gen_deterministic_nonce_rfc6979() constant time

Reviewed-by: Paul Dale <ppzgs1 at gmail.com>
Reviewed-by: Neil Horman <nhorman at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24265)

(cherry picked from commit 2d285fa873028f6cff9484a0cdf690fe05d7fb16)


  Commit: 39819ae4cc7fbaadf1e49b9dbb393a4815d3612f
      https://github.com/openssl/openssl/commit/39819ae4cc7fbaadf1e49b9dbb393a4815d3612f
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2024-05-02 (Thu, 02 May 2024)

  Changed paths:
    M crypto/bn/bn_rand.c
    M crypto/dsa/dsa_ossl.c
    M crypto/ec/ecdsa_ossl.c
    M include/crypto/bn.h

  Log Message:
  -----------
  Add ossl_bn_priv_rand_range_fixed_top() and use it for EC/DSA

Reviewed-by: Paul Dale <ppzgs1 at gmail.com>
Reviewed-by: Neil Horman <nhorman at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24265)

(cherry picked from commit 13b3ca5c998e6db4f7251a56c43541cb1a422bd0)


  Commit: 2ed99891c6ac93f7177bd9dd4d9d84095d7e5533
      https://github.com/openssl/openssl/commit/2ed99891c6ac93f7177bd9dd4d9d84095d7e5533
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2024-05-02 (Thu, 02 May 2024)

  Changed paths:
    M crypto/bn/bn_rand.c
    M crypto/dsa/dsa_ossl.c
    M crypto/ec/ecdsa_ossl.c
    M include/crypto/bn.h

  Log Message:
  -----------
  Rename BN_generate_dsa_nonce() to ossl_bn_gen_dsa_nonce_fixed_top()

And create a new BN_generate_dsa_nonce() that corrects the BIGNUM top.
We do this to avoid leaking fixed top numbers via the public API.

Also add a slight optimization in ossl_bn_gen_dsa_nonce_fixed_top()
and make it LE/BE agnostic.

Reviewed-by: Paul Dale <ppzgs1 at gmail.com>
Reviewed-by: Neil Horman <nhorman at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24265)

(cherry picked from commit 9c85f6cd2d6debe5ef6ef475ff4bf17e0985f7a2)


  Commit: cd69bd9fbd06f0aceead79930ab6720e376bb97e
      https://github.com/openssl/openssl/commit/cd69bd9fbd06f0aceead79930ab6720e376bb97e
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2024-05-02 (Thu, 02 May 2024)

  Changed paths:
    M providers/fips/self_test_data.inc

  Log Message:
  -----------
  Adjust FIPS EC/DSA self test data for different nonce generation

Reviewed-by: Paul Dale <ppzgs1 at gmail.com>
Reviewed-by: Neil Horman <nhorman at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24265)

(cherry picked from commit 8a1f65468064e39f65ef4918c62db73a9eef80e4)


  Commit: 65b8a5156e13482ff6564ae6410ffb7892f144d3
      https://github.com/openssl/openssl/commit/65b8a5156e13482ff6564ae6410ffb7892f144d3
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2024-05-02 (Thu, 02 May 2024)

  Changed paths:
    M crypto/bn/bn_rand.c
    M crypto/deterministic_nonce.c

  Log Message:
  -----------
  Correct top for EC/DSA nonces if BN_DEBUG is on

Otherwise following operations would bail out in bn_check_top().

Reviewed-by: Paul Dale <ppzgs1 at gmail.com>
Reviewed-by: Neil Horman <nhorman at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24265)

(cherry picked from commit a380ae85be287045b1eaa64d23942101a426c080)


Compare: https://github.com/openssl/openssl/compare/f301d75eb850...65b8a5156e13

To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications