Monthly Status: July

[Dr Paul Dale]

Significant activities throughout June were:

  * Added a -fips command line option to util/wrap.pl
  * Wrote provider side PBKDF1 documentation that was missed earlier.
  * Document config_diagnostics option more widely.
  * Added other documentation that was missed.
  * Add config_diagnostics option to all of our configuration files
    (pending).
  * Moved the PVK KDF to providers for post 3.0.
  * Fix a problem with BN_div getting the remainder's sign incorrect in
    some circumstances.
  * Addressed the last old Coverity issue -- Coverity is now clean.
  * Update auto DH so that it honours the security level rather than
    picking something inappropriate and erroring.
  * Remove ERR_GET_FUNC() from the codebase.
  * Investigation Solaris failure.
  * Fix Windows makefile
  * Streamline the apps so they know more about the command line options
    given and don't search for algorithms inappropriately. Use libctx
    and propq more pervasively when specified and don't fall back to
    legacy if provider options have been specified.
  * Reallow short IVs for AES and ARIA GCM modes.
  * Fix a no-posix-io build problem.
  * Add demo code for PBKDF2, SCRYPT and GMAC.
  * Investigation into non-caching build running the test machine out of
    memory.
  * Add cross compiles to our CI loops including execution via QEMU
    where reasonable.
  * Investigation of possible problem in wrap cipher mode and multiple
    calls to update.
  * Modified CTR DRBG to allow operation without a derivation function
    in FIPS mode
  * Investigate TLS 1.3 FIPS self test requirements.
  * Investigated, compiled and run lab's test suite.
  * Review vendor evidence document.

In addition were minor pull requests, reviewing, OMC and OTC business, 
et al.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mta.openssl.org/pipermail/openssl-project/attachments/20210802/aa2b914a/attachment.html>