boringssl

Mirror of BoringSSL (grpc依赖) https://boringssl.googlesource.com/boringssl

History

David Benjamin 671ccb1a98 Make EVP_PKEY__tls_encodedpoint work with EVP_PKEY_EC. Some third-party code requires it. For now, I've just introduced a new hook on the method table. This is rather goofy though. First, making EVP know about TLS is a layering violation that OpenSSL introduced. They've since fixed this and added EVP_PKEY_get1_encoded_public_key in OpenSSL 3.0, but callers expect the TLS one to exist in OpenSSL 1.1.1, so implement that one. Along the way, implement EC_KEY_oct2key from upstream, which is slightly less tedious when you're already working in EC_KEY. To make this third-party code work (and to write a test without dipping out of EVP, or using the very tedious EVP_PKEY_paramgen API), we also need to change EVP_PKEY_copy_parameters to work when the source EVP_PKEY is empty, per upstream's 2986ecdc08016de978f1134315623778420b51e5. OpenSSL's API has multiple* levels of empty states to worry about! Something to avoid when we get to rethinking this error-prone API. Bug: b:238920520 Change-Id: I3fd99be560db313c1bf549a4e46ffccc31e746e1 Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/54905 Auto-Submit: David Benjamin <davidben@google.com> Commit-Queue: David Benjamin <davidben@google.com> Reviewed-by: Bob Beck <bbe@google.com>		2 years ago
..
acvp	Make EVP_PKEY_*_tls_encodedpoint work with EVP_PKEY_EC.	2 years ago
delocate	Include hopefully all ARM instructions with condition codes.	3 years ago
fipscommon	Use SHA-256 for the FIPS integrity check everywhere.	3 years ago
inject_hash	Use SHA-256 for the FIPS integrity check everywhere.	3 years ago
CMakeLists.txt	Drop CAVP code.	3 years ago
break-hash.go	…
break-kat.go	Break FIPS tests by zeroing out the entire value.	2 years ago
break-tests.sh	Adapt break-tests.sh to run on an attached Android device.	3 years ago
test-break-kat.sh	Drop stdout when looking for abort messages	3 years ago
test_fips.c	Expose the CTR_DRBG API.	3 years ago