{"push_id":2103643179,"size":539,"distinct_size":539,"ref":"refs/heads/master","head":"1e09321ee9abd411f75a96b8b095a59b4f25cc6b","before":"0dd8ed90f2690e553fccd2d3b3b59ac470c1a682","commits":[{"sha":"056842056133c7bcd377dc9f8d4a0a92f0858ed5","author":{"name":"Benjamin Kaduk","email":"68117dbf8e87906b4ca50d2e79fd0c3f99757599@akamai.com"},"message":"Remove trailing whitespace from drbgtest.c\n\nReviewed-by: Rich Salz <rsalz@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/3971)","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/056842056133c7bcd377dc9f8d4a0a92f0858ed5"},{"sha":"885b3135eb361d09e9e6bf9e6b263fad0b7b9a8e","author":{"name":"Benjamin Kaduk","email":"68117dbf8e87906b4ca50d2e79fd0c3f99757599@akamai.com"},"message":"typedef's for RAND_DRBG methods\n\nReviewed-by: Rich Salz <rsalz@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/3971)","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/885b3135eb361d09e9e6bf9e6b263fad0b7b9a8e"},{"sha":"f87c0e530a1bef2f7e90f50a734be46542a7ecf7","author":{"name":"Benjamin Kaduk","email":"68117dbf8e87906b4ca50d2e79fd0c3f99757599@akamai.com"},"message":"Fix out-of-bounds read in ctr_XOR\n\nLooking at\nhttp://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf\nwe see that in the CTR_DRBG_Update() algorithm (internal page number 51),\nthe provided input data is (after truncation to seedlen) xor-d with the\nkey and V vector (of length keylen and blocklen respectively).  The comment\nin ctr_XOR notes that xor-ing with 0 is the identity function, so we can\njust ignore the case when the provided input is shorter than seedlen.\n\nThe code in ctr_XOR() then proceeds to xor the key with the input, up\nto the amount of input present, and computes the remaining input that\ncould be used to xor with the V vector, before accessing a full 16-byte\nstretch of the input vector and ignoring the calculated length.  The correct\nbehavior is to respect the supplied input length and only xor the\nindicated number of bytes.\n\nReviewed-by: Rich Salz <rsalz@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/3971)","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/f87c0e530a1bef2f7e90f50a734be46542a7ecf7"},{"sha":"51e219ab8407db2d2f57c04942297d4044b32d2d","author":{"name":"Paul Yang","email":"edbe4b740fd46a8518fd12caa0fc25573f6f0bf0@baishancloud.com"},"message":"Support converting cipher name to RFC name and vice versa\n\nFixes: issue #3747\n\nmake SSL_CIPHER_standard_name globally available and introduce a new\nfunction OPENSSL_cipher_name.\n\nA new option '-convert' is also added to 'openssl ciphers' app.\n\nDocumentation and test cases are added.\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\nReviewed-by: Paul Dale <paul.dale@oracle.com>\n(Merged from https://github.com/openssl/openssl/pull/3859)","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/51e219ab8407db2d2f57c04942297d4044b32d2d"},{"sha":"0cf26790d21baec21ea34150d70bf44f2193d126","author":{"name":"Andy Polyakov","email":"23fca5ac25f9131f5f5b46b49a084deb280b7642@openssl.org"},"message":"x86_64 assembly pack: \"optimize\" for Knights Landing, add AVX-512 results.\n\n\"Optimize\" is in quotes because it's rather a \"salvage operation\"\nfor now. Idea is to identify processor capability flags that\ndrive Knights Landing to suboptimial code paths and mask them.\nTwo flags were identified, XSAVE and ADCX/ADOX. Former affects\nchoice of AES-NI code path specific for Silvermont (Knights Landing\nis of Silvermont \"ancestry\"). And 64-bit ADCX/ADOX instructions are\neffectively mishandled at decode time. In both cases we are looking\nat ~2x improvement.\n\nAVX-512 results cover even Skylake-X :-)\n\nHardware used for benchmarking courtesy of Atos, experiments run by\nRomain Dolbeau <romain.dolbeau@atos.net>. Kudos!\n\nReviewed-by: Rich Salz <rsalz@openssl.org>","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/0cf26790d21baec21ea34150d70bf44f2193d126"},{"sha":"8ef3b2e935e1a252324c50d65e0ee4d792edfed2","author":{"name":"Andy Polyakov","email":"23fca5ac25f9131f5f5b46b49a084deb280b7642@openssl.org"},"message":"sha/asm/keccak1600-avx512.pl: absorb bug-fix and minor optimization.\n\nHardware used for benchmarking courtesy of Atos, experiments run by\nRomain Dolbeau <romain.dolbeau@atos.net>. Kudos!\n\nReviewed-by: Rich Salz <rsalz@openssl.org>","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/8ef3b2e935e1a252324c50d65e0ee4d792edfed2"},{"sha":"833602c9c8853090b57be543037e19a1760b61f5","author":{"name":"Rich Salz","email":"71f33dc2f142e5b5a55a8f415f3aed896f5b8927@openssl.org"},"message":"Add --with-rand-seed\n\nAdd a new config param to specify how the CSPRNG should be seeded.\nIllegal values or nonsensical combinations (e.g., anything other\nthan \"os\" on VMS or HP VOS etc) result in build failures.\nAdd RDSEED support.\nAdd RDTSC but leave it disabled for now pending more investigation.\n\nRefactor and reorganization all seeding files (rand_unix/win/vms) so\nthat they are simpler.\n\nOnly require 128 bits of seeding material.\n\nMany document improvements, including why to not use RAND_add() and the\nlimitations around using load_file/write_file.\nDocument RAND_poll().\n\nCleanup Windows RAND_poll and return correct status\n\nMore completely initialize the default DRBG.\n\nReviewed-by: Paul Dale <paul.dale@oracle.com>\n(Merged from https://github.com/openssl/openssl/pull/3965)","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/833602c9c8853090b57be543037e19a1760b61f5"},{"sha":"5fdd8ab3fc16180b2a998e04f6d59c5a0c37eb86","author":{"name":"Johannes Bauer","email":"d2ff8d83efb8d5aeb4f4e85388fa7e6f5a2df730@johannes-bauer.com"},"message":"Fix const correctness of EC_KEY_METHOD_get_*\n\nChanges the EC_KEY_METHOD_get_* family to not need a EC_KEY_METHOD* as\nits first parameter, but a const EC_KEY_METHOD*, which is entirely\nsufficient.\n\nReviewed-by: Kurt Roeckx <kurt@roeckx.be>\nReviewed-by: Paul Dale <paul.dale@oracle.com>\nGH: #3985","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/5fdd8ab3fc16180b2a998e04f6d59c5a0c37eb86"},{"sha":"c3f97ef39ea79a4c0031556e935b843d5c287c9a","author":{"name":"Paul Yang","email":"a7d91080b699a3e98fcc71f462a3d7cbea7525c2@gmail.com"},"message":"Update doc/ca.pod to clarify description for dates\n\n\"Note\" part is based on PR #3566\n\nReviewed-by: Ben Kaduk <kaduk@mit.edu>\nReviewed-by: Rich Salz <rsalz@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/3895)","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/c3f97ef39ea79a4c0031556e935b843d5c287c9a"},{"sha":"8ff871dfe33d05c90a6c3fdc906d0905d388fcd4","author":{"name":"Xiaoyin Liu","email":"7c441576f0dda0fa73c8e5138422533e1f34a925@users.noreply.github.com"},"message":"Remove unused function prototypes\n\n`args_verify()` and `opt_reset()` are declared in `apps/apps.h`, but they are\nnot referenced anywhere. So can we remove them from `apps.h`?\n\nReviewed-by: Kurt Roeckx <kurt@roeckx.be>\nReviewed-by: Rich Salz <rsalz@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/3995)","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/8ff871dfe33d05c90a6c3fdc906d0905d388fcd4"},{"sha":"2bbdb3091db7d4d184dfab9c905af6bbf982fd2c","author":{"name":"Paul Yang","email":"edbe4b740fd46a8518fd12caa0fc25573f6f0bf0@baishancloud.com"},"message":"Update documentation for SSL_is_server()\n\nReviewed-by: Paul Dale <paul.dale@oracle.com>\nReviewed-by: Matt Caswell <matt@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/3893)","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/2bbdb3091db7d4d184dfab9c905af6bbf982fd2c"},{"sha":"c038e832011436ae29f3a373211f71a3bdbd7379","author":{"name":"Paul Yang","email":"edbe4b740fd46a8518fd12caa0fc25573f6f0bf0@baishancloud.com"},"message":"Add asn1_time_to_tm function and check days in month\n\nBased on discussion in PR #3566. Reduce duplicated code in original\nasn1_utctime_to_tm and asn1_generalizedtime_to_tm, and introduce a new\ninternal function asn1_time_to_tm. This function also checks if the days\nin the input time string is valid or not for the corresponding month.\n\nTest cases are also added.\n\nReviewed-by: Andy Polyakov <appro@openssl.org>\nReviewed-by: Paul Dale <paul.dale@oracle.com>\n(Merged from https://github.com/openssl/openssl/pull/3905)","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/c038e832011436ae29f3a373211f71a3bdbd7379"},{"sha":"6c65cf22a4bb675ff5a98d0a1e50e6d81ec2c491","author":{"name":"Pauli","email":"ba9fefb7837daaef967affcaeefaa69160af2f41@oracle.com"},"message":"Improve struct tm population\n\nUsing Zeller's congruence to fill the day of week field,\nAlso populate the day of year field.\n\nAdd unit test to cover a number of cases.\n\nReviewed-by: Rich Salz <rsalz@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/3999)","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/6c65cf22a4bb675ff5a98d0a1e50e6d81ec2c491"},{"sha":"c0aa022a7e76a3327db47e1defe6cb9363c755ca","author":{"name":"Richard Levitte","email":"8c255126d72fc2c6afd58227d12e73607eee3545@openssl.org"},"message":"Simplify Makefile.shared\n\nMakefile.shared was designed to figure out static library names,\nshared library names, library version compatibility, import library\nnames and the like on its own.  This was a design for pre-1.1.0\nOpenSSL because the main Makefile didn't have all that knowledge.\n\nWith 1.1.0, the situation isn't the same, a lot more knowledge is\nincluded in the main Makefile, and while Makefile.shared did things\nright most of the time (there are some corner cases, such as the\nchoice of .sl or .so as DSO extension on some HPUX versions), there's\nstill an inherent fragility when one has to keep an eye on\nMakefile.shared to make sure it produces what the main Makefile\nproduces.\n\nThis change simplifies Makefile.shared by removing all its\n\"intelligence\" and have it depend entirely on the input from the main\nMakefile instead.  That way, all the naming is driven from\nconfiguration data.\n\nReviewed-by: Rich Salz <rsalz@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/3983)","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/c0aa022a7e76a3327db47e1defe6cb9363c755ca"},{"sha":"c92cade12ba29a4306c1a12d337eae64db24f1fd","author":{"name":"Richard Levitte","email":"8c255126d72fc2c6afd58227d12e73607eee3545@openssl.org"},"message":"test/recipes/80-test_tsa.t: Don't trust 'OPENSSL_CONF'\n\nThere's a case when the environment variable OPENSSL_CONF is\nuseless...  when cross compiling for mingw and your wine environment\nhas an environment variable OPENSSL_CONF.  The latter will override\nanything that's given when starting wine and there make the use of\nthat environment variable useless in our tests.\n\nTherefore, we should not trust it, and use explicit '-config' options\ninstead.\n\nReviewed-by: Rich Salz <rsalz@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/3994)","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/c92cade12ba29a4306c1a12d337eae64db24f1fd"},{"sha":"8f218decc461e04ee8882f2b27eae6568a2f90a6","author":{"name":"Richard Levitte","email":"8c255126d72fc2c6afd58227d12e73607eee3545@openssl.org"},"message":"Makefile.shared: Make link_shlib.linux-shared less verbose again\n\nA previous change inavertently removed a silencing '@'\n\nReviewed-by: Tim Hudson <tjh@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/4003)","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/8f218decc461e04ee8882f2b27eae6568a2f90a6"},{"sha":"47d951bb65dc660a1b1f4821139165a530f12ce3","author":{"name":"lolyonok","email":"2f803976dfab36a3aa8e90ba5a6a7940f338bf58@gmail.com"},"message":"Fix nid assignment in ASN1_STRING_TABLE_add\n\nCLA: trivial\n\nReviewed-by: Kurt Roeckx <kurt@roeckx.be>\nReviewed-by: Rich Salz <rsalz@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/3934)","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/47d951bb65dc660a1b1f4821139165a530f12ce3"},{"sha":"1904cd0b75c58f676f2c418172837e14dfacff8c","author":{"name":"Xiaoyin Liu","email":"7c441576f0dda0fa73c8e5138422533e1f34a925@users.noreply.github.com"},"message":"schlock global variable needs to be volatile\n\nReviewed-by: Andy Polyakov <appro@openssl.org>\nReviewed-by: Rich Salz <rsalz@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/4000)","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/1904cd0b75c58f676f2c418172837e14dfacff8c"},{"sha":"b093d0f32271f95817684350c7e6597b4ec31e30","author":{"name":"Andy Polyakov","email":"23fca5ac25f9131f5f5b46b49a084deb280b7642@openssl.org"},"message":"sha/asm/keccak1600-avx512.pl: improve performance by 17%.\n\nImprovement is result of combination of data layout ideas from\nKeccak Code Package and initial version of this module.\n\nHardware used for benchmarking courtesy of Atos, experiments run by\nRomain Dolbeau <romain.dolbeau@atos.net>. Kudos!\n\nReviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>\nReviewed-by: Rich Salz <rsalz@openssl.org>","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/b093d0f32271f95817684350c7e6597b4ec31e30"},{"sha":"31f8f1bdeed8e1148b8e532820511575211cbe00","author":{"name":"Andy Polyakov","email":"23fca5ac25f9131f5f5b46b49a084deb280b7642@openssl.org"},"message":"evp/e_aes_cbc_hmac_sha256.c: give SHAEXT right priority.\n\nReviewed-by: Kurt Roeckx <kurt@roeckx.be>\n(Merged from https://github.com/openssl/openssl/pull/3898)","distinct":true,"url":"https://api.github.com/repos/cam888eron/openssl/commits/31f8f1bdeed8e1148b8e532820511575211cbe00"}]}
{"actor":{"display_login":"cam888eron"}}