aboutsummaryrefslogtreecommitdiffstats
path: root/src/crypto/crypto_openssl.c
Commit message (Collapse)AuthorAgeFilesLines
* Resolve some sparse warningsJouni Malinen2009-11-251-0/+1
| | | | | | Mainly, this is including header files to get definitions for functions which is good to verify that the parameters match. None of these are issues that would have shown as incorrect behavior of the program.
* openssl: Allow build with OpenSSL 0.9.7Jouni Malinen2009-10-161-1/+42
| | | | | | | | OpenSSL 0.9.7 does not include get_rfc3526_prime_1536() function, so provide that functionality internally if needed. In addition, make sha256_vector() building depend on whether SHA256 support is included in the OpenSSL library. This with CONFIG_INTERNAL_SHA256=y in .config allows OpenSSL without SHA256 support to be used.
* openssl: Mark openssl_digest_vector() staticJouni Malinen2009-10-161-2/+3
|
* Allow the internal DH implementation to be overriddenJouni Malinen2009-10-111-0/+97
| | | | | | | Crypto library wrappers can now override the internal DH (group 5) implementation. As a starting point, this is done with OpenSSL. The new mechanism is currently available only for WPS (i.e., IKEv2 still depends on the internal DH implementation).
* Fix crypto_cipher_init() EVP initializationJouni Malinen2009-08-161-2/+2
| | | | | | | | Better not specify EVP_CIPHER again for the second init call since that will override key length with the default value. The previous version was likely to work since most use cases would be likely to use the default key length. Anyway, better make this handle variable length ciphers (mainly, RC4), too, just in case it is needed in the future.
* Use OpenSSL for RC4 instead of internal implementationJouni Malinen2009-08-161-0/+37
|
* Fix build with non-FIPS capable OpenSSLJouni Malinen2009-08-161-0/+4
|
* Allow non-FIPS MD5 to be used with TLS PRF even in FIPS modeJouni Malinen2009-08-161-5/+17
| | | | | This is allowed per FIPS1402IG.pdf since the TLS PRF depends fully on both MD5 and SHA-1.
* OpenSSL: Use library version of SHA256Jouni Malinen2009-08-161-0/+7
| | | | | There is no need to use the internal SHA256 implementation when using OpenSSL.
* OpenSSL: Use EVP_Digest*() functionsJouni Malinen2009-08-161-31/+30
| | | | | | Instead of using low level, digest-specific functions, use the generic EVP interface for digest functions. In addition, report OpenSSL errors in more detail.
* Make hash functions return error valueJouni Malinen2009-08-161-13/+26
| | | | | | | Some crypto libraries can return in these functions (e.g., if a specific hash function is disabled), so we better provide the caller a chance to check whether the call failed. The return values are not yet used anywhere, but they will be needed for future changes.
* Crypto build cleanup: remove NEED_FIPS186_2_PRFJohannes Berg2009-08-111-67/+0
| | | | | Instead of using a define and conditional building of crypto wrapper parts, move the FIPS 186-2 PRF implementation into separate files.
* Avoid memory leak on error path in crypto_cipher_init()Jouni Malinen2009-02-071-0/+2
|
* Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 releaseJouni Malinen2008-02-271-0/+358