Clemens Lang

Results 29 issues of Clemens Lang

The `-provider` and `-propquery` options did not work on some OpenSSL apps. Fix this and add tests to check that operations that would usually fail with the FIPS provider work...

branch: master
approval: review pending
triaged: bug
branch: 3.0

#### Description vim: Update to 9.0.0065 MacVim: Update to release 173 (Vim 9.0.0065) Had to add -derivedDataPath to the xcode flags, because otherwise Xcode wanted to write to /opt/local/var/macports/home/Library/Xcode/DerivedData. Setting...

type: enhancement
maintainer: requires approval
by: member

*Note*: A few things still need to happen before this can be merged: - [ ] Generate and upload signatures for the current release to GitHub and distfiles - [...

enhancement
help wanted

Linking C++ code with the C linker causes a missing vtable for in __cxxabiv1::__class_type_info, referenced from runtime type information in el::Linker and el::Resolver. Linking this library with clang++ instead fixes...

https://sha-mbles.github.io/ claims a chosen-prefix collision attack on SHA-1 is now achievable for a price of around 45k USD. As a consequence, SHA-1 should no longer be used in applications where...

branch: master
triaged: feature
severity: fips change

FIPS 186-4 section 5 "The RSA Digital Signature Algorithm", subsection 5.5 "PKCS #1" says: "For RSASSA-PSS […] the length (in bytes) of the salt (sLen) shall satisfy 0

branch: master
triaged: feature
severity: fips change
branch: 3.1
hold: needs tests

FIPS 140-3 requires an indication on whether an operation was using approved services or not. The [FIPS 140-3 implementation guidelines (section 2.4.C)][140-3ig] provide two basic approaches to doing this: implicit...

triaged: feature

Clang 15 crashes when compiling this code because the size of the array does not match the initializer. This is fixed in clang 16, but `Apple clang version 14.0.3 (clang-1403.0.22.14.1)`...

The FIPS 140-3 Implementation Guidelines in section D.Q require FIPS-certified cryptographic modules to use the RFC 7627 Extended Master Secret for modules submitted after May 16th, 2023: > [a] new...

`Makefile.in` installs documentation in `@docdir@`, which, when `configure` is generated with autoconf 2.71 expands to `${datarootdir}/doc/${PACKAGE_TARNAME}`. `datarootdir` is defined in `Makefile.in` in line 20, but `PACKAGE_TARNAME` is never defined. This...