Tomáš Mráz

Intentionally break EVP_DigestFinal for SHAKE128 and SHAKE256

14

It will work only if OSSL_DIGEST_PARAM_XOFLEN is set. Also add new SHAKE-128/128, SHAKE-256/256, SHAKE-128/256 and SHAKE-256/512 algorithms which have explicit default XOFLEN set. ##### Checklist - [ ] documentation is...

2 CI on-push jobs have regressed. [run-checker (enable-asan enable-ubsan no-shared no-asm -DOPENSSL_SMALL_FOOTPRINT)](https://github.com/openssl/openssl/actions/runs/8832138209/job/24248845522#logs) ``` # ../../fuzz/corpora/hashtable/750489b928c4012a6c4352fdefd92c33d5ca600d fuzz/hashtable.c:145:14: runtime error: load of misaligned address 0x602000000111 for type 'uint16_t' (aka 'unsigned short'), which...

Generate EC/DSA nonces in a way that does not reveal whether top bits are set

1

Partially fixes #23860 This does not resolve the problem completely as there are architecture-specific issues in the point multiplication that can still leak the information by timing and it also...

The two broken jobs here: https://github.com/openssl/openssl/actions/runs/8802704031/job/24159479487 and https://github.com/openssl/openssl/actions/runs/8802704031/job/24159478903 are failing because they run libcrypto/libssl tests from 3.1 and 3.0 branches against the master branch version of the fips provider. Of...

See also https://github.com/openssl/openssl/discussions/21629

Proposed text: ``` OpenSSL version 1.0.2zh released ================================ OpenSSL - The Open Source toolkit for SSL/TLS https://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.0.2zh...

It would be nice to make the CLA: trivial status more visible by adding the label with clacheck

1

I see there was a change to clacheck to add a label when CLA: trivial commits are encountered. But it was reverted. Why?

Clarify what constitutes API break and what not

2

[DDvO](https://github.com/DDvO) commented [Mar 21, 2023](https://github.com/openssl/openssl/pull/20436#issuecomment-1477663599) > The problem is that basically anything that changes in the public API headers that can potential break a compilation for > anyone is an...

To reliably trigger HRR we must use P-384 group [3.1, 3.0]

1

Otherwise with newer FIPS providers P-256 is the first group supported. This fixes #24246 (needs to be closed manually after merging this as this commit does not go to master...

Also move -Wno-tautological-constant-out-of-range-compare to clang-specific options as it is not supported by gcc. We do not have default cases in many switch() statements. This is alternative to https://github.com/openssl/openssl/pull/24756 - IMO...