Page MenuHomeFreeBSD
Differential D16334

Build libbearssl for loader and sbin/veriexec
ClosedPublic
Actions

Authored by sjg on Jul 19 2018, 12:30 AM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Feb 2, 12:07 AM
Unknown Object (File)
Thu, Jan 30, 7:01 PM
Unknown Object (File)
Sun, Jan 26, 9:05 PM
Unknown Object (File)
Sat, Jan 18, 4:46 AM
Unknown Object (File)
Sat, Jan 18, 1:12 AM
Unknown Object (File)
Fri, Jan 17, 7:29 PM
Unknown Object (File)
Fri, Jan 17, 7:10 AM
Unknown Object (File)
Wed, Jan 15, 6:16 AM
View All Files
Subscribers
bdrewery
emaste
imp
kd

Details

Reviewers
imp
cem
bdrewery
sjg
Commits
rS344564: Add libbearssl
Summary

BearSSL is a tiny library suitable for embedded apps like loader.
It provides all the functionality needed to verify
RSA and ECDSA signatures using X.509 certificate chains.

Initially at least BearSSL needs to be checked out externally to the
FreeBSD tree, with the variable BEARSSL set to point to it.

Makefile.libsa.inc is included by stand/libsa and lists only the
sources needed by the loader.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

sjg created this revision.Jul 19 2018, 12:30 AM
Herald added a subscriber: imp. · View Herald TranscriptJul 19 2018, 12:30 AM
Harbormaster completed remote builds in B18147: Diff 45504.Jul 19 2018, 12:30 AM
sjg added reviewers: imp, cem.Jul 19 2018, 12:40 AM

and agc

cem added a subscriber: bdrewery.Jul 19 2018, 5:22 PM

I have no objection to BearSSL.

I'd suggest getting someone like @bdrewery to review the Make integration changes.

I like the distinction between the full (lib) version and the libsa minified version, although perhaps it could be done in a single Makefile without the repetition. I don't feel strongly about that.

lib/libbearssl/Makefile.libsa.inc
25 ↗(On Diff #45504)

Do we actually use curve 25519? And if so, for what? NIST has expressed intent to bless it for limited applications (ephemeral key exchange, I think) but has not actually published the document, as far as I can tell:

https://csrc.nist.gov/News/2017/Transition-Plans-for-Key-Establishment-Schemes

So I am surprised at its inclusion in the loader code for veriexec, given your previously expressed hostility to anything not blessed by NIST.

40 ↗(On Diff #45504)

As before, I don't think there is any reason to include SHA1.

sjg added inline comments.Jul 19 2018, 8:22 PM
lib/libbearssl/Makefile.libsa.inc
25 ↗(On Diff #45504)

Damn, I keep forgetting that email cannot be replied to...

Not actually using it no, but
the above list is derrived from running objdump on the
loader to see what actually got used.
Looking at nm ec_c25519_m31.o I don't really see why.
Need to dig further, the only ec_ bits libve pulls in are

br_x509_minimal_set_ecdsa(&mc,
    &br_ec_prime_i31, &br_ecdsa_i31_vrfy_asn1);

We are not using anything but p256 curve right now,
that may need to shift to p384 sooner than I'd like
based on recent guidance from NIST.

40 ↗(On Diff #45504)

It is being used for emulating a TPM's PCR - keeping a running hash of
everything we attempt to verify, so that later boot step can feed it to
TPM if doing measured boot.
This avoids a truck load of stuff in loader to talk directly to TPM.

I guess we could do SHA256 for that.

emaste mentioned this in D16155: Add veriexec to loader.Jul 30 2018, 5:02 PM
sjg mentioned this in D16575: Add verifying loader for mac_veriexec.Aug 2 2018, 11:43 PM
sjg updated this revision to Diff 47709.Sep 5 2018, 8:26 PM

SHA1 required by OpenPGP for computing key id

sjg mentioned this in D16337: Build options etc for libbearssl and libve.Sep 5 2018, 10:00 PM
sjg added a comment.Sep 5 2018, 10:02 PM

Adding xrefs to related reviews

D16337 for build options etc
D16336 for changes to stand/
D16335 for libve
bdrewery requested changes to this revision.Sep 6 2018, 12:07 AM
bdrewery added inline comments.
lib/libbearssl/Makefile
233–235 ↗(On Diff #47709)

Same comment as D16335, I'm not fond of the pattern here as it's non-standard and unneeded.

This revision now requires changes to proceed.Sep 6 2018, 12:07 AM
Harbormaster completed remote builds in B19425: Diff 47709.Sep 6 2018, 12:25 PM
cem added inline comments.Sep 6 2018, 7:49 PM
lib/libbearssl/Makefile
211–216 ↗(On Diff #47709)

Seems like we're including a lot more of bearssl than we actually need or use? Given we already ship openssl in base, and that bearssl cannot replace OpenSSL directly, does it make sense to provide an alternative SSL library also in base? I don't think it does, but bringing in the limited pieces needed for loader veriexec is reasonable.

sjg updated this revision to Diff 47782.Sep 6 2018, 11:02 PM

remove check for MK_BEARSSL from Makefile

Harbormaster completed remote builds in B19447: Diff 47782.Sep 6 2018, 11:02 PM
sjg marked an inline comment as done.Sep 6 2018, 11:03 PM
kd added a subscriber: kd.Dec 3 2018, 12:43 PM

Hello,

Are there any plans to integrate this patch with tree?

sjg added a comment.Dec 5 2018, 10:18 PM
In D16334#392000, @mindal_semihalf.com wrote:

Hello,

Are there any plans to integrate this patch with tree?

Yes, but need +ve review ...

emaste added a subscriber: emaste.Jan 10 2019, 3:42 PM
emaste added inline comments.
lib/libbearssl/Makefile
48–49 ↗(On Diff #47782)

?

lib/libbearssl/Makefile.libsa.inc
2 ↗(On Diff #47782)

A comment explaining Makefile.libsa.inc is intended to provide?

sjg updated this revision to Diff 52838.Jan 14 2019, 9:55 PM

Update to latest BearSSL

Harbormaster completed remote builds in B21956: Diff 52838.Jan 14 2019, 9:55 PM
sjg updated this revision to Diff 52895.Jan 16 2019, 5:38 PM

Move some i62 methods to Makefile.libsa.inc

Harbormaster completed remote builds in B21983: Diff 52895.Jan 16 2019, 5:38 PM
kd added a child revision: D19093: Extend libsecureboot(old libve) to obtain trusted certificates from UEFI and implement revocation.Feb 6 2019, 1:30 PM
sjg accepted this revision.Feb 26 2019, 7:05 PM

this is committed

emaste added a comment.Feb 26 2019, 10:00 PM

Still need to close this review

This revision was not accepted when it landed; it landed in state Needs Review.Mar 23 2019, 6:34 PM
Closed by commit rS344564: Add libbearssl (authored by sjg). · Explain Why
This revision was automatically updated to reflect the committed changes.
sjg mentioned this in rS344564: Add libbearssl.

Large Diff

This large diff affects 469 files. Files without inline comments have been collapsed. Expand All Files

Revision Contents
Changeset List

PathSize
head/
contrib/
bearssl/
2427 lines
21 lines
45 lines
136 lines
T0/
112 lines
181 lines
100 lines
97 lines
55 lines
66 lines
61 lines
60 lines
198 lines
117 lines
71 lines
95 lines
57 lines
64 lines
65 lines
65 lines
61 lines
57 lines
50 lines
129 lines
2123 lines
64 lines
75 lines
97 lines
44 lines
73 lines
231 lines
172 lines
385 lines
96 lines
283 lines
59 lines
309 lines
build/
conf/
69 lines
12 lines
11 lines
70 lines
20 lines
inc/
170 lines
1059 lines
2618 lines
967 lines
1346 lines
241 lines
284 lines
294 lines
150 lines
397 lines
1655 lines
4296 lines
1397 lines
mk/
41 lines
38 lines
1318 lines
38 lines
32 lines
11 lines
570 lines
samples/
36 lines
14 lines
10 lines
17 lines
10 lines
17 lines
9 lines
16 lines
166 lines
117 lines
183 lines
380 lines
601 lines
40 lines
5 lines
23 lines
5 lines
23 lines
5 lines
23 lines
108 lines
436 lines
src/
aead/
346 lines
525 lines
318 lines
codec/
44 lines
38 lines
38 lines
38 lines
38 lines
38 lines
38 lines
38 lines
38 lines
38 lines
38 lines
38 lines
38 lines
526 lines
314 lines
173 lines
229 lines
ec/
121 lines
171 lines
398 lines
390 lines
1478 lines
800 lines
605 lines
835 lines
46 lines
36 lines
86 lines
2130 lines
1475 lines
1765 lines
1730 lines
820 lines
819 lines
85 lines
51 lines
57 lines
64 lines
134 lines
36 lines
36 lines
36 lines
36 lines
47 lines
45 lines
174 lines
48 lines
166 lines
47 lines
45 lines
173 lines
48 lines
165 lines
121 lines
hash/
84 lines
50 lines
345 lines
251 lines
154 lines
389 lines
411 lines
208 lines
141 lines
56 lines
166 lines
191 lines
285 lines
341 lines
2557 lines
int/
46 lines
44 lines
124 lines
56 lines
100 lines
56 lines
59 lines
39 lines
465 lines
50 lines
160 lines
184 lines
61 lines
173 lines
38 lines
66 lines
47 lines
46 lines
36 lines
46 lines
44 lines
124 lines
57 lines
103 lines
79 lines
60 lines
39 lines
488 lines
65 lines
160 lines
127 lines
74 lines
157 lines
39 lines
66 lines
47 lines
46 lines
36 lines
51 lines
44 lines
77 lines
63 lines
107 lines
56 lines
72 lines
60 lines
39 lines
65 lines
69 lines
56 lines
138 lines
39 lines
66 lines
51 lines
36 lines
493 lines
kdf/
107 lines
590 lines
mac/
122 lines
193 lines
rand/
206 lines
157 lines
170 lines
rsa/
38 lines
36 lines
38 lines
38 lines
38 lines
38 lines
38 lines
36 lines
38 lines
38 lines
38 lines
36 lines
583 lines
99 lines
41 lines
44 lines
37 lines
43 lines
209 lines
320 lines
40 lines
44 lines
113 lines
152 lines
37 lines
608 lines
99 lines
41 lines
44 lines
37 lines
43 lines
203 lines
318 lines
40 lines
44 lines
106 lines
152 lines
41 lines
44 lines
37 lines
43 lines
160 lines
40 lines
44 lines
77 lines
57 lines
61 lines
64 lines
57 lines
63 lines
223 lines
60 lines
64 lines
125 lines
112 lines
145 lines
100 lines
121 lines
106 lines
121 lines
52 lines
306 lines
ssl/
73 lines
43 lines
36 lines
36 lines
156 lines
149 lines
78 lines
32 lines
179 lines
1569 lines
64 lines
67 lines
89 lines
65 lines
37 lines
36 lines
38 lines
32 lines
46 lines
1915 lines
1276 lines
1382 lines
2009 lines
1510 lines
261 lines
83 lines
537 lines
440 lines
213 lines
177 lines
235 lines
142 lines
162 lines
52 lines
149 lines
132 lines
71 lines
71 lines
71 lines
71 lines
70 lines
70 lines
70 lines
symcipher/
69 lines
67 lines
84 lines
142 lines
254 lines
157 lines
112 lines
328 lines
398 lines
104 lines
81 lines
114 lines
433 lines
159 lines
115 lines
111 lines
91 lines
116 lines
422 lines
170 lines
112 lines
445 lines
670 lines
417 lines
717 lines
946 lines
69 lines
67 lines
84 lines
142 lines
176 lines
129 lines
240 lines
223 lines
122 lines
211 lines
596 lines
106 lines
237 lines
411 lines
87 lines
69 lines
166 lines
310 lines
85 lines
67 lines
260 lines
297 lines
475 lines
221 lines
x509/
757 lines
93 lines
110 lines
161 lines
97 lines
96 lines
650 lines
373 lines
773 lines
321 lines
105 lines
1713 lines
1508 lines
59 lines
test/
9475 lines
482 lines
1772 lines
2058 lines
x509/
722 lines
tools/
572 lines
122 lines
237 lines
154 lines
1112 lines
344 lines
329 lines
48 lines
234 lines
1056 lines
1235 lines
784 lines
760 lines
254 lines
1069 lines
66 lines
353 lines
132 lines
lib/
libbearssl/
277 lines
17 lines
7 lines
86 lines

Diff 55390

View Options

head/contrib/bearssl/Doxyfile

View Options

head/contrib/bearssl/LICENSE.txt

View Options

head/contrib/bearssl/Makefile

View Options

head/contrib/bearssl/README.txt

View Options

head/contrib/bearssl/T0/BlobWriter.cs

View Options

head/contrib/bearssl/T0/CPU.cs

View Options

head/contrib/bearssl/T0/CodeElement.cs

View Options

head/contrib/bearssl/T0/CodeElementJump.cs

View Options

head/contrib/bearssl/T0/CodeElementUInt.cs

View Options

head/contrib/bearssl/T0/CodeElementUIntExpr.cs

View Options

head/contrib/bearssl/T0/CodeElementUIntInt.cs

View Options

head/contrib/bearssl/T0/CodeElementUIntUInt.cs

View Options

head/contrib/bearssl/T0/ConstData.cs

View Options

head/contrib/bearssl/T0/Opcode.cs

View Options

head/contrib/bearssl/T0/OpcodeCall.cs

View Options

head/contrib/bearssl/T0/OpcodeConst.cs

View Options

head/contrib/bearssl/T0/OpcodeGetLocal.cs

View Options

head/contrib/bearssl/T0/OpcodeJump.cs

View Options

head/contrib/bearssl/T0/OpcodeJumpIf.cs

View Options

head/contrib/bearssl/T0/OpcodeJumpIfNot.cs

View Options

head/contrib/bearssl/T0/OpcodeJumpUncond.cs

View Options

head/contrib/bearssl/T0/OpcodePutLocal.cs

View Options

head/contrib/bearssl/T0/OpcodeRet.cs

View Options

head/contrib/bearssl/T0/SType.cs

View Options

head/contrib/bearssl/T0/T0Comp.cs

View Options

head/contrib/bearssl/T0/TPointerBase.cs

View Options

head/contrib/bearssl/T0/TPointerBlob.cs

View Options

head/contrib/bearssl/T0/TPointerExpr.cs

View Options

head/contrib/bearssl/T0/TPointerNull.cs

View Options

head/contrib/bearssl/T0/TPointerXT.cs

View Options

head/contrib/bearssl/T0/TValue.cs

View Options

head/contrib/bearssl/T0/Word.cs

View Options

head/contrib/bearssl/T0/WordBuilder.cs

View Options

head/contrib/bearssl/T0/WordData.cs

View Options

head/contrib/bearssl/T0/WordInterpreted.cs

View Options

head/contrib/bearssl/T0/WordNative.cs

View Options

head/contrib/bearssl/T0/kern.t0

View Options

head/contrib/bearssl/T0Comp.exe

View Options

head/contrib/bearssl/build/.do_not_remove

View Options

head/contrib/bearssl/conf/Unix.mk

View Options

head/contrib/bearssl/conf/Unix32.mk

View Options

head/contrib/bearssl/conf/UnixClang.mk

View Options

head/contrib/bearssl/conf/Win.mk

View Options

head/contrib/bearssl/conf/samd20.mk

View Options

head/contrib/bearssl/inc/bearssl.h

View Options

head/contrib/bearssl/inc/bearssl_aead.h

View Options

head/contrib/bearssl/inc/bearssl_block.h

View Options

head/contrib/bearssl/inc/bearssl_ec.h

View Options

head/contrib/bearssl/inc/bearssl_hash.h

View Options

head/contrib/bearssl/inc/bearssl_hmac.h

View Options

head/contrib/bearssl/inc/bearssl_kdf.h

View Options

head/contrib/bearssl/inc/bearssl_pem.h

View Options

head/contrib/bearssl/inc/bearssl_prf.h

View Options

head/contrib/bearssl/inc/bearssl_rand.h

View Options

head/contrib/bearssl/inc/bearssl_rsa.h

View Options

head/contrib/bearssl/inc/bearssl_ssl.h

View Options

head/contrib/bearssl/inc/bearssl_x509.h

View Options

head/contrib/bearssl/mk/Defaults.mk

View Options

head/contrib/bearssl/mk/NMake.mk

View Options

head/contrib/bearssl/mk/Rules.mk

View Options

head/contrib/bearssl/mk/SingleUnix.mk

View Options

head/contrib/bearssl/mk/mkT0.cmd

View Options

head/contrib/bearssl/mk/mkT0.sh

View Options

head/contrib/bearssl/mk/mkrules.sh

View Options

head/contrib/bearssl/samples/README.txt

View Options

head/contrib/bearssl/samples/cert-ee-ec+rsa.pem

View Options

head/contrib/bearssl/samples/cert-ee-ec.pem

View Options

head/contrib/bearssl/samples/cert-ee-rsa.pem

View Options

head/contrib/bearssl/samples/cert-ica-ec.pem

View Options

head/contrib/bearssl/samples/cert-ica-rsa.pem

View Options

head/contrib/bearssl/samples/cert-root-ec.pem

View Options

head/contrib/bearssl/samples/cert-root-rsa.pem

View Options

head/contrib/bearssl/samples/chain-ec+rsa.h

View Options

head/contrib/bearssl/samples/chain-ec.h

View Options

head/contrib/bearssl/samples/chain-rsa.h

View Options

head/contrib/bearssl/samples/client_basic.c

View Options

head/contrib/bearssl/samples/custom_profile.c

View Options

head/contrib/bearssl/samples/key-ec.h

View Options

head/contrib/bearssl/samples/key-ee-ec.pem

View Options

head/contrib/bearssl/samples/key-ee-rsa.pem

View Options

head/contrib/bearssl/samples/key-ica-ec.pem

View Options

head/contrib/bearssl/samples/key-ica-rsa.pem

View Options

head/contrib/bearssl/samples/key-root-ec.pem

View Options

head/contrib/bearssl/samples/key-root-rsa.pem

View Options

head/contrib/bearssl/samples/key-rsa.h

View Options

head/contrib/bearssl/samples/server_basic.c

View Options

head/contrib/bearssl/src/aead/ccm.c

View Options

head/contrib/bearssl/src/aead/eax.c

View Options

head/contrib/bearssl/src/aead/gcm.c

View Options

head/contrib/bearssl/src/codec/ccopy.c

View Options

head/contrib/bearssl/src/codec/dec16be.c

View Options

head/contrib/bearssl/src/codec/dec16le.c

View Options

head/contrib/bearssl/src/codec/dec32be.c

View Options

head/contrib/bearssl/src/codec/dec32le.c

View Options

head/contrib/bearssl/src/codec/dec64be.c

View Options

head/contrib/bearssl/src/codec/dec64le.c

View Options

head/contrib/bearssl/src/codec/enc16be.c

View Options

head/contrib/bearssl/src/codec/enc16le.c

View Options

head/contrib/bearssl/src/codec/enc32be.c

View Options

head/contrib/bearssl/src/codec/enc32le.c

View Options

head/contrib/bearssl/src/codec/enc64be.c

View Options

head/contrib/bearssl/src/codec/enc64le.c

View Options

head/contrib/bearssl/src/codec/pemdec.c

View Options

head/contrib/bearssl/src/codec/pemdec.t0

View Options

head/contrib/bearssl/src/codec/pemenc.c

View Options

head/contrib/bearssl/src/config.h

View Options

head/contrib/bearssl/src/ec/ec_all_m15.c

View Options

head/contrib/bearssl/src/ec/ec_all_m31.c

View Options

head/contrib/bearssl/src/ec/ec_c25519_i15.c

View Options

head/contrib/bearssl/src/ec/ec_c25519_i31.c

View Options

head/contrib/bearssl/src/ec/ec_c25519_m15.c

View Options

head/contrib/bearssl/src/ec/ec_c25519_m31.c

View Options

head/contrib/bearssl/src/ec/ec_c25519_m62.c

View Options

head/contrib/bearssl/src/ec/ec_c25519_m64.c

View Options

head/contrib/bearssl/src/ec/ec_curve25519.c

View Options

head/contrib/bearssl/src/ec/ec_default.c

View Options

head/contrib/bearssl/src/ec/ec_keygen.c

View Options

head/contrib/bearssl/src/ec/ec_p256_m15.c

View Options

head/contrib/bearssl/src/ec/ec_p256_m31.c

View Options

head/contrib/bearssl/src/ec/ec_p256_m62.c

View Options

head/contrib/bearssl/src/ec/ec_p256_m64.c

View Options

head/contrib/bearssl/src/ec/ec_prime_i15.c

View Options

head/contrib/bearssl/src/ec/ec_prime_i31.c

View Options

head/contrib/bearssl/src/ec/ec_pubkey.c

View Options

head/contrib/bearssl/src/ec/ec_secp256r1.c

View Options

head/contrib/bearssl/src/ec/ec_secp384r1.c

View Options

head/contrib/bearssl/src/ec/ec_secp521r1.c

View Options

head/contrib/bearssl/src/ec/ecdsa_atr.c

View Options

head/contrib/bearssl/src/ec/ecdsa_default_sign_asn1.c

View Options

head/contrib/bearssl/src/ec/ecdsa_default_sign_raw.c

View Options

head/contrib/bearssl/src/ec/ecdsa_default_vrfy_asn1.c

View Options

head/contrib/bearssl/src/ec/ecdsa_default_vrfy_raw.c

View Options

head/contrib/bearssl/src/ec/ecdsa_i15_bits.c

View Options

head/contrib/bearssl/src/ec/ecdsa_i15_sign_asn1.c

View Options

head/contrib/bearssl/src/ec/ecdsa_i15_sign_raw.c

View Options

head/contrib/bearssl/src/ec/ecdsa_i15_vrfy_asn1.c

View Options

head/contrib/bearssl/src/ec/ecdsa_i15_vrfy_raw.c

View Options

head/contrib/bearssl/src/ec/ecdsa_i31_bits.c

View Options

head/contrib/bearssl/src/ec/ecdsa_i31_sign_asn1.c

View Options

head/contrib/bearssl/src/ec/ecdsa_i31_sign_raw.c

View Options

head/contrib/bearssl/src/ec/ecdsa_i31_vrfy_asn1.c

View Options

head/contrib/bearssl/src/ec/ecdsa_i31_vrfy_raw.c

View Options

head/contrib/bearssl/src/ec/ecdsa_rta.c

View Options

head/contrib/bearssl/src/hash/dig_oid.c

View Options

head/contrib/bearssl/src/hash/dig_size.c

View Options

head/contrib/bearssl/src/hash/ghash_ctmul.c

View Options

head/contrib/bearssl/src/hash/ghash_ctmul32.c

View Options

head/contrib/bearssl/src/hash/ghash_ctmul64.c

View Options

head/contrib/bearssl/src/hash/ghash_pclmul.c

View Options

head/contrib/bearssl/src/hash/ghash_pwr8.c

View Options

head/contrib/bearssl/src/hash/md5.c

View Options

head/contrib/bearssl/src/hash/md5sha1.c

View Options

head/contrib/bearssl/src/hash/mgf1.c

View Options

head/contrib/bearssl/src/hash/multihash.c

View Options

head/contrib/bearssl/src/hash/sha1.c

View Options

head/contrib/bearssl/src/hash/sha2big.c

View Options

head/contrib/bearssl/src/hash/sha2small.c

View Options

head/contrib/bearssl/src/inner.h

View Options

head/contrib/bearssl/src/int/i15_add.c

View Options

head/contrib/bearssl/src/int/i15_bitlen.c

View Options

head/contrib/bearssl/src/int/i15_decmod.c

View Options

head/contrib/bearssl/src/int/i15_decode.c

View Options

head/contrib/bearssl/src/int/i15_decred.c

View Options

head/contrib/bearssl/src/int/i15_encode.c

View Options

head/contrib/bearssl/src/int/i15_fmont.c

View Options

head/contrib/bearssl/src/int/i15_iszero.c

View Options

head/contrib/bearssl/src/int/i15_moddiv.c

View Options

head/contrib/bearssl/src/int/i15_modpow.c

View Options

head/contrib/bearssl/src/int/i15_modpow2.c

View Options

head/contrib/bearssl/src/int/i15_montmul.c

View Options

head/contrib/bearssl/src/int/i15_mulacc.c

View Options

head/contrib/bearssl/src/int/i15_muladd.c

View Options

head/contrib/bearssl/src/int/i15_ninv15.c

View Options

head/contrib/bearssl/src/int/i15_reduce.c

View Options

head/contrib/bearssl/src/int/i15_rshift.c

View Options

head/contrib/bearssl/src/int/i15_sub.c

View Options

head/contrib/bearssl/src/int/i15_tmont.c

View Options

head/contrib/bearssl/src/int/i31_add.c

View Options

head/contrib/bearssl/src/int/i31_bitlen.c

View Options

head/contrib/bearssl/src/int/i31_decmod.c

View Options

head/contrib/bearssl/src/int/i31_decode.c

View Options

head/contrib/bearssl/src/int/i31_decred.c

View Options

head/contrib/bearssl/src/int/i31_encode.c

View Options

head/contrib/bearssl/src/int/i31_fmont.c

View Options

head/contrib/bearssl/src/int/i31_iszero.c

View Options

head/contrib/bearssl/src/int/i31_moddiv.c

View Options

head/contrib/bearssl/src/int/i31_modpow.c

View Options

head/contrib/bearssl/src/int/i31_modpow2.c

View Options

head/contrib/bearssl/src/int/i31_montmul.c

View Options

head/contrib/bearssl/src/int/i31_mulacc.c

View Options

head/contrib/bearssl/src/int/i31_muladd.c

View Options

head/contrib/bearssl/src/int/i31_ninv31.c

View Options

head/contrib/bearssl/src/int/i31_reduce.c

View Options

head/contrib/bearssl/src/int/i31_rshift.c

View Options

head/contrib/bearssl/src/int/i31_sub.c

View Options

head/contrib/bearssl/src/int/i31_tmont.c

View Options

head/contrib/bearssl/src/int/i32_add.c

View Options

head/contrib/bearssl/src/int/i32_bitlen.c

View Options

head/contrib/bearssl/src/int/i32_decmod.c

View Options

head/contrib/bearssl/src/int/i32_decode.c

View Options

head/contrib/bearssl/src/int/i32_decred.c

View Options

head/contrib/bearssl/src/int/i32_div32.c

View Options

head/contrib/bearssl/src/int/i32_encode.c

View Options

head/contrib/bearssl/src/int/i32_fmont.c

View Options

head/contrib/bearssl/src/int/i32_iszero.c

View Options

head/contrib/bearssl/src/int/i32_modpow.c

View Options

head/contrib/bearssl/src/int/i32_montmul.c

View Options

head/contrib/bearssl/src/int/i32_mulacc.c

View Options

head/contrib/bearssl/src/int/i32_muladd.c

View Options

head/contrib/bearssl/src/int/i32_ninv32.c

View Options

head/contrib/bearssl/src/int/i32_reduce.c

View Options

head/contrib/bearssl/src/int/i32_sub.c

View Options

head/contrib/bearssl/src/int/i32_tmont.c

View Options

head/contrib/bearssl/src/int/i62_modpow2.c

View Options

head/contrib/bearssl/src/kdf/hkdf.c

View Options

head/contrib/bearssl/src/kdf/shake.c

View Options

head/contrib/bearssl/src/mac/hmac.c

View Options

head/contrib/bearssl/src/mac/hmac_ct.c

View Options

head/contrib/bearssl/src/rand/aesctr_drbg.c

View Options

head/contrib/bearssl/src/rand/hmac_drbg.c

View Options

head/contrib/bearssl/src/rand/sysrng.c

View Options

head/contrib/bearssl/src/rsa/rsa_default_keygen.c

View Options

head/contrib/bearssl/src/rsa/rsa_default_modulus.c

View Options

head/contrib/bearssl/src/rsa/rsa_default_oaep_decrypt.c

View Options

head/contrib/bearssl/src/rsa/rsa_default_oaep_encrypt.c

View Options

head/contrib/bearssl/src/rsa/rsa_default_pkcs1_sign.c

View Options

head/contrib/bearssl/src/rsa/rsa_default_pkcs1_vrfy.c

View Options

head/contrib/bearssl/src/rsa/rsa_default_priv.c

View Options

head/contrib/bearssl/src/rsa/rsa_default_privexp.c

View Options

head/contrib/bearssl/src/rsa/rsa_default_pss_sign.c

View Options

head/contrib/bearssl/src/rsa/rsa_default_pss_vrfy.c

View Options

head/contrib/bearssl/src/rsa/rsa_default_pub.c

View Options

head/contrib/bearssl/src/rsa/rsa_default_pubexp.c

View Options

head/contrib/bearssl/src/rsa/rsa_i15_keygen.c

View Options

head/contrib/bearssl/src/rsa/rsa_i15_modulus.c

View Options

head/contrib/bearssl/src/rsa/rsa_i15_oaep_decrypt.c

View Options

head/contrib/bearssl/src/rsa/rsa_i15_oaep_encrypt.c

View Options

head/contrib/bearssl/src/rsa/rsa_i15_pkcs1_sign.c

View Options

head/contrib/bearssl/src/rsa/rsa_i15_pkcs1_vrfy.c

View Options

head/contrib/bearssl/src/rsa/rsa_i15_priv.c

View Options

head/contrib/bearssl/src/rsa/rsa_i15_privexp.c

View Options

head/contrib/bearssl/src/rsa/rsa_i15_pss_sign.c

View Options

head/contrib/bearssl/src/rsa/rsa_i15_pss_vrfy.c

View Options

head/contrib/bearssl/src/rsa/rsa_i15_pub.c

View Options

head/contrib/bearssl/src/rsa/rsa_i15_pubexp.c

View Options

head/contrib/bearssl/src/rsa/rsa_i31_keygen.c

View Options

head/contrib/bearssl/src/rsa/rsa_i31_keygen_inner.c

View Options

head/contrib/bearssl/src/rsa/rsa_i31_modulus.c

View Options

head/contrib/bearssl/src/rsa/rsa_i31_oaep_decrypt.c

View Options

head/contrib/bearssl/src/rsa/rsa_i31_oaep_encrypt.c

View Options

head/contrib/bearssl/src/rsa/rsa_i31_pkcs1_sign.c

View Options

head/contrib/bearssl/src/rsa/rsa_i31_pkcs1_vrfy.c

View Options

head/contrib/bearssl/src/rsa/rsa_i31_priv.c

View Options

head/contrib/bearssl/src/rsa/rsa_i31_privexp.c

View Options

head/contrib/bearssl/src/rsa/rsa_i31_pss_sign.c

View Options

head/contrib/bearssl/src/rsa/rsa_i31_pss_vrfy.c

View Options

head/contrib/bearssl/src/rsa/rsa_i31_pub.c

View Options

head/contrib/bearssl/src/rsa/rsa_i31_pubexp.c

View Options

head/contrib/bearssl/src/rsa/rsa_i32_oaep_decrypt.c

View Options

head/contrib/bearssl/src/rsa/rsa_i32_oaep_encrypt.c

View Options

head/contrib/bearssl/src/rsa/rsa_i32_pkcs1_sign.c

View Options

head/contrib/bearssl/src/rsa/rsa_i32_pkcs1_vrfy.c

View Options

head/contrib/bearssl/src/rsa/rsa_i32_priv.c

View Options

head/contrib/bearssl/src/rsa/rsa_i32_pss_sign.c

View Options

head/contrib/bearssl/src/rsa/rsa_i32_pss_vrfy.c

View Options

head/contrib/bearssl/src/rsa/rsa_i32_pub.c

View Options

head/contrib/bearssl/src/rsa/rsa_i62_keygen.c

View Options

head/contrib/bearssl/src/rsa/rsa_i62_oaep_decrypt.c

View Options

head/contrib/bearssl/src/rsa/rsa_i62_oaep_encrypt.c

View Options

head/contrib/bearssl/src/rsa/rsa_i62_pkcs1_sign.c

View Options

head/contrib/bearssl/src/rsa/rsa_i62_pkcs1_vrfy.c

View Options

head/contrib/bearssl/src/rsa/rsa_i62_priv.c

View Options

head/contrib/bearssl/src/rsa/rsa_i62_pss_sign.c

View Options

head/contrib/bearssl/src/rsa/rsa_i62_pss_vrfy.c

View Options

head/contrib/bearssl/src/rsa/rsa_i62_pub.c

View Options

head/contrib/bearssl/src/rsa/rsa_oaep_pad.c

View Options

head/contrib/bearssl/src/rsa/rsa_oaep_unpad.c

View Options

head/contrib/bearssl/src/rsa/rsa_pkcs1_sig_pad.c

View Options

head/contrib/bearssl/src/rsa/rsa_pkcs1_sig_unpad.c

View Options

head/contrib/bearssl/src/rsa/rsa_pss_sig_pad.c

View Options

head/contrib/bearssl/src/rsa/rsa_pss_sig_unpad.c

View Options

head/contrib/bearssl/src/rsa/rsa_ssl_decrypt.c

View Options

head/contrib/bearssl/src/settings.c

View Options

head/contrib/bearssl/src/ssl/prf.c

View Options

head/contrib/bearssl/src/ssl/prf_md5sha1.c

View Options

head/contrib/bearssl/src/ssl/prf_sha256.c

View Options

head/contrib/bearssl/src/ssl/prf_sha384.c

View Options

head/contrib/bearssl/src/ssl/ssl_ccert_single_ec.c

View Options

head/contrib/bearssl/src/ssl/ssl_ccert_single_rsa.c

View Options

head/contrib/bearssl/src/ssl/ssl_client.c

View Options

head/contrib/bearssl/src/ssl/ssl_client_default_rsapub.c

View Options

head/contrib/bearssl/src/ssl/ssl_client_full.c

View Options

head/contrib/bearssl/src/ssl/ssl_engine.c

View Options

head/contrib/bearssl/src/ssl/ssl_engine_default_aescbc.c

View Options

head/contrib/bearssl/src/ssl/ssl_engine_default_aesccm.c

View Options

head/contrib/bearssl/src/ssl/ssl_engine_default_aesgcm.c

View Options

head/contrib/bearssl/src/ssl/ssl_engine_default_chapol.c

View Options

head/contrib/bearssl/src/ssl/ssl_engine_default_descbc.c

View Options

head/contrib/bearssl/src/ssl/ssl_engine_default_ec.c

View Options

head/contrib/bearssl/src/ssl/ssl_engine_default_ecdsa.c

View Options

head/contrib/bearssl/src/ssl/ssl_engine_default_rsavrfy.c

View Options

head/contrib/bearssl/src/ssl/ssl_hashes.c

View Options

head/contrib/bearssl/src/ssl/ssl_hs_client.c

View Options

head/contrib/bearssl/src/ssl/ssl_hs_client.t0

View Options

head/contrib/bearssl/src/ssl/ssl_hs_common.t0

View Options

head/contrib/bearssl/src/ssl/ssl_hs_server.c

View Options

head/contrib/bearssl/src/ssl/ssl_hs_server.t0

View Options

head/contrib/bearssl/src/ssl/ssl_io.c

View Options

head/contrib/bearssl/src/ssl/ssl_keyexport.c

View Options

head/contrib/bearssl/src/ssl/ssl_lru.c

View Options

head/contrib/bearssl/src/ssl/ssl_rec_cbc.c

View Options

head/contrib/bearssl/src/ssl/ssl_rec_ccm.c

View Options

head/contrib/bearssl/src/ssl/ssl_rec_chapol.c

View Options

head/contrib/bearssl/src/ssl/ssl_rec_gcm.c

View Options

head/contrib/bearssl/src/ssl/ssl_scert_single_ec.c

View Options

head/contrib/bearssl/src/ssl/ssl_scert_single_rsa.c

View Options

head/contrib/bearssl/src/ssl/ssl_server.c

View Options

head/contrib/bearssl/src/ssl/ssl_server_full_ec.c

View Options

head/contrib/bearssl/src/ssl/ssl_server_full_rsa.c

View Options

head/contrib/bearssl/src/ssl/ssl_server_mine2c.c

View Options

head/contrib/bearssl/src/ssl/ssl_server_mine2g.c

View Options

head/contrib/bearssl/src/ssl/ssl_server_minf2c.c

View Options

head/contrib/bearssl/src/ssl/ssl_server_minf2g.c

View Options

head/contrib/bearssl/src/ssl/ssl_server_minr2g.c

View Options

head/contrib/bearssl/src/ssl/ssl_server_minu2g.c

View Options

head/contrib/bearssl/src/ssl/ssl_server_minv2g.c

View Options

head/contrib/bearssl/src/symcipher/aes_big_cbcdec.c

View Options

head/contrib/bearssl/src/symcipher/aes_big_cbcenc.c

View Options

head/contrib/bearssl/src/symcipher/aes_big_ctr.c

View Options

head/contrib/bearssl/src/symcipher/aes_big_ctrcbc.c

View Options

head/contrib/bearssl/src/symcipher/aes_big_dec.c

View Options

head/contrib/bearssl/src/symcipher/aes_big_enc.c

View Options

head/contrib/bearssl/src/symcipher/aes_common.c

View Options

head/contrib/bearssl/src/symcipher/aes_ct.c

View Options

head/contrib/bearssl/src/symcipher/aes_ct64.c

View Options

head/contrib/bearssl/src/symcipher/aes_ct64_cbcdec.c

View Options

head/contrib/bearssl/src/symcipher/aes_ct64_cbcenc.c

View Options

head/contrib/bearssl/src/symcipher/aes_ct64_ctr.c

View Options

head/contrib/bearssl/src/symcipher/aes_ct64_ctrcbc.c

View Options

head/contrib/bearssl/src/symcipher/aes_ct64_dec.c

View Options

head/contrib/bearssl/src/symcipher/aes_ct64_enc.c

View Options

head/contrib/bearssl/src/symcipher/aes_ct_cbcdec.c

View Options

head/contrib/bearssl/src/symcipher/aes_ct_cbcenc.c

View Options

head/contrib/bearssl/src/symcipher/aes_ct_ctr.c

View Options

head/contrib/bearssl/src/symcipher/aes_ct_ctrcbc.c

View Options

head/contrib/bearssl/src/symcipher/aes_ct_dec.c

View Options

head/contrib/bearssl/src/symcipher/aes_ct_enc.c

View Options

head/contrib/bearssl/src/symcipher/aes_pwr8.c

View Options

head/contrib/bearssl/src/symcipher/aes_pwr8_cbcdec.c

View Options

head/contrib/bearssl/src/symcipher/aes_pwr8_cbcenc.c

View Options

head/contrib/bearssl/src/symcipher/aes_pwr8_ctr.c

View Options

head/contrib/bearssl/src/symcipher/aes_pwr8_ctrcbc.c

View Options

head/contrib/bearssl/src/symcipher/aes_small_cbcdec.c

View Options

head/contrib/bearssl/src/symcipher/aes_small_cbcenc.c

View Options

head/contrib/bearssl/src/symcipher/aes_small_ctr.c

View Options

head/contrib/bearssl/src/symcipher/aes_small_ctrcbc.c

View Options

head/contrib/bearssl/src/symcipher/aes_small_dec.c

View Options

head/contrib/bearssl/src/symcipher/aes_small_enc.c

View Options

head/contrib/bearssl/src/symcipher/aes_x86ni.c

View Options

head/contrib/bearssl/src/symcipher/aes_x86ni_cbcdec.c

View Options

head/contrib/bearssl/src/symcipher/aes_x86ni_cbcenc.c

View Options

head/contrib/bearssl/src/symcipher/aes_x86ni_ctr.c

View Options

head/contrib/bearssl/src/symcipher/aes_x86ni_ctrcbc.c

View Options

head/contrib/bearssl/src/symcipher/chacha20_ct.c

View Options

head/contrib/bearssl/src/symcipher/chacha20_sse2.c

View Options

head/contrib/bearssl/src/symcipher/des_ct.c

View Options

head/contrib/bearssl/src/symcipher/des_ct_cbcdec.c

View Options

head/contrib/bearssl/src/symcipher/des_ct_cbcenc.c

View Options

head/contrib/bearssl/src/symcipher/des_support.c

View Options

head/contrib/bearssl/src/symcipher/des_tab.c

View Options

head/contrib/bearssl/src/symcipher/des_tab_cbcdec.c

View Options

head/contrib/bearssl/src/symcipher/des_tab_cbcenc.c

View Options

head/contrib/bearssl/src/symcipher/poly1305_ctmul.c

View Options

head/contrib/bearssl/src/symcipher/poly1305_ctmul32.c

View Options

head/contrib/bearssl/src/symcipher/poly1305_ctmulq.c

View Options

head/contrib/bearssl/src/symcipher/poly1305_i15.c

View Options

head/contrib/bearssl/src/x509/asn1.t0

View Options

head/contrib/bearssl/src/x509/asn1enc.c

View Options

head/contrib/bearssl/src/x509/encode_ec_pk8der.c

View Options

head/contrib/bearssl/src/x509/encode_ec_rawder.c

View Options

head/contrib/bearssl/src/x509/encode_rsa_pk8der.c

View Options

head/contrib/bearssl/src/x509/encode_rsa_rawder.c

View Options

head/contrib/bearssl/src/x509/skey_decoder.c

View Options

head/contrib/bearssl/src/x509/skey_decoder.t0

View Options

head/contrib/bearssl/src/x509/x509_decoder.c

View Options

head/contrib/bearssl/src/x509/x509_decoder.t0

View Options

head/contrib/bearssl/src/x509/x509_knownkey.c

View Options

head/contrib/bearssl/src/x509/x509_minimal.c

View Options

head/contrib/bearssl/src/x509/x509_minimal.t0

View Options

head/contrib/bearssl/src/x509/x509_minimal_full.c

View Options

head/contrib/bearssl/test/test_crypto.c

View Options

head/contrib/bearssl/test/test_math.c

View Options

head/contrib/bearssl/test/test_speed.c

View Options

head/contrib/bearssl/test/test_x509.c

View Options

head/contrib/bearssl/test/x509/alltests.txt

View Options

head/contrib/bearssl/test/x509/dn-ee.der

View Options

head/contrib/bearssl/test/x509/dn-ica1.der

View Options

head/contrib/bearssl/test/x509/dn-ica2.der

View Options

head/contrib/bearssl/test/x509/dn-root-new.der

View Options

head/contrib/bearssl/test/x509/dn-root.der

View Options

head/contrib/bearssl/test/x509/ee-badsig1.crt

View Options

head/contrib/bearssl/test/x509/ee-badsig2.crt

View Options

head/contrib/bearssl/test/x509/ee-cp1.crt

View Options

head/contrib/bearssl/test/x509/ee-cp2.crt

View Options

head/contrib/bearssl/test/x509/ee-cp3.crt

View Options

head/contrib/bearssl/test/x509/ee-cp4.crt

View Options

head/contrib/bearssl/test/x509/ee-dates.crt

View Options

head/contrib/bearssl/test/x509/ee-md5.crt

View Options

head/contrib/bearssl/test/x509/ee-names.crt

View Options

head/contrib/bearssl/test/x509/ee-names2.crt

View Options

head/contrib/bearssl/test/x509/ee-names3.crt

View Options

head/contrib/bearssl/test/x509/ee-names4.crt

View Options

head/contrib/bearssl/test/x509/ee-p256-sha1.crt

View Options

head/contrib/bearssl/test/x509/ee-p256-sha224.crt

View Options

head/contrib/bearssl/test/x509/ee-p256-sha256.crt

View Options

head/contrib/bearssl/test/x509/ee-p256-sha384.crt

View Options

head/contrib/bearssl/test/x509/ee-p256-sha512.crt

View Options

head/contrib/bearssl/test/x509/ee-p256.crt

View Options

head/contrib/bearssl/test/x509/ee-p384.crt

View Options

head/contrib/bearssl/test/x509/ee-p521.crt

View Options

head/contrib/bearssl/test/x509/ee-sha1.crt

View Options

head/contrib/bearssl/test/x509/ee-sha224.crt

View Options

head/contrib/bearssl/test/x509/ee-sha384.crt

View Options

head/contrib/bearssl/test/x509/ee-sha512.crt

View Options

head/contrib/bearssl/test/x509/ee-trailing.crt

View Options

head/contrib/bearssl/test/x509/ee.crt

View Options

head/contrib/bearssl/test/x509/ica1-1016.crt

View Options

head/contrib/bearssl/test/x509/ica1-1017.crt

View Options

head/contrib/bearssl/test/x509/ica1-4096.crt

View Options

head/contrib/bearssl/test/x509/ica1-p256.crt

View Options

head/contrib/bearssl/test/x509/ica1-p384.crt

View Options

head/contrib/bearssl/test/x509/ica1-p521.crt

View Options

head/contrib/bearssl/test/x509/ica1.crt

View Options

head/contrib/bearssl/test/x509/ica2-1016.crt

View Options

head/contrib/bearssl/test/x509/ica2-1017.crt

View Options

head/contrib/bearssl/test/x509/ica2-4096.crt

View Options

head/contrib/bearssl/test/x509/ica2-notCA.crt

View Options

head/contrib/bearssl/test/x509/ica2-p256.crt

View Options

head/contrib/bearssl/test/x509/ica2-p384.crt

View Options

head/contrib/bearssl/test/x509/ica2-p521.crt

View Options

head/contrib/bearssl/test/x509/ica2.crt

View Options

head/contrib/bearssl/test/x509/junk.crt

View Options

head/contrib/bearssl/test/x509/names.crt

View Options

head/contrib/bearssl/test/x509/root-p256.crt

View Options

head/contrib/bearssl/test/x509/root-p384.crt

View Options

head/contrib/bearssl/test/x509/root-p521.crt

View Options

head/contrib/bearssl/test/x509/root.crt

View Options

head/contrib/bearssl/tools/brssl.h

View Options

head/contrib/bearssl/tools/brssl.c

View Options

head/contrib/bearssl/tools/certs.c

View Options

head/contrib/bearssl/tools/chain.c

View Options

head/contrib/bearssl/tools/client.c

View Options

head/contrib/bearssl/tools/errors.c

View Options

head/contrib/bearssl/tools/files.c

View Options

head/contrib/bearssl/tools/impl.c

View Options

head/contrib/bearssl/tools/keys.c

View Options

head/contrib/bearssl/tools/names.c

View Options

head/contrib/bearssl/tools/server.c

View Options

head/contrib/bearssl/tools/skey.c

View Options

head/contrib/bearssl/tools/sslio.c

View Options

head/contrib/bearssl/tools/ta.c

View Options

head/contrib/bearssl/tools/twrch.c

View Options

head/contrib/bearssl/tools/vector.c

View Options

head/contrib/bearssl/tools/verify.c

View Options

head/contrib/bearssl/tools/xmem.c

View Options

head/lib/libbearssl/Makefile

View Options

head/lib/libbearssl/Makefile.depend

View Options

head/lib/libbearssl/Makefile.inc

View Options

head/lib/libbearssl/Makefile.libsa.inc