The Wayback Machine - https://web.archive.org/web/20190323042424/https://github.com/openssl/openssl
Skip to content
Please note that GitHub no longer supports Internet Explorer.

We recommend upgrading to the latest Microsoft Edge, Google Chrome, or Firefox.

Learn more
TLS/SSL and crypto library
Branch: master
Clone or download
bernd-edlinger Modify the RSA_private_decrypt functions to check the padding in
constant time with a memory access pattern that does not depend
on secret information.

[extended tests]

Reviewed-by: Paul Dale <[email protected]>
(Merged from #8543)
Latest commit 9c0cf21 Mar 20, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
.github Remove markdown links from HTML comments in issue templates Nov 13, 2018
Configurations Configurations/windows-makefile.tmpl: small fixes Mar 15, 2019
VMS Following the license change, modify the boilerplates in last few Dec 6, 2018
apps
boringssl @ 2070f8a
crypto Modify the RSA_private_decrypt functions to check the padding in Mar 22, 2019
demos Fix memory leaks in pkread.c demo file Mar 13, 2019
doc Document the functions EVP_MD_fetch() and EVP_MD_upref() Mar 21, 2019
engines Fix strict-warnings build on FreeBSD Mar 19, 2019
external/perl
fuzz Support SM2 certificate verification Mar 13, 2019
include Make err_clear_constant_time really constant time Mar 22, 2019
krb5 @ b9ad6c4
ms Windows: Call TerminateProcess, not ExitProcess Feb 22, 2019
os-dep
providers
pyca-cryptography @ 0940310 Update the pyca-cryptography submodule Sep 10, 2018
ssl
test Add a test for EVP_MD_fetch Mar 21, 2019
tools Following the license change, modify the boilerplates in util/, tools/ Dec 6, 2018
util
.gitattributes Don't export the submodules 'boringssl', 'krb5' and 'pyca-cryptography' Nov 24, 2018
.gitignore Ignore an auto-generated documentation file Dec 4, 2018
.gitmodules [extended tests] Enable krb5 tests in Travis Apr 18, 2017
.travis-apt-pin.preferences Fix travis clang-3.9 builds Jun 23, 2017
.travis-create-release.sh Remove all 'make dist' artifacts Nov 23, 2018
.travis.yml Update to xenial Mar 16, 2019
ACKNOWLEDGEMENTS Refer to website for acknowledgements. Dec 8, 2015
AUTHORS
CHANGES
CONTRIBUTING Remove unnecessary trailing whitespace Feb 5, 2019
Configure Configure: untabify indentation Mar 19, 2019
FAQ Move FAQ to the web. Aug 16, 2015
INSTALL
LICENSE Change license to the Apache License v2.0 Dec 6, 2018
NEWS
NOTES.ANDROID
NOTES.DJGPP
NOTES.PERL Tweaks to NOTES.PERL Jun 3, 2016
NOTES.UNIX NOTES.UNIX: add "Linking your application" paragraph Jun 26, 2018
NOTES.VMS Remove unnecessary trailing whitespace Feb 5, 2019
NOTES.WIN
README Change license to the Apache License v2.0 Dec 6, 2018
README.ENGINE
README.FIPS
appveyor.yml CI config: no need to make both install and install_docs May 14, 2018
build.info
config
config.com Following the license change, modify the boilerplates in last few Dec 6, 2018
e_os.h

README

 OpenSSL 3.0.0-dev

 Copyright (c) 1998-2018 The OpenSSL Project
 Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson
 All rights reserved.

 DESCRIPTION
 -----------

 The OpenSSL Project is a collaborative effort to develop a robust,
 commercial-grade, fully featured, and Open Source toolkit implementing the
 Transport Layer Security (TLS) protocols (including SSLv3) as well as a
 full-strength general purpose cryptographic library.

 OpenSSL is descended from the SSLeay library developed by Eric A. Young
 and Tim J. Hudson.

 The OpenSSL toolkit is licensed under the Apache License 2.0, which means
 that you are free to get and use it for commercial and non-commercial
 purposes as long as you fulfill its conditions.

 OVERVIEW
 --------

 The OpenSSL toolkit includes:

 libssl (with platform specific naming):
     Provides the client and server-side implementations for SSLv3 and TLS.

 libcrypto (with platform specific naming):
     Provides general cryptographic and X.509 support needed by SSL/TLS but
     not logically part of it.

 openssl:
     A command line tool that can be used for:
        Creation of key parameters
        Creation of X.509 certificates, CSRs and CRLs
        Calculation of message digests
        Encryption and decryption
        SSL/TLS client and server tests
        Handling of S/MIME signed or encrypted mail
        And more...

 INSTALLATION
 ------------

 See the appropriate file:
        INSTALL         Linux, Unix, Windows, OpenVMS, ...
        NOTES.*         INSTALL addendums for different platforms

 SUPPORT
 -------

 See the OpenSSL website www.openssl.org for details on how to obtain
 commercial technical support. Free community support is available through the
 openssl-users email list (see
 https://www.openssl.org/community/mailinglists.html for further details).

 If you have any problems with OpenSSL then please take the following steps
 first:

    - Download the latest version from the repository
      to see if the problem has already been addressed
    - Configure with no-asm
    - Remove compiler optimization flags

 If you wish to report a bug then please include the following information
 and create an issue on GitHub:

    - OpenSSL version: output of 'openssl version -a'
    - Configuration data: output of 'perl configdata.pm --dump'
    - OS Name, Version, Hardware platform
    - Compiler Details (name, version)
    - Application Details (name, version)
    - Problem Description (steps that will reproduce the problem, if known)
    - Stack Traceback (if the application dumps core)

 Just because something doesn't work the way you expect does not mean it
 is necessarily a bug in OpenSSL. Use the openssl-users email list for this type
 of query.

 HOW TO CONTRIBUTE TO OpenSSL
 ----------------------------

 See CONTRIBUTING

 LEGALITIES
 ----------

 A number of nations restrict the use or export of cryptography. If you
 are potentially subject to such restrictions you should seek competent
 professional legal advice before attempting to develop or distribute
 cryptographic code.
You can’t perform that action at this time.