Tomas Mraz 3a857b9532 Implement BIO_s_dgram_mem() reusing the BIO_s_dgram_pair() code 1 rok temu
..
aes ef917549f5 Add vpaes-loongarch64.pl module. 1 rok temu
aria 36c269c302 Change loops conditions to make zero loop risk more obvious. 2 lat temu
asn1 fe2a7341b5 PKCS12 - Add additional libctx and propq support. 1 rok temu
async e077455e9e Stop raising ERR_R_MALLOC_FAILURE in most places 1 rok temu
bf 1567a821a4 crypto: Fix various typos, repeated words, align some spelling to LDP. 1 rok temu
bio 3a857b9532 Implement BIO_s_dgram_mem() reusing the BIO_s_dgram_pair() code 1 rok temu
bn c9466f38e0 bn2bin(): Don't accept len < 0 1 rok temu
buffer e077455e9e Stop raising ERR_R_MALLOC_FAILURE in most places 1 rok temu
camellia 9968c77539 Rename x86-32 assembly files from .s to .S. 2 lat temu
cast 2fb5fa4686 remove unused macro in cast_local.h and des_local.h 1 rok temu
chacha cd7a8e96bb Fix big-endian issue in chacha20 SVE implementation on aarch64 1 rok temu
cmac e077455e9e Stop raising ERR_R_MALLOC_FAILURE in most places 1 rok temu
cmp 01a17b24f6 Fix Coverity 1520485: logically dead code 1 rok temu
cms bf3f8f2c0e Ensure ossl_cms_EncryptedContent_init_bio() reports an error on no OID 1 rok temu
comp 3840271e98 Add zlib oneshot compression 1 rok temu
conf a8086e6bfc stack: Do not add error if pop/shift/value accesses outside of the stack 1 rok temu
crmf 084d3afd26 Compensate for CMP-related TODOs removed by PR #15539 1 rok temu
ct e077455e9e Stop raising ERR_R_MALLOC_FAILURE in most places 1 rok temu
des 2fb5fa4686 remove unused macro in cast_local.h and des_local.h 1 rok temu
dh 7c639f0b8e DH_check[_params]() use libctx of the dh for prime checks 1 rok temu
dsa f3090fc710 Implement deterministic ECDSA sign (RFC6979) 1 rok temu
dso 89d7231132 crypto/dso/dso_vms.c: Better definition of DSO_MALLOC() 1 rok temu
ec 836080a89a Support all five EdDSA instances from RFC 8032 1 rok temu
encode_decode 9ab57f29c7 Coverity 1515953: negative loop bound 1 rok temu
engine 1567a821a4 crypto: Fix various typos, repeated words, align some spelling to LDP. 1 rok temu
err a2a09af086 Write SSL_R alerts to error state to keep updated strings 1 rok temu
ess e077455e9e Stop raising ERR_R_MALLOC_FAILURE in most places 1 rok temu
evp 114d99b46b Fix incomplete checks for EVP_CIPHER_asn1_to_param 1 rok temu
ffc a2b01ae1c8 Fix incorrect check on RAND_bytes_ex() in generate_q_fips186_4() 1 rok temu
hmac 21dfdbef49 Adapt other parts of the source to the changed EVP_Q_digest() and EVP_Q_mac() 2 lat temu
hpke cae72eefc3 prevent HPKE sender setting seq unwisely 1 rok temu
http 35b76bc818 OSSL_HTTP_REQ_CTX_nbio(): use OSSL_TRACE_STRING() for msg body where it makes sense 1 rok temu
idea c734058309 crypto/*: Fix various typos, repeated words, align some spelling to LDP. 1 rok temu
kdf 905b097fd5 Deprecate ERR_load_KDF_strings() 4 lat temu
lhash 45ada6b92b Change all references to OpenSSL 3.1 to OpenSSL 3.2 in the master branch 1 rok temu
md2 33388b44b6 Update copyright year 4 lat temu
md4 33388b44b6 Update copyright year 4 lat temu
md5 9968c77539 Rename x86-32 assembly files from .s to .S. 2 lat temu
mdc2 33388b44b6 Update copyright year 4 lat temu
modes 50d9b2b5f1 Do not build P10-specific AES-GCM assembler on AIX 1 rok temu
objects b79da97cf8 Allow OBJ_create() to create an OBJ and NID with a NULL OID 1 rok temu
ocsp e077455e9e Stop raising ERR_R_MALLOC_FAILURE in most places 1 rok temu
pem adb408dc79 When using PEM_read_bio_PrivateKey_ex() the public key is optional 1 rok temu
perlasm b863e1e4c6 Add two new build targets to enable the possibility of using clang-cl as 1 rok temu
pkcs12 fe2a7341b5 PKCS12 - Add additional libctx and propq support. 1 rok temu
pkcs7 114d99b46b Fix incomplete checks for EVP_CIPHER_asn1_to_param 1 rok temu
poly1305 db24ed5430 Generate the preprocessed .s files for chacha and poly 1305 on ia64 2 lat temu
property 9866200bbe Correct property EBNF for unquoted strings 1 rok temu
rand a88e97fcac Release the drbg in the global default context before engines 1 rok temu
rc2 bb4a32ba24 remove unused macro in rc2_local.h and rc5_local.h 1 rok temu
rc4 9968c77539 Rename x86-32 assembly files from .s to .S. 2 lat temu
rc5 bb4a32ba24 remove unused macro in rc2_local.h and rc5_local.h 1 rok temu
ripemd 155a82d1fe Avoid putting ripemd_prov.c in libcommon otherwise it is regarded as fips source 1 rok temu
rsa 7efc653c43 Make RSA_generate_multi_prime_key() not segfault if e is NULL. 1 rok temu
seed 38fc02a708 Update copyright year 2 lat temu
sha 119b7b5f2a crypto/sha/asm/sha512-ia64.pl: When checking assembler file names, ignore case 1 rok temu
siphash c734058309 crypto/*: Fix various typos, repeated words, align some spelling to LDP. 1 rok temu
sm2 e077455e9e Stop raising ERR_R_MALLOC_FAILURE in most places 1 rok temu
sm3 eea820f3e2 Add ROTATE inline asm support for SM3 1 rok temu
sm4 accd3bdd11 Fix SM4 test failures on big-endian ARM processors 1 rok temu
srp f44d32fdfb add a check for the return of sk_SRP_gN_new_null() so that capture the potential memory error in time 1 rok temu
stack 3a09dfb4f9 Errors raised from OPENSSL_sk_set should have ERR_LIB_CRYPTO 1 rok temu
store c734058309 crypto/*: Fix various typos, repeated words, align some spelling to LDP. 1 rok temu
thread 14c593e003 Don't set cancel state/type 1 rok temu
ts c734058309 crypto/*: Fix various typos, repeated words, align some spelling to LDP. 1 rok temu
txt_db f9e8e2c0ab txt_db: fix -Wunused-but-set-variable 1 rok temu
ui e077455e9e Stop raising ERR_R_MALLOC_FAILURE in most places 1 rok temu
whrlpool 9968c77539 Rename x86-32 assembly files from .s to .S. 2 lat temu
x509 342e3652c7 APPS: generated certs bear X.509 V3, unless -x509v1 option of req app is given 1 rok temu
LPdir_nyi.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 5 lat temu
LPdir_unix.c fecb3aae22 Update copyright year 2 lat temu
LPdir_vms.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 5 lat temu
LPdir_win.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 5 lat temu
LPdir_win32.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 5 lat temu
LPdir_wince.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 5 lat temu
README-sparse_array.md 1dc1ea182b Fix many MarkDown issues in {NOTES*,README*,HACKING,LICENSE}.md files 3 lat temu
alphacpuid.pl 33388b44b6 Update copyright year 4 lat temu
arm64cpuid.pl fecb3aae22 Update copyright year 2 lat temu
arm_arch.h 88c53cf17d Apply SM4 optimization patch to Kunpeng-920 1 rok temu
armcap.c f97ddfc305 Fix the code used to detect aarch64 capabilities when we don't have getauxval() 1 rok temu
armv4cpuid.pl 33388b44b6 Update copyright year 4 lat temu
asn1_dsa.c 3c2bdd7df9 Update copyright year 3 lat temu
bsearch.c 5c3f1e34b5 ossl_bsearch(): New generic internal binary search utility function 5 lat temu
build.info f3090fc710 Implement deterministic ECDSA sign (RFC6979) 1 rok temu
c64xpluscpuid.pl 33388b44b6 Update copyright year 4 lat temu
context.c f5a3669c8b Add functions supporting thread pool only when it is enabled 1 rok temu
core_algorithm.c e077455e9e Stop raising ERR_R_MALLOC_FAILURE in most places 1 rok temu
core_fetch.c e1eafe8c87 "Reserve" the method store when constructing methods 1 rok temu
core_namemap.c 5317b6ee1f Add deprecation macro for 3.1 and deprecate OPENSSL_LH_stats 1 rok temu
cpt_err.c 826da1451b err: add additional errors 2 lat temu
cpuid.c fecb3aae22 Update copyright year 2 lat temu
cryptlib.c fecb3aae22 Update copyright year 2 lat temu
ctype.c a53d4f83fc Fixed typos in documentation and comments 1 rok temu
cversion.c 26b7cc0d20 Cleanup include/openssl/opensslv.h.in 4 lat temu
der_writer.c 59196250cb der_writer: Use uint32_t instead of long. 1 rok temu
deterministic_nonce.c 5e42118de2 Address coverity issue CID 1517105 1 rok temu
dllmain.c fecb3aae22 Update copyright year 2 lat temu
ebcdic.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 5 lat temu
ex_data.c e077455e9e Stop raising ERR_R_MALLOC_FAILURE in most places 1 rok temu
getenv.c fecb3aae22 Update copyright year 2 lat temu
ia64cpuid.S 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 5 lat temu
info.c 9c3de01512 info.c: Fix typos in seed macro name and description string 1 rok temu
init.c caf9317d7d Add ZSTD compression support (RFC8478bis) 1 rok temu
initthread.c fecb3aae22 Update copyright year 2 lat temu
loongarch64cpuid.pl 7f2d6188c7 Add LoongArch64 cpuid and OPENSSL_loongarchcap_P 1 rok temu
loongarch_arch.h 7f2d6188c7 Add LoongArch64 cpuid and OPENSSL_loongarchcap_P 1 rok temu
loongarchcap.c 7f2d6188c7 Add LoongArch64 cpuid and OPENSSL_loongarchcap_P 1 rok temu
mem.c 5639ee79bd ERR: Make CRYPTO_malloc() and friends report ERR_R_MALLOC_FAILURE 1 rok temu
mem_clr.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 5 lat temu
mem_sec.c a509b97d2c Do not check definition of a macro and use it in a single condition 1 rok temu
mips_arch.h ae4186b004 Fix header file include guard names 4 lat temu
o_dir.c fecb3aae22 Update copyright year 2 lat temu
o_fopen.c 1567a821a4 crypto: Fix various typos, repeated words, align some spelling to LDP. 1 rok temu
o_init.c fecb3aae22 Update copyright year 2 lat temu
o_str.c e077455e9e Stop raising ERR_R_MALLOC_FAILURE in most places 1 rok temu
o_time.c 8020d79b40 Update copyright year 3 lat temu
packet.c 6292519cd8 QUIC: Enable building with QUIC support disabled 1 rok temu
param_build.c c455f87aeb OSSL_PARAM_BLD and BIGNUM; ensure at least one byte is allocated 1 rok temu
param_build_set.c fecb3aae22 Update copyright year 2 lat temu
params.c c2ae891483 In OSSL_PARAM_set_BN(), make sure that the data_size field is at least 1 1 rok temu
params_dup.c e077455e9e Stop raising ERR_R_MALLOC_FAILURE in most places 1 rok temu
params_from_text.c e077455e9e Stop raising ERR_R_MALLOC_FAILURE in most places 1 rok temu
pariscid.pl 33388b44b6 Update copyright year 4 lat temu
passphrase.c e077455e9e Stop raising ERR_R_MALLOC_FAILURE in most places 1 rok temu
ppccap.c fecb3aae22 Update copyright year 2 lat temu
ppccpuid.pl fecb3aae22 Update copyright year 2 lat temu
provider.c e077455e9e Stop raising ERR_R_MALLOC_FAILURE in most places 1 rok temu
provider_child.c 4da7663b02 For child libctx / provider, don't count self-references in parent 2 lat temu
provider_conf.c e077455e9e Stop raising ERR_R_MALLOC_FAILURE in most places 1 rok temu
provider_core.c d3db25f568 Implement OSSL_PROVIDER_get0_default_search_path, add docs and tests. 1 rok temu
provider_local.h b7248964a4 make struct provider_info_st a full type 2 lat temu
provider_predefined.c b7248964a4 make struct provider_info_st a full type 2 lat temu
punycode.c 905ba92439 punycode: update to use WPACKET instead of using custom range checking 1 rok temu
quic_vlint.c 6292519cd8 QUIC: Enable building with QUIC support disabled 1 rok temu
riscv32cpuid.pl 61170642b1 Add RISC-V 32 cpuid support 1 rok temu
riscv64cpuid.pl 360f6dcc5a Add basic RISC-V cpuid and OPENSSL_riscvcap 2 lat temu
riscvcap.c 360f6dcc5a Add basic RISC-V cpuid and OPENSSL_riscvcap 2 lat temu
s390x_arch.h fecb3aae22 Update copyright year 2 lat temu
s390xcap.c 42f111ad41 s390: Add new machine generation 2 lat temu
s390xcpuid.pl 33388b44b6 Update copyright year 4 lat temu
self_test_core.c fecb3aae22 Update copyright year 2 lat temu
sleep.c 82d28c6b3c Rename ossl_sleep() to OSSL_sleep() and make it public 1 rok temu
sparccpuid.S 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 5 lat temu
sparcv9cap.c 52f7e44ec8 Split bignum code out of the sparcv9cap.c 2 lat temu
sparse_array.c 93429fc0ce Coverity 1507376: Dereference after null check 1 rok temu
threads_lib.c 523e54c15c Define threads_lib.c functions only for OPENSSL_SYS_UNIX 1 rok temu
threads_none.c 894f2166ef CRYPTO_THREAD_lock_new(): Avoid infinite recursion on allocation error 1 rok temu
threads_pthread.c 894f2166ef CRYPTO_THREAD_lock_new(): Avoid infinite recursion on allocation error 1 rok temu
threads_win.c 894f2166ef CRYPTO_THREAD_lock_new(): Avoid infinite recursion on allocation error 1 rok temu
time.c 02d0f87a8b time: move OSSL_TIME to libcrypto 1 rok temu
trace.c 0243e82147 add OSSL_TRACE_STRING(), OSSL_TRACE_STRING_MAX, and OSSL_trace_string() 1 rok temu
uid.c 3a1fa0116a Openssl fails to compile on Debian with kfreebsd kernels 2 lat temu
vms_rms.h 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 5 lat temu
x86_64cpuid.pl 3c2bdd7df9 Update copyright year 3 lat temu
x86cpuid.pl 33388b44b6 Update copyright year 4 lat temu

README-sparse_array.md

Sparse Arrays

The sparse_array.c file contains an implementation of a sparse array that attempts to be both space and time efficient.

The sparse array is represented using a tree structure. Each node in the tree contains a block of pointers to either the user supplied leaf values or to another node.

There are a number of parameters used to define the block size:

OPENSSL_SA_BLOCK_BITS   Specifies the number of bits covered by each block
SA_BLOCK_MAX            Specifies the number of pointers in each block
SA_BLOCK_MASK           Specifies a bit mask to perform modulo block size
SA_BLOCK_MAX_LEVELS     Indicates the maximum possible height of the tree

These constants are inter-related:

SA_BLOCK_MAX        = 2 ^ OPENSSL_SA_BLOCK_BITS
SA_BLOCK_MASK       = SA_BLOCK_MAX - 1
SA_BLOCK_MAX_LEVELS = number of bits in size_t divided by
                      OPENSSL_SA_BLOCK_BITS rounded up to the next multiple
                      of OPENSSL_SA_BLOCK_BITS

OPENSSL_SA_BLOCK_BITS can be defined at compile time and this overrides the built in setting.

As a space and performance optimisation, the height of the tree is usually less than the maximum possible height. Only sufficient height is allocated to accommodate the largest index added to the data structure.

The largest index used to add a value to the array determines the tree height:

    +----------------------+---------------------+
    | Largest Added Index  |   Height of Tree    |
    +----------------------+---------------------+
    | SA_BLOCK_MAX     - 1 |          1          |
    | SA_BLOCK_MAX ^ 2 - 1 |          2          |
    | SA_BLOCK_MAX ^ 3 - 1 |          3          |
    | ...                  |          ...        |
    | size_t max           | SA_BLOCK_MAX_LEVELS |
    +----------------------+---------------------+

The tree height is dynamically increased as needed based on additions.

An empty tree is represented by a NULL root pointer. Inserting a value at index 0 results in the allocation of a top level node full of null pointers except for the single pointer to the user's data (N = SA_BLOCK_MAX for brevity):

    +----+
    |Root|
    |Node|
    +-+--+
      |
      |
      |
      v
    +-+-+---+---+---+---+
    | 0 | 1 | 2 |...|N-1|
    |   |nil|nil|...|nil|
    +-+-+---+---+---+---+
      |
      |
      |
      v
    +-+--+
    |User|
    |Data|
    +----+
Index 0

Inserting at element 2N+1 creates a new root node and pushes down the old root node. It then creates a second second level node to hold the pointer to the user's new data:

    +----+
    |Root|
    |Node|
    +-+--+
      |
      |
      |
      v
    +-+-+---+---+---+---+
    | 0 | 1 | 2 |...|N-1|
    |   |nil|   |...|nil|
    +-+-+---+-+-+---+---+
      |       |
      |       +------------------+
      |                          |
      v                          v
    +-+-+---+---+---+---+      +-+-+---+---+---+---+
    | 0 | 1 | 2 |...|N-1|      | 0 | 1 | 2 |...|N-1|
    |nil|   |nil|...|nil|      |nil|   |nil|...|nil|
    +-+-+---+---+---+---+      +---+-+-+---+---+---+
      |                              |
      |                              |
      |                              |
      v                              v
    +-+--+                         +-+--+
    |User|                         |User|
    |Data|                         |Data|
    +----+                         +----+
Index 0                       Index 2N+1

The nodes themselves are allocated in a sparse manner. Only nodes which exist along a path from the root of the tree to an added leaf will be allocated. The complexity is hidden and nodes are allocated on an as needed basis. Because the data is expected to be sparse this doesn't result in a large waste of space.

Values can be removed from the sparse array by setting their index position to NULL. The data structure does not attempt to reclaim nodes or reduce the height of the tree on removal. For example, now setting index 0 to NULL would result in:

    +----+
    |Root|
    |Node|
    +-+--+
      |
      |
      |
      v
    +-+-+---+---+---+---+
    | 0 | 1 | 2 |...|N-1|
    |   |nil|   |...|nil|
    +-+-+---+-+-+---+---+
      |       |
      |       +------------------+
      |                          |
      v                          v
    +-+-+---+---+---+---+      +-+-+---+---+---+---+
    | 0 | 1 | 2 |...|N-1|      | 0 | 1 | 2 |...|N-1|
    |nil|nil|nil|...|nil|      |nil|   |nil|...|nil|
    +---+---+---+---+---+      +---+-+-+---+---+---+
                                     |
                                     |
                                     |
                                     v
                                   +-+--+
                                   |User|
                                   |Data|
                                   +----+
                              Index 2N+1

Accesses to elements in the sparse array take O(log n) time where n is the largest element. The base of the logarithm is SA_BLOCK_MAX, so for moderately small indices (e.g. NIDs), single level (constant time) access is achievable. Space usage is O(minimum(m, n log(n)) where m is the number of elements in the array.

Note: sparse arrays only include pointers to types. Thus, SPARSE_ARRAY_OF(char) can be used to store a string.