Matt Caswell 13c453728c Only disabled what we need to in a no-dh build vor 4 Jahren
..
aes 9ce8e0d17e Optimize AES-XTS mode in OpenSSL for aarch64 vor 4 Jahren
aria 25f2138b0a Reorganize private crypto header files vor 5 Jahren
asn1 fce56f5b69 REF_PRINT: cast pointer to void to avoid warnings vor 4 Jahren
async 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
bf 33388b44b6 Update copyright year vor 4 Jahren
bio 256d41d437 BIO: Undefine UNICODE in b_addr.c to get POSIX declaration of gai_strerror() vor 4 Jahren
bn 13c453728c Only disabled what we need to in a no-dh build vor 4 Jahren
buffer 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
camellia 33388b44b6 Update copyright year vor 4 Jahren
cast 670ff08e77 Fix logic error for building x86 CAST assembly vor 4 Jahren
chacha a135948dda Fix aarch64 static linking into shared libraries (see issue #10842 and pull request #11464) vor 4 Jahren
cmac 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
cmp a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() vor 4 Jahren
cms a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() vor 4 Jahren
comp a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() vor 4 Jahren
conf e19c5a1064 CONF: Convert one last CONFerr() to ERR_raise() vor 4 Jahren
crmf 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
ct 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
des 5797e309fc Build: Remove faulty DES assembler spec vor 4 Jahren
dh 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
dsa 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
dso a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() vor 4 Jahren
ec a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() vor 4 Jahren
encode_decode 0b9f90f504 ENCODER: Add tracing vor 4 Jahren
engine a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() vor 4 Jahren
err 0b3a4ef27a Move CMS enveloping code out of the algorithms and into CMS vor 4 Jahren
ess 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
evp a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() vor 4 Jahren
ffc 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
hmac 2cf765e5a2 Delete unused PKEY MAC files vor 4 Jahren
http a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() vor 4 Jahren
idea 33388b44b6 Update copyright year vor 4 Jahren
kdf 905b097fd5 Deprecate ERR_load_KDF_strings() vor 5 Jahren
lhash 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
md2 33388b44b6 Update copyright year vor 4 Jahren
md4 33388b44b6 Update copyright year vor 4 Jahren
md5 e942111267 In a non-shared build, don't include the md5 object files in legacy provider vor 4 Jahren
mdc2 33388b44b6 Update copyright year vor 4 Jahren
modes 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
objects 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
ocsp a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() vor 4 Jahren
pem 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
perlasm 1dc1ea182b Fix many MarkDown issues in {NOTES*,README*,HACKING,LICENSE}.md files vor 4 Jahren
pkcs12 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
pkcs7 a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() vor 4 Jahren
poly1305 fcf6e9d056 crypto/poly1305/asm: fix armv8 pointer authentication vor 4 Jahren
property 07af94416f This should fix a lock-order-inversion vor 4 Jahren
rand a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() vor 4 Jahren
rc2 33388b44b6 Update copyright year vor 4 Jahren
rc4 33388b44b6 Update copyright year vor 4 Jahren
rc5 33388b44b6 Update copyright year vor 4 Jahren
ripemd b830e00429 Diverse build.info: Adjust paths vor 4 Jahren
rsa 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
seed 33388b44b6 Update copyright year vor 4 Jahren
sha a135948dda Fix aarch64 static linking into shared libraries (see issue #10842 and pull request #11464) vor 4 Jahren
siphash 2cf765e5a2 Delete unused PKEY MAC files vor 4 Jahren
sm2 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
sm3 b2055d67f0 Cleanup legacy digest methods. vor 4 Jahren
sm4 25f2138b0a Reorganize private crypto header files vor 5 Jahren
srp 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
stack 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
store 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
ts a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() vor 4 Jahren
txt_db 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ vor 6 Jahren
ui a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() vor 4 Jahren
whrlpool 77286fe3ec Avoid undefined behavior with unaligned accesses vor 4 Jahren
x509 a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() vor 4 Jahren
LPdir_nyi.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ vor 6 Jahren
LPdir_unix.c db5cf86535 Fix a -Warray-bounds gcc warning in OPENSSL_DIR_read vor 5 Jahren
LPdir_vms.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ vor 6 Jahren
LPdir_win.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ vor 6 Jahren
LPdir_win32.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ vor 6 Jahren
LPdir_wince.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ vor 6 Jahren
README-sparse_array.md 1dc1ea182b Fix many MarkDown issues in {NOTES*,README*,HACKING,LICENSE}.md files vor 4 Jahren
alphacpuid.pl 33388b44b6 Update copyright year vor 4 Jahren
arm64cpuid.pl 33388b44b6 Update copyright year vor 4 Jahren
arm_arch.h ae4186b004 Fix header file include guard names vor 5 Jahren
armcap.c 5f40dd158c crypto/armcap.c, crypto/ppccap.c: stricter use of getauxval() vor 5 Jahren
armv4cpuid.pl 33388b44b6 Update copyright year vor 4 Jahren
asn1_dsa.c eec0ad10b9 Update copyright year vor 4 Jahren
bsearch.c 5c3f1e34b5 ossl_bsearch(): New generic internal binary search utility function vor 5 Jahren
build.info 4650f2b590 Punycode decoding implementation vor 4 Jahren
c64xpluscpuid.pl 33388b44b6 Update copyright year vor 4 Jahren
context.c b425001010 Rename OPENSSL_CTX prefix to OSSL_LIB_CTX vor 4 Jahren
core_algorithm.c b425001010 Rename OPENSSL_CTX prefix to OSSL_LIB_CTX vor 4 Jahren
core_fetch.c b425001010 Rename OPENSSL_CTX prefix to OSSL_LIB_CTX vor 4 Jahren
core_namemap.c b425001010 Rename OPENSSL_CTX prefix to OSSL_LIB_CTX vor 4 Jahren
cpt_err.c 44d2482ba6 Add a "random" configuration section. vor 4 Jahren
cryptlib.c eec0ad10b9 Update copyright year vor 4 Jahren
ctype.c 25f2138b0a Reorganize private crypto header files vor 5 Jahren
cversion.c 26b7cc0d20 Cleanup include/openssl/opensslv.h.in vor 5 Jahren
der_writer.c a55b00bdbc der: _ossl prefix DER functions vor 4 Jahren
dllmain.c 25f2138b0a Reorganize private crypto header files vor 5 Jahren
ebcdic.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ vor 6 Jahren
ex_data.c 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
getenv.c eec0ad10b9 Update copyright year vor 4 Jahren
ia64cpuid.S 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ vor 6 Jahren
info.c b55a0b0ff2 Print CPUINFO also for s390 processors vor 4 Jahren
init.c 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
initthread.c 3d7e7e7c48 Prevent potential UAF in init_thread_deregister() vor 4 Jahren
mem.c f844f9eb44 Rename FIPS_MODE to FIPS_MODULE vor 4 Jahren
mem_clr.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ vor 6 Jahren
mem_sec.c f31ac32001 Implement OpenSSL secure memory for Windows vor 4 Jahren
mips_arch.h ae4186b004 Fix header file include guard names vor 5 Jahren
o_dir.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ vor 6 Jahren
o_fopen.c 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
o_init.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ vor 6 Jahren
o_str.c 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
o_time.c e39e295e20 Update copyright year vor 4 Jahren
packet.c 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
param_build.c 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
param_build_set.c 0ba71d6a63 DH: make the private key length importable / exportable vor 4 Jahren
params.c ab00ddb559 OSSL_PARAM: Add string pointer getters vor 4 Jahren
params_from_text.c 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
pariscid.pl 33388b44b6 Update copyright year vor 4 Jahren
passphrase.c 67b6401356 CORE: Fix small bug in passphrase caching vor 4 Jahren
ppc_arch.h ae4186b004 Fix header file include guard names vor 5 Jahren
ppccap.c 454afd9866 Update copyright year vor 4 Jahren
ppccpuid.pl 33388b44b6 Update copyright year vor 4 Jahren
provider.c 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call vor 4 Jahren
provider_conf.c a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() vor 4 Jahren
provider_core.c 105d01f1eb crypto/provider_core.c: fix a couple of faulty ERR_raise_data() calls vor 4 Jahren
provider_local.h c41f3ae0d9 Replumbing: Add a mechanism to pre-populate the provider store vor 5 Jahren
provider_predefined.c dfc0857d81 serialisation: Add a built-in base provider. vor 4 Jahren
punycode.c eec0ad10b9 Update copyright year vor 4 Jahren
s390x_arch.h 33388b44b6 Update copyright year vor 4 Jahren
s390xcap.c 5768804d5a crypto/s390xcap.c: Add guards around the GETAUXVAL checks vor 5 Jahren
s390xcpuid.pl 33388b44b6 Update copyright year vor 4 Jahren
self_test_core.c b425001010 Rename OPENSSL_CTX prefix to OSSL_LIB_CTX vor 4 Jahren
sparc_arch.h ae4186b004 Fix header file include guard names vor 5 Jahren
sparccpuid.S 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ vor 6 Jahren
sparcv9cap.c 33388b44b6 Update copyright year vor 4 Jahren
sparse_array.c eec0ad10b9 Update copyright year vor 4 Jahren
threads_none.c 849529257c drbg: ensure fork-safety without using a pthread_atfork handler vor 5 Jahren
threads_pthread.c 9750b4d39c Moved OPENSSL_fork_prepare,_parent,_child from init.c to threads_pthread.c. vor 4 Jahren
threads_win.c 33388b44b6 Update copyright year vor 4 Jahren
trace.c 0b9f90f504 ENCODER: Add tracing vor 4 Jahren
uid.c 6b10d29c1a Remove NextStep support vor 5 Jahren
vms_rms.h 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ vor 6 Jahren
x86_64cpuid.pl 33388b44b6 Update copyright year vor 4 Jahren
x86cpuid.pl 33388b44b6 Update copyright year vor 4 Jahren

README-sparse_array.md

Sparse Arrays

The sparse_array.c file contains an implementation of a sparse array that attempts to be both space and time efficient.

The sparse array is represented using a tree structure. Each node in the tree contains a block of pointers to either the user supplied leaf values or to another node.

There are a number of parameters used to define the block size:

OPENSSL_SA_BLOCK_BITS   Specifies the number of bits covered by each block
SA_BLOCK_MAX            Specifies the number of pointers in each block
SA_BLOCK_MASK           Specifies a bit mask to perform modulo block size
SA_BLOCK_MAX_LEVELS     Indicates the maximum possible height of the tree

These constants are inter-related:

SA_BLOCK_MAX        = 2 ^ OPENSSL_SA_BLOCK_BITS
SA_BLOCK_MASK       = SA_BLOCK_MAX - 1
SA_BLOCK_MAX_LEVELS = number of bits in size_t divided by
                      OPENSSL_SA_BLOCK_BITS rounded up to the next multiple
                      of OPENSSL_SA_BLOCK_BITS

OPENSSL_SA_BLOCK_BITS can be defined at compile time and this overrides the built in setting.

As a space and performance optimisation, the height of the tree is usually less than the maximum possible height. Only sufficient height is allocated to accommodate the largest index added to the data structure.

The largest index used to add a value to the array determines the tree height:

    +----------------------+---------------------+
    | Largest Added Index  |   Height of Tree    |
    +----------------------+---------------------+
    | SA_BLOCK_MAX     - 1 |          1          |
    | SA_BLOCK_MAX ^ 2 - 1 |          2          |
    | SA_BLOCK_MAX ^ 3 - 1 |          3          |
    | ...                  |          ...        |
    | size_t max           | SA_BLOCK_MAX_LEVELS |
    +----------------------+---------------------+

The tree height is dynamically increased as needed based on additions.

An empty tree is represented by a NULL root pointer. Inserting a value at index 0 results in the allocation of a top level node full of null pointers except for the single pointer to the user's data (N = SA_BLOCK_MAX for brevity):

    +----+
    |Root|
    |Node|
    +-+--+
      |
      |
      |
      v
    +-+-+---+---+---+---+
    | 0 | 1 | 2 |...|N-1|
    |   |nil|nil|...|nil|
    +-+-+---+---+---+---+
      |
      |
      |
      v
    +-+--+
    |User|
    |Data|
    +----+
Index 0

Inserting at element 2N+1 creates a new root node and pushes down the old root node. It then creates a second second level node to hold the pointer to the user's new data:

    +----+
    |Root|
    |Node|
    +-+--+
      |
      |
      |
      v
    +-+-+---+---+---+---+
    | 0 | 1 | 2 |...|N-1|
    |   |nil|   |...|nil|
    +-+-+---+-+-+---+---+
      |       |
      |       +------------------+
      |                          |
      v                          v
    +-+-+---+---+---+---+      +-+-+---+---+---+---+
    | 0 | 1 | 2 |...|N-1|      | 0 | 1 | 2 |...|N-1|
    |nil|   |nil|...|nil|      |nil|   |nil|...|nil|
    +-+-+---+---+---+---+      +---+-+-+---+---+---+
      |                              |
      |                              |
      |                              |
      v                              v
    +-+--+                         +-+--+
    |User|                         |User|
    |Data|                         |Data|
    +----+                         +----+
Index 0                       Index 2N+1

The nodes themselves are allocated in a sparse manner. Only nodes which exist along a path from the root of the tree to an added leaf will be allocated. The complexity is hidden and nodes are allocated on an as needed basis. Because the data is expected to be sparse this doesn't result in a large waste of space.

Values can be removed from the sparse array by setting their index position to NULL. The data structure does not attempt to reclaim nodes or reduce the height of the tree on removal. For example, now setting index 0 to NULL would result in:

    +----+
    |Root|
    |Node|
    +-+--+
      |
      |
      |
      v
    +-+-+---+---+---+---+
    | 0 | 1 | 2 |...|N-1|
    |   |nil|   |...|nil|
    +-+-+---+-+-+---+---+
      |       |
      |       +------------------+
      |                          |
      v                          v
    +-+-+---+---+---+---+      +-+-+---+---+---+---+
    | 0 | 1 | 2 |...|N-1|      | 0 | 1 | 2 |...|N-1|
    |nil|nil|nil|...|nil|      |nil|   |nil|...|nil|
    +---+---+---+---+---+      +---+-+-+---+---+---+
                                     |
                                     |
                                     |
                                     v
                                   +-+--+
                                   |User|
                                   |Data|
                                   +----+
                              Index 2N+1

Accesses to elements in the sparse array take O(log n) time where n is the largest element. The base of the logarithm is SA_BLOCK_MAX, so for moderately small indices (e.g. NIDs), single level (constant time) access is achievable. Space usage is O(minimum(m, n log(n)) where m is the number of elements in the array.

Note: sparse arrays only include pointers to types. Thus, SPARSE_ARRAY_OF(char) can be used to store a string.