Matt Caswell 13c453728c Only disabled what we need to in a no-dh build 4 gadi atpakaļ
..
aes 9ce8e0d17e Optimize AES-XTS mode in OpenSSL for aarch64 4 gadi atpakaļ
aria 25f2138b0a Reorganize private crypto header files 5 gadi atpakaļ
asn1 fce56f5b69 REF_PRINT: cast pointer to void to avoid warnings 4 gadi atpakaļ
async 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
bf 33388b44b6 Update copyright year 4 gadi atpakaļ
bio 256d41d437 BIO: Undefine UNICODE in b_addr.c to get POSIX declaration of gai_strerror() 4 gadi atpakaļ
bn 13c453728c Only disabled what we need to in a no-dh build 4 gadi atpakaļ
buffer 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
camellia 33388b44b6 Update copyright year 4 gadi atpakaļ
cast 670ff08e77 Fix logic error for building x86 CAST assembly 4 gadi atpakaļ
chacha a135948dda Fix aarch64 static linking into shared libraries (see issue #10842 and pull request #11464) 4 gadi atpakaļ
cmac 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
cmp a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() 4 gadi atpakaļ
cms a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() 4 gadi atpakaļ
comp a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() 4 gadi atpakaļ
conf e19c5a1064 CONF: Convert one last CONFerr() to ERR_raise() 4 gadi atpakaļ
crmf 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
ct 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
des 5797e309fc Build: Remove faulty DES assembler spec 4 gadi atpakaļ
dh 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
dsa 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
dso a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() 4 gadi atpakaļ
ec a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() 4 gadi atpakaļ
encode_decode 0b9f90f504 ENCODER: Add tracing 4 gadi atpakaļ
engine a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() 4 gadi atpakaļ
err 0b3a4ef27a Move CMS enveloping code out of the algorithms and into CMS 4 gadi atpakaļ
ess 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
evp a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() 4 gadi atpakaļ
ffc 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
hmac 2cf765e5a2 Delete unused PKEY MAC files 4 gadi atpakaļ
http a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() 4 gadi atpakaļ
idea 33388b44b6 Update copyright year 4 gadi atpakaļ
kdf 905b097fd5 Deprecate ERR_load_KDF_strings() 5 gadi atpakaļ
lhash 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
md2 33388b44b6 Update copyright year 4 gadi atpakaļ
md4 33388b44b6 Update copyright year 4 gadi atpakaļ
md5 e942111267 In a non-shared build, don't include the md5 object files in legacy provider 4 gadi atpakaļ
mdc2 33388b44b6 Update copyright year 4 gadi atpakaļ
modes 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
objects 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
ocsp a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() 4 gadi atpakaļ
pem 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
perlasm 1dc1ea182b Fix many MarkDown issues in {NOTES*,README*,HACKING,LICENSE}.md files 4 gadi atpakaļ
pkcs12 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
pkcs7 a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() 4 gadi atpakaļ
poly1305 fcf6e9d056 crypto/poly1305/asm: fix armv8 pointer authentication 4 gadi atpakaļ
property 07af94416f This should fix a lock-order-inversion 4 gadi atpakaļ
rand a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() 4 gadi atpakaļ
rc2 33388b44b6 Update copyright year 4 gadi atpakaļ
rc4 33388b44b6 Update copyright year 4 gadi atpakaļ
rc5 33388b44b6 Update copyright year 4 gadi atpakaļ
ripemd b830e00429 Diverse build.info: Adjust paths 4 gadi atpakaļ
rsa 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
seed 33388b44b6 Update copyright year 4 gadi atpakaļ
sha a135948dda Fix aarch64 static linking into shared libraries (see issue #10842 and pull request #11464) 4 gadi atpakaļ
siphash 2cf765e5a2 Delete unused PKEY MAC files 4 gadi atpakaļ
sm2 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
sm3 b2055d67f0 Cleanup legacy digest methods. 4 gadi atpakaļ
sm4 25f2138b0a Reorganize private crypto header files 5 gadi atpakaļ
srp 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
stack 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
store 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
ts a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() 4 gadi atpakaļ
txt_db 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 6 gadi atpakaļ
ui a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() 4 gadi atpakaļ
whrlpool 77286fe3ec Avoid undefined behavior with unaligned accesses 4 gadi atpakaļ
x509 a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() 4 gadi atpakaļ
LPdir_nyi.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 6 gadi atpakaļ
LPdir_unix.c db5cf86535 Fix a -Warray-bounds gcc warning in OPENSSL_DIR_read 5 gadi atpakaļ
LPdir_vms.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 6 gadi atpakaļ
LPdir_win.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 6 gadi atpakaļ
LPdir_win32.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 6 gadi atpakaļ
LPdir_wince.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 6 gadi atpakaļ
README-sparse_array.md 1dc1ea182b Fix many MarkDown issues in {NOTES*,README*,HACKING,LICENSE}.md files 4 gadi atpakaļ
alphacpuid.pl 33388b44b6 Update copyright year 4 gadi atpakaļ
arm64cpuid.pl 33388b44b6 Update copyright year 4 gadi atpakaļ
arm_arch.h ae4186b004 Fix header file include guard names 5 gadi atpakaļ
armcap.c 5f40dd158c crypto/armcap.c, crypto/ppccap.c: stricter use of getauxval() 5 gadi atpakaļ
armv4cpuid.pl 33388b44b6 Update copyright year 4 gadi atpakaļ
asn1_dsa.c eec0ad10b9 Update copyright year 4 gadi atpakaļ
bsearch.c 5c3f1e34b5 ossl_bsearch(): New generic internal binary search utility function 5 gadi atpakaļ
build.info 4650f2b590 Punycode decoding implementation 4 gadi atpakaļ
c64xpluscpuid.pl 33388b44b6 Update copyright year 4 gadi atpakaļ
context.c b425001010 Rename OPENSSL_CTX prefix to OSSL_LIB_CTX 4 gadi atpakaļ
core_algorithm.c b425001010 Rename OPENSSL_CTX prefix to OSSL_LIB_CTX 4 gadi atpakaļ
core_fetch.c b425001010 Rename OPENSSL_CTX prefix to OSSL_LIB_CTX 4 gadi atpakaļ
core_namemap.c b425001010 Rename OPENSSL_CTX prefix to OSSL_LIB_CTX 4 gadi atpakaļ
cpt_err.c 44d2482ba6 Add a "random" configuration section. 4 gadi atpakaļ
cryptlib.c eec0ad10b9 Update copyright year 4 gadi atpakaļ
ctype.c 25f2138b0a Reorganize private crypto header files 5 gadi atpakaļ
cversion.c 26b7cc0d20 Cleanup include/openssl/opensslv.h.in 5 gadi atpakaļ
der_writer.c a55b00bdbc der: _ossl prefix DER functions 4 gadi atpakaļ
dllmain.c 25f2138b0a Reorganize private crypto header files 5 gadi atpakaļ
ebcdic.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 6 gadi atpakaļ
ex_data.c 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
getenv.c eec0ad10b9 Update copyright year 4 gadi atpakaļ
ia64cpuid.S 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 6 gadi atpakaļ
info.c b55a0b0ff2 Print CPUINFO also for s390 processors 4 gadi atpakaļ
init.c 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
initthread.c 3d7e7e7c48 Prevent potential UAF in init_thread_deregister() 4 gadi atpakaļ
mem.c f844f9eb44 Rename FIPS_MODE to FIPS_MODULE 4 gadi atpakaļ
mem_clr.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 6 gadi atpakaļ
mem_sec.c f31ac32001 Implement OpenSSL secure memory for Windows 4 gadi atpakaļ
mips_arch.h ae4186b004 Fix header file include guard names 5 gadi atpakaļ
o_dir.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 6 gadi atpakaļ
o_fopen.c 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
o_init.c 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 6 gadi atpakaļ
o_str.c 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
o_time.c e39e295e20 Update copyright year 4 gadi atpakaļ
packet.c 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
param_build.c 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
param_build_set.c 0ba71d6a63 DH: make the private key length importable / exportable 4 gadi atpakaļ
params.c ab00ddb559 OSSL_PARAM: Add string pointer getters 4 gadi atpakaļ
params_from_text.c 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
pariscid.pl 33388b44b6 Update copyright year 4 gadi atpakaļ
passphrase.c 67b6401356 CORE: Fix small bug in passphrase caching 4 gadi atpakaļ
ppc_arch.h ae4186b004 Fix header file include guard names 5 gadi atpakaļ
ppccap.c 454afd9866 Update copyright year 4 gadi atpakaļ
ppccpuid.pl 33388b44b6 Update copyright year 4 gadi atpakaļ
provider.c 9311d0c471 Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 4 gadi atpakaļ
provider_conf.c a150f8e1fc CRYPTO: refactor ERR_raise()+ERR_add_error_data() to ERR_raise_data() 4 gadi atpakaļ
provider_core.c 105d01f1eb crypto/provider_core.c: fix a couple of faulty ERR_raise_data() calls 4 gadi atpakaļ
provider_local.h c41f3ae0d9 Replumbing: Add a mechanism to pre-populate the provider store 5 gadi atpakaļ
provider_predefined.c dfc0857d81 serialisation: Add a built-in base provider. 4 gadi atpakaļ
punycode.c eec0ad10b9 Update copyright year 4 gadi atpakaļ
s390x_arch.h 33388b44b6 Update copyright year 4 gadi atpakaļ
s390xcap.c 5768804d5a crypto/s390xcap.c: Add guards around the GETAUXVAL checks 5 gadi atpakaļ
s390xcpuid.pl 33388b44b6 Update copyright year 4 gadi atpakaļ
self_test_core.c b425001010 Rename OPENSSL_CTX prefix to OSSL_LIB_CTX 4 gadi atpakaļ
sparc_arch.h ae4186b004 Fix header file include guard names 5 gadi atpakaļ
sparccpuid.S 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 6 gadi atpakaļ
sparcv9cap.c 33388b44b6 Update copyright year 4 gadi atpakaļ
sparse_array.c eec0ad10b9 Update copyright year 4 gadi atpakaļ
threads_none.c 849529257c drbg: ensure fork-safety without using a pthread_atfork handler 5 gadi atpakaļ
threads_pthread.c 9750b4d39c Moved OPENSSL_fork_prepare,_parent,_child from init.c to threads_pthread.c. 4 gadi atpakaļ
threads_win.c 33388b44b6 Update copyright year 4 gadi atpakaļ
trace.c 0b9f90f504 ENCODER: Add tracing 4 gadi atpakaļ
uid.c 6b10d29c1a Remove NextStep support 5 gadi atpakaļ
vms_rms.h 0e9725bcb9 Following the license change, modify the boilerplates in crypto/ 6 gadi atpakaļ
x86_64cpuid.pl 33388b44b6 Update copyright year 4 gadi atpakaļ
x86cpuid.pl 33388b44b6 Update copyright year 4 gadi atpakaļ

README-sparse_array.md

Sparse Arrays

The sparse_array.c file contains an implementation of a sparse array that attempts to be both space and time efficient.

The sparse array is represented using a tree structure. Each node in the tree contains a block of pointers to either the user supplied leaf values or to another node.

There are a number of parameters used to define the block size:

OPENSSL_SA_BLOCK_BITS   Specifies the number of bits covered by each block
SA_BLOCK_MAX            Specifies the number of pointers in each block
SA_BLOCK_MASK           Specifies a bit mask to perform modulo block size
SA_BLOCK_MAX_LEVELS     Indicates the maximum possible height of the tree

These constants are inter-related:

SA_BLOCK_MAX        = 2 ^ OPENSSL_SA_BLOCK_BITS
SA_BLOCK_MASK       = SA_BLOCK_MAX - 1
SA_BLOCK_MAX_LEVELS = number of bits in size_t divided by
                      OPENSSL_SA_BLOCK_BITS rounded up to the next multiple
                      of OPENSSL_SA_BLOCK_BITS

OPENSSL_SA_BLOCK_BITS can be defined at compile time and this overrides the built in setting.

As a space and performance optimisation, the height of the tree is usually less than the maximum possible height. Only sufficient height is allocated to accommodate the largest index added to the data structure.

The largest index used to add a value to the array determines the tree height:

    +----------------------+---------------------+
    | Largest Added Index  |   Height of Tree    |
    +----------------------+---------------------+
    | SA_BLOCK_MAX     - 1 |          1          |
    | SA_BLOCK_MAX ^ 2 - 1 |          2          |
    | SA_BLOCK_MAX ^ 3 - 1 |          3          |
    | ...                  |          ...        |
    | size_t max           | SA_BLOCK_MAX_LEVELS |
    +----------------------+---------------------+

The tree height is dynamically increased as needed based on additions.

An empty tree is represented by a NULL root pointer. Inserting a value at index 0 results in the allocation of a top level node full of null pointers except for the single pointer to the user's data (N = SA_BLOCK_MAX for brevity):

    +----+
    |Root|
    |Node|
    +-+--+
      |
      |
      |
      v
    +-+-+---+---+---+---+
    | 0 | 1 | 2 |...|N-1|
    |   |nil|nil|...|nil|
    +-+-+---+---+---+---+
      |
      |
      |
      v
    +-+--+
    |User|
    |Data|
    +----+
Index 0

Inserting at element 2N+1 creates a new root node and pushes down the old root node. It then creates a second second level node to hold the pointer to the user's new data:

    +----+
    |Root|
    |Node|
    +-+--+
      |
      |
      |
      v
    +-+-+---+---+---+---+
    | 0 | 1 | 2 |...|N-1|
    |   |nil|   |...|nil|
    +-+-+---+-+-+---+---+
      |       |
      |       +------------------+
      |                          |
      v                          v
    +-+-+---+---+---+---+      +-+-+---+---+---+---+
    | 0 | 1 | 2 |...|N-1|      | 0 | 1 | 2 |...|N-1|
    |nil|   |nil|...|nil|      |nil|   |nil|...|nil|
    +-+-+---+---+---+---+      +---+-+-+---+---+---+
      |                              |
      |                              |
      |                              |
      v                              v
    +-+--+                         +-+--+
    |User|                         |User|
    |Data|                         |Data|
    +----+                         +----+
Index 0                       Index 2N+1

The nodes themselves are allocated in a sparse manner. Only nodes which exist along a path from the root of the tree to an added leaf will be allocated. The complexity is hidden and nodes are allocated on an as needed basis. Because the data is expected to be sparse this doesn't result in a large waste of space.

Values can be removed from the sparse array by setting their index position to NULL. The data structure does not attempt to reclaim nodes or reduce the height of the tree on removal. For example, now setting index 0 to NULL would result in:

    +----+
    |Root|
    |Node|
    +-+--+
      |
      |
      |
      v
    +-+-+---+---+---+---+
    | 0 | 1 | 2 |...|N-1|
    |   |nil|   |...|nil|
    +-+-+---+-+-+---+---+
      |       |
      |       +------------------+
      |                          |
      v                          v
    +-+-+---+---+---+---+      +-+-+---+---+---+---+
    | 0 | 1 | 2 |...|N-1|      | 0 | 1 | 2 |...|N-1|
    |nil|nil|nil|...|nil|      |nil|   |nil|...|nil|
    +---+---+---+---+---+      +---+-+-+---+---+---+
                                     |
                                     |
                                     |
                                     v
                                   +-+--+
                                   |User|
                                   |Data|
                                   +----+
                              Index 2N+1

Accesses to elements in the sparse array take O(log n) time where n is the largest element. The base of the logarithm is SA_BLOCK_MAX, so for moderately small indices (e.g. NIDs), single level (constant time) access is achievable. Space usage is O(minimum(m, n log(n)) where m is the number of elements in the array.

Note: sparse arrays only include pointers to types. Thus, SPARSE_ARRAY_OF(char) can be used to store a string.