commit | ae1f8af52b3ce40b7e9b3e84010ae04f76ce416f | [log] [tgz] |
---|---|---|
author | Piotr Sikora <piotrsikora@google.com> | Wed Apr 04 16:39:32 2018 -0700 |
committer | Piotr Sikora <piotrsikora@google.com> | Wed Apr 18 00:58:31 2018 +0000 |
tree | 7def9294d726cfe2e2c89be8fdee6c5c70c381cb | |
parent | 7a39c2403ea0e96564fcea7624cac43531f4ad17 [diff] |
Bazel: update BoringSSL to ba9da44 / 81335a0 (master-with-bazel). This update includes the following changes: ba9da449 Tolerate a null BN_CTX in BN_primality_test. 7a62ab19 Clarify BN_prime_checks is only for random candidates. 5b05988a Implement field_{mul,sqr} in p224-64.c with p224_felems. c81ecf34 Add test coverage for the a != -3 case. 88b1a37e Include EC_POINT_oct2point in ECDH benchmarks. 04018c59 Remove EC_LOOSE_SCALAR. 9c1f8b4a Add tests for large digests. 2257e8f3 Use bn_rshift_words for the ECDSA bit-shift. 0645c05f Test the bit-shifting case in ECDSA. cbe77925 Extract the single-subtraction reduction into a helper function. 25f3d84f Rewrite BN_rand without an extra malloc. 85c2cd8a Fix up AUTHORITY_INFO_ACCESS/ACCESS_DESCRIPTION's deleter. eb7c3008 Only do 16 iterations to blind the primality test. a0f1c8e3 Add RSA key generation to speed.cc 5833dd80 Limit the public exponent in RSA_generate_key_ex. c1c6eeb5 Check d is mostly-reduced in RSA_check_key. cba958f4 Make RSA_check_key constant-time and more meaningful. c4e4757b Make RSA key generation constant-time. a44dae7f Add a constant-time generic modular inverse function. 1044553d Add new GCD and related primitives. 23af438c Compute p - q in constant time. 8d9ee7d1 Replace rsa_greater_than_pow2 with BN_cmp. 97ac45e2 Change the order of GCD and trial division. 40729e37 Revert "Update SDE to 8.16.0." 21ef1550 Update SDE to 8.16.0. 365e48c1 Update tools. 1902d818 Tighten and test name-checking functions. 56f5eb9f Name constant-time functions more consistently. e6f46e25 Blind the range check for finding a Rabin-Miller witness. 8eadca50 Don't leak |a| in the primality test. 9362ed9e Use a Barrett reduction variant for trial division. 232a6be6 Make primality testing mostly constant-time. 50418afb Add some EC base point multiplication test vectors. 718c88c9 Fix a bug in p224-64.c. 72bc2328 Note licenses for support code in the top-level LICENSE file. 2e16f6ba Add a test for CRYPTO_memcmp. 2a19a17c Limit ASN.1 constructed types recursive definition depth 0970d397 Make various BIGNUM comparisons constant-time. ad066861 Add bn_usub_fixed. d89d65ba Add utility program for emitting P-256 x86-64 table. 6ebef732 Add bssl::UniquePtr<AUTHORITY_INFO_ACCESS> 5fca6139 Fix typo in point_add. 6291af4e Add -DOPENSSL_SMALL to CMake. 441efad4 Add RSA_PSS_PARAMS to bssl::UniquePtr. e759a9cd Support the OpenSSL “pass zero for strlen” when setting X.509 hostnames. d67e311c Test BN_primality test with OEIS A014233 values . 88e6a05f Configure asmjs and wasm as generic, 32-bit machines. d61334d1 Document preferences for EC_GROUP_new_by_curve_name. 433c0aab CQ: use new luci.boringssl.try bucket. ee764744 Add some BN_mod_inverse tests. 1bfb5c0f Add some tests for BN_gcd. 380fc326 Add RSA_check_key tests. ac97cc0e Fill in missing check_bn_tests.go features. 4b6055de Add better tests for BN_rand. 8a1a5daa Send the fake session ID in the test suite. d096c06b bytestring: document that |CBS_get_optional_asn1| can have a NULL output. 3ab1a695 fix compilation error for non-english windows (like cjk) fa3e9c33 Add |SSL_COMP_get[0_name|_id]|. a0bc29a7 Remove remnants of the HRR message. 10bfb898 Fix 20-year-old typo in BN_mask_bits. 47d88415 Document that BN_bn2bin is not constant-time. 3d2c6b0b Document EC_POINT_get_affine_coordinates_GFp allowing NULL x and y. a6bfc45b Store EC_KEY's private key as an EC_SCALAR. d62fe6f3 Fold EC_KEY_copy into EC_KEY_dup. 40cdb3b5 Don't test |initial_handshake_complete| for dummy PQ padding status. Change-Id: If702e72dab6cecb027ac90af3522eb3083acda92 Signed-off-by: Piotr Sikora <piotrsikora@google.com> Reviewed-on: https://nginx-review.googlesource.com/3361 Reviewed-by: Lizan Zhou <zlizan@google.com>
To build nginx
binary with Bazel:
$ bazel build :nginx
To build Debian package:
$ bazel build :nginx-google.deb
This repository is currently maintained by Google developers.
Any code changes should be submitted to upstream NGINX.
Copyright (C) 2002-2018 Igor Sysoev Copyright (C) 2011-2018 Nginx, Inc. Copyright (C) 2015-2018 Google Inc. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
This is not an official Google product.