Conversation
…nctions The curve name to signature scheme mapping was inline in ecdsa_scheme(), making it untestable without generating a real key. Extract it into ecdsa_scheme_for_group (OpenSSL 3.0+) and ecdsa_scheme_for_nid (OpenSSL < 3.0) so the mapping can be verified directly. Add comprehensive tests: every supported curve name maps to the right scheme, unsupported and lookalike names are refused, and a round-trip test proves a generated key signs with the scheme its curve maps to and the signature verifies.
…hange) Add the internal infrastructure for library-context-aware operations. All callers pass None (default context), so there is no behavior change. New modules in openssl_internal: - key: d2i_PUBKEY_ex, d2i_AutoPrivateKey_ex, PKeyRefExt (moved from kem) - mac: EVP_MAC binding for HMAC - properties: EVP_set_default_properties and fips_enabled with libctx - rand: RAND_priv_bytes_ex with libctx Key changes: - PkeyCtxExt::new_from_name now takes a libctx parameter - HmacKey uses EVP_MAC (ossl300) or PKey (pre-300) with Zeroizing - encapsulate_init/decapsulate_init take &mut self - from_encoded_public_key takes a libctx parameter - All callers pass None (default context) This is the foundation for the public library context API and the crypto primitive wiring that follows.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.