freebsd-dev/secure
Jessica Clarke 3b41ae3212 libcrypto: Work around strict aliasing violations in bn_nist.c
This file is full of strict aliasing violations. Previously it was only
optimised in ways that broke the code by CHERI LLVM, but now it appears
that the in-tree LLVM also breaks it for RISC-V, resulting in broken
ECDSA signature validation with error messages like the following:

  root@unmatched:/usr/src # ssh-keygen -l -f /etc/ssh/ssh_host_ecdsa_key
  /etc/ssh/ssh_host_ecdsa_key is not a key file.
  root@unmatched:/usr/src # git fetch
  fatal: unable to access 'https://git.FreeBSD.org/src.git/': error:1012606B:elliptic curve routines:EC_POINT_set_affine_coordinates:point is not on curve

Reviewed by:	dim, jkim
Obtained from:	CheriBSD
MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D35885
2022-07-25 18:17:50 +01:00
..
caroot caroot: update root store 2021-09-04 02:32:20 -05:00
lib libcrypto: Work around strict aliasing violations in bn_nist.c 2022-07-25 18:17:50 +01:00
libexec ssh: enable FIDO/U2F keys 2021-11-04 13:01:44 -04:00
tests Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
usr.bin OpenSSL: Regen manual pages for OpenSSL 1.1.1q 2022-07-05 12:01:07 -04:00
usr.sbin ssh: update to OpenSSH v8.9p1 2022-04-13 16:00:56 -04:00
Makefile [1/3] Initial infrastructure for SSL root bundle in base 2019-10-02 01:05:29 +00:00
Makefile.inc ssh: move common Makefile boilerplate to a new ssh.mk 2021-11-03 19:38:05 -04:00
ssh.mk ssh: use standalone config file for security key support 2022-03-02 09:35:12 -05:00