commit | 012a4442658e8f1393f8835e01937cdaf4b30235 | [log] [tgz] |
---|---|---|
author | Shelley Vohr <shelley.vohr@gmail.com> | Fri Aug 30 14:16:32 2019 -0700 |
committer | Adam Langley <agl@google.com> | Mon Sep 16 18:11:40 2019 +0000 |
tree | f6f74e9abf21347ae063360af06824d3966169ff | |
parent | ec92ec471cd78b236613151d5cd8a43b260a286c [diff] |
Add AES-256 CFB to libdecrepit. Electron builds Node.js with BoringSSL. They want to match OpenSSL as much as possible and thus have a patch[1] that adds AES-256 CFB mode. However, that patch makes libcrypto depend on libdecrepit, which can't be done in general. This change lands the AES-256 CFB support in libdecrepit without the libcrypto bit and, in order for BoringSSL to remain consistent, without advertising support in EVP_CIPHER_do_all_sorted. This will let Electron reduce the size of their patch a bit. [1] https://github.com/electron/electron/blob/master/patches/boringssl/expose_aes-cfb.patch Change-Id: If628d22a595b354623439c587542e414e43e4045 Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/37264 Reviewed-by: Adam Langley <agl@google.com>
BoringSSL is a fork of OpenSSL that is designed to meet Google's needs.
Although BoringSSL is an open source project, it is not intended for general use, as OpenSSL is. We don't recommend that third parties depend upon it. Doing so is likely to be frustrating because there are no guarantees of API or ABI stability.
Programs ship their own copies of BoringSSL when they use it and we update everything as needed when deciding to make API changes. This allows us to mostly avoid compromises in the name of compatibility. It works for us, but it may not work for you.
BoringSSL arose because Google used OpenSSL for many years in various ways and, over time, built up a large number of patches that were maintained while tracking upstream OpenSSL. As Google's product portfolio became more complex, more copies of OpenSSL sprung up and the effort involved in maintaining all these patches in multiple places was growing steadily.
Currently BoringSSL is the SSL library in Chrome/Chromium, Android (but it's not part of the NDK) and a number of other apps/programs.
Project links:
There are other files in this directory which might be helpful: