| commit | a684152a2f2657445826fe2c2f223b628c3a219b | [log] [tgz] |
|---|---|---|
| author | David Benjamin <davidben@google.com> | Thu Dec 08 21:55:39 2016 -0500 |
| committer | Adam Langley <agl@google.com> | Thu Apr 27 20:29:47 2017 +0000 |
| tree | 97003cee91c39f77902285d494cecb20ada4c050 | |
| parent | 0d5bf8d86de1aad51e4740ba4e0335d8792b15af [diff] |
Downgrade BN_kronecker to bn_jacobi and unexport. We only ever compute it for odd (actually, prime) modulus as part of BN_mod_sqrt. If we cared, we could probably drop this from most binaries. This is used to when modular square root needs Tonelli-Shanks. Modular square root is only used for compressed coordinates. Of our supported curves (I'm handwaiving away EC_GROUP_new_curve_GFp here[*]), only P-224 needs the full Tonelli-Shanks algorithm (p is 1 mod 8). That computes the Legendre symbol a bunch to find a non-square mod p. But p is known at compile-time, so we can just hard-code a sample non-square. Sadly, BN_mod_sqrt has some callers outside of crypto/ec, so there's also that. Anyway, it's also not that large of a function. [*] Glancing through SEC 2 and Brainpool, secp224r1 is the only curve listed in either document whose prime is not either 3 mod 4 or 5 mod 8. Even 5 mod 8 is rare: only secp224k1. It's unlikely anyone would notice if we broke annoying primes. Though OpenSSL does support "WTLS" curves which has an additional 1 mod 8 case. Change-Id: If36aa78c0d41253ec024f2d90692949515356cd1 Reviewed-on: https://boringssl-review.googlesource.com/15425 Reviewed-by: Adam Langley <agl@google.com>
BoringSSL is a fork of OpenSSL that is designed to meet Google's needs.
Although BoringSSL is an open source project, it is not intended for general use, as OpenSSL is. We don't recommend that third parties depend upon it. Doing so is likely to be frustrating because there are no guarantees of API or ABI stability.
Programs ship their own copies of BoringSSL when they use it and we update everything as needed when deciding to make API changes. This allows us to mostly avoid compromises in the name of compatibility. It works for us, but it may not work for you.
BoringSSL arose because Google used OpenSSL for many years in various ways and, over time, built up a large number of patches that were maintained while tracking upstream OpenSSL. As Google's product portfolio became more complex, more copies of OpenSSL sprung up and the effort involved in maintaining all these patches in multiple places was growing steadily.
Currently BoringSSL is the SSL library in Chrome/Chromium, Android (but it's not part of the NDK) and a number of other apps/programs.
There are other files in this directory which might be helpful: