mirror of
https://github.com/python/cpython.git
synced 2025-12-08 06:10:17 +00:00
gh-140120: Refresh HACL* to fix an hmac memory leak (GH-140188)
This pulls an updated version of HACL* that fixes the memory leak reported in GH-140120, via an upstream fix.
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| include/krml | ||
| internal | ||
| Hacl_Hash_Blake2b.c | ||
| Hacl_Hash_Blake2b.h | ||
| Hacl_Hash_Blake2b_Simd256.c | ||
| Hacl_Hash_Blake2b_Simd256.h | ||
| Hacl_Hash_Blake2b_Simd256_universal2.c | ||
| Hacl_Hash_Blake2s.c | ||
| Hacl_Hash_Blake2s.h | ||
| Hacl_Hash_Blake2s_Simd128.c | ||
| Hacl_Hash_Blake2s_Simd128.h | ||
| Hacl_Hash_Blake2s_Simd128_universal2.c | ||
| Hacl_Hash_MD5.c | ||
| Hacl_Hash_MD5.h | ||
| Hacl_Hash_SHA1.c | ||
| Hacl_Hash_SHA1.h | ||
| Hacl_Hash_SHA2.c | ||
| Hacl_Hash_SHA2.h | ||
| Hacl_Hash_SHA3.c | ||
| Hacl_Hash_SHA3.h | ||
| Hacl_HMAC.c | ||
| Hacl_HMAC.h | ||
| Hacl_Streaming_HMAC.c | ||
| Hacl_Streaming_HMAC.h | ||
| Hacl_Streaming_Types.h | ||
| Lib_Memzero0.c | ||
| lib_memzero0.h | ||
| libintvector-shim.h | ||
| libintvector.h | ||
| python_hacl_namespaces.h | ||
| README.md | ||
| refresh.sh | ||
Algorithm implementations used by the hashlib module.
This code comes from the HACL* project.
HACL* is a cryptographic library that has been formally verified for memory safety, functional correctness, and secret independence.
Updating HACL*
Use the refresh.sh script in this directory to pull in a new upstream code version. The upstream git hash used for the most recent code pull is recorded in the script. Modify the script as needed to bring in more if changes are needed based on upstream code refactoring.
Never manually edit HACL* files. Always add transformation shell code to the
refresh.sh script to perform any necessary edits. If there are serious code
changes needed, work with the upstream repository.
Local files
ACKS
- Jonathan Protzenko aka @msprotz on Github contributed our HACL* based builtin code.