Add OPENSSL_cleanse() to help cleanse memory and avoid certain compiler

and linker optimizations.
PR: 343

7 files changed, 294 insertions, 190 deletions

diff --git a/CHANGES b/CHANGES
index f5bda1b694..2d7c5b5f50 100644
--- a/CHANGES
+++ b/CHANGES
@@ -2116,6 +2116,14 @@ des-cbc           3624.96k     5258.21k     5530.91k     5624.30k     5628.26k
 
  Changes between 0.9.6g and 0.9.6h  [xx XXX xxxx]
 
+  *) New function OPENSSL_cleanse(), which is used to cleanse a section of
+     memory from it's contents.  This is done with a counter that will
+     place alternating values in each byte.  This can be used to solve
+     two issues: 1) the removal of calls to memset() by highly optimizing
+     compilers, and 2) cleansing with other values than 0, since those can
+     be read through on certain media, for example a swap space on disk.
+     [Geoff Thorpe]
+
   *) Bugfix: client side session caching did not work with external caching,
      because the session->cipher setting was not restored when reloading
      from the external cache. This problem was masked, when
diff --git a/crypto/Makefile.ssl b/crypto/Makefile.ssl
index 574fd7286b..061211dbd4 100644
--- a/crypto/Makefile.ssl
+++ b/crypto/Makefile.ssl
@@ -36,8 +36,8 @@ GENERAL=Makefile README crypto-lib.com install.com
 
 LIB= $(TOP)/libcrypto.a
 SHARED_LIB= libcrypto$(SHLIB_EXT)
-LIBSRC=	cryptlib.c mem.c mem_dbg.c cversion.c ex_data.c tmdiff.c cpt_err.c ebcdic.c uid.c o_time.c
-LIBOBJ= cryptlib.o mem.o mem_dbg.o cversion.o ex_data.o tmdiff.o cpt_err.o ebcdic.o uid.o o_time.o
+LIBSRC=	cryptlib.c mem.c mem_clr.c mem_dbg.c cversion.c ex_data.c tmdiff.c cpt_err.c ebcdic.c uid.c o_time.c
+LIBOBJ= cryptlib.o mem.o mem_clr.o mem_dbg.o cversion.o ex_data.o tmdiff.o cpt_err.o ebcdic.o uid.o o_time.o
 
 SRC= $(LIBSRC)
 
@@ -193,6 +193,10 @@ mem.o: ../include/openssl/err.h ../include/openssl/lhash.h
 mem.o: ../include/openssl/opensslconf.h ../include/openssl/opensslv.h
 mem.o: ../include/openssl/safestack.h ../include/openssl/stack.h
 mem.o: ../include/openssl/symhacks.h cryptlib.h mem.c
+mem_clr.o: ../include/openssl/crypto.h ../include/openssl/e_os2.h
+mem_clr.o: ../include/openssl/opensslconf.h ../include/openssl/opensslv.h
+mem_clr.o: ../include/openssl/safestack.h ../include/openssl/stack.h
+mem_clr.o: ../include/openssl/symhacks.h mem_clr.c
 mem_dbg.o: ../e_os.h ../include/openssl/bio.h ../include/openssl/buffer.h
 mem_dbg.o: ../include/openssl/crypto.h ../include/openssl/e_os2.h
 mem_dbg.o: ../include/openssl/err.h ../include/openssl/lhash.h
diff --git a/crypto/crypto-lib.com b/crypto/crypto-lib.com
index 5d42b2b6a0..ced978cf14 100644
--- a/crypto/crypto-lib.com
+++ b/crypto/crypto-lib.com
@@ -158,7 +158,7 @@ $!
 $ APPS_DES = "DES/DES,CBC3_ENC"
 $ APPS_PKCS7 = "ENC/ENC;DEC/DEC;SIGN/SIGN;VERIFY/VERIFY,EXAMPLE"
 $
-$ LIB_ = "cryptlib,mem,mem_dbg,cversion,ex_data,tmdiff,cpt_err,ebcdic,uid,o_time"
+$ LIB_ = "cryptlib,mem,mem_clr,mem_dbg,cversion,ex_data,tmdiff,cpt_err,ebcdic,uid,o_time"
 $ LIB_MD2 = "md2_dgst,md2_one"
 $ LIB_MD4 = "md4_dgst,md4_one"
 $ LIB_MD5 = "md5_dgst,md5_one"
diff --git a/crypto/crypto.h b/crypto/crypto.h
index d1d2400d87..4027b4306c 100644
--- a/crypto/crypto.h
+++ b/crypto/crypto.h
@@ -454,6 +454,8 @@ void *CRYPTO_realloc_clean(void *addr,int old_num,int num,const char *file,
 			   int line);
 void *CRYPTO_remalloc(void *addr,int num, const char *file, int line);
 
+void OPENSSL_cleanse(void *ptr, size_t len);
+
 void CRYPTO_set_mem_debug_options(long bits);
 long CRYPTO_get_mem_debug_options(void);
 
diff --git a/crypto/mem.c b/crypto/mem.c
index 03d2569bce..46a00697ce 100644
--- a/crypto/mem.c
+++ b/crypto/mem.c
@@ -250,6 +250,7 @@ void CRYPTO_get_mem_debug_functions(void (**m)(void *,int,const char *,int,int),
 void *CRYPTO_malloc_locked(int num, const char *file, int line)
 	{
 	void *ret = NULL;
+	extern unsigned char cleanse_ctr;
 
 	allow_customize = 0;
 	if (malloc_debug_func != NULL)
@@ -264,6 +265,12 @@ void *CRYPTO_malloc_locked(int num, const char *file, int line)
 	if (malloc_debug_func != NULL)
 		malloc_debug_func(ret, num, file, line, 1);
 
+        /* Create a dependency on the value of 'cleanse_ctr' so our memory
+         * sanitisation function can't be optimised out. NB: We only do
+         * this for >2Kb so the overhead doesn't bother us. */
+        if(ret && (num > 2048))
+		((unsigned char *)ret)[0] = cleanse_ctr;
+
 	return ret;
 	}
 
@@ -282,6 +289,7 @@ void CRYPTO_free_locked(void *str)
 void *CRYPTO_malloc(int num, const char *file, int line)
 	{
 	void *ret = NULL;
+	extern unsigned char cleanse_ctr;
 
 	allow_customize = 0;
 	if (malloc_debug_func != NULL)
@@ -296,6 +304,12 @@ void *CRYPTO_malloc(int num, const char *file, int line)
 	if (malloc_debug_func != NULL)
 		malloc_debug_func(ret, num, file, line, 1);
 
+        /* Create a dependency on the value of 'cleanse_ctr' so our memory
+         * sanitisation function can't be optimised out. NB: We only do
+         * this for >2Kb so the overhead doesn't bother us. */
+        if(ret && (num > 2048))
+                ((unsigned char *)ret)[0] = cleanse_ctr;
+
 	return ret;
 	}
 
diff --git a/crypto/mem_clr.c b/crypto/mem_clr.c
new file mode 100644
index 0000000000..0b72966cfa
--- /dev/null
+++ b/crypto/mem_clr.c
@@ -0,0 +1,75 @@
+/* crypto/mem_clr.c -*- mode:C; c-file-style: "eay" -*- */
+/* Written by Geoff Thorpe (geoff@geoffthorpe.net) for the OpenSSL
+ * project 2002.
+ */
+/* ====================================================================
+ * Copyright (c) 2001 The OpenSSL Project.  All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer. 
+ *
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in
+ *    the documentation and/or other materials provided with the
+ *    distribution.
+ *
+ * 3. All advertising materials mentioning features or use of this
+ *    software must display the following acknowledgment:
+ *    "This product includes software developed by the OpenSSL Project
+ *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
+ *
+ * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
+ *    endorse or promote products derived from this software without
+ *    prior written permission. For written permission, please contact
+ *    openssl-core@openssl.org.
+ *
+ * 5. Products derived from this software may not be called "OpenSSL"
+ *    nor may "OpenSSL" appear in their names without prior written
+ *    permission of the OpenSSL Project.
+ *
+ * 6. Redistributions of any form whatsoever must retain the following
+ *    acknowledgment:
+ *    "This product includes software developed by the OpenSSL Project
+ *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
+ * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+ * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
+ * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+ * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ * ====================================================================
+ *
+ * This product includes cryptographic software written by Eric Young
+ * (eay@cryptsoft.com).  This product includes software written by Tim
+ * Hudson (tjh@cryptsoft.com).
+ *
+ */
+
+#include <string.h>
+#include <openssl/crypto.h>
+
+unsigned char cleanse_ctr = 0;
+
+void OPENSSL_cleanse(void *ptr, size_t len)
+	{
+	unsigned char *p = ptr;
+	size_t loop = len;
+	while(loop--)
+		{
+		*(p++) = cleanse_ctr;
+		cleanse_ctr += (17 + (((unsigned char *)&p)[sizeof(unsigned char *)-1] & 0xF));
+		}
+	if(memchr(ptr, cleanse_ctr, len))
+		cleanse_ctr += 63;
+	}
diff --git a/util/libeay.num b/util/libeay.num
index 6c4cf64fc7..dc2cedc1e2 100755
--- a/util/libeay.num
+++ b/util/libeay.num
@@ -2800,190 +2800,191 @@ BUF_strlcat                             3241	EXIST::FUNCTION:
 BIO_indent                              3242	EXIST::FUNCTION:
 BUF_strlcpy                             3243	EXIST::FUNCTION:
 OpenSSLDie                              3244	EXIST::FUNCTION:
-BN_get0_nist_prime_384                  3245	EXIST::FUNCTION:
-ENGINE_register_ECDSA                   3246	EXIST::FUNCTION:
-BN_nist_mod_192                         3247	EXIST::FUNCTION:
-EC_GROUP_get_trinomial_basis            3248	EXIST::FUNCTION:EC
-ECDH_get_default_method                 3249	EXIST::FUNCTION:ECDH
-PKCS12_add_safe                         3250	EXIST::FUNCTION:
-ENGINE_register_ECDH                    3251	EXIST::FUNCTION:
-i2d_ECPrivateKey                        3252	EXIST::FUNCTION:EC
-BN_get0_nist_prime_192                  3253	EXIST::FUNCTION:
-EC_POINT_set_affine_coordinates_GF2m    3254	EXIST:!VMS:FUNCTION:EC
-EC_POINT_set_affine_coords_GF2m         3254	EXIST:VMS:FUNCTION:EC
-BN_GF2m_mod_exp_arr                     3255	EXIST::FUNCTION:
-X509_keyid_get0                         3256	EXIST::FUNCTION:
-EC_GROUP_new_by_nid                     3257	EXIST::FUNCTION:EC
-BN_GF2m_mod_mul_arr                     3258	EXIST::FUNCTION:
-EC_KEY_copy                             3259	EXIST::FUNCTION:EC
-EC_GROUP_check_discriminant             3260	EXIST::FUNCTION:EC
-EC_POINT_point2bn                       3261	EXIST::FUNCTION:EC
-EC_GROUP_new_curve_GF2m                 3262	EXIST::FUNCTION:EC
-EVP_PKEY_get1_EC_KEY                    3263	EXIST::FUNCTION:EC
-ENGINE_get_default_ECDH                 3264	EXIST::FUNCTION:
-ASN1_OCTET_STRING_NDEF_it               3265	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
-ASN1_OCTET_STRING_NDEF_it               3265	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
-ENGINE_get_static_state                 3266	EXIST::FUNCTION:
-ECDSA_SIG_new                           3267	EXIST::FUNCTION:ECDSA
-BN_GF2m_mod_sqr                         3268	EXIST::FUNCTION:
-EC_POINT_bn2point                       3269	EXIST::FUNCTION:EC
-EC_GROUP_get_point_conversion_form      3270	EXIST:!VMS:FUNCTION:EC
-EC_GROUP_get_point_conv_form            3270	EXIST:VMS:FUNCTION:EC
-PEM_read_bio_ECPKParameters             3271	EXIST::FUNCTION:EC
-EC_GROUP_get_pentanomial_basis          3272	EXIST::FUNCTION:EC
-EC_GROUP_get_nid                        3273	EXIST::FUNCTION:EC
-ECDSA_sign_setup                        3274	EXIST::FUNCTION:ECDSA
-BN_GF2m_mod_solve_quad_arr              3275	EXIST::FUNCTION:
-EC_KEY_up_ref                           3276	EXIST::FUNCTION:EC
-BN_GF2m_mod_div                         3277	EXIST::FUNCTION:
-EC_KEY_free                             3278	EXIST::FUNCTION:EC
-PEM_write_bio_ECPrivateKey              3279	EXIST::FUNCTION:EC
-d2i_EC_PUBKEY                           3280	EXIST::FUNCTION:EC
-EC_KEY_print_fp                         3281	EXIST::FUNCTION:EC,FP_API
-BN_GF2m_mod_arr                         3282	EXIST::FUNCTION:
-ECDH_get_ex_data                        3283	EXIST::FUNCTION:ECDH
-ECDSA_do_sign                           3284	EXIST::FUNCTION:ECDSA
-ENGINE_unregister_ECDH                  3285	EXIST::FUNCTION:
-ECDH_OpenSSL                            3286	EXIST::FUNCTION:ECDH
-EC_POINT_dup                            3287	EXIST::FUNCTION:EC
-EC_get_builtin_curves                   3288	EXIST::FUNCTION:EC
-EVP_PKEY_set1_EC_KEY                    3289	EXIST::FUNCTION:EC
-BN_GF2m_mod_sqrt_arr                    3290	EXIST::FUNCTION:
-i2d_ECPrivateKey_bio                    3291	EXIST::FUNCTION:BIO,EC
-ECPKParameters_print_fp                 3292	EXIST::FUNCTION:EC,FP_API
-ECDSA_SIG_free                          3293	EXIST::FUNCTION:ECDSA
-PEM_write_bio_ECPKParameters            3294	EXIST::FUNCTION:EC
-EC_GROUP_set_nid                        3295	EXIST::FUNCTION:EC
-PKCS12_add_safes                        3296	EXIST::FUNCTION:
-BN_GF2m_poly2arr                        3297	EXIST::FUNCTION:
-BN_get0_nist_prime_224                  3298	EXIST::FUNCTION:
-i2d_ECParameters                        3299	EXIST::FUNCTION:EC
-i2d_ECPKParameters                      3300	EXIST::FUNCTION:EC
-BN_ncopy                                3301	EXIST::FUNCTION:
-d2i_ECPKParameters                      3302	EXIST::FUNCTION:EC
-ENGINE_set_ECDH                         3303	EXIST::FUNCTION:
-PEM_write_bio_EC_PUBKEY                 3304	EXIST::FUNCTION:EC
-ECParameters_print                      3305	EXIST::FUNCTION:BIO,EC
-ASN1_generate_nconf                     3306	EXIST::FUNCTION:
-BN_GF2m_mod_mul                         3307	EXIST::FUNCTION:
-EC_GROUP_set_seed                       3308	EXIST::FUNCTION:EC
-EC_GROUP_get_curve_GF2m                 3309	EXIST::FUNCTION:EC
-ECPublicKey_set_octet_string            3310	EXIST::FUNCTION:EC
-ECDSA_get_ex_data                       3311	EXIST::FUNCTION:ECDSA
-BN_GF2m_mod                             3312	EXIST::FUNCTION:
-EC_GROUP_get_seed_len                   3313	EXIST::FUNCTION:EC
-PEM_read_bio_EC_PUBKEY                  3314	EXIST::FUNCTION:EC
-i2d_EC_PUBKEY                           3315	EXIST::FUNCTION:EC
-ECDSA_get_default_method                3316	EXIST::FUNCTION:ECDSA
-ASN1_put_eoc                            3317	EXIST::FUNCTION:
-ECDSA_DATA_free                         3318	EXIST::FUNCTION:ECDSA
-EC_METHOD_get_field_type                3319	EXIST::FUNCTION:EC
-EC_GFp_nist_method                      3320	EXIST::FUNCTION:EC
-BN_GF2m_mod_sqr_arr                     3321	EXIST::FUNCTION:
-EC_GROUP_set_curve_GF2m                 3322	EXIST::FUNCTION:EC
-ENGINE_set_default_ECDSA                3323	EXIST::FUNCTION:
-BN_GF2m_mod_sqrt                        3324	EXIST::FUNCTION:
-ECDH_set_default_method                 3325	EXIST::FUNCTION:ECDH
-EC_KEY_generate_key                     3326	EXIST::FUNCTION:EC
-BN_GF2m_arr2poly                        3327	EXIST::FUNCTION:
-ECPublicKey_get_octet_string            3328	EXIST::FUNCTION:EC
-EC_GROUP_check                          3329	EXIST::FUNCTION:EC
-d2i_ECPrivateKey_bio                    3330	EXIST::FUNCTION:BIO,EC
-d2i_ECPrivateKey                        3331	EXIST::FUNCTION:EC
-ASN1_item_ndef_i2d                      3332	EXIST::FUNCTION:
-i2d_PKCS7_NDEF                          3333	EXIST::FUNCTION:
-EC_GROUP_get_degree                     3334	EXIST::FUNCTION:EC
-ASN1_generate_v3                        3335	EXIST::FUNCTION:
-BN_GF2m_add                             3336	EXIST::FUNCTION:
-BN_nist_mod_224                         3337	EXIST::FUNCTION:
-i2d_EC_PUBKEY_bio                       3338	EXIST::FUNCTION:BIO,EC
-EC_GROUP_get_asn1_flag                  3339	EXIST::FUNCTION:EC
-ECDH_get_ex_new_index                   3340	EXIST::FUNCTION:ECDH
-ECDH_size                               3341	EXIST::FUNCTION:ECDH
-BN_GF2m_mod_inv                         3342	EXIST::FUNCTION:
-BN_GF2m_mod_exp                         3343	EXIST::FUNCTION:
-EC_GROUP_get0_seed                      3344	EXIST::FUNCTION:EC
-ecdsa_check                             3345	EXIST::FUNCTION:ECDSA
-BN_GF2m_mod_div_arr                     3346	EXIST::FUNCTION:
-ENGINE_set_ECDSA                        3347	EXIST::FUNCTION:
-ECPKParameters_print                    3348	EXIST::FUNCTION:BIO,EC
-PEM_write_EC_PUBKEY                     3349	EXIST:!WIN16:FUNCTION:EC
-ECDH_set_method                         3350	EXIST::FUNCTION:ECDH
-ECDH_set_ex_data                        3351	EXIST::FUNCTION:ECDH
-BN_nist_mod_521                         3352	EXIST::FUNCTION:
-EC_GROUP_set_point_conversion_form      3353	EXIST:!VMS:FUNCTION:EC
-EC_GROUP_set_point_conv_form            3353	EXIST:VMS:FUNCTION:EC
-PEM_read_EC_PUBKEY                      3354	EXIST:!WIN16:FUNCTION:EC
-i2d_ECDSA_SIG                           3355	EXIST::FUNCTION:ECDSA
-ECDSA_OpenSSL                           3356	EXIST::FUNCTION:ECDSA
-ECDSA_set_default_method                3357	EXIST::FUNCTION:ECDSA
-EC_POINT_set_compressed_coordinates_GF2m 3358	EXIST:!VMS:FUNCTION:EC
-EC_POINT_set_compr_coords_GF2m          3358	EXIST:VMS:FUNCTION:EC
-ECDH_DATA_new_method                    3359	EXIST::FUNCTION:ECDH
-BN_get0_nist_prime_256                  3360	EXIST::FUNCTION:
-PEM_read_ECPrivateKey                   3361	EXIST:!WIN16:FUNCTION:EC
-ERR_load_ECDSA_strings                  3362	EXIST::FUNCTION:ECDSA
-EC_GROUP_get_basis_type                 3363	EXIST::FUNCTION:EC
-ECDH_DATA_new                           3364	EXIST::FUNCTION:ECDH
-BN_nist_mod_384                         3365	EXIST::FUNCTION:
-PEM_write_ECPKParameters                3366	EXIST:!WIN16:FUNCTION:EC
-ECDH_compute_key                        3367	EXIST::FUNCTION:ECDH
-ENGINE_register_all_ECDH                3368	EXIST::FUNCTION:
-BN_GF2m_mod_solve_quad                  3369	EXIST::FUNCTION:
-i2d_ECPrivateKey_fp                     3370	EXIST::FUNCTION:EC,FP_API
-ENGINE_register_all_ECDSA               3371	EXIST::FUNCTION:
-EC_POINT_get_affine_coordinates_GF2m    3372	EXIST:!VMS:FUNCTION:EC
-EC_POINT_get_affine_coords_GF2m         3372	EXIST:VMS:FUNCTION:EC
-EC_GROUP_dup                            3373	EXIST::FUNCTION:EC
-ENGINE_get_default_ECDSA                3374	EXIST::FUNCTION:
-EC_KEY_new                              3375	EXIST::FUNCTION:EC
-ECDSA_verify                            3376	EXIST::FUNCTION:ECDSA
-EC_POINT_point2hex                      3377	EXIST::FUNCTION:EC
-ECDSA_do_verify                         3378	EXIST::FUNCTION:ECDSA
-d2i_ECPrivateKey_fp                     3379	EXIST::FUNCTION:EC,FP_API
-PEM_write_ECPrivateKey                  3380	EXIST:!WIN16:FUNCTION:EC
-PEM_read_ECPKParameters                 3381	EXIST:!WIN16:FUNCTION:EC
-ECParameters_print_fp                   3382	EXIST::FUNCTION:EC,FP_API
-ECDH_DATA_free                          3383	EXIST::FUNCTION:ECDH
-i2d_EC_PUBKEY_fp                        3384	EXIST::FUNCTION:EC,FP_API
-BN_nist_mod_256                         3385	EXIST::FUNCTION:
-ECDSA_DATA_new                          3386	EXIST::FUNCTION:ECDSA
-ECDSA_size                              3387	EXIST::FUNCTION:ECDSA
-d2i_EC_PUBKEY_bio                       3388	EXIST::FUNCTION:BIO,EC
-BN_get0_nist_prime_521                  3389	EXIST::FUNCTION:
-PEM_read_bio_ECPrivateKey               3390	EXIST::FUNCTION:EC
-ENGINE_get_ECDH                         3391	EXIST::FUNCTION:
-d2i_ECDSA_SIG                           3392	EXIST::FUNCTION:ECDSA
-ECDSA_sign                              3393	EXIST::FUNCTION:ECDSA
-ENGINE_get_ECDSA                        3394	EXIST::FUNCTION:
-EVP_ecdsa                               3395	EXIST::FUNCTION:SHA
-PKCS12_add_cert                         3396	EXIST::FUNCTION:
-ERR_load_ECDH_strings                   3397	EXIST::FUNCTION:ECDH
-EC_KEY_dup                              3398	EXIST::FUNCTION:EC
-ECDSA_set_method                        3399	EXIST::FUNCTION:ECDSA
-d2i_ECParameters                        3400	EXIST::FUNCTION:EC
-EC_GF2m_simple_method                   3401	EXIST::FUNCTION:EC
-ECDSA_set_ex_data                       3402	EXIST::FUNCTION:ECDSA
-EC_KEY_print                            3403	EXIST::FUNCTION:BIO,EC
-ECDSA_get_ex_new_index                  3404	EXIST::FUNCTION:ECDSA
-EC_GROUP_set_asn1_flag                  3405	EXIST::FUNCTION:EC
-EC_KEY_check_key                        3406	EXIST::FUNCTION:EC
-d2i_EC_PUBKEY_fp                        3407	EXIST::FUNCTION:EC,FP_API
-ecdh_check                              3408	EXIST::FUNCTION:ECDH
-ECDSA_DATA_new_method                   3409	EXIST::FUNCTION:ECDSA
-ENGINE_set_default_ECDH                 3410	EXIST::FUNCTION:
-PKCS12_add_key                          3411	EXIST::FUNCTION:
-DSO_merge                               3412	EXIST::FUNCTION:
-EC_POINT_hex2point                      3413	EXIST::FUNCTION:EC
-BN_GF2m_mod_inv_arr                     3414	EXIST::FUNCTION:
-ENGINE_unregister_ECDSA                 3415	EXIST::FUNCTION:
-PEM_write_bio_X509_CERT_PAIR            3416	EXIST::FUNCTION:
-PEM_read_X509_CERT_PAIR                 3417	EXIST:!WIN16:FUNCTION:
-X509_CERT_PAIR_it                       3418	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
-X509_CERT_PAIR_it                       3418	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
-X509_CERT_PAIR_free                     3419	EXIST::FUNCTION:
-i2d_X509_CERT_PAIR                      3420	EXIST::FUNCTION:
-X509_CERT_PAIR_new                      3421	EXIST::FUNCTION:
-PEM_write_X509_CERT_PAIR                3422	EXIST:!WIN16:FUNCTION:
-d2i_X509_CERT_PAIR                      3423	EXIST::FUNCTION:
-PEM_read_bio_X509_CERT_PAIR             3424	EXIST::FUNCTION:
+OPENSSL_cleanse                         3245	EXIST::FUNCTION:
+BN_get0_nist_prime_384                  3246	EXIST::FUNCTION:
+ENGINE_register_ECDSA                   3247	EXIST::FUNCTION:
+BN_nist_mod_192                         3248	EXIST::FUNCTION:
+EC_GROUP_get_trinomial_basis            3249	EXIST::FUNCTION:EC
+ECDH_get_default_method                 3250	EXIST::FUNCTION:ECDH
+PKCS12_add_safe                         3251	EXIST::FUNCTION:
+ENGINE_register_ECDH                    3252	EXIST::FUNCTION:
+i2d_ECPrivateKey                        3253	EXIST::FUNCTION:EC
+BN_get0_nist_prime_192                  3254	EXIST::FUNCTION:
+EC_POINT_set_affine_coordinates_GF2m    3255	EXIST:!VMS:FUNCTION:EC
+EC_POINT_set_affine_coords_GF2m         3255	EXIST:VMS:FUNCTION:EC
+BN_GF2m_mod_exp_arr                     3256	EXIST::FUNCTION:
+X509_keyid_get0                         3257	EXIST::FUNCTION:
+EC_GROUP_new_by_nid                     3258	EXIST::FUNCTION:EC
+BN_GF2m_mod_mul_arr                     3259	EXIST::FUNCTION:
+EC_KEY_copy                             3260	EXIST::FUNCTION:EC
+EC_GROUP_check_discriminant             3261	EXIST::FUNCTION:EC
+EC_POINT_point2bn                       3262	EXIST::FUNCTION:EC
+EC_GROUP_new_curve_GF2m                 3263	EXIST::FUNCTION:EC
+EVP_PKEY_get1_EC_KEY                    3264	EXIST::FUNCTION:EC
+ENGINE_get_default_ECDH                 3265	EXIST::FUNCTION:
+ASN1_OCTET_STRING_NDEF_it               3266	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_OCTET_STRING_NDEF_it               3266	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ENGINE_get_static_state                 3267	EXIST::FUNCTION:
+ECDSA_SIG_new                           3268	EXIST::FUNCTION:ECDSA
+BN_GF2m_mod_sqr                         3269	EXIST::FUNCTION:
+EC_POINT_bn2point                       3270	EXIST::FUNCTION:EC
+EC_GROUP_get_point_conversion_form      3271	EXIST:!VMS:FUNCTION:EC
+EC_GROUP_get_point_conv_form            3271	EXIST:VMS:FUNCTION:EC
+PEM_read_bio_ECPKParameters             3272	EXIST::FUNCTION:EC
+EC_GROUP_get_pentanomial_basis          3273	EXIST::FUNCTION:EC
+EC_GROUP_get_nid                        3274	EXIST::FUNCTION:EC
+ECDSA_sign_setup                        3275	EXIST::FUNCTION:ECDSA
+BN_GF2m_mod_solve_quad_arr              3276	EXIST::FUNCTION:
+EC_KEY_up_ref                           3277	EXIST::FUNCTION:EC
+BN_GF2m_mod_div                         3278	EXIST::FUNCTION:
+EC_KEY_free                             3279	EXIST::FUNCTION:EC
+PEM_write_bio_ECPrivateKey              3280	EXIST::FUNCTION:EC
+d2i_EC_PUBKEY                           3281	EXIST::FUNCTION:EC
+EC_KEY_print_fp                         3282	EXIST::FUNCTION:EC,FP_API
+BN_GF2m_mod_arr                         3283	EXIST::FUNCTION:
+PEM_write_bio_X509_CERT_PAIR            3284	EXIST::FUNCTION:
+ECDH_get_ex_data                        3285	EXIST::FUNCTION:ECDH
+ECDSA_do_sign                           3286	EXIST::FUNCTION:ECDSA
+ENGINE_unregister_ECDH                  3287	EXIST::FUNCTION:
+ECDH_OpenSSL                            3288	EXIST::FUNCTION:ECDH
+EC_POINT_dup                            3289	EXIST::FUNCTION:EC
+EC_get_builtin_curves                   3290	EXIST::FUNCTION:EC
+EVP_PKEY_set1_EC_KEY                    3291	EXIST::FUNCTION:EC
+BN_GF2m_mod_sqrt_arr                    3292	EXIST::FUNCTION:
+i2d_ECPrivateKey_bio                    3293	EXIST::FUNCTION:BIO,EC
+ECPKParameters_print_fp                 3294	EXIST::FUNCTION:EC,FP_API
+ECDSA_SIG_free                          3295	EXIST::FUNCTION:ECDSA
+PEM_write_bio_ECPKParameters            3296	EXIST::FUNCTION:EC
+EC_GROUP_set_nid                        3297	EXIST::FUNCTION:EC
+PKCS12_add_safes                        3298	EXIST::FUNCTION:
+BN_GF2m_poly2arr                        3299	EXIST::FUNCTION:
+BN_get0_nist_prime_224                  3300	EXIST::FUNCTION:
+i2d_ECParameters                        3301	EXIST::FUNCTION:EC
+i2d_ECPKParameters                      3302	EXIST::FUNCTION:EC
+BN_ncopy                                3303	EXIST::FUNCTION:
+d2i_ECPKParameters                      3304	EXIST::FUNCTION:EC
+ENGINE_set_ECDH                         3305	EXIST::FUNCTION:
+PEM_write_bio_EC_PUBKEY                 3306	EXIST::FUNCTION:EC
+ECParameters_print                      3307	EXIST::FUNCTION:BIO,EC
+ASN1_generate_nconf                     3308	EXIST::FUNCTION:
+BN_GF2m_mod_mul                         3309	EXIST::FUNCTION:
+EC_GROUP_set_seed                       3310	EXIST::FUNCTION:EC
+EC_GROUP_get_curve_GF2m                 3311	EXIST::FUNCTION:EC
+PEM_read_X509_CERT_PAIR                 3312	EXIST:!WIN16:FUNCTION:
+ECPublicKey_set_octet_string            3313	EXIST::FUNCTION:EC
+ECDSA_get_ex_data                       3314	EXIST::FUNCTION:ECDSA
+BN_GF2m_mod                             3315	EXIST::FUNCTION:
+EC_GROUP_get_seed_len                   3316	EXIST::FUNCTION:EC
+PEM_read_bio_EC_PUBKEY                  3317	EXIST::FUNCTION:EC
+i2d_EC_PUBKEY                           3318	EXIST::FUNCTION:EC
+ECDSA_get_default_method                3319	EXIST::FUNCTION:ECDSA
+ASN1_put_eoc                            3320	EXIST::FUNCTION:
+ECDSA_DATA_free                         3321	EXIST::FUNCTION:ECDSA
+EC_METHOD_get_field_type                3322	EXIST::FUNCTION:EC
+EC_GFp_nist_method                      3323	EXIST::FUNCTION:EC
+X509_CERT_PAIR_it                       3324	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_CERT_PAIR_it                       3324	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+BN_GF2m_mod_sqr_arr                     3325	EXIST::FUNCTION:
+EC_GROUP_set_curve_GF2m                 3326	EXIST::FUNCTION:EC
+ENGINE_set_default_ECDSA                3327	EXIST::FUNCTION:
+BN_GF2m_mod_sqrt                        3328	EXIST::FUNCTION:
+ECDH_set_default_method                 3329	EXIST::FUNCTION:ECDH
+EC_KEY_generate_key                     3330	EXIST::FUNCTION:EC
+BN_GF2m_arr2poly                        3331	EXIST::FUNCTION:
+ECPublicKey_get_octet_string            3332	EXIST::FUNCTION:EC
+EC_GROUP_check                          3333	EXIST::FUNCTION:EC
+d2i_ECPrivateKey_bio                    3334	EXIST::FUNCTION:BIO,EC
+d2i_ECPrivateKey                        3335	EXIST::FUNCTION:EC
+ASN1_item_ndef_i2d                      3336	EXIST::FUNCTION:
+i2d_PKCS7_NDEF                          3337	EXIST::FUNCTION:
+EC_GROUP_get_degree                     3338	EXIST::FUNCTION:EC
+ASN1_generate_v3                        3339	EXIST::FUNCTION:
+BN_GF2m_add                             3340	EXIST::FUNCTION:
+X509_CERT_PAIR_free                     3341	EXIST::FUNCTION:
+BN_nist_mod_224                         3342	EXIST::FUNCTION:
+i2d_EC_PUBKEY_bio                       3343	EXIST::FUNCTION:BIO,EC
+EC_GROUP_get_asn1_flag                  3344	EXIST::FUNCTION:EC
+ECDH_get_ex_new_index                   3345	EXIST::FUNCTION:ECDH
+ECDH_size                               3346	EXIST::FUNCTION:ECDH
+BN_GF2m_mod_inv                         3347	EXIST::FUNCTION:
+BN_GF2m_mod_exp                         3348	EXIST::FUNCTION:
+EC_GROUP_get0_seed                      3349	EXIST::FUNCTION:EC
+ecdsa_check                             3350	EXIST::FUNCTION:ECDSA
+BN_GF2m_mod_div_arr                     3351	EXIST::FUNCTION:
+ENGINE_set_ECDSA                        3352	EXIST::FUNCTION:
+ECPKParameters_print                    3353	EXIST::FUNCTION:BIO,EC
+PEM_write_EC_PUBKEY                     3354	EXIST:!WIN16:FUNCTION:EC
+ECDH_set_method                         3355	EXIST::FUNCTION:ECDH
+ECDH_set_ex_data                        3356	EXIST::FUNCTION:ECDH
+BN_nist_mod_521                         3357	EXIST::FUNCTION:
+EC_GROUP_set_point_conversion_form      3358	EXIST:!VMS:FUNCTION:EC
+EC_GROUP_set_point_conv_form            3358	EXIST:VMS:FUNCTION:EC
+PEM_read_EC_PUBKEY                      3359	EXIST:!WIN16:FUNCTION:EC
+i2d_ECDSA_SIG                           3360	EXIST::FUNCTION:ECDSA
+ECDSA_OpenSSL                           3361	EXIST::FUNCTION:ECDSA
+ECDSA_set_default_method                3362	EXIST::FUNCTION:ECDSA
+EC_POINT_set_compressed_coordinates_GF2m 3363	EXIST:!VMS:FUNCTION:EC
+EC_POINT_set_compr_coords_GF2m          3363	EXIST:VMS:FUNCTION:EC
+ECDH_DATA_new_method                    3364	EXIST::FUNCTION:ECDH
+BN_get0_nist_prime_256                  3365	EXIST::FUNCTION:
+PEM_read_ECPrivateKey                   3366	EXIST:!WIN16:FUNCTION:EC
+ERR_load_ECDSA_strings                  3367	EXIST::FUNCTION:ECDSA
+EC_GROUP_get_basis_type                 3368	EXIST::FUNCTION:EC
+ECDH_DATA_new                           3369	EXIST::FUNCTION:ECDH
+BN_nist_mod_384                         3370	EXIST::FUNCTION:
+i2d_X509_CERT_PAIR                      3371	EXIST::FUNCTION:
+PEM_write_ECPKParameters                3372	EXIST:!WIN16:FUNCTION:EC
+ECDH_compute_key                        3373	EXIST::FUNCTION:ECDH
+ENGINE_register_all_ECDH                3374	EXIST::FUNCTION:
+BN_GF2m_mod_solve_quad                  3375	EXIST::FUNCTION:
+i2d_ECPrivateKey_fp                     3376	EXIST::FUNCTION:EC,FP_API
+ENGINE_register_all_ECDSA               3377	EXIST::FUNCTION:
+EC_POINT_get_affine_coordinates_GF2m    3378	EXIST:!VMS:FUNCTION:EC
+EC_POINT_get_affine_coords_GF2m         3378	EXIST:VMS:FUNCTION:EC
+EC_GROUP_dup                            3379	EXIST::FUNCTION:EC
+ENGINE_get_default_ECDSA                3380	EXIST::FUNCTION:
+EC_KEY_new                              3381	EXIST::FUNCTION:EC
+ECDSA_verify                            3382	EXIST::FUNCTION:ECDSA
+EC_POINT_point2hex                      3383	EXIST::FUNCTION:EC
+ECDSA_do_verify                         3384	EXIST::FUNCTION:ECDSA
+d2i_ECPrivateKey_fp                     3385	EXIST::FUNCTION:EC,FP_API
+PEM_write_ECPrivateKey                  3386	EXIST:!WIN16:FUNCTION:EC
+PEM_read_ECPKParameters                 3387	EXIST:!WIN16:FUNCTION:EC
+X509_CERT_PAIR_new                      3388	EXIST::FUNCTION:
+ECParameters_print_fp                   3389	EXIST::FUNCTION:EC,FP_API
+ECDH_DATA_free                          3390	EXIST::FUNCTION:ECDH
+PEM_write_X509_CERT_PAIR                3391	EXIST:!WIN16:FUNCTION:
+d2i_X509_CERT_PAIR                      3392	EXIST::FUNCTION:
+i2d_EC_PUBKEY_fp                        3393	EXIST::FUNCTION:EC,FP_API
+BN_nist_mod_256                         3394	EXIST::FUNCTION:
+ECDSA_DATA_new                          3395	EXIST::FUNCTION:ECDSA
+ECDSA_size                              3396	EXIST::FUNCTION:ECDSA
+d2i_EC_PUBKEY_bio                       3397	EXIST::FUNCTION:BIO,EC
+BN_get0_nist_prime_521                  3398	EXIST::FUNCTION:
+PEM_read_bio_ECPrivateKey               3399	EXIST::FUNCTION:EC
+ENGINE_get_ECDH                         3400	EXIST::FUNCTION:
+d2i_ECDSA_SIG                           3401	EXIST::FUNCTION:ECDSA
+ECDSA_sign                              3402	EXIST::FUNCTION:ECDSA
+ENGINE_get_ECDSA                        3403	EXIST::FUNCTION:
+EVP_ecdsa                               3404	EXIST::FUNCTION:SHA
+PKCS12_add_cert                         3405	EXIST::FUNCTION:
+ERR_load_ECDH_strings                   3406	EXIST::FUNCTION:ECDH
+EC_KEY_dup                              3407	EXIST::FUNCTION:EC
+ECDSA_set_method                        3408	EXIST::FUNCTION:ECDSA
+d2i_ECParameters                        3409	EXIST::FUNCTION:EC
+EC_GF2m_simple_method                   3410	EXIST::FUNCTION:EC
+ECDSA_set_ex_data                       3411	EXIST::FUNCTION:ECDSA
+EC_KEY_print                            3412	EXIST::FUNCTION:BIO,EC
+ECDSA_get_ex_new_index                  3413	EXIST::FUNCTION:ECDSA
+EC_GROUP_set_asn1_flag                  3414	EXIST::FUNCTION:EC
+EC_KEY_check_key                        3415	EXIST::FUNCTION:EC
+d2i_EC_PUBKEY_fp                        3416	EXIST::FUNCTION:EC,FP_API
+ecdh_check                              3417	EXIST::FUNCTION:ECDH
+ECDSA_DATA_new_method                   3418	EXIST::FUNCTION:ECDSA
+PEM_read_bio_X509_CERT_PAIR             3419	EXIST::FUNCTION:
+ENGINE_set_default_ECDH                 3420	EXIST::FUNCTION:
+PKCS12_add_key                          3421	EXIST::FUNCTION:
+DSO_merge                               3422	EXIST::FUNCTION:
+EC_POINT_hex2point                      3423	EXIST::FUNCTION:EC
+BN_GF2m_mod_inv_arr                     3424	EXIST::FUNCTION:
+ENGINE_unregister_ECDSA                 3425	EXIST::FUNCTION: