update copyright notice / whitespace

Merged rt46864 (check MD5 amd SHA1 support)

Don't use memset() to wipe memory (#45947) (cherry picked from commit d5707676e45551d1ceb600a674f3f13351fd3105)

4714. [port] openbsd/libressl: add support for building with --enable-openssl-hash. [RT #45982] (cherry picked from commit c75e9c7630273d430389e010e681a0350cf5b67d)

update copyright notice / whitespace

Added Ed25519 support (#44696)

4497. [port] Add support for OpenSSL 1.1.0. [RT #41284] (cherry picked from commit 1fce0951ed172fc3834a3a379c4e00b78224cc5d)

4450. [port] Provide more nuanced HSM support which better matches the specific PKCS11 providers capabilities. [RT #42458] (cherry picked from commit 8ee6f289d87851a5b898b24a64587f0e6bc225bc)

4401. [misc] Change LICENSE to MPL 2.0.

update copyright notice / whitespace

[master] timing safe memory comparisons 4183. [cleanup] Use timing-safe memory comparisons in cryptographic code. Also, the timing-safe comparison functions have been renamed to avoid possible confusion with memcmp(). [RT #40148]

Hardened OpenSSL digest/HMAC calls [RT #37944]

[master] better error output when initializing pkcs11 3786. [func] Provide more detailed error codes when using native PKCS#11. "pkcs11-tokens" now fails robustly rather than asserting when run against an HSM with an incomplete PCKS#11 API implementation. [RT #35479]

[master] merge libiscpk11 to libisc 3735. [cleanup] Merged the libiscpk11 library into libisc to simplify dependencies. [RT #35205]

[master] overlooked some memcpy->memmove changes with pkcs11 merge

[master] native PKCS#11 support 3705. [func] "configure --enable-native-pkcs11" enables BIND to use the PKCS#11 API for all cryptographic functions, so that it can drive a hardware service module directly without the need to use a modified OpenSSL as intermediary (so long as the HSM's vendor provides a complete-enough implementation of the PKCS#11 interface). This has been tested successfully with the Thales nShield HSM and with SoftHSMv2 from the OpenDNSSEC project. [RT #29031]

update copyright notice

[master] replace memcpy() with memmove(). 3698. [cleanup] Replaced all uses of memcpy() with memmove(). [RT #35120]

update copyright notice

[master] added isc_safe_memcmp() 3611. [bug] Improved resistance to a theoretical authentication attack based on differential timing. [RT #33939]

update copyright notice

set $Id$

update copyright notice

Correctly invalidate the sha2/hmac2 contexts. This was already done in practice, but this makes it zero out the whole structure rather than just the first 4 bytes + the key. sha2.c did not always zero out the full sha2 state in invalidate, but will now.

update copyright notice

OpenSSL hashes

2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]

update copyright notice

update copyright notice

2072. [bug] We were not generating valid HMAC SHA digests. [RT #16320]

silence compiler warnings

update copyright notice

1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]