476 Commits

Author	SHA1	Message	Date
Tomas Mraz	8886960842	Add CHANGES.md and NEWS.md updates ... Including a few corrections of the previous entries. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>	2025-09-29 14:27:36 +02:00
Ryan Hooper	e5f01903ed	Enable peer verification with s_server's verify_return_error option ... If the option is specified it will now implicitly enable peer verification. The s_client command was already behaved this way, so s_server was updated to match the behavior of s_client. Fixes #15134 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28445)	2025-09-18 17:24:03 +02:00
Eugene Syromiatnikov	4732ce799c	CHANGES.md, NEWS.md: update for 3.6.0-beta1 ... CHANGES.md: * https://github.com/openssl/openssl/pull/28398 * https://github.com/openssl/openssl/pull/28411 * https://github.com/openssl/openssl/pull/28447 * https://github.com/openssl/openssl/pull/28449 NEWS.md: * https://github.com/openssl/openssl/pull/28447 Release: yes Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28547)	2025-09-16 12:07:53 -04:00
Eugene Syromiatnikov	d236a32da6	CHANGES.md, NEWS.md: ffix ... Minor formating cleanups. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28547)	2025-09-16 12:07:53 -04:00
Viktor Dukhovni	f34b1ad17b	Harden RSA public encrypt ... Check the that the indicated output buffer length is large enough. Fix EVP_SealInit() to initialise the output buffer length to the RSA modulus length, not the input KEK length. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28517)	2025-09-13 20:04:16 -04:00
Dr. David von Oheimb	1c99e070b1	CHANGES.md: add entry on constifying (X509) function parameter ... Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28033)	2025-09-11 17:56:48 +02:00
Igor Ustinov	c283619a66	Doc changes: the -hmac-env and -hmac-stdin options of openssl-dgst ... will appear in version 4.0 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28497)	2025-09-11 15:26:03 +10:00
Matt Caswell	e26ae2754f	The next version to be released from master is 4.0 ... Now that the 3.6 branch has been created, correct the master branch so that it is clear that the next release from that branch will be 4.0 Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28423)	2025-09-04 10:40:04 +01:00
openssl-machine	cca9844f0c	Prepare for 3.7 ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Release: yes	2025-09-02 13:07:27 +00:00
Norbert Pocs	145e909a69	Release news and changelog for version 3.6 ... Release: yes Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28403)	2025-09-02 09:03:23 -04:00
Pauli	730c2d9ccc	changes: add a CHANGES.md entry covering the generated parameter name decoding ... This isn't a user visible change but it's sufficiently noteworthy to justify a changes entry. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/28275)	2025-08-22 15:33:20 +10:00
Dimitri John Ledkov	833a34dac3	fips: add news & changes entry for DetECDSA ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28213)	2025-08-21 09:59:55 +10:00
Pauli	32ff539daf	changes: add note about PCT on key import to the FIPS provider ... This is mandated by FIPS 140-3 IG 10.3.A additional comment 1. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28122)	2025-07-31 20:39:40 +02:00
Daniel Van Geest	d0899abb1b	Implement KEMRecipientInfo (RFC9629) in CMS ... Also add support for ML-KEM in CMS (draft-ietf-lamps-cms-kyber). Add the -recip_kdf and -recip_ukm parameters to `openssl cms -encrypt` to allow the user to specify the KDF algorithm and optional user keying material for each recipient. A provider may indicate which RecipientInfo type is supported for a key, otherwise CMS will try to figure it out itself. A provider may also indicate which KDF to use in KEMRecipientInfo if the user hasn't specified one. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27681)	2025-07-30 11:39:04 +02:00
martin	b1b4b154fd	Add support for TLS 1.3 OCSP multi-stapling for server certs ... Co-authored-by: Michael Krueger Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20945)	2025-07-25 17:24:37 +02:00
Stanciu, Adrian	055dd1d8bb	Add AES-CFB128 optimizations with Intel AVX-512 and VAES ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/26902)	2025-07-17 16:29:57 -04:00
Theo Buehler	21f1b677d5	Provide X509_CRL_get0_tbs_sigalg() ... X509_CRL_get0_tbs_sigalg() corresponds to X509_get0_tbs_sigalg() and retrieves the AlgorithmIdentifier inside the TBSCertList which is not currently accessible in any sane way from public API. This PR adds X509_get0_tbs_sigalg() to the public API, documents it, adds a simple regress check so there is coverage and mentions the addition in CHANGES.md. On top of that, fix a typo in .gitignore and clean up some order inconsistencies in X509_get0_signature.pod. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27971)	2025-07-10 14:39:35 +02:00
Pauli	25171e0803	Add changes entry for LMS verification ... Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:04:37 +10:00
Daniel Van Geest	c6a1d8ea74	HKDF updates ... - prevent fixed-digest HKDF from having its digest changed - implement gettable params in HKDF - update fixed-digest HKDF tests Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27247)	2025-07-10 11:14:19 +10:00
Daniel Van Geest	d1a8d5a833	Add HKDF algorithms with fixed digests. ... Add HKDF-SHA256, HKDF-SHA384 and HKDF-SHA512 which are versions of HKDF that have the digest pre-set. The digest cannot be changed for contexts of these types. RFC 8619 defines algorithm identifiers for these combinations. These algorithm identifiers will be used in future features, e.g. KEMRecipientInfo. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27247)	2025-07-10 11:13:21 +10:00
Michael Baentsch	51ce5499f9	Introduce SSL_OP_SERVER_PREFERENCE to replace SSL_OP_CIPHER_SERVER_PREFERENCE misnomer ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27981)	2025-07-09 12:10:57 +02:00
Neil Horman	f6c400f4cc	CHANGES.md / NEWS.md fixups ahead of release ... Release: yes Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27927)	2025-07-01 12:28:00 +01:00
Alexis Goodfellow	52dba1c098	Begin incorporating stdbool usage when json encoding ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Kurt Roeckx <kurt@roeckx.be> (Merged from https://github.com/openssl/openssl/pull/27812)	2025-06-13 11:26:46 -04:00
sashan	53e5071f34	Document transition from ANSI-C towards C-99 ... The existing NOTES-ANSI.md are renamed to NOTES-C99.md and updated accordingly. INSTALL.md lists C-99 compiler instead of ANSI-C now. Also moving from ANSI-C to C-99 warrants updates to NEWS.md and CHANGES.md. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> (Merged from https://github.com/openssl/openssl/pull/27751)	2025-06-10 19:58:41 +02:00
Matt Caswell	df5dff26ef	Add a CHANGES.md entry regarding no_renegotiation alert ... Highight the bug being fixed for DTLS users Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27591)	2025-06-04 17:21:42 +02:00
Dmitry Belyavskiy	8109618a1c	CHANGES/NEWS entries for configutl ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27290)	2025-05-08 11:05:42 +10:00
Dimitri John Ledkov	995e9489e6	pkcs12: increase macsaltlen from 8 to 16 as per NIST SP 800-132 ... Align PKCS12 PBMAC1 PBKDF2 salt length with PKCS5_DEFAULT_PBE2_SALT_LEN. With this change, newly created PKCS12 PBMAC1 PBKDF2 keystores use mac salt length of 16 bytes by default. This increases interoperability with FIPS implementations which require at least 16 bytes of salt length. Otherwise FIPS implementations fail to to open keystore with invalid salt length errors (unapproved): Mac verify error: invalid password? 80EBD061AD7F0000:error:1C800070:Provider routines:kdf_pbkdf2_set_ctx_params:invalid salt length:providers/implementations/kdfs/pbkdf2.c:293: 80EBD061AD7F0000:error:118C0103:PKCS12 routines:PBMAC1_PBKDF2_HMAC:internal error:crypto/pkcs12/p12_mutl.c:143: 80EBD061AD7F0000:error:1180006D:PKCS12 routines:PKCS12_verify_mac:mac generation error:crypto/pkcs12/p12_mutl.c:324: 80EBD061AD7F0000:error:1C800070:Provider routines:kdf_pbkdf2_set_ctx_params:invalid salt length:providers/implementations/kdfs/pbkdf2.c:293: 80EBD061AD7F0000:error:118C0103:PKCS12 routines:PBMAC1_PBKDF2_HMAC:internal error:crypto/pkcs12/p12_mutl.c:143: 80EBD061AD7F0000:error:1180006D:PKCS12 routines:PKCS12_verify_mac:mac generation error:crypto/pkcs12/p12_mutl.c:324: The compile time constant is made possible to override with a build time define, such that one can revert back to 8 if so is needed for backwards compatibility. Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27446)	2025-05-05 16:15:24 +02:00
20ioppolan	3f98e949d3	Removed references to vxworks because it is an unsupported platform ... Fixes #26558 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26630)	2025-05-05 16:13:35 +02:00
Richard Levitte	6683c886f2	Relax absolut path checking in our 'file' scheme implementation ... So far, we strictly obeyed [RFC 8089], which only allows absolute paths in a 'file:' URI. However, this seems to give a confusing user experience, where something like 'file:foo.pem' wouldn't open foo.pem, even though it's there in the current directory, but 'file:$(pwd)/foo.pem' would. To be less surprising for such use cases, we relax our implementation visavi [RFC 8089] to allow relative paths. [RFC 8089]: https://datatracker.ietf.org/doc/html/rfc8089 Fixes #27461 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27482)	2025-04-25 16:11:25 +02:00
Viktor Dukhovni	f492649b99	Fix default pkey(1) DER output ... This is expected to be PKCS#8, but was defaulting to traditional when possible. Changed default DER output format to PKCS#8 and extended the `-traditional` option to apply also to DER output. Fixes: #21708 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27273)	2025-04-24 21:12:49 +10:00
emery	6509f18c9f	Updated the change log to include SSLv3 being disabled by default. ... This change was implemented into version 1.1.0 and onward. The last version that had SSLv3 enabled was version 1.0.2h, which is why the addition was made where it is. CLA: trivial Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27289)	2025-04-15 15:36:03 +01:00
Tim Perry	03541d7302	Add SSL_CTX_set_ec_point_formats() and SSL_set_ec_point_formats() ... The internal fields and implementation for configuration of this parameter already existed, but was not exposed. This change adds simple setters to allow configuration of this field. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26990)	2025-04-14 14:56:40 +01:00
Stanciu, Adrian	196b36f0d0	Enable x86-64 SHA-512 family optimizations with SHA512 ISA extension ... The SHA-256 (SZ=4) and SHA-512 (SZ=8) dispatcher paths have been separated while keeping the SHA-256 path unmodified. Due to early constraints in register availability, two 32-bit `OPENSSL_ia32cap_P` reads have been coalesced into one. As a consequence, several bit positions used in feature checks have gained a 32 bits offset. Replaced `test` with `bt` to allow use of 64-bit immediate indices in CPUID feature checks. Split the SHA512 BMI2+AVX2+BMI1 dispatcher branch into: - AVX2+SHA512: high priority, with SHA512 ISA extension - AVX2+BMI2+BMI1: fallback The added implementation has its own copy of `K512` without duplicated elements every 16 bytes. Shuffle indices have been reused from `K512`. Added binary translators for `vsha512msg1`, `vsha512msg2`, `vsha512rnds2` for older assemblers. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/26147)	2025-04-03 11:14:42 +11:00
Elizarova, Alina	e1eb6fdb3a	Enable x86-64 SM3 optimizations with SM3 ISA extension ... Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/26196)	2025-04-03 10:11:07 +11:00
Elizarova Alina	b12cd40e8b	Enable x86-64 SM4 optimizations with SM4 ISA extension ... Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/26664)	2025-04-03 10:09:04 +11:00
Jon Ericson	da8de0e8dd	Change documentation to point to new wiki location ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27081)	2025-03-25 20:24:48 +01:00
Tomas Mraz	21f4bd986b	Update NEWS.md and CHANGES.md for the 3.5 release ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27152) (cherry picked from commit d6ace599ed)	2025-03-25 15:30:24 +01:00
Frederik Wedel-Heinen	21b170df9f	Adds the concept of thunks to OPENSSL_sk interface ... This allows applications to call functions of correct signature when free'ing OPENSSL_sk items which UBSan complains about. Related to #22896. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27071)	2025-03-24 15:28:34 +01:00
openssl-machine	b2762763e9	Prepare for 3.6 ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Release: yes	2025-03-12 13:37:30 +00:00
Andrew Dinh	b48145cd18	QUIC server post-rebase nits ... - Apply doc nits suggested by Viktor from https://github.com/openssl/openssl/pull/26762 - Update CHANGES.md & NEWS.md saying there is now support for QUIC server - Added copyright header in: test/radix/quic_ops.c Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26944)	2025-03-05 15:02:17 +01:00
Tomas Mraz	2411f9b662	apps: Escape control characters in DNs by default ... When displaying distinguished names the control characters are escaped by default. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26932)	2025-03-03 09:08:34 +01:00
Tomas Mraz	624a00ef41	Sync CHANGES.md with 3.4 branch and fix formatting ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26932)	2025-03-03 09:08:31 +01:00
Geert Hendrickx	89dbc6a62c	Fix `no-tls-deprecated-ec` documentation to match the actual option. ... CLA: trivial Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26934)	2025-03-02 01:55:14 +11:00
Valerii Krygin	f86acc9434	EVP_DecodeUpdate() should not produce padding zeros to the decoded output (Fixes #26677) ... EVP_DecodeUpdate() should not produce zeros for input padding `=` signs to avoid writing to non-allocated memory regions. To achieve this: - Add `eof` parameter to `evp_decodeblock_int` function in `openssl/crypto/evp`. The parameter should either contain the number of the input padding characters to ignore or `-1` if the function has to count them. - Use precalculated `eof` in `EVP_DecodeUpdate` to fix its behaviour. - Use `eof = -1` in `EVP_DecodeFinal` to count it in `evp_decodeblock_int`. - Do not ignore padding in `EVP_DecodeBlock` (`eof = 0`) because it should write padding zeros according to the documentation. - Add the HISTORY section to EVP_EncodeInit documentation to describe the fix. Other changes: - Update AUTHORS.md - Update the copyright date in the documentation. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26678)	2025-02-27 17:38:57 +00:00
Dr. David von Oheimb	253a380bdb	doc/, CHANGES, NEWS: add missing entries and fix existing ones when which CMP feature was added ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/26908)	2025-02-27 16:58:47 +01:00
Dan Pittman	9688973596	Add a note about avx-512 support for XTS to CHANGES.md ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26410)	2025-02-27 08:31:16 -05:00
Viktor Dukhovni	fed9be39ff	Make RFC8422 deprecated TLS EC curves disablable ... Also move the deprecated curves to the end of the list, and order the soon most preferred groups first. Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26873)	2025-02-26 12:14:02 +01:00
Tomas Mraz	7e80b16776	Add CHANGES.md entry for changed default TLS group list ... Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26801)	2025-02-25 15:34:24 +01:00
Cheng Zhang	db2c54cc92	Added new API to enable 0-RTT for 3rd party QUIC stacks. ... Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26842)	2025-02-21 12:01:30 +01:00
Pauli	11f4eaf197	slh-dsa: update changes authorship ... Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/26750)	2025-02-20 11:17:40 +11:00