Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | unit-tests: Move ntru_test_rng_t to a utility class in libtest | Tobias Brunner | 2013-12-04 | 6 | -48/+37 | |
| | ||||||
* | unit-tests: Fix apidoc for libtest | Tobias Brunner | 2013-12-04 | 2 | -8/+23 | |
| | ||||||
* | ntru: Fix compiler warning caused by ++/-- on righthand side of an assignment | Tobias Brunner | 2013-12-04 | 1 | -4/+4 | |
| | | | | The behavior of stuff like x = --x; (or x++) is not defined. | |||||
* | testing: Fix status output in build-baseimage script | Reto Buerki | 2013-12-04 | 1 | -1/+1 | |
| | ||||||
* | Remove check library from HACKING document | Reto Buerki | 2013-12-04 | 1 | -1/+0 | |
| | ||||||
* | charon-tkm: Abort if gprbuild binary is not found | Reto Buerki | 2013-12-04 | 1 | -0/+3 | |
| | ||||||
* | charon-tkm: Update integration tests | Reto Buerki | 2013-12-04 | 7 | -1/+49 | |
| | ||||||
* | charon-tkm: Implement IANA DH Id to TKM Id mapping | Adrian-Ken Rueegsegger | 2013-12-03 | 5 | -9/+134 | |
| | | | | | | | | | | | | | | | The TKM Diffie-Hellman plugin now maps IANA DH identifiers to TKM DH algorithm identifiers. The mapping is specified in the daemon's 'dh_mapping' section in the strongswan.conf file: dh_mapping { iana_id1 = tkm_id1 iana_id2 = tkm_id2 iana_id3 = tkm_id3 ... } Only the mapped IANA IDs are registered as supported DH groups. | |||||
* | charon-tkm: Drop unnecessary include | Adrian-Ken Rueegsegger | 2013-12-03 | 1 | -1/+0 | |
| | ||||||
* | Fixed formatting in strongswan.conf | Andreas Steffen | 2013-12-03 | 1 | -3/+7 | |
| | ||||||
* | ike: Log SK_p consistently on level 4 | Tobias Brunner | 2013-11-28 | 1 | -1/+1 | |
| | ||||||
* | Updated NEWS for 5.1.2dr15.1.2dr1 | Andreas Steffen | 2013-11-27 | 1 | -0/+11 | |
| | ||||||
* | Added DRBG automatic reseeding tests | Andreas Steffen | 2013-11-27 | 3 | -170/+220 | |
| | ||||||
* | Use strongSwan hash plugins for SHA-1 and SHA-256 | Andreas Steffen | 2013-11-27 | 20 | -2764/+178 | |
| | ||||||
* | Extended NIST SP 800-90A HMAC_DRBG test cases | Andreas Steffen | 2013-11-27 | 1 | -21/+103 | |
| | ||||||
* | Cleaned up ntru-crypto library | Andreas Steffen | 2013-11-27 | 11 | -474/+8 | |
| | ||||||
* | Implemented NIST SP 800-90A DRBG_HMAC with SHA-256 | Andreas Steffen | 2013-11-27 | 16 | -1541/+697 | |
| | ||||||
* | Added NTRU key exchange to default IKE proposal | Andreas Steffen | 2013-11-27 | 1 | -0/+4 | |
| | ||||||
* | unit-tests: Added ntru wrong ciphertext test | Andreas Steffen | 2013-11-27 | 2 | -0/+37 | |
| | ||||||
* | unit-tests: Added ntru entropy, retransmission and ciphertext tests | Andreas Steffen | 2013-11-27 | 3 | -0/+69 | |
| | ||||||
* | Any of the four NTRU parameter sets can be selected | Andreas Steffen | 2013-11-27 | 5 | -57/+140 | |
| | ||||||
* | Make the NTRU parameter set configurable | Andreas Steffen | 2013-11-27 | 3 | -40/+115 | |
| | ||||||
* | unit-tests: first NTRU test case | Andreas Steffen | 2013-11-27 | 4 | -2/+95 | |
| | ||||||
* | Added ikev2/net2net-ntru-cert and ikev2/rw-ntru-psk scenarios | Andreas Steffen | 2013-11-27 | 23 | -0/+284 | |
| | ||||||
* | Prototype implementation of IKE key exchange via NTRU encryption | Andreas Steffen | 2013-11-27 | 42 | -4/+9386 | |
| | ||||||
* | Merge branch 'nm-psk' | Tobias Brunner | 2013-11-27 | 5 | -87/+128 | |
|\ | | | | | | | This adds support for PSK authentication to the NetworkManager frontend. | |||||
| * | nm: Require the PSK to be at least 20 characters long | Tobias Brunner | 2013-11-27 | 2 | -5/+14 | |
| | | ||||||
| * | nm: German translation updated | Tobias Brunner | 2013-11-27 | 1 | -76/+81 | |
| | | ||||||
| * | nm: Handle PSK option in NM backend | Tobias Brunner | 2013-11-27 | 1 | -4/+12 | |
| | | ||||||
| * | nm: Add PSK option to auth-dialog | Tobias Brunner | 2013-11-27 | 1 | -3/+10 | |
| | | ||||||
| * | nm: Add pre-shared key option in GUI | Tobias Brunner | 2013-11-27 | 1 | -2/+14 | |
| | | ||||||
| * | nm: Make intltool recognize glade files properly | Tobias Brunner | 2013-11-27 | 1 | -1/+1 | |
|/ | ||||||
* | configure: Remove obsolete --enable-unit-tests option | Tobias Brunner | 2013-11-27 | 1 | -12/+0 | |
| | ||||||
* | charon-tkm: Don't run tests automatically during 'make check' | Tobias Brunner | 2013-11-27 | 1 | -5/+5 | |
| | | | | | Due to the external dependencies these tests are quite inconvenient. They can be run from the charon-tkm directory with 'make check-tkm'. | |||||
* | charon-tkm: Add Binder switches to test project to enable exception backtraces | Reto Buerki | 2013-11-27 | 1 | -0/+4 | |
| | ||||||
* | charon-tkm: Migrate tests to our own test runner | Tobias Brunner | 2013-11-27 | 12 | -129/+227 | |
| | | | | | | Due to problems with the external libraries tkm_init/deinit can't be called for each test case. Because of this leak detective has to be disabled for these tests. | |||||
* | charon-tkm: Support for out-of-tree build added | Tobias Brunner | 2013-11-27 | 2 | -12/+12 | |
| | ||||||
* | chunk: Fix signedness warnings caused by chunk_from_* macros | Tobias Brunner | 2013-11-27 | 1 | -3/+3 | |
| | | | | | | There are countless other such warnings because e.g. chunk_create() is called with char*, but at least we prevent users from causing such warnings inadvertently when using these macros. | |||||
* | tun-device: Include <linux/types.h> before <linux/if_tun.h> | Martin Willi | 2013-11-22 | 1 | -0/+1 | |
| | | | | Fixes a build error on CentOS 6.4. | |||||
* | trap-manager: Reset IKE_SA on bus_t if initiating fails | Tobias Brunner | 2013-11-21 | 1 | -0/+1 | |
| | ||||||
* | trap-manager: Prevent deadlock when installing trap policies | Tobias Brunner | 2013-11-21 | 1 | -40/+46 | |
| | | | | | | | | | | | Because the write lock was held while calling add_policies() on child_sa_t, which finishes with a call to child_state_change() on bus_t, a deadlock would ensue if CHILD_SAs are concurrently being established, which also causes a call to child_state_change() that will require the read lock in trap_manager_t. No locks are now being held while creating the CHILD_SA and installing the trap policies. | |||||
* | coverage: Report branch coverage | Tobias Brunner | 2013-11-21 | 1 | -3/+5 | |
| | ||||||
* | printf-hook-builtin: Don't use %P to print uppercase hex pointers | Martin Willi | 2013-11-20 | 1 | -6/+0 | |
| | | | | We use %P as custom printf specifier for proposals. | |||||
* | testing: Config for Linux kernel 3.12 | Tobias Brunner | 2013-11-19 | 1 | -0/+2022 | |
| | | | | | | | | The most significant change is that CONFIG_ACPI_PROC_EVENT is now finally removed (after being deprecated for a long time). So to successfully shutdown the guests via ACPI the CONFIG_INPUT_EVDEV option is now enabled. | |||||
* | openssl: Verify that a peer's ECDH public value is a point on the elliptic curve | Tobias Brunner | 2013-11-19 | 1 | -0/+5 | |
| | | | | | This check is mandated by RFC 6989. Since we don't reuse DH secrets, it is mostly a sanity check. | |||||
* | kernel-netlink: Enable TFC padding only for tunnel mode ESP SAs | Tobias Brunner | 2013-11-19 | 1 | -2/+2 | |
| | | | | | | | The kernel does not allow them for transport mode SAs or IPComp SAs (and of course not for AH SAs). Fixes #446. | |||||
* | Version bump to 5.1.2dr1 | Andreas Steffen | 2013-11-19 | 1 | -1/+1 | |
| | ||||||
* | Implemented libstrongswan.plugins.random.strong_equals_true option | Andreas Steffen | 2013-11-16 | 4 | -0/+26 | |
| | ||||||
* | android: New release based on 5.1.1 | Tobias Brunner | 2013-11-13 | 2 | -4/+5 | |
| | | | | | This fixes issues with IVs and padding in ESP handling and removes the Vstr dependency. | |||||
* | android: Remove dependency on libvstr | Tobias Brunner | 2013-11-13 | 20 | -46/+5 | |
| |