aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
* unity: Only do narrowing of responder's TS if we received 0.0.0.0/0Tobias Brunner2014-12-051-2/+84
* id-payload: Enable multiple calls to get_ts() for subnet traffic selectorsTobias Brunner2014-12-051-2/+5
* ikev2: Fix handling of more than one hash-and-URL certificate payloadsTobias Brunner2014-12-041-2/+2
* Merge branch 'wfp-drop-firewall'Martin Willi2014-12-043-41/+244
|\
| * kernel-wfp: Install outbound ALE connect rules for IPsecMartin Willi2014-12-041-16/+43
| * kernel-wfp: Install inbound ALE IP-in-IP filtersMartin Willi2014-12-041-41/+159
| * kernel-wfp: Add missing IPsec sublayer GUIDsMartin Willi2014-12-041-0/+6
| * kernel-wfp: Define IPsec related ALE layers and callout GUIDsMartin Willi2014-12-042-0/+40
| * kernel-wfp: Fix logging of MM/QM/EM NetEvent failuresMartin Willi2014-12-041-0/+12
|/
* vici: Make sure to send/recv all requested bytes over socketMartin Willi2014-12-041-3/+22
* updown: Inverse comment of VPN_LOGGING variable, as it is enabled by defaultMartin Willi2014-12-021-1/+1
* Version bump to 5.2.2dr15.2.2dr1Andreas Steffen2014-11-292-1/+5
* Increased check size du to INITIAL_CONTACT notifyAndreas Steffen2014-11-291-1/+1
* Renewed expired certificatesAndreas Steffen2014-11-2919-171/+223
* Implemented full BLISS support for IKEv2 public key authentication and the pk...Andreas Steffen2014-11-2917-18/+97
* Created ikev2/rw-ntru-bliss scenarioAndreas Steffen2014-11-2927-2/+193
* Applied bit packing to BLISS public keyAndreas Steffen2014-11-295-55/+68
* Wipe BLISS private key memoryAndreas Steffen2014-11-291-2/+8
* Created bliss_bitpacker class to encode BLISS signaturesAndreas Steffen2014-11-298-46/+464
* Skip the unused bits field of the ASN.1 BIT STRING encodingAndreas Steffen2014-11-291-1/+1
* Store NTT A of BLISS public key aAndreas Steffen2014-11-292-28/+24
* unit-tests: created bliss_sign test suiteAndreas Steffen2014-11-295-1/+91
* Finished BLISS signature generationAndreas Steffen2014-11-2912-157/+1170
* Implemented Gaussian rejection samplerAndreas Steffen2014-11-296-16/+496
* Implemented get_byte() method for mgf1_bitspender classAndreas Steffen2014-11-294-26/+78
* Added support for BLISS-IIIAndreas Steffen2014-11-291-2/+17
* Started implementing BLISS signature generationAndreas Steffen2014-11-298-24/+34
* Store and parse BLISS private and public keys in DER and PEM formatAndreas Steffen2014-11-299-32/+441
* unit-tests: Created separate mgf1 test suiteAndreas Steffen2014-11-295-147/+270
* Use mgf1_bitspender in ntru_poly_create_from_seedAndreas Steffen2014-11-292-52/+16
* Use mgf1_bitspender to generate random secret keyAndreas Steffen2014-11-291-280/+226
* Implemented bitspender based on the MGF1 mask generator functionAndreas Steffen2014-11-294-3/+223
* unit-tests: Added bliss_fft test suiteAndreas Steffen2014-11-295-0/+193
* Moved mgf1 class to libstrongswan/crypto/mgf1Andreas Steffen2014-11-297-62/+51
* Defined BLISS I and IV parameter setsAndreas Steffen2014-11-294-19/+365
* Added BLISS OIDs in ITA-HSR OID treeAndreas Steffen2014-11-291-0/+10
* Implemented Number Theoretic Transform using the FFT algorithmAndreas Steffen2014-11-298-3/+869
* Created framework for BLISS post-quantum signature algorithmAndreas Steffen2014-11-2912-8/+663
* libtls: Catch POLLHUP/NVAL in TLS socket splicingMartin Willi2014-11-281-2/+2
* watcher: Proper handle poll() POLLHUP/NVAL signalingMartin Willi2014-11-281-13/+36
* windows: Properly set errno for read/write functions using WinsockMartin Willi2014-11-281-4/+4
* ikev2: Fix ike_rekey switch statement broken with last commitMartin Willi2014-11-241-1/+1
* ikev2: Prevent IKE_SA rekeying if we are currently retrying a CHILD_SA rekeyMartin Willi2014-11-211-0/+1
* controller: Keep following initiate() if the first DH guess was wrongMartin Willi2014-11-211-0/+12
* child-sa: Introduce a CHILD_RETRYING state to detect DH group retriesMartin Willi2014-11-213-0/+7
* Merge branch 'poll'Martin Willi2014-11-2116-281/+581
|\
| * windows: Move the compatibility header to the compat subfolderMartin Willi2014-11-214-6/+6
| * apple: Wrap accept() and recvfrom() with poll(2) instead of selectMartin Willi2014-11-211-5/+11
| * apple: Introduce a central compatibility header with all __APPLE__ quirksMartin Willi2014-11-216-87/+113
| * watcher: Use Windows read/write(2) wrappers instead of compile-conditionsMartin Willi2014-11-211-8/+0