tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	proposal: Fix equals()	Tobias Brunner	2014-09-12	1	-5/+5
\|
*	proposal: Don't return a default IKE proposal without encryption/AEAD algs	Martin Willi	2014-05-16	1	-3/+23
\|
*	proposal: Use an additional "default" constructor specific to AEAD algorithms	Martin Willi	2014-05-16	1	-0/+23
\| \| \| \| \|	This allows a caller to create a separated proposal for supported AEAD algorithms, as required by RFC 5996.
*	proposal: Don't include AEAD algorithms in the default proposal	Martin Willi	2014-05-16	1	-61/+66
\| \| \| \| \| \|	According to RFC 5996 3.3 we should use a separate proposal for AEAD algorithms. This was not clear in RFC 5282, hence we previously included both AEAD and non-AEAD algorithms in a single proposal.
*	proposal: Don't fail DH proposal matching if peer includes NONE	Tobias Brunner	2014-03-31	1	-4/+19
\| \| \| \| \| \| \| \|	The DH transform is optional for ESP/AH proposals. The initiator can include NONE (0) in its proposal to indicate that while it prefers to do a DH exchange, the responder may still decide to not do so. Fixes #532.
*	Added NTRU key exchange to default IKE proposal	Andreas Steffen	2013-11-27	1	-0/+4
\|
*	proposal: Add ECC Brainpool DH groups to the default proposal	Tobias Brunner	2013-10-17	1	-0/+4
\|
*	proposal: Strip redundant integrity algos for ESP proposals only	Martin Willi	2013-10-11	1	-16/+19
\|
*	proposal: correctly enumerate registered AEADs to build default IKE proposal	Martin Willi	2013-07-19	1	-6/+22
\| \| \| \|	AEADs are not returned (anymore) with the encryption enumerator.
*	proposal: use array to store proposal list	Martin Willi	2013-07-17	1	-25/+18
\| \| \| \|	Removes another two linked lists (0.5KB) of memory per IKE/CHILD_SA pair.
*	proposal: use a single list to store all transforms	Martin Willi	2013-07-17	1	-308/+174
\| \| \| \| \|	Beside that it makes the code actually simpler, it reduces the number of lists stored by each IKE_SA and each CHILD_SA by 4, which can be up to 1KB per SA.
*	proposal_t.strip_dh() takes a DH group to keep, using MODP_NONE will remove all	Tobias Brunner	2012-10-24	1	-3/+10
\|
*	Moved data structures to new collections subfolder	Tobias Brunner	2012-10-24	1	-1/+1
\|
*	Only add an implicit PRF based on the MAC alg if no PRF given in proposal	Martin Willi	2012-10-24	1	-38/+38
\|
*	Added possibility to register custom proposal keywords	Tobias Brunner	2012-09-13	1	-2/+2
\| \| \| \|	Keyword lookup and registration are handled via the new lib->proposal object.
*	Removed len argument from proposal_get_token()	Tobias Brunner	2012-09-13	1	-24/+23
\| \| \| \|	Also use enumerators instead of lexparser.h to parse proposal strings.
*	Add DH group 15 (MODP-3072) to IKE proposal	Adrian-Ken Rueegsegger	2012-08-06	1	-0/+1
\|
*	Pass opaque data to printf hooks and print_in_hook()	Martin Willi	2012-07-13	1	-14/+14
\|
*	Added support for IKEv1 IPComp proposals in proposal substructure.	Tobias Brunner	2012-05-24	1	-1/+2
\|
*	Make AES-CMAC actually usable for IKEv2.	Tobias Brunner	2012-04-04	1	-0/+5
\|
*	Add NO_EXT_SEQ_NUMBER to proposal only if it has not been specified in string	Martin Willi	2011-04-20	1	-4/+10
\|
*	Added proposal keywords for ESN support	Martin Willi	2011-04-20	1	-5/+0
\|
*	trace back crypto algorithms to the plugins that registered them	Andreas Steffen	2010-12-18	1	-4/+5
\|
*	check for malformed IKE and ESP proposals	Andreas Steffen	2010-12-01	1	-0/+1
\|
*	Store proposal number in proposal_t to reuse it in the selected proposal	Martin Willi	2010-10-28	1	-5/+20
\| \| \| \| \|	According to RFC 5996 3.3.1, we MUST reuse the proposal number of the selected proposal in the SA payload reply.
*	Migrated proposal_t to INIT/METHOD macros	Martin Willi	2010-10-28	1	-80/+54
\|
*	Include CCM/GCM algorithms in IKEv2 proposals, if supported	Martin Willi	2010-08-19	1	-9/+10
\|
*	Make function to test if an encryption algorithm is an AEAD alg public	Martin Willi	2010-08-19	1	-24/+2
\|
*	Support Camellia XCBC algorithms in proposal	Martin Willi	2010-08-13	1	-0/+3
\|
*	Added Camellia, AES-CTR to default IKE proposal, if supported	Martin Willi	2010-08-13	1	-2/+6
\|
*	Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten	Martin Willi	2010-04-19	1	-0/+3
\|
*	Moving charon to libcharon.	Tobias Brunner	2010-03-19	1	-0/+946