| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | proposal: Remove MODP-1024 from default IKE proposal | Tobias Brunner | 2017-11-08 | 1 | -2/+2 |
| | | | | | | | | | RFC 8247 demoted it to SHOULD NOT. This might break connections with Windows clients unless they are configured to use a stronger group or matching weak proposals are configured explicitly on the server. References #2427. | ||||
| * | proposal: Remove MD5 from default IKE proposal | Tobias Brunner | 2017-11-08 | 1 | -2/+5 |
| | | | | | | | RFC 8247 demoted MD5 to MUST NOT. References #2427. | ||||
| * | proposal: Remove deprecated algorithms from default ESP and AH proposals | Tobias Brunner | 2017-11-08 | 1 | -4/+0 |
| | | | | | | | | This removes algorithms that were deprecated by RFC 8221 (3DES, BF, MD5) from the default proposals for ESP and AH. References #8247. | ||||
| * | Change interface for enumerator_create_filter() callback | Tobias Brunner | 2017-05-26 | 1 | -18/+22 |
| | | | | | | This avoids the unportable 5 pointer hack, but requires enumerating in the callback. | ||||
| * | proposal: Copy SPI and proposal number from correct proposal in select() | Tobias Brunner | 2017-02-06 | 1 | -3/+13 |
| | | | | | | | | | If charon.prefer_configured_proposals is disabled select() is called on the received proposal. This incorrectly set the SPI to 0 as the configured proposal has no SPI set. Fixes #2190. | ||||
| * | proposal: Remove RFC 5114 MODP DH groups from default proposal | Martin Willi | 2016-11-15 | 1 | -2/+4 |
| | | | | | | | | | | | | | | | Recent research demonstrates that at least for 1024-bit DH groups, it is possible to create specially crafted primes having a backdoor. From the prime itself this is not detectable, creating a perfect NOBUS attack. http://eprint.iacr.org/2016/961 For the primes defined in RFC 5114 no information is provided on how these have been selected. In the default proposal we included one of the 2048-bit primes only, where it is questionable if constructing a backdoored prime is feasible. Nevertheless, this patch removes the group from the set of default proposals as well. | ||||
| * | proposal: Add curve25519 and curve448 to default proposal | Tobias Brunner | 2016-11-14 | 1 | -0/+2 |
| | | |||||
| * | proposal: Correctly add AES-GMAC for AH proposals | Tobias Brunner | 2016-10-05 | 1 | -0/+41 |
| | | | | | | | We parse aes*gmac as encryption algorithm, which we have to map to an integrity algorithm. We also make sure we remove all other encryption algorithms and ensure there is an integrity algorithm. | ||||
| * | proposal: Enforce separate proposals for AEAD and classic encryption algorithms | Tobias Brunner | 2016-10-05 | 1 | -16/+22 |
| | | |||||
| * | proposal: Make sure there is a PRF defined in IKE proposals | Tobias Brunner | 2016-10-05 | 1 | -14/+34 |
| | | | | | But filter PRFs from ESP proposals. | ||||
| * | proposal: Make DH groups mandatory in IKE proposals parsed from strings | Tobias Brunner | 2016-10-05 | 1 | -4/+11 |
| | | | | | References #2051. | ||||
| * | Created newhope plugin implementing the New Hope key exchange algorithm | Andreas Steffen | 2016-08-10 | 1 | -0/+1 |
| | | |||||
| * | proposal: Remove MODP_NONE from IKE proposals parsed from strings | Tobias Brunner | 2016-06-17 | 1 | -0/+10 |
| | | |||||
| * | proposal: Handle MODP_NONE in both directions when selecting proposals | Tobias Brunner | 2016-06-17 | 1 | -6/+14 |
| | | |||||
| * | proposal: Remove some weaker and rarely used DH groups from the default proposal | Tobias Brunner | 2016-05-04 | 1 | -3/+5 |
| | | | | | | | | | | | | This fixes an interoperability issue with Windows Server 2012 R2 gateways. They insist on using modp1024 for IKE, however, Microsoft's IKEv2 implementation seems only to consider the first 15 DH groups in the proposal. Depending on the loaded plugins modp1024 is now at position 17 or even later, causing the server to reject the proposal. By removing some of the weaker and rarely used DH groups from the default proposal we make sure modp1024 is among the first 15 DH groups. The removed groups may still be used by configuring custom proposals. | ||||
| * | Use standard unsigned integer types | Andreas Steffen | 2016-03-24 | 1 | -14/+14 |
| | | |||||
| * | 128 bit default security strength for IKE and ESP algorithms | Andreas Steffen | 2015-12-17 | 1 | -40/+140 |
| | | | | | | | | | | | | | | | | | | The default ESP cipher suite is now AES_CBC-128/HMAC_SHA2_256_128 and requires SHA-2 HMAC support in the Linux kernel (correctly implemented since 2.6.33). The default IKE cipher suite is now AES_CBC-128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/ECP_256 if the openssl plugin is loaded or AES_CBC-128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_3072 if ECC is not available. The use of the SHA-1 hash algorithm and the MODP_2048 DH group has been deprecated and ENCR_CHACHA20_POLY1305 has been added to the default IKE AEAD algorithms. | ||||
| * | proposal: Add default PRF for HMAC-MD5-128 and HMAC-SHA1-160 integrity ↵ | Tobias Brunner | 2014-10-31 | 1 | -0/+2 |
| | | | | | algorithms | ||||
| * | proposal: Fix equals() | Tobias Brunner | 2014-09-12 | 1 | -5/+5 |
| | | |||||
| * | proposal: Don't return a default IKE proposal without encryption/AEAD algs | Martin Willi | 2014-05-16 | 1 | -3/+23 |
| | | |||||
| * | proposal: Use an additional "default" constructor specific to AEAD algorithms | Martin Willi | 2014-05-16 | 1 | -0/+23 |
| | | | | | | This allows a caller to create a separated proposal for supported AEAD algorithms, as required by RFC 5996. | ||||
| * | proposal: Don't include AEAD algorithms in the default proposal | Martin Willi | 2014-05-16 | 1 | -61/+66 |
| | | | | | | | According to RFC 5996 3.3 we should use a separate proposal for AEAD algorithms. This was not clear in RFC 5282, hence we previously included both AEAD and non-AEAD algorithms in a single proposal. | ||||
| * | proposal: Don't fail DH proposal matching if peer includes NONE | Tobias Brunner | 2014-03-31 | 1 | -4/+19 |
| | | | | | | | | | The DH transform is optional for ESP/AH proposals. The initiator can include NONE (0) in its proposal to indicate that while it prefers to do a DH exchange, the responder may still decide to not do so. Fixes #532. | ||||
| * | Added NTRU key exchange to default IKE proposal | Andreas Steffen | 2013-11-27 | 1 | -0/+4 |
| | | |||||
| * | proposal: Add ECC Brainpool DH groups to the default proposal | Tobias Brunner | 2013-10-17 | 1 | -0/+4 |
| | | |||||
| * | proposal: Strip redundant integrity algos for ESP proposals only | Martin Willi | 2013-10-11 | 1 | -16/+19 |
| | | |||||
| * | proposal: correctly enumerate registered AEADs to build default IKE proposal | Martin Willi | 2013-07-19 | 1 | -6/+22 |
| | | | | | AEADs are not returned (anymore) with the encryption enumerator. | ||||
| * | proposal: use array to store proposal list | Martin Willi | 2013-07-17 | 1 | -25/+18 |
| | | | | | Removes another two linked lists (0.5KB) of memory per IKE/CHILD_SA pair. | ||||
| * | proposal: use a single list to store all transforms | Martin Willi | 2013-07-17 | 1 | -308/+174 |
| | | | | | | Beside that it makes the code actually simpler, it reduces the number of lists stored by each IKE_SA and each CHILD_SA by 4, which can be up to 1KB per SA. | ||||
| * | proposal_t.strip_dh() takes a DH group to keep, using MODP_NONE will remove all | Tobias Brunner | 2012-10-24 | 1 | -3/+10 |
| | | |||||
| * | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | | |||||
| * | Only add an implicit PRF based on the MAC alg if no PRF given in proposal | Martin Willi | 2012-10-24 | 1 | -38/+38 |
| | | |||||
| * | Added possibility to register custom proposal keywords | Tobias Brunner | 2012-09-13 | 1 | -2/+2 |
| | | | | | Keyword lookup and registration are handled via the new lib->proposal object. | ||||
| * | Removed len argument from proposal_get_token() | Tobias Brunner | 2012-09-13 | 1 | -24/+23 |
| | | | | | Also use enumerators instead of lexparser.h to parse proposal strings. | ||||
| * | Add DH group 15 (MODP-3072) to IKE proposal | Adrian-Ken Rueegsegger | 2012-08-06 | 1 | -0/+1 |
| | | |||||
| * | Pass opaque data to printf hooks and print_in_hook() | Martin Willi | 2012-07-13 | 1 | -14/+14 |
| | | |||||
| * | Added support for IKEv1 IPComp proposals in proposal substructure. | Tobias Brunner | 2012-05-24 | 1 | -1/+2 |
| | | |||||
| * | Make AES-CMAC actually usable for IKEv2. | Tobias Brunner | 2012-04-04 | 1 | -0/+5 |
| | | |||||
| * | Add NO_EXT_SEQ_NUMBER to proposal only if it has not been specified in string | Martin Willi | 2011-04-20 | 1 | -4/+10 |
| | | |||||
| * | Added proposal keywords for ESN support | Martin Willi | 2011-04-20 | 1 | -5/+0 |
| | | |||||
| * | trace back crypto algorithms to the plugins that registered them | Andreas Steffen | 2010-12-18 | 1 | -4/+5 |
| | | |||||
| * | check for malformed IKE and ESP proposals | Andreas Steffen | 2010-12-01 | 1 | -0/+1 |
| | | |||||
| * | Store proposal number in proposal_t to reuse it in the selected proposal | Martin Willi | 2010-10-28 | 1 | -5/+20 |
| | | | | | | According to RFC 5996 3.3.1, we MUST reuse the proposal number of the selected proposal in the SA payload reply. | ||||
| * | Migrated proposal_t to INIT/METHOD macros | Martin Willi | 2010-10-28 | 1 | -80/+54 |
| | | |||||
| * | Include CCM/GCM algorithms in IKEv2 proposals, if supported | Martin Willi | 2010-08-19 | 1 | -9/+10 |
| | | |||||
| * | Make function to test if an encryption algorithm is an AEAD alg public | Martin Willi | 2010-08-19 | 1 | -24/+2 |
| | | |||||
| * | Support Camellia XCBC algorithms in proposal | Martin Willi | 2010-08-13 | 1 | -0/+3 |
| | | |||||
| * | Added Camellia, AES-CTR to default IKE proposal, if supported | Martin Willi | 2010-08-13 | 1 | -2/+6 |
| | | |||||
| * | Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten | Martin Willi | 2010-04-19 | 1 | -0/+3 |
| | | |||||
| * | Moving charon to libcharon. | Tobias Brunner | 2010-03-19 | 1 | -0/+946 |
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |