Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | aead: Support custom AEAD salt sizes | Martin Willi | 2014-03-31 | 1 | -2/+27 |
| | | | | | | | | | The salt, or often called implicit nonce, varies between AEAD algorithms and their use in protocols. For IKE and ESP, GCM uses 4 bytes, while CCM uses 3 bytes. With TLS, however, AEAD mode uses 4 bytes for both GCM and CCM. Our GCM backends currently support 4 bytes and CCM 3 bytes only. This is fine until we go for CCM mode support in TLS, which requires 4 byte nonces. | ||||
* | ikev2: Wipe (optional) shared secret during CHILD_SA key derivation | Tobias Brunner | 2014-01-23 | 1 | -11/+14 |
| | |||||
* | ike: Log SK_p consistently on level 4 | Tobias Brunner | 2013-11-28 | 1 | -1/+1 |
| | |||||
* | ikev2: Properly free DH secret in case of errors during IKE key derivation | Tobias Brunner | 2013-11-06 | 1 | -0/+3 |
| | | | | Fixes #437. | ||||
* | Clean up error handling in keymat_v2_t | Martin Willi | 2012-07-16 | 1 | -87/+65 |
| | |||||
* | Add a return value to crypter_t.set_key() | Martin Willi | 2012-07-16 | 1 | -2/+16 |
| | |||||
* | Add a return value to prf_t.set_key() | Martin Willi | 2012-07-16 | 1 | -13/+16 |
| | |||||
* | Add a return value to prf_t.allocate_bytes() | Martin Willi | 2012-07-16 | 1 | -11/+26 |
| | |||||
* | Add a return value to keymat_v2_t.get_auth_octets() | Martin Willi | 2012-07-16 | 1 | -7/+10 |
| | |||||
* | Add a return value to keymat_v2_t.get_psk_sig() | Martin Willi | 2012-07-16 | 1 | -7/+7 |
| | |||||
* | prf_plus_create() can return NULL on failure | Martin Willi | 2012-07-16 | 1 | -0/+10 |
| | |||||
* | Add a return value to prf_plus_t.allocate_bytes() | Martin Willi | 2012-07-16 | 1 | -13/+62 |
| | |||||
* | Add a return value to signer_t.set_key() | Martin Willi | 2012-07-16 | 1 | -2/+14 |
| | |||||
* | Add a return value to aead_t.set_key() | Martin Willi | 2012-07-16 | 1 | -2/+10 |
| | |||||
* | Add create_nonce_gen function to keymat interface | Adrian-Ken Rueegsegger | 2012-05-18 | 1 | -0/+7 |
| | | | | This function returns a nonce generator object. | ||||
* | Added a keymat_t version to cast it safely | Martin Willi | 2012-03-20 | 1 | -0/+7 |
| | |||||
* | Separated libcharon/sa directory with ikev1 and ikev2 subfolders | Martin Willi | 2012-03-20 | 1 | -0/+581 |