tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	ikev2: AES-CMAC-PRF-128 only uses the first 64 bits of each nonce	Tobias Brunner	2017-07-27	1	-2/+5
\| \| \| \|	References #2377.
*	keymat: Allow keymat to modify signature scheme(s)	Thomas Egerer	2017-02-08	1	-2/+4
\| \| \| \|	Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>
*	ikev2: Send derived IKE_SA keys to bus	Tobias Brunner	2016-10-04	1	-26/+30
\|
*	Use standard unsigned integer types	Andreas Steffen	2016-03-24	1	-10/+10
\|
*	ikev2: Fix size of key material for CAMELLIA-CTR	Tobias Brunner	2015-10-30	1	-0/+1
\| \| \| \|	Like AES in CTR mode it includes a 4 byte nonce.
*	ikev2: Derive additional 4 byte CHILD_SA nonce keymat for ChaCha20-Poly1305	Martin Willi	2015-06-29	1	-0/+1
\|
*	ikev2: Use four byte salt for ChaCha20-Poly1305 AEAD	Martin Willi	2015-06-29	1	-0/+1
\|
*	aead: Create AEAD using traditional transforms with an explicit IV generator	Martin Willi	2015-04-13	1	-4/+11
\| \| \| \| \| \|	Real AEADs directly provide a suitable IV generator, but traditional crypters do not. For some (stream) ciphers, we should use sequential IVs, for which we pass an appropriate generator to the AEAD wrapper.
*	diffie-hellman: Use bool instead of status_t as get_shared_secret() return value	Martin Willi	2015-03-23	1	-2/+2
\| \| \| \| \|	While such a change is not unproblematic, keeping status_t makes the API inconsistent once we introduce return values for the public value operations.
*	keymat: Use hash algorithm set	Tobias Brunner	2015-03-04	1	-29/+7
\|
*	keymat: Add facility to store supported hash algorithms	Tobias Brunner	2015-03-04	1	-0/+53
\|
*	aead: Support custom AEAD salt sizes	Martin Willi	2014-03-31	1	-2/+27
\| \| \| \| \| \| \| \| \|	The salt, or often called implicit nonce, varies between AEAD algorithms and their use in protocols. For IKE and ESP, GCM uses 4 bytes, while CCM uses 3 bytes. With TLS, however, AEAD mode uses 4 bytes for both GCM and CCM. Our GCM backends currently support 4 bytes and CCM 3 bytes only. This is fine until we go for CCM mode support in TLS, which requires 4 byte nonces.
*	ikev2: Wipe (optional) shared secret during CHILD_SA key derivation	Tobias Brunner	2014-01-23	1	-11/+14
\|
*	ike: Log SK_p consistently on level 4	Tobias Brunner	2013-11-28	1	-1/+1
\|
*	ikev2: Properly free DH secret in case of errors during IKE key derivation	Tobias Brunner	2013-11-06	1	-0/+3
\| \| \| \|	Fixes #437.
*	Clean up error handling in keymat_v2_t	Martin Willi	2012-07-16	1	-87/+65
\|
*	Add a return value to crypter_t.set_key()	Martin Willi	2012-07-16	1	-2/+16
\|
*	Add a return value to prf_t.set_key()	Martin Willi	2012-07-16	1	-13/+16
\|
*	Add a return value to prf_t.allocate_bytes()	Martin Willi	2012-07-16	1	-11/+26
\|
*	Add a return value to keymat_v2_t.get_auth_octets()	Martin Willi	2012-07-16	1	-7/+10
\|
*	Add a return value to keymat_v2_t.get_psk_sig()	Martin Willi	2012-07-16	1	-7/+7
\|
*	prf_plus_create() can return NULL on failure	Martin Willi	2012-07-16	1	-0/+10
\|
*	Add a return value to prf_plus_t.allocate_bytes()	Martin Willi	2012-07-16	1	-13/+62
\|
*	Add a return value to signer_t.set_key()	Martin Willi	2012-07-16	1	-2/+14
\|
*	Add a return value to aead_t.set_key()	Martin Willi	2012-07-16	1	-2/+10
\|
*	Add create_nonce_gen function to keymat interface	Adrian-Ken Rueegsegger	2012-05-18	1	-0/+7
\| \| \| \|	This function returns a nonce generator object.
*	Added a keymat_t version to cast it safely	Martin Willi	2012-03-20	1	-0/+7
\|
*	Separated libcharon/sa directory with ikev1 and ikev2 subfolders	Martin Willi	2012-03-20	1	-0/+581