aboutsummaryrefslogtreecommitdiffstats
path: root/src/libipsec
Commit message (Expand)AuthorAgeFilesLines
* libipsec: Make sure to expire the right SATobias Brunner2017-09-181-2/+9
* ip-packet: Correctly determine protocol in fragmented IPv6 packetsTobias Brunner2017-09-181-6/+57
* ip-packet: Fix "packet too short" error when parsing fragmented IPv4 packetsTobias Brunner2017-09-181-1/+6
* linked-list: Change return value of find_first() and signature of its callbackTobias Brunner2017-05-261-37/+54
* libipsec: Enforce a minimum of 256 for SPIsTobias Brunner2017-03-021-3/+4
* libipsec: Fix min/max SPITobias Brunner2017-03-021-2/+2
* kernel: Make range of SPIs for IPsec SAs configurableTobias Brunner2017-03-021-2/+14
* libipsec: Log a packet's ports and protocol in case of a policy mismatchTobias Brunner2017-03-021-5/+7
* libipsec: Match IPsec policies against ports of processed packetsTobias Brunner2017-03-021-1/+21
* libipsec: Add support for AES and Camellia in CCM modeTobias Brunner2017-01-251-3/+16
* libipsec: Fix Windows build via MinGWTobias Brunner2017-01-253-0/+35
* Use standard unsigned integer typesAndreas Steffen2016-03-2419-158/+158
* libipsec: Pass the same data to del_policy() as to add_policy()Tobias Brunner2016-02-042-8/+12
* libipsec: Don't attempt deletion of any non-IPsec policiesTobias Brunner2016-02-041-1/+1
* android: Fix build after updating Linux headersTobias Brunner2015-11-121-1/+0
* libipsec: Properly support CAMELLIA in CTR modeTobias Brunner2015-10-301-0/+1
* libipsec: Fix crypter lookup for AES-CTRTobias Brunner2015-10-301-1/+12
* libipsec: Add a unit-test for ESP encryption using ChaCha20Poly1305Martin Willi2015-07-123-0/+139
* libipsec: Add a unit-test test runnerMartin Willi2015-07-125-8/+93
* libipsec: Create AEAD with four byte salt for ChaCha20-Poly1305Martin Willi2015-06-291-0/+1
* libipsec: Insert SAs first, so latest SA with the same reqid gets usedTobias Brunner2015-05-211-1/+1
* aead: Create AEAD using traditional transforms with an explicit IV generatorMartin Willi2015-04-131-1/+8
* libipsec: Pass separate inbound/update flags to the IPsec SA managerMartin Willi2015-03-092-3/+5
* kernel-interface: Raise expires with a proto/SPI/dst tuple instead of reqidMartin Willi2015-02-204-22/+32
* libipsec: Remove unused src/dst_ts parameters from ipsec_sa_mgr_t.add_sa()Martin Willi2015-02-204-14/+5
* libipsec: Remove unused reqid parameter from ipsec_sa_mgr_t.get_spi()Martin Willi2015-02-192-7/+4
* ip-packet: Fix length in IPv6 header of generated packetsTobias Brunner2014-10-201-1/+1
* ip-packet: Fix removal of TFC padding for IPv6Tobias Brunner2014-10-141-1/+1
* ip-packet: Define our own structs to handle TCP/UDP headersTobias Brunner2014-09-091-2/+27
* ip_packet: Add function to easily encode UDP packetsTobias Brunner2014-07-222-0/+29
* ip_packet: Apply transport protocol ports when encoding IP packetTobias Brunner2014-07-222-10/+30
* ip_packet: Add getter for IP payloadTobias Brunner2014-07-222-5/+25
* ip_packet: Allow creation of IP packets from dataTobias Brunner2014-07-222-1/+164
* ip_packet: Parse ports from TCP and UDP headersTobias Brunner2014-07-221-7/+63
* libipsec: Add support for new policy priority classTobias Brunner2014-06-191-1/+4
* libipsec: Avoid name clash with sched.h clone()Martin Willi2014-06-042-4/+4
* aead: Support custom AEAD salt sizesMartin Willi2014-03-311-1/+2
* android: Remove dependency on libvstrTobias Brunner2013-11-131-1/+0
* libipsec: Don't print ciphertext with ICV in log messageTobias Brunner2013-10-171-1/+2
* libipsec: Properly calculate padding length especially for AES-GCMTobias Brunner2013-10-171-1/+3
* iv_gen: Provide external sequence number (IKE, ESP)Tobias Brunner2013-10-111-1/+1
* ipsec: Use IV generator to encrypt ESP messagesTobias Brunner2013-10-112-9/+7
* libipsec: Enforce byte/packet lifetimes on SAsMartin Willi2013-10-113-7/+77
* libipsec: remove extra RFC4303 TFC padding appended to inner payloadMartin Willi2013-10-111-0/+6
* libipsec: Support usage statistics and query_sa() on IPsec SAsMartin Willi2013-10-115-4/+102
* libipsec: fix memory management when cloning ip_packetMartin Willi2013-09-131-1/+1
* libipsec: check for a policy with the reqid of the SA on decapsulationMartin Willi2013-09-133-7/+14
* Build all shared libraries with -no-undefined and link them properlyTobias Brunner2013-09-121-1/+5
* libipsec: Properly initialize variables when creating AEAD wrapperTobias Brunner2013-09-041-2/+2
* libipsec: Don't limit traditional algorithms to AES and SHA1/2Tobias Brunner2013-08-121-25/+7