Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | ecc: Added ECC Brainpool ECDH groups as registered with IANA | Andreas Steffen | 2013-10-17 | 3 | -3/+20 |
| | |||||
* | Revert refactoring which broke CentOS build | Andreas Steffen | 2013-10-13 | 1 | -1/+1 |
| | |||||
* | iv_gen: Mask sequential IVs with a random salt | Tobias Brunner | 2013-10-11 | 1 | -0/+24 |
| | | | | | This makes it harder to attack a HA setup, even if the sequence numbers were not fully in sync. | ||||
* | iv_gen: Provide external sequence number (IKE, ESP) | Tobias Brunner | 2013-10-11 | 3 | -17/+10 |
| | | | | This prevents duplicate sequential IVs in case of a HA failover. | ||||
* | iv_gen: aead_t implementations provide an IV generator | Tobias Brunner | 2013-10-11 | 2 | -1/+30 |
| | |||||
* | iv_gen: Add IV generator that allocates IVs sequentially | Tobias Brunner | 2013-10-11 | 2 | -0/+119 |
| | |||||
* | iv_gen: Add IV generator that allocates IVs randomly | Tobias Brunner | 2013-10-11 | 2 | -0/+111 |
| | | | | Uses RNG_WEAK as the code currently does elsewhere to allocate IVs. | ||||
* | crypto: Add generic interface for IV generators | Tobias Brunner | 2013-10-11 | 1 | -0/+59 |
| | |||||
* | apidoc: Move mac_prf to prf Doxygen group | Tobias Brunner | 2013-10-11 | 1 | -1/+1 |
| | |||||
* | crypto-factory: Try next available RNG implementation if constructor fails | Tobias Brunner | 2013-10-11 | 1 | -13/+6 |
| | |||||
* | crypto-factory: Order entries by algorithm identifier and (optionally) speed | Tobias Brunner | 2013-10-11 | 1 | -22/+18 |
| | |||||
* | Remove HASH_PREFERRED, usages are replaced with HASH_SHA1, which is required ↵ | Tobias Brunner | 2013-10-11 | 4 | -18/+10 |
| | | | | for IKEv2 anyway | ||||
* | pkcs5: Add missing break statements when checking crypto primitives | Tobias Brunner | 2013-07-24 | 1 | -0/+2 |
| | |||||
* | Fix various API doc issues and typos | Tobias Brunner | 2013-07-18 | 1 | -2/+2 |
| | | | | Partially based on an old patch by Adrian-Ken Rueegsegger. | ||||
* | crypto-factory: count the number of test vector failures during registration | Martin Willi | 2013-06-21 | 2 | -30/+73 |
| | |||||
* | Added missing string for full-length HMAC-SHA512 signer | Tobias Brunner | 2013-06-10 | 1 | -0/+1 |
| | |||||
* | Add support for untruncated HMAC-SHA-512 | Tobias Brunner | 2013-05-08 | 2 | -1/+9 |
| | |||||
* | Also support 128-bit RC2 | Tobias Brunner | 2013-05-08 | 1 | -1/+2 |
| | |||||
* | Function added to convert a hash algorithm to an HMAC integrity algorithm | Tobias Brunner | 2013-05-08 | 2 | -0/+77 |
| | |||||
* | Support the PKCS#5/PKCS#12 encryption scheme used by OpenSSL for private keys | Tobias Brunner | 2013-05-08 | 1 | -0/+6 |
| | |||||
* | Move PKCS#12 key derivation to a separate file | Tobias Brunner | 2013-05-08 | 1 | -145/+11 |
| | |||||
* | PKCS#5 wrapper can decrypt PKCS#12-like schemes | Tobias Brunner | 2013-05-08 | 1 | -3/+171 |
| | |||||
* | Fix cleanup in crypto_tester if a crypter fails | Tobias Brunner | 2013-05-08 | 1 | -1/+4 |
| | |||||
* | Add implementation of the RC2 block cipher (RFC 2268) | Tobias Brunner | 2013-05-08 | 2 | -4/+16 |
| | |||||
* | Extract function to convert ASN.1 INTEGER object to u_int64_t | Tobias Brunner | 2013-05-08 | 1 | -23/+3 |
| | |||||
* | Extract PKCS#5 handling from pkcs8 plugin to separate helper class | Tobias Brunner | 2013-05-08 | 2 | -0/+691 |
| | |||||
* | Fix cleanup in crypto_tester if AEAD implementation fails | Tobias Brunner | 2013-02-28 | 1 | -1/+4 |
| | |||||
* | Fixed some typos, courtesy of codespell | Tobias Brunner | 2012-12-20 | 1 | -2/+2 |
| | |||||
* | Move PKCS#9 attribute lists to pkcs7 plugin, as we currently use it there only | Martin Willi | 2012-12-19 | 2 | -349/+0 |
| | |||||
* | Remove unused monolithic PKCS#7 code | Martin Willi | 2012-12-19 | 2 | -1238/+0 |
| | |||||
* | Rebuild PKCS#9 encoding after adding new attributes | Martin Willi | 2012-12-19 | 1 | -0/+3 |
| | |||||
* | Don't store additional encoding for each PKCS#9 attribute | Martin Willi | 2012-12-19 | 1 | -13/+15 |
| | |||||
* | Unify PKCS#9 set_attribute* methods to a single add_attribute | Martin Willi | 2012-12-19 | 3 | -56/+11 |
| | | | | | This way the PKCS#9 implementation does not have to know the encoding types for values | ||||
* | PKCS#9 coding style cleanups | Martin Willi | 2012-12-19 | 2 | -110/+41 |
| | |||||
* | Remove external build_encoding method in PKCS#9 | Martin Willi | 2012-12-19 | 2 | -9/+5 |
| | |||||
* | Moved settings_t to utils folder | Tobias Brunner | 2012-10-24 | 1 | -0/+1 |
| | |||||
* | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 5 | -5/+5 |
| | |||||
* | Moved enum_name_t to utils folder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 6 | -6/+6 |
| | |||||
* | Add proposal keywords to explicitly specify PRF algorithms | Martin Willi | 2012-10-24 | 1 | -0/+8 |
| | |||||
* | Fixed RNG crypto tester | Tobias Brunner | 2012-09-28 | 1 | -11/+9 |
| | |||||
* | Initialize g and p in create_dh factory method | Tobias Brunner | 2012-09-28 | 1 | -1/+1 |
| | |||||
* | Fix Doxygen comment for proposal_keywords_t | Tobias Brunner | 2012-09-18 | 1 | -1/+1 |
| | | | | Two dots seem to mark the end of a list. | ||||
* | Added algorithm lookup via kernel_interface_t to the various kernel interfaces | Tobias Brunner | 2012-09-13 | 2 | -3/+5 |
| | |||||
* | Added possibility to register custom proposal keywords | Tobias Brunner | 2012-09-13 | 3 | -12/+172 |
| | | | | Keyword lookup and registration are handled via the new lib->proposal object. | ||||
* | Removed len argument from proposal_get_token() | Tobias Brunner | 2012-09-13 | 2 | -4/+3 |
| | | | | Also use enumerators instead of lexparser.h to parse proposal strings. | ||||
* | Moved proposal_keywords to proposal_keywords_static | Francois ten Krooden | 2012-09-13 | 4 | -25/+118 |
| | | | | Added new proposal keywords with function to reference the static keywords. | ||||
* | Avoid problems with Doxygen by adding warn_unused_result attribute at the ↵ | Tobias Brunner | 2012-08-11 | 9 | -61/+57 |
| | | | | end of method signatures | ||||
* | Add warn_unused_result attributes to rng_(get|allocate)_bytes_not_zero | Tobias Brunner | 2012-08-11 | 1 | -5/+6 |
| | | | | Also fixed Doxygen comments. | ||||
* | Move MODP_CUSTOM va_arg fetching out of loop | Martin Willi | 2012-08-02 | 1 | -15/+11 |
| | | | | It seems problematic at least on PPC with gcc 4.3, fixes #208. |