Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | private-key: Add optional parameters argument to sign() method | Tobias Brunner | 2017-11-08 | 2 | -4/+4 |
| | |||||
* | public-key: Add optional parameters argument to verify() method | Tobias Brunner | 2017-11-08 | 2 | -4/+4 |
| | |||||
* | bliss: Fix compile error of unit tests due to uninitialized variable | Tobias Brunner | 2017-09-18 | 1 | -1/+1 |
| | |||||
* | configure: Enable coverage for all plugins via PLUGIN_CFLAGS | Tobias Brunner | 2017-06-20 | 1 | -2/+1 |
| | |||||
* | bliss: Increase timeout for sampler unit test | Tobias Brunner | 2017-01-16 | 1 | -2/+2 |
| | | | | Fixes #2204. | ||||
* | added XOF dependencies of bliss and ntru plugins | Andreas Steffen | 2016-10-18 | 1 | -1/+15 |
| | |||||
* | bliss sampler unit-test: Fixed enumeration type | Andreas Steffen | 2016-09-22 | 1 | -2/+2 |
| | |||||
* | bliss: bliss_sampler expects XOF type | Andreas Steffen | 2016-09-22 | 1 | -4/+3 |
| | |||||
* | mgf1: Refactored MGF1 as an XOF | Andreas Steffen | 2016-09-21 | 6 | -33/+34 |
| | |||||
* | integrity-test: Added bliss_param_sets to read-only segment | Andreas Steffen | 2016-07-29 | 14 | -63/+68 |
| | |||||
* | integrity-test: check code and ro segments of libnttfft | Andreas Steffen | 2016-07-29 | 1 | -1/+1 |
| | |||||
* | Created libnttfft | Andreas Steffen | 2016-07-29 | 13 | -1272/+47 |
| | | | | | This makes Number Theoretic Transforms (NTT) based on the efficient Fast-Fourier-Transform (FFT) available to multiple plugins. | ||||
* | Share twiddle factors table between 512 and 1024 point FFT | Andreas Steffen | 2016-07-29 | 3 | -134/+14 |
| | |||||
* | Implemented FFT with n = 1024 and q = 11289 using Montgomery arithmetic | Andreas Steffen | 2016-07-29 | 3 | -8/+495 |
| | |||||
* | bliss: Implemented FFT with fast Montgomery arithmetic | Andreas Steffen | 2016-07-29 | 8 | -102/+294 |
| | |||||
* | unit-tests: Decreased loop count of FFT speed test to 10'000 | Andreas Steffen | 2016-07-22 | 1 | -1/+1 |
| | |||||
* | unit-tests: Added bliss_fft_speed test | Andreas Steffen | 2016-07-22 | 1 | -1/+42 |
| | |||||
* | Explicitly mention SHA2 algorithm in BLISS OIDs and signature schemes | Andreas Steffen | 2015-11-06 | 4 | -17/+29 |
| | |||||
* | Support BLISS signatures with SHA-3 hash | Andreas Steffen | 2015-11-03 | 2 | -0/+12 |
| | |||||
* | Use MGF1 with SHA-512 as BLISS random oracle | Andreas Steffen | 2015-07-27 | 4 | -72/+58 |
| | |||||
* | Generalize c_indices generation using SHA-512 random oracle. | Markku-Juhani Olavi Saarinen | 2015-07-27 | 1 | -18/+24 |
| | | | | | | This generalization allows the ring dimension n to be different from the current n = 512 and allows kappa to be > 56. Also the hash octets are consumed in a more consistent manner. | ||||
* | Fixed several bugs in the BLISS signature generation/verification step. | Markku-Juhani Olavi Saarinen | 2015-07-27 | 1 | -4/+8 |
| | | | | | | | | | | | | | | | | The c_indices derived from the SHA-512 random oracle consist of nine bits (0..511). The leftmost 8 bits of each index are taken on an octet-by-octet basis from the 56 leftmost octets of the SHA-512 hash. The 9th bit needed for the LSB is taken from the extra_bits 64 bit unsigned integer which consists of the 8 rightmost octets of the SHA-512 hash (in network order). If more than 56 indices must be derived then additional rounds of the random oracle are executed until all kappa c_indices have been determined. The bug fix shifts the extra_bits value by one bit in each loop iteration so that the LSB of each index is random. Also iterate through the hash array using the loop variable j not the c_indices variable i. | ||||
* | bliss: Add generated Huffman codes to the repository | Tobias Brunner | 2015-03-02 | 5 | -14/+860 |
| | | | | | | | | | | | | | While these files are generated they don't really change and are not architecture dependant. The previous solution prevented cross-compilation from the repository as `bliss_huffman` was built for the target system but was then executed on the build host to create the source files, which naturally was bound to fail. The `recreate-bliss-huffman` make target can be used inside the bliss directory to update the source files if needed. Fixes #812. | ||||
* | Fixed compiler warnings | Andreas Steffen | 2015-02-27 | 1 | -2/+3 |
| | |||||
* | Allow SHA256 and SHA384 data hash for BLISS signatures. | Andreas Steffen | 2015-02-26 | 4 | -26/+74 |
| | | | | | The default is SHA512 since this hash function is also used for the c_indices random oracle. | ||||
* | unit-tests: Completed BLISS tests | Andreas Steffen | 2015-02-25 | 6 | -16/+668 |
| | |||||
* | Check for null pointer before applying memwipe() | Andreas Steffen | 2015-02-25 | 1 | -4/+10 |
| | |||||
* | Implemented improved BLISS-B signature algorithm | Andreas Steffen | 2015-02-25 | 6 | -47/+352 |
| | |||||
* | unit-tests: Adapted to coverity fixes | Andreas Steffen | 2014-12-23 | 1 | -9/+12 |
| | |||||
* | Fixed bad bit shift and sign extension errors | Andreas Steffen | 2014-12-23 | 3 | -4/+14 |
| | |||||
* | bliss: Remove unnecessary cast to double | Tobias Brunner | 2014-12-23 | 1 | -1/+1 |
| | | | | | | Coverity is still not happy when the result of an integer division is assigned to a double (without e.g. casting the result to an int first to indicate the intent). The shift should avoid this issue. | ||||
* | bliss: Log type if unsupported | Tobias Brunner | 2014-12-23 | 1 | -1/+1 |
| | |||||
* | bliss: Make sure sampler exists after checking for it earlier | Tobias Brunner | 2014-12-23 | 1 | -2/+2 |
| | |||||
* | bliss: Fix Doxygen comments | Tobias Brunner | 2014-12-15 | 2 | -6/+6 |
| | |||||
* | Also initialize s_sign | Andreas Steffen | 2014-12-12 | 1 | -1/+1 |
| | |||||
* | Cache only support fingerprint types | Andreas Steffen | 2014-12-12 | 1 | -2/+4 |
| | |||||
* | Fix ambiguities and gcc compiler warning | Andreas Steffen | 2014-12-12 | 1 | -3/+3 |
| | |||||
* | Use Huffman code in BLISS signature | Andreas Steffen | 2014-12-12 | 7 | -38/+296 |
| | |||||
* | Include design parameters in generated Huffman code files | Andreas Steffen | 2014-12-12 | 1 | -20/+31 |
| | |||||
* | bliss: Fix monolithic build | Tobias Brunner | 2014-12-12 | 11 | -93/+114 |
| | | | | | | | | | | | This requires moving test files so that the Makefile for the tests can be included after building libstrongswan, which requires the plugin when building monolithically. Due to this a static helper library is required as directly referring to object files (or source files) is not possible. It's also necessary to avoid any link-time dependency on libstrongswan in bliss_huffman, to avoid circular dependencies (bliss_huffman -> libstrongswan -> bliss -> bliss_huffman). | ||||
* | bliss: Fix compilation warning with certain GCC versions | Tobias Brunner | 2014-12-12 | 1 | -1/+2 |
| | | | | | | Theoretically, n could be zero and these variables are then used uninitialized. Older GCC versions warn about this and on Travis where we compile with -Werror this causes the tests to fail. | ||||
* | Pack private key arrays | Andreas Steffen | 2014-12-10 | 1 | -17/+75 |
| | |||||
* | Automatic generation of optimized Huffman codes | Andreas Steffen | 2014-12-09 | 7 | -0/+559 |
| | |||||
* | unit-tests: added bliss_sampler test | Andreas Steffen | 2014-12-09 | 3 | -0/+99 |
| | |||||
* | Expanded bliss_bitpacker to 32 bits | Andreas Steffen | 2014-12-09 | 5 | -41/+39 |
| | |||||
* | Implemented full BLISS support for IKEv2 public key authentication and the ↵ | Andreas Steffen | 2014-11-29 | 1 | -0/+4 |
| | | | | pki tool | ||||
* | Applied bit packing to BLISS public key | Andreas Steffen | 2014-11-29 | 5 | -55/+68 |
| | |||||
* | Wipe BLISS private key memory | Andreas Steffen | 2014-11-29 | 1 | -2/+8 |
| | |||||
* | Created bliss_bitpacker class to encode BLISS signatures | Andreas Steffen | 2014-11-29 | 8 | -46/+464 |
| | |||||
* | Store NTT A of BLISS public key a | Andreas Steffen | 2014-11-29 | 2 | -28/+24 |
| |