Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Define MODP_CUSTOM constructors as variadic functions | Tobias Brunner | 2017-09-18 | 1 | -3/+8 |
| | | | | | | They now match the dh_constructor_t signature. This is a follow up for the changes merged with b668bf3f9ec1 and should fix use of MODP_CUSTOM on Apple's ARM64 platform. | ||||
* | gmp: Support setting Diffie-Hellman private values | Martin Willi | 2015-04-15 | 1 | -0/+10 |
| | |||||
* | Wipe auxiliary key store5.3.0 | Andreas Steffen | 2015-03-28 | 1 | -1/+1 |
| | |||||
* | diffie-hellman: Verify public DH values in backends | Martin Willi | 2015-03-23 | 1 | -0/+5 |
| | |||||
* | diffie-hellman: Add a bool return value to set_other_public_value() | Martin Willi | 2015-03-23 | 1 | -1/+2 |
| | |||||
* | diffie-hellman: Add a bool return value to get_my_public_value() | Martin Willi | 2015-03-23 | 1 | -1/+2 |
| | |||||
* | diffie-hellman: Use bool instead of status_t as get_shared_secret() return value | Martin Willi | 2015-03-23 | 1 | -4/+4 |
| | | | | | While such a change is not unproblematic, keeping status_t makes the API inconsistent once we introduce return values for the public value operations. | ||||
* | crypto: Define MODP_CUSTOM outside of IKE DH range | Tobias Brunner | 2014-12-23 | 1 | -1/+1 |
| | | | | | | | | | Before this fix it was possible to crash charon with an IKE_SA_INIT message containing a KE payload with DH group MODP_CUSTOM(1025). Defining MODP_CUSTOM outside of the two byte IKE DH identifier range prevents it from getting negotiated. Fixes CVE-2014-9221. | ||||
* | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Check rng return value when generating DH secrets and primes in gmp plugin | Tobias Brunner | 2012-07-16 | 1 | -2/+7 |
| | |||||
* | Added support for MODP_CUSTOM to gmp plugin | Martin Willi | 2010-09-02 | 1 | -17/+36 |
| | |||||
* | Use a seperate section for each nested struct member in INIT macro | Martin Willi | 2010-08-18 | 1 | -6/+8 |
| | |||||
* | Migrated gmp plugin to INIT/METHOD macros | Martin Willi | 2010-08-10 | 1 | -32/+21 |
| | |||||
* | Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten | Martin Willi | 2010-04-19 | 1 | -1/+11 |
| | |||||
* | Store DH generator in a chunk, hide non-public data in a private struct | Martin Willi | 2010-04-08 | 1 | -11/+12 |
| | |||||
* | Adding DBG_LIB to all calls of libstrongswan's version of DBG*. | Tobias Brunner | 2010-04-06 | 1 | -4/+8 |
| | |||||
* | Provide the Diffie Hellman parameters from a central location, so that we do ↵ | Tobias Brunner | 2010-03-09 | 1 | -343/+10 |
| | | | | | | | | not have to replicate them in every plugin that implements the DH interface. The main reason for this change is that Android's libcrypto does not include the get_rfcX_prime_Y functions by default. Therefore we would have had to replicate the primes a third time. | ||||
* | Use side-channel secured mpz_powm_sec of libgmp 5, if available | Martin Willi | 2010-02-18 | 1 | -0/+4 |
| | |||||
* | replaces four spaces by tabs, where appropriate | Martin Willi | 2009-09-04 | 1 | -5/+5 |
| | |||||
* | removed trailing spaces ([[:space:]]+$) | Martin Willi | 2009-09-04 | 1 | -34/+34 |
| | |||||
* | remove whitespace | Andreas Steffen | 2009-06-15 | 1 | -1/+1 |
| | |||||
* | dh_exponent_ansi_x9_42 is now a libstrongswan setting | Andreas Steffen | 2009-05-26 | 1 | -1/+1 |
| | |||||
* | removing svn keyword $Id$ from all files | Tobias Brunner | 2009-04-30 | 1 | -2/+0 |
| | |||||
* | removed superfluous get_other_public_value in diffie_hellman_t interface | Martin Willi | 2008-11-04 | 1 | -20/+0 |
| | |||||
* | refining changeset 4483 by introducing charon.dh_exponent_ansi_x9_42 key | Andreas Steffen | 2008-10-28 | 1 | -11/+35 |
| | |||||
* | remove unused local DH_EXPONENT_ENTROPY definition | Andreas Steffen | 2008-10-27 | 1 | -2/+0 |
| | |||||
* | use 512 bits of entropy for secret DH exponents | Andreas Steffen | 2008-10-26 | 1 | -1/+3 |
| | |||||
* | fixed DH value range testing | Martin Willi | 2008-09-17 | 1 | -1/+1 |
| | |||||
* | checking mpz_export return value properly | Martin Willi | 2008-09-17 | 1 | -5/+17 |
| | | | | fixes a potential DoS attack if a DH value of zero gets processed | ||||
* | added API for random number generators, served through credential factory | Martin Willi | 2008-04-15 | 1 | -8/+6 |
| | | | | ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random) | ||||
* | merged the modularization branch (credentials) back to trunk | Martin Willi | 2008-03-13 | 1 | -0/+569 |