aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/plugins/gmp/gmp_rsa_public_key.c
Commit message (Collapse)AuthorAgeFilesLines
* gmp: Use helper to determine XOF typeTobias Brunner2017-11-081-14/+5
|
* gmp: Add support for RSASSA-PSS signature verificationTobias Brunner2017-11-081-2/+133
|
* public-key: Add optional parameters argument to verify() methodTobias Brunner2017-11-081-1/+1
|
* gmp: Fix RSA signature verification for m >= nTobias Brunner2017-08-141-3/+9
| | | | | | | | By definition, m must be <= n-1, we didn't enforce that and because mpz_export() returns NULL if the passed value is zero a crash could have been triggered with m == n. Fixes CVE-2017-11185.
* gmp: Make sure the modulus is odd and the exponent not zeroTobias Brunner2017-05-291-1/+6
| | | | | | | | | Unlike mpz_powm() its secure replacement mpz_powm_sec() has the additional requirement that the exponent must be > 0 and the modulus has to be odd. Otherwise, it will crash with a floating-point exception. Fixes: CVE-2017-9022 Fixes: 3e35a6e7a1b0 ("Use side-channel secured mpz_powm_sec of libgmp 5, if available")
* gmp: Support of SHA-3 RSA signaturesAndreas Steffen2016-09-221-8/+16
|
* utils: Use memeq_const() for all cryptographic purposesMartin Willi2015-04-141-3/+2
|
* Fix RSA encryption padding terminator in gmp plugin, broken with 5025135fMartin Willi2012-10-241-0/+2
|
* Moved debug.[ch] to utils folderTobias Brunner2012-10-241-1/+1
|
* Add a return value to hasher_t.allocate_hash()Martin Willi2012-07-161-1/+5
|
* Check rng return value when generating DH secrets and primes in gmp pluginTobias Brunner2012-07-161-10/+6
|
* Fix boolean return value if an empty RSA signature is detected in gmp pluginMartin Willi2012-05-311-1/+1
| | | | Fixes CVE-2012-2388.
* Use a seperate section for each nested struct member in INIT macroMartin Willi2010-08-181-11/+13
|
* Use bits instead of bytes for a private/public keyMartin Willi2010-08-101-2/+2
|
* Added support for different encryption schemes to private/public keysMartin Willi2010-08-101-5/+11
|
* Migrated gmp plugin to INIT/METHOD macrosMartin Willi2010-08-101-59/+34
|
* Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵Martin Willi2010-07-131-6/+6
| | | | encoding
* PEM encoder supports encoding from RSA components directly, allowing gcrypt ↵Martin Willi2010-04-291-16/+1
| | | | plugin to encode in PEM
* Adding DBG_LIB to all calls of libstrongswan's version of DBG*.Tobias Brunner2010-04-061-16/+19
|
* PEM encoding for GMP RSA public and private keysAndreas Steffen2010-04-041-1/+16
|
* Use side-channel secured mpz_powm_sec of libgmp 5, if availableMartin Willi2010-02-181-0/+5
|
* Public/Private keys implement a has_fingerprint() methodMartin Willi2009-09-211-0/+1
|
* Updated gmp plugin to the new builder APIMartin Willi2009-09-101-81/+29
|
* remove spaces before tabs at the beginning of lines (^( )+\t)Martin Willi2009-09-041-2/+2
|
* removed trailing spaces ([[:space:]]+$)Martin Willi2009-09-041-42/+42
|
* updated gmp plugin to new private/public key API, use encoder frameworkMartin Willi2009-08-261-138/+38
|
* gmp uses component builder to build public- from private-keyMartin Willi2009-08-261-20/+0
|
* gmp plugin makes use of pkcs1/pgp/dnskey pluginsMartin Willi2009-08-261-214/+24
|
* renamed BUILD_BLOB_RFC_3110 to BUILD_BLOB_DNSKEY, we potentially support ↵Martin Willi2009-08-261-1/+1
| | | | other key types
* make use of the pem helper plugin to load credentialsMartin Willi2009-08-261-1/+0
|
* support of SHA224-based certificate signaturesAndreas Steffen2009-08-051-0/+2
|
* corrected commentAndreas Steffen2009-07-041-1/+1
|
* use save chunk advancing, check signature lengthMartin Willi2009-06-151-9/+5
|
* pluto supports ECDSA authenticationAndreas Steffen2009-06-121-1/+0
|
* implement gmp_rsa_private_key.decrypt()Andreas Steffen2009-06-091-0/+1
|
* implemented gmp_rsa_public_key.encrypt() methodAndreas Steffen2009-06-091-4/+59
|
* hardened OpenPGP parserAndreas Steffen2009-06-091-23/+31
|
* fixed OpenPGPv3 fingerprint computationAndreas Steffen2009-06-091-7/+19
|
* pluto and scepclient use private and public key plugins of libstrongswanAndreas Steffen2009-06-091-23/+230
|
* removing svn keyword $Id$ from all filesTobias Brunner2009-04-301-2/+0
|
* merging changes from portability branch back to trunkTobias Brunner2009-04-301-2/+2
| | | | | important change for developers: %Y replaces %D to print identities!
* checking mpz_export return value properlyMartin Willi2008-09-171-3/+7
| | | | fixes a potential DoS attack if a DH value of zero gets processed
* refactored credential builderMartin Willi2008-09-021-16/+19
| | | | | | | | | allow enumeration of matching builders try a second builder if the first one fails builder clones resources internally on demand caller frees added resources on failure and success stricter handling of non-supported build parts
* added more verbosity if signature hash OID is unknownMartin Willi2008-05-211-1/+3
|
* introduced ASN1_EXIT command in ASN.1 object syntax definitionAndreas Steffen2008-04-281-7/+7
|
* optimized parser->success()Andreas Steffen2008-04-261-29/+28
|
* refactoring of the ASN.1 parserAndreas Steffen2008-04-261-36/+43
|
* removed unneded publicKeyInfo ASN1 structureMartin Willi2008-04-011-16/+1
|
* creating public key from RSA private keyMartin Willi2008-03-181-0/+20
| | | | RSA key generation and signature test
* merged the modularization branch (credentials) back to trunkMartin Willi2008-03-131-0/+574