Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | gmp: Use helper to determine XOF type | Tobias Brunner | 2017-11-08 | 1 | -14/+5 |
| | |||||
* | gmp: Add support for RSASSA-PSS signature verification | Tobias Brunner | 2017-11-08 | 1 | -2/+133 |
| | |||||
* | public-key: Add optional parameters argument to verify() method | Tobias Brunner | 2017-11-08 | 1 | -1/+1 |
| | |||||
* | gmp: Fix RSA signature verification for m >= n | Tobias Brunner | 2017-08-14 | 1 | -3/+9 |
| | | | | | | | | By definition, m must be <= n-1, we didn't enforce that and because mpz_export() returns NULL if the passed value is zero a crash could have been triggered with m == n. Fixes CVE-2017-11185. | ||||
* | gmp: Make sure the modulus is odd and the exponent not zero | Tobias Brunner | 2017-05-29 | 1 | -1/+6 |
| | | | | | | | | | Unlike mpz_powm() its secure replacement mpz_powm_sec() has the additional requirement that the exponent must be > 0 and the modulus has to be odd. Otherwise, it will crash with a floating-point exception. Fixes: CVE-2017-9022 Fixes: 3e35a6e7a1b0 ("Use side-channel secured mpz_powm_sec of libgmp 5, if available") | ||||
* | gmp: Support of SHA-3 RSA signatures | Andreas Steffen | 2016-09-22 | 1 | -8/+16 |
| | |||||
* | utils: Use memeq_const() for all cryptographic purposes | Martin Willi | 2015-04-14 | 1 | -3/+2 |
| | |||||
* | Fix RSA encryption padding terminator in gmp plugin, broken with 5025135f | Martin Willi | 2012-10-24 | 1 | -0/+2 |
| | |||||
* | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Add a return value to hasher_t.allocate_hash() | Martin Willi | 2012-07-16 | 1 | -1/+5 |
| | |||||
* | Check rng return value when generating DH secrets and primes in gmp plugin | Tobias Brunner | 2012-07-16 | 1 | -10/+6 |
| | |||||
* | Fix boolean return value if an empty RSA signature is detected in gmp plugin | Martin Willi | 2012-05-31 | 1 | -1/+1 |
| | | | | Fixes CVE-2012-2388. | ||||
* | Use a seperate section for each nested struct member in INIT macro | Martin Willi | 2010-08-18 | 1 | -11/+13 |
| | |||||
* | Use bits instead of bytes for a private/public key | Martin Willi | 2010-08-10 | 1 | -2/+2 |
| | |||||
* | Added support for different encryption schemes to private/public keys | Martin Willi | 2010-08-10 | 1 | -5/+11 |
| | |||||
* | Migrated gmp plugin to INIT/METHOD macros | Martin Willi | 2010-08-10 | 1 | -59/+34 |
| | |||||
* | Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵ | Martin Willi | 2010-07-13 | 1 | -6/+6 |
| | | | | encoding | ||||
* | PEM encoder supports encoding from RSA components directly, allowing gcrypt ↵ | Martin Willi | 2010-04-29 | 1 | -16/+1 |
| | | | | plugin to encode in PEM | ||||
* | Adding DBG_LIB to all calls of libstrongswan's version of DBG*. | Tobias Brunner | 2010-04-06 | 1 | -16/+19 |
| | |||||
* | PEM encoding for GMP RSA public and private keys | Andreas Steffen | 2010-04-04 | 1 | -1/+16 |
| | |||||
* | Use side-channel secured mpz_powm_sec of libgmp 5, if available | Martin Willi | 2010-02-18 | 1 | -0/+5 |
| | |||||
* | Public/Private keys implement a has_fingerprint() method | Martin Willi | 2009-09-21 | 1 | -0/+1 |
| | |||||
* | Updated gmp plugin to the new builder API | Martin Willi | 2009-09-10 | 1 | -81/+29 |
| | |||||
* | remove spaces before tabs at the beginning of lines (^( )+\t) | Martin Willi | 2009-09-04 | 1 | -2/+2 |
| | |||||
* | removed trailing spaces ([[:space:]]+$) | Martin Willi | 2009-09-04 | 1 | -42/+42 |
| | |||||
* | updated gmp plugin to new private/public key API, use encoder framework | Martin Willi | 2009-08-26 | 1 | -138/+38 |
| | |||||
* | gmp uses component builder to build public- from private-key | Martin Willi | 2009-08-26 | 1 | -20/+0 |
| | |||||
* | gmp plugin makes use of pkcs1/pgp/dnskey plugins | Martin Willi | 2009-08-26 | 1 | -214/+24 |
| | |||||
* | renamed BUILD_BLOB_RFC_3110 to BUILD_BLOB_DNSKEY, we potentially support ↵ | Martin Willi | 2009-08-26 | 1 | -1/+1 |
| | | | | other key types | ||||
* | make use of the pem helper plugin to load credentials | Martin Willi | 2009-08-26 | 1 | -1/+0 |
| | |||||
* | support of SHA224-based certificate signatures | Andreas Steffen | 2009-08-05 | 1 | -0/+2 |
| | |||||
* | corrected comment | Andreas Steffen | 2009-07-04 | 1 | -1/+1 |
| | |||||
* | use save chunk advancing, check signature length | Martin Willi | 2009-06-15 | 1 | -9/+5 |
| | |||||
* | pluto supports ECDSA authentication | Andreas Steffen | 2009-06-12 | 1 | -1/+0 |
| | |||||
* | implement gmp_rsa_private_key.decrypt() | Andreas Steffen | 2009-06-09 | 1 | -0/+1 |
| | |||||
* | implemented gmp_rsa_public_key.encrypt() method | Andreas Steffen | 2009-06-09 | 1 | -4/+59 |
| | |||||
* | hardened OpenPGP parser | Andreas Steffen | 2009-06-09 | 1 | -23/+31 |
| | |||||
* | fixed OpenPGPv3 fingerprint computation | Andreas Steffen | 2009-06-09 | 1 | -7/+19 |
| | |||||
* | pluto and scepclient use private and public key plugins of libstrongswan | Andreas Steffen | 2009-06-09 | 1 | -23/+230 |
| | |||||
* | removing svn keyword $Id$ from all files | Tobias Brunner | 2009-04-30 | 1 | -2/+0 |
| | |||||
* | merging changes from portability branch back to trunk | Tobias Brunner | 2009-04-30 | 1 | -2/+2 |
| | | | | | important change for developers: %Y replaces %D to print identities! | ||||
* | checking mpz_export return value properly | Martin Willi | 2008-09-17 | 1 | -3/+7 |
| | | | | fixes a potential DoS attack if a DH value of zero gets processed | ||||
* | refactored credential builder | Martin Willi | 2008-09-02 | 1 | -16/+19 |
| | | | | | | | | | allow enumeration of matching builders try a second builder if the first one fails builder clones resources internally on demand caller frees added resources on failure and success stricter handling of non-supported build parts | ||||
* | added more verbosity if signature hash OID is unknown | Martin Willi | 2008-05-21 | 1 | -1/+3 |
| | |||||
* | introduced ASN1_EXIT command in ASN.1 object syntax definition | Andreas Steffen | 2008-04-28 | 1 | -7/+7 |
| | |||||
* | optimized parser->success() | Andreas Steffen | 2008-04-26 | 1 | -29/+28 |
| | |||||
* | refactoring of the ASN.1 parser | Andreas Steffen | 2008-04-26 | 1 | -36/+43 |
| | |||||
* | removed unneded publicKeyInfo ASN1 structure | Martin Willi | 2008-04-01 | 1 | -16/+1 |
| | |||||
* | creating public key from RSA private key | Martin Willi | 2008-03-18 | 1 | -0/+20 |
| | | | | RSA key generation and signature test | ||||
* | merged the modularization branch (credentials) back to trunk | Martin Willi | 2008-03-13 | 1 | -0/+574 |