Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Use standard unsigned integer types | Andreas Steffen | 2016-03-24 | 1 | -1/+1 |
| | |||||
* | 128 bit default security strength requires 3072 bit prime DH group | Andreas Steffen | 2015-12-14 | 1 | -8/+8 |
| | |||||
* | gmp: Support setting Diffie-Hellman private values | Martin Willi | 2015-04-15 | 1 | -0/+10 |
| | |||||
* | utils: Use memeq_const() for all cryptographic purposes | Martin Willi | 2015-04-14 | 1 | -3/+2 |
| | |||||
* | Wipe auxiliary key store5.3.0 | Andreas Steffen | 2015-03-28 | 1 | -1/+1 |
| | |||||
* | diffie-hellman: Verify public DH values in backends | Martin Willi | 2015-03-23 | 1 | -0/+5 |
| | |||||
* | diffie-hellman: Add a bool return value to set_other_public_value() | Martin Willi | 2015-03-23 | 1 | -1/+2 |
| | |||||
* | diffie-hellman: Add a bool return value to get_my_public_value() | Martin Willi | 2015-03-23 | 1 | -1/+2 |
| | |||||
* | diffie-hellman: Use bool instead of status_t as get_shared_secret() return value | Martin Willi | 2015-03-23 | 1 | -4/+4 |
| | | | | | While such a change is not unproblematic, keeping status_t makes the API inconsistent once we introduce return values for the public value operations. | ||||
* | crypto: Define MODP_CUSTOM outside of IKE DH range | Tobias Brunner | 2014-12-23 | 1 | -1/+1 |
| | | | | | | | | | Before this fix it was possible to crash charon with an IKE_SA_INIT message containing a KE payload with DH group MODP_CUSTOM(1025). Defining MODP_CUSTOM outside of the two byte IKE DH identifier range prevents it from getting negotiated. Fixes CVE-2014-9221. | ||||
* | plugins: Don't link with -rdynamic on Windows | Martin Willi | 2014-06-04 | 1 | -1/+1 |
| | |||||
* | automake: replace INCLUDES by AM_CPPFLAGS | Martin Willi | 2013-07-18 | 1 | -3/+4 |
| | | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only. | ||||
* | Fixed some typos, courtesy of codespell | Tobias Brunner | 2012-12-20 | 1 | -1/+1 |
| | |||||
* | allow the optional sharing if RSA private keys | Andreas Steffen | 2012-11-22 | 1 | -104/+185 |
| | |||||
* | overwrite sensitive prime with zeroes | Andreas Steffen | 2012-11-18 | 1 | -1/+1 |
| | |||||
* | implemented generation of safe primes | Andreas Steffen | 2012-11-18 | 1 | -13/+37 |
| | |||||
* | Fix RSA encryption padding terminator in gmp plugin, broken with 5025135f | Martin Willi | 2012-10-24 | 1 | -0/+2 |
| | |||||
* | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 3 | -3/+3 |
| | |||||
* | Add a return value to hasher_t.allocate_hash() | Martin Willi | 2012-07-16 | 2 | -3/+7 |
| | |||||
* | Check rng return value when generating DH secrets and primes in gmp plugin | Tobias Brunner | 2012-07-16 | 3 | -13/+19 |
| | |||||
* | Fix boolean return value if an empty RSA signature is detected in gmp plugin | Martin Willi | 2012-05-31 | 1 | -1/+1 |
| | | | | Fixes CVE-2012-2388. | ||||
* | Add features support to gmp plugin | Martin Willi | 2011-10-14 | 1 | -44/+77 |
| | |||||
* | Added a (not yet implemented) plugin_t method to reload plugin configuration | Martin Willi | 2011-04-15 | 1 | -0/+1 |
| | |||||
* | Added a get_name() function to plugin_t, create_plugin_enumerator enumerates ↵ | Martin Willi | 2011-04-15 | 1 | -14/+19 |
| | | | | over plugin_t | ||||
* | trace back crypto algorithms to the plugins that registered them | Andreas Steffen | 2010-12-18 | 1 | -12/+14 |
| | |||||
* | Added a final flag to builder registration to enumerate the actually ↵ | Martin Willi | 2010-09-03 | 1 | -3/+3 |
| | | | | supported algorithms | ||||
* | Added support for MODP_CUSTOM to gmp plugin | Martin Willi | 2010-09-02 | 3 | -17/+52 |
| | |||||
* | Use a seperate section for each nested struct member in INIT macro | Martin Willi | 2010-08-18 | 4 | -31/+41 |
| | |||||
* | Use bits instead of bytes for a private/public key | Martin Willi | 2010-08-10 | 2 | -5/+5 |
| | |||||
* | Added support for different encryption schemes to private/public keys | Martin Willi | 2010-08-10 | 2 | -6/+19 |
| | |||||
* | Migrated gmp plugin to INIT/METHOD macros | Martin Willi | 2010-08-10 | 6 | -173/+103 |
| | |||||
* | Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵ | Martin Willi | 2010-07-13 | 2 | -16/+16 |
| | | | | encoding | ||||
* | PEM encoder supports encoding from RSA components directly, allowing gcrypt ↵ | Martin Willi | 2010-04-29 | 2 | -32/+2 |
| | | | | plugin to encode in PEM | ||||
* | Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten | Martin Willi | 2010-04-19 | 2 | -1/+17 |
| | |||||
* | Store DH generator in a chunk, hide non-public data in a private struct | Martin Willi | 2010-04-08 | 1 | -11/+12 |
| | |||||
* | Adding DBG_LIB to all calls of libstrongswan's version of DBG*. | Tobias Brunner | 2010-04-06 | 3 | -29/+38 |
| | |||||
* | PEM encoding for GMP RSA public and private keys | Andreas Steffen | 2010-04-04 | 2 | -2/+32 |
| | |||||
* | setting the two most significant bits assures an RSA modulus of maximum bit size | Andreas Steffen | 2010-03-15 | 1 | -2/+2 |
| | |||||
* | Provide the Diffie Hellman parameters from a central location, so that we do ↵ | Tobias Brunner | 2010-03-09 | 1 | -343/+10 |
| | | | | | | | | not have to replicate them in every plugin that implements the DH interface. The main reason for this change is that Android's libcrypto does not include the get_rfcX_prime_Y functions by default. Therefore we would have had to replicate the primes a third time. | ||||
* | Reverting eba28948a584b9d02474cf5d256b04b8d2adbe6a which was only necessary ↵ | Tobias Brunner | 2010-03-02 | 1 | -3/+1 |
| | | | | | | | when cross-compiling the plugins for Android 2.0. With the coming monolithic build using Android.mk files this won't be necessary anymore. | ||||
* | Streamlined the source file list formatting in plugin makefiles. | Tobias Brunner | 2010-03-02 | 1 | -4/+5 |
| | |||||
* | Link all enabled libstrongswan plugins into the library, link all enabled ↵ | Tobias Brunner | 2010-03-02 | 1 | -2/+7 |
| | | | | charon plugins into libcharon. | ||||
* | Changed plugin constructors from plugin_create to plugin_name_plugin_create. | Tobias Brunner | 2010-03-02 | 1 | -1/+1 |
| | |||||
* | Removing the plugin constructor declarations from the header files. | Tobias Brunner | 2010-03-02 | 1 | -5/+0 |
| | |||||
* | Link all plugins to libstrongswan. | Tobias Brunner | 2010-02-25 | 1 | -1/+1 |
| | |||||
* | Use side-channel secured mpz_powm_sec of libgmp 5, if available | Martin Willi | 2010-02-18 | 3 | -0/+14 |
| | |||||
* | Public/Private keys implement a has_fingerprint() method | Martin Willi | 2009-09-21 | 2 | -0/+2 |
| | |||||
* | Updated gmp plugin to the new builder API | Martin Willi | 2009-09-10 | 5 | -205/+134 |
| | |||||
* | remove spaces before tabs at the beginning of lines (^( )+\t) | Martin Willi | 2009-09-04 | 1 | -2/+2 |
| | |||||
* | replaces four spaces by tabs, where appropriate | Martin Willi | 2009-09-04 | 1 | -5/+5 |
| |