Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Optimize ntru_poly constructors some more5.1.2 | Andreas Steffen | 2014-02-27 | 1 | -26/+24 |
| | |||||
* | Optimized initialisation of indices | Andreas Steffen | 2014-02-27 | 1 | -50/+39 |
| | |||||
* | Added get_array() method to ntru_poly_t class | Andreas Steffen | 2014-02-27 | 5 | -156/+57 |
| | |||||
* | Defined ntru_poly_create_from_seed() and ntru_poly_create_from_data() ↵ | Andreas Steffen | 2014-02-27 | 5 | -131/+100 |
| | | | | constructors and built some unit tests for the latter) | ||||
* | Optimized use of temporary arrays in polynomial multiplication | Andreas Steffen | 2014-02-27 | 2 | -24/+24 |
| | |||||
* | Implement ring multiplication method | Andreas Steffen | 2014-02-27 | 3 | -99/+228 |
| | |||||
* | index limit can be easily computed | Andreas Steffen | 2014-02-19 | 5 | -42/+18 |
| | |||||
* | uclibc only defines strndup(3) if _GNU_SOURCE is defined | Tobias Brunner | 2014-02-19 | 1 | -2/+2 |
| | | | | References #516. | ||||
* | sshkey: uclibc only defines fmemopen(3) if _GNU_SOURCE is defined | Tobias Brunner | 2014-02-19 | 1 | -0/+1 |
| | | | | Fixes #516. | ||||
* | Created ntru_poly class for sparse trinary polynomials | Andreas Steffen | 2014-02-18 | 8 | -434/+455 |
| | |||||
* | plugin-loader: Escape <ns> in comment as Doxygen sees this as XML tag | Tobias Brunner | 2014-02-18 | 1 | -2/+2 |
| | |||||
* | plugin-loader: Optionally use load option in each plugin section to load plugins | Tobias Brunner | 2014-02-12 | 2 | -4/+144 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This now works because all plugins use the same config namespace. If <ns>.load_modular is true, the list of plugins to load is determined via the value of the <ns>.plugins.<name>.load options. Using includes the following is possible: charon { load_modular = yes plugins { include strongswan.d/charon/*.conf } } charon-cmd { load_modular = yes plugins { include strongswan.d/charon-cmd/*.conf } } Where each .conf file would contain something like: <name> { load = yes <option> = <value> } To increase the priority of individual plugins load = <priority> can be used (the default is 1). For instance, to use openssl instead of the built-in crypto plugins set in strongswan.d/charon/openssl.conf: openssl { load = 10 } If two plugins have the same priority their order in the default plugin list is preserved. Plugins not found in that list are ordered alphabetically before other plugins with the same priority. | ||||
* | lib: All settings use configured namespace | Tobias Brunner | 2014-02-12 | 15 | -35/+35 |
| | |||||
* | rdrand: Provide get_features() regardless of RDRAND availability | Martin Willi | 2014-02-10 | 1 | -6/+6 |
| | | | | | As having no get_features() raises a deprecated warning, we return no features instead. | ||||
* | rdrand: Move RDRAND detection log to level 2 | Martin Willi | 2014-02-10 | 1 | -2/+2 |
| | | | | | When having RDRAND support, these log messages might be confusing when using pki or other tools. | ||||
* | pem: Use chunk_map() instead of non-portable mmap() | Martin Willi | 2014-01-23 | 1 | -29/+6 |
| | |||||
* | curl: Replace spaces in URIs with %20 | Tobias Brunner | 2014-01-23 | 1 | -3/+14 |
| | | | | | | | cURL requires the URIs to be URL-encoded. Apparently, some CAs encode CRL URIs with spaces in them. Fixes #454. | ||||
* | agent: Keep CAP_DAC_OVERRIDE to connect to ssh-agent socket | Tobias Brunner | 2014-01-23 | 2 | -2/+7 |
| | | | | This is also required if charon-cmd is used with capability dropping. | ||||
* | min_MGF_hash_calls parameter is not needed anymore | Andreas Steffen | 2013-12-07 | 2 | -18/+0 |
| | |||||
* | Optimized MGF1 implementation | Andreas Steffen | 2013-12-07 | 1 | -8/+13 |
| | |||||
* | Implemented ntru_trits class | Andreas Steffen | 2013-12-07 | 8 | -291/+292 |
| | |||||
* | Streamlined DRBG and MGF1 debug output | Andreas Steffen | 2013-12-07 | 3 | -14/+20 |
| | |||||
* | Added own MGF1 mask generating function | Andreas Steffen | 2013-12-05 | 10 | -436/+536 |
| | |||||
* | unit-tests: Export ntru_drbg_create as testable function so no linking is ↵ | Tobias Brunner | 2013-12-04 | 1 | -5/+7 |
| | | | | | | | | required This way the plugin does not have to be linked explicitly to the test runner, which otherwise would require that the plugin is either always enabled to build the tests or that ifdefs are added to the Makefile. | ||||
* | unit-tests: Move ntru_test_rng_t to a utility class in libtest | Tobias Brunner | 2013-12-04 | 3 | -137/+0 |
| | |||||
* | ntru: Fix compiler warning caused by ++/-- on righthand side of an assignment | Tobias Brunner | 2013-12-04 | 1 | -4/+4 |
| | | | | The behavior of stuff like x = --x; (or x++) is not defined. | ||||
* | Added DRBG automatic reseeding tests | Andreas Steffen | 2013-11-27 | 1 | -2/+2 |
| | |||||
* | Use strongSwan hash plugins for SHA-1 and SHA-256 | Andreas Steffen | 2013-11-27 | 20 | -2764/+178 |
| | |||||
* | Cleaned up ntru-crypto library | Andreas Steffen | 2013-11-27 | 11 | -474/+8 |
| | |||||
* | Implemented NIST SP 800-90A DRBG_HMAC with SHA-256 | Andreas Steffen | 2013-11-27 | 14 | -1533/+550 |
| | |||||
* | unit-tests: Added ntru wrong ciphertext test | Andreas Steffen | 2013-11-27 | 1 | -0/+1 |
| | |||||
* | unit-tests: Added ntru entropy, retransmission and ciphertext tests | Andreas Steffen | 2013-11-27 | 1 | -0/+5 |
| | |||||
* | Any of the four NTRU parameter sets can be selected | Andreas Steffen | 2013-11-27 | 2 | -45/+76 |
| | |||||
* | Make the NTRU parameter set configurable | Andreas Steffen | 2013-11-27 | 1 | -14/+47 |
| | |||||
* | unit-tests: first NTRU test case | Andreas Steffen | 2013-11-27 | 1 | -1/+1 |
| | |||||
* | Prototype implementation of IKE key exchange via NTRU encryption | Andreas Steffen | 2013-11-27 | 35 | -0/+9332 |
| | |||||
* | openssl: Verify that a peer's ECDH public value is a point on the elliptic curve | Tobias Brunner | 2013-11-19 | 1 | -0/+5 |
| | | | | | This check is mandated by RFC 6989. Since we don't reuse DH secrets, it is mostly a sanity check. | ||||
* | Implemented libstrongswan.plugins.random.strong_equals_true option | Andreas Steffen | 2013-11-16 | 3 | -0/+22 |
| | |||||
* | plugin-loader: Convenience function added to add plugin dirs in build tree | Tobias Brunner | 2013-11-06 | 2 | -0/+28 |
| | |||||
* | pki: Replace BUILD_FROM_FD with passing a chunk via BUILD_BLOB | Tobias Brunner | 2013-10-23 | 2 | -61/+12 |
| | | | | This allows more than one builder to try parsing the data read from STDIN. | ||||
* | openssl: Add workaround if ECC Brainpool curves are not defined | Tobias Brunner | 2013-10-17 | 1 | -11/+247 |
| | |||||
* | openssl: Add support for ECC Brainpool curves for DH, if defined by OpenSSL | Tobias Brunner | 2013-10-17 | 2 | -6/+51 |
| | | | | OpenSSL does not include them in releases before 1.0.2. | ||||
* | ccm: Add missing comma in get_iv_gen method signature | Tobias Brunner | 2013-10-11 | 1 | -1/+1 |
| | |||||
* | iv_gen: aead_t implementations provide an IV generator | Tobias Brunner | 2013-10-11 | 3 | -0/+46 |
| | |||||
* | unbound: Add support for DLV (DNSSEC Lookaside Validation) | Tobias Brunner | 2013-10-11 | 1 | -12/+23 |
| | | | | Fixes #392. | ||||
* | database: Add support for serializable transactions | Tobias Brunner | 2013-10-11 | 2 | -3/+16 |
| | |||||
* | sqlite: Implement transaction handling | Tobias Brunner | 2013-10-11 | 1 | -6/+83 |
| | |||||
* | mysql: Implement transaction handling | Tobias Brunner | 2013-10-11 | 1 | -7/+119 |
| | |||||
* | database: Add interface to handle transactions | Tobias Brunner | 2013-10-11 | 2 | -0/+44 |
| | |||||
* | mysql: Ensure connections are properly released in multi-threaded environments | Tobias Brunner | 2013-10-11 | 1 | -14/+23 |
| |