Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Use mac_t and PRF and signer wrappers in xcbc plugin | Tobias Brunner | 2012-06-25 | 8 | -452/+91 | |
| | ||||||
* | Make the hmac_t interface a generic interface for message authentication codes | Tobias Brunner | 2012-06-25 | 11 | -132/+131 | |
| | ||||||
* | Simplified creation of PRFs and signers in openssl and hmac plugins | Tobias Brunner | 2012-06-25 | 2 | -136/+10 | |
| | ||||||
* | Function to convert PRFs to hash algorithms added | Tobias Brunner | 2012-06-25 | 2 | -0/+39 | |
| | ||||||
* | hasher_algorithm_from_integrity() optionally returns truncation length | Tobias Brunner | 2012-06-25 | 2 | -6/+43 | |
| | ||||||
* | Use simple wrappers for HMAC based PRF and signer in openssl plugin | Tobias Brunner | 2012-06-25 | 8 | -562/+132 | |
| | ||||||
* | Use simple wrappers for HMAC based PRF and signer in hmac plugin | Tobias Brunner | 2012-06-25 | 8 | -524/+127 | |
| | ||||||
* | Simple wrappers for HMAC based prf_t and signer_t implementations added | Tobias Brunner | 2012-06-25 | 6 | -0/+395 | |
| | ||||||
* | Refactored OpenSSL based HMAC implementation | Tobias Brunner | 2012-06-25 | 5 | -173/+382 | |
| | ||||||
* | Adding OpenSSL HMAC signer functions to openssl plugin | Aleksandr Grinberg | 2012-06-25 | 4 | -1/+322 | |
| | ||||||
* | Adding OpenSSL HMAC pseudo random functions to openssl plugin | Aleksandr Grinberg | 2012-06-25 | 4 | -1/+245 | |
| | ||||||
* | Adding OpenSSL random number functions to openssl plugin | Aleksandr Grinberg | 2012-06-25 | 4 | -1/+159 | |
| | ||||||
* | Doxygen fix in PKCS#7 wrapper | Tobias Brunner | 2012-06-19 | 1 | -1/+1 | |
| | ||||||
* | Support multiple different public key strength types in constraints | Martin Willi | 2012-06-12 | 1 | -41/+38 | |
| | ||||||
* | Add signature schemes to auth_cfg during trustchain validation | Martin Willi | 2012-06-12 | 5 | -19/+45 | |
| | ||||||
* | certificate_t->issued_by takes an argument to receive signature scheme | Martin Willi | 2012-06-12 | 12 | -17/+61 | |
| | ||||||
* | Define auth_cfg rules for signature schemes | Martin Willi | 2012-06-12 | 2 | -0/+53 | |
| | ||||||
* | Implement strdupnull() macro as static inline function. | Tobias Brunner | 2012-06-11 | 1 | -1/+4 | |
| | | | | This avoids compiler warnings if the argument is a const char*. | |||||
* | Added function to convert integrity algorithms to hash algorithms (if based ↵ | Tobias Brunner | 2012-06-11 | 2 | -4/+50 | |
| | | | | on one). | |||||
* | Properly encode 0 in ASN.1. | Tobias Brunner | 2012-06-11 | 1 | -10/+7 | |
| | | | | | According to X.690 an INTEGER object always has at least one content octet. | |||||
* | Don't use chunk_skip() in asn1_length(). | Tobias Brunner | 2012-06-11 | 1 | -1/+2 | |
| | | | | | | | | chunk_skip() returns chunk_empty if the length of the chunk is equal to the number of bytes to skip, this is problematic as asn1_length() modifies the original chunk. asn1_parser_t for instance uses the modified chunk to later calculate the length of the resulting ASN.1 object which produces incorrect results if it is based on chunk_empty. | |||||
* | Changed memory management and call logic in PKCS#7 parser/generator. | Tobias Brunner | 2012-06-11 | 2 | -85/+86 | |
| | ||||||
* | Changed memory management and attribute handling in PKCS#9 wrapper. | Tobias Brunner | 2012-06-11 | 3 | -112/+40 | |
| | ||||||
* | Added get_attributes() method to pkcs7_t. | Tobias Brunner | 2012-06-11 | 2 | -1/+15 | |
| | ||||||
* | Log group added for applications other than daemons. | Tobias Brunner | 2012-06-11 | 2 | -0/+4 | |
| | ||||||
* | Updated PKCS#7 parser/generator in libstrongswan. | Tobias Brunner | 2012-06-11 | 4 | -201/+226 | |
| | | | | | Added some functionality from pluto's version, updated usage of asn1 and crypto primitives. It does compile but is not really tested yet. | |||||
* | Properly handle empty RDN values in DN strings. | Tobias Brunner | 2012-06-07 | 1 | -3/+11 | |
| | ||||||
* | Fixed return values of several functions (e.g. return FALSE for pointer types). | Tobias Brunner | 2012-05-31 | 6 | -8/+8 | |
| | ||||||
* | Fix boolean return value if an empty RSA signature is detected in gmp plugin | Martin Willi | 2012-05-31 | 1 | -1/+1 | |
| | | | | Fixes CVE-2012-2388. | |||||
* | Fixed check for loaded plugins with feature types that are not compared exactly. | Tobias Brunner | 2012-05-24 | 1 | -25/+13 | |
| | | | | | Previously e.g. RNGs with weaker strength would have overwritten stronger ones. | |||||
* | get_match() method added to hashtable_t. | Tobias Brunner | 2012-05-24 | 2 | -5/+34 | |
| | ||||||
* | Use a hashtable to check for already loaded plugin features. | Tobias Brunner | 2012-05-23 | 1 | -20/+37 | |
| | ||||||
* | Hash function for plugin features added. | Tobias Brunner | 2012-05-23 | 2 | -0/+68 | |
| | ||||||
* | Enumerate correct list while removing nonce_gens, fix deregistration | Martin Willi | 2012-05-21 | 1 | -1/+1 | |
| | ||||||
* | Added a convenience function to dump backtraces for gdb-less debugging | Martin Willi | 2012-05-21 | 2 | -0/+26 | |
| | ||||||
* | Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, ↵ | Tobias Brunner | 2012-05-18 | 1 | -2/+2 | |
| | | | | tasks etc.). | |||||
* | pkcs8: Initialize salt and IV properly. | Tobias Brunner | 2012-05-18 | 1 | -1/+1 | |
| | ||||||
* | Add enumerator for registered nonce generators. | Tobias Brunner | 2012-05-18 | 2 | -9/+33 | |
| | ||||||
* | Add nonce plugin implementation | Adrian-Ken Rueegsegger | 2012-05-18 | 6 | -0/+271 | |
| | | | | | | | This nonce generator uses an RNG to generate nonces. The RNG quality is currently set to RNG_WEAK which is the same value used in IKE init. The plugin is enabled and thus built by default. | |||||
* | Add nonce generator interface | Adrian-Ken Rueegsegger | 2012-05-18 | 6 | -0/+163 | |
| | | | | | | | Nonce generators (nonce_gen_t) can be used to get or allocate nonces. Users can request nonce generators from the crypto factory while nonce plugins register/remove themselves to/from the crypto factory. | |||||
* | Use correct integrity_algorithm_t enum type in bench_signer() | Martin Willi | 2012-05-14 | 1 | -1/+1 | |
| | ||||||
* | Make function pointer defined with METHOD() macro non-const | Martin Willi | 2012-05-14 | 1 | -2/+2 | |
| | | | | | clang complains about it being const, and the object code generated from gcc is the same. | |||||
* | Remove unused return value of INIT(), making clang happy | Martin Willi | 2012-05-14 | 1 | -3/+2 | |
| | ||||||
* | fixed feature dependencies for CERT_TRUSTED_PUBKEY | Andreas Steffen | 2012-05-05 | 1 | -0/+5 | |
| | ||||||
* | If we load new features from a plugin, restart loading from first plugin | Martin Willi | 2012-05-03 | 1 | -0/+4 | |
| | ||||||
* | Building CERT_ANY through PEM requires either a CERT_X509 or a CERT_PGP builder | Martin Willi | 2012-05-03 | 1 | -1/+2 | |
| | ||||||
* | Added recursive read_lock support to our own implementation of rwlock_t. | Tobias Brunner | 2012-05-02 | 1 | -4/+35 | |
| | ||||||
* | Use wrapped semaphore in callback_job_t. | Tobias Brunner | 2012-05-02 | 1 | -12/+9 | |
| | ||||||
* | Added a wrapper class around POSIX semaphores. | Tobias Brunner | 2012-05-02 | 4 | -0/+193 | |
| | ||||||
* | Certificate decoding soft-depends on public key decoding of specific types | Martin Willi | 2012-05-02 | 2 | -0/+6 | |
| |