Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | | | fixed typo | Andreas Steffen | 2012-04-03 | 1 | -2/+2 | |
| | | | ||||||
* | | | Added test vectors for AES-CMAC. | Tobias Brunner | 2012-04-03 | 3 | -0/+153 | |
| | | | ||||||
* | | | Implemented AES-CMAC based PRF and signer. | Tobias Brunner | 2012-04-03 | 10 | -0/+922 | |
| | | | | | | | | | | | | | | | | | | The cmac plugin implements AES-CMAC as defined in RFC 4493 and the signer and PRF based on it as defined in RFC 4494 and RFC 4615, respectively. | |||||
* | | | Fixed GNU license header in hmac and xcbc plugins. | Tobias Brunner | 2012-04-03 | 2 | -4/+4 | |
| | | | ||||||
* | | | Add support for dnQualifier in DNs. | Tobias Brunner | 2012-03-29 | 3 | -1/+6 | |
| | | | ||||||
* | | | Don't cast second argument of mem_printf_hook (%b) to size_t. | Tobias Brunner | 2012-03-27 | 4 | -7/+8 | |
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | Also treat the given number as unsigned int. Due to the printf hook registration the second argument of mem_printf_hook (if called via printf etc.) is always of type int*. Casting this to a size_t pointer and then dereferencing that as int does not work on big endian machines if int is smaller than size_t (e.g. on ppc64). In order to make this change work if the argument is of a type larger than int, size_t for instance, the second argument for %b has to be casted to (u_)int. | |||||
* | | Added support for untruncated MD5 and SHA1 HMACs in ESP as used in RFC 4595. | Tobias Brunner | 2012-02-27 | 1 | -0/+2 | |
| | | | | | | | | This requires a Linux kernel >= 2.6.33. | |||||
* | | Compiler warnings fixed. | Tobias Brunner | 2012-02-14 | 2 | -2/+2 | |
| | | ||||||
* | | Moved log message for unexpected ASN.1 objects to level 2. | Tobias Brunner | 2012-02-01 | 1 | -1/+1 | |
| | | | | | | | | This avoids error messages if later builders can successfully decode something. | |||||
* | | Added support for PKCS#5 v2 schemes when decrypting PKCS#8 files. | Tobias Brunner | 2012-02-01 | 3 | -61/+323 | |
| | | ||||||
* | | Added support for encrypted PKCS#8 files (for some PKCS#5 v1.5 schemes). | Tobias Brunner | 2012-02-01 | 3 | -4/+261 | |
| | | ||||||
* | | Added support to parse PKCS#8 encoded ECDSA private keys. | Tobias Brunner | 2012-02-01 | 3 | -12/+28 | |
| | | ||||||
* | | OpenSSL plugin parses ECDSA private keys with explicitly specified EC ↵ | Tobias Brunner | 2012-02-01 | 1 | -9/+30 | |
| | | | | | | | | | | | | | | parameters. This is needed in case the key itself does not contain the parameters, which is the case for PKCS#8. | |||||
* | | Add builder part for parameters from algorithmIdentifier. | Tobias Brunner | 2012-02-01 | 2 | -1/+4 | |
| | | ||||||
* | | Return parsed parameters from algorithmIdentifier if they are an OID (aka EC ↵ | Tobias Brunner | 2012-02-01 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | named curve). Explicit EC parameters are not supported with this function, but before this change no parameters were actually ever returned. | |||||
* | | Parse RSA private keys from PKCS#8 encoded blobs. | Tobias Brunner | 2012-02-01 | 4 | -1/+151 | |
| | | ||||||
* | | Added PKCS#8 stub plugin. | Tobias Brunner | 2012-02-01 | 4 | -0/+139 | |
| | | ||||||
* | | Disable crypto benchmarking if CLOCK_THREAD_CPUTIME_ID is not available. | Tobias Brunner | 2012-01-30 | 1 | -0/+10 | |
| | | ||||||
* | | Cache list of plugin names to further simplify its usage. | Tobias Brunner | 2012-01-19 | 2 | -20/+49 | |
| | | | | | | | | Also helpful for ipsec statusall to avoid having to enumerate plugins. | |||||
* | | Function added to plugin_loader to get a list of the names of loaded plugins. | Tobias Brunner | 2012-01-19 | 2 | -1/+34 | |
| | | ||||||
* | | Various style, typo and whitespace corrections | Adrian-Ken Rueegsegger | 2012-01-13 | 1 | -3/+2 | |
| | | ||||||
* | | Android 4 requires LOCAL_MODULE_TAGS to be set for all modules. | Tobias Brunner | 2012-01-12 | 1 | -0/+2 | |
| | | | | | | | | | | | | | | Because all packages are now marked as optional executables that are to be installed on the final system have to be added to PRODUCT_PACKAGES in build/target/product/core.mk. Dependencies (such as libraries) are installed automatically. | |||||
* | | Fixed additional typos in comments and log messages. | Tobias Brunner | 2012-01-12 | 2 | -2/+2 | |
| | | ||||||
* | | Fix whitespaces | Adrian-Ken Rueegsegger | 2012-01-12 | 2 | -16/+16 | |
| | | ||||||
* | | Some documentation corrections | Adrian-Ken Rueegsegger | 2012-01-12 | 8 | -33/+32 | |
| | | ||||||
* | | Fix gettid() on Android, which is defined in unistd.h there. | Tobias Brunner | 2012-01-12 | 1 | -3/+4 | |
| | | ||||||
* | | Use native gettid() if available (which is the case on Android). | Tobias Brunner | 2012-01-10 | 1 | -3/+11 | |
| | | ||||||
* | | Allow callers to force ASN.1 date encoding as GENERALIZEDTIME. | Tobias Brunner | 2011-12-23 | 6 | -14/+16 | |
| | | ||||||
* | | Avoid integer overflow when parsing ASN.1 dates. | Tobias Brunner | 2011-12-23 | 1 | -2/+2 | |
| | | | | | | | | This only works properly if sizeof(time_t) > 4. | |||||
* | | Properly ASN.1 encode dates in certificates depending on the year. | Tobias Brunner | 2011-12-23 | 6 | -16/+21 | |
| | | ||||||
* | | Added atomic compare and swap operations. | Tobias Brunner | 2011-12-23 | 2 | -0/+48 | |
| | | | | | | | | Using a GCC atomic builtin if available or a global mutex otherwise. | |||||
* | | Also log PGP parsing in ASN log group. | Tobias Brunner | 2011-12-16 | 2 | -19/+19 | |
| | | ||||||
* | | Log messages for PKCS1 and PEM parsing in ASN log group. | Tobias Brunner | 2011-12-16 | 2 | -11/+11 | |
| | | ||||||
* | | Log most X.509 related messages in new ASN log group. | Tobias Brunner | 2011-12-16 | 5 | -57/+57 | |
| | | ||||||
* | | Log ASN.1 parsing in new ASN debug group. | Tobias Brunner | 2011-12-16 | 2 | -26/+26 | |
| | | ||||||
* | | Added ASN debug group to log low-level encoding/decoding (ASN.1, X.509). | Tobias Brunner | 2011-12-16 | 2 | -0/+4 | |
| | | | | | | | | | | This will allow us to remove quite some clutter from the LIB debug group for higher debug levels. | |||||
* | | Log native thread ID when a thread is created. | Tobias Brunner | 2011-12-16 | 1 | -1/+16 | |
| | | | | | | | | | | If possible gettid() is used, otherwise pthread_self() is logged (which is not completely portable, but seems to work on most supported platforms). | |||||
* | | Log worker thread ID with two digits. | Tobias Brunner | 2011-12-16 | 1 | -2/+2 | |
| | | ||||||
* | | Make sure the certificate cache is flushed when plugins are unloaded. | Tobias Brunner | 2011-12-15 | 1 | -0/+3 | |
| | | | | | | | | | | This avoids segmentation faults when plugins implementing cert_t are already unloaded when the cache is flushed during destruction. | |||||
* | | Be less verbose if plugin dependecy not satisfied | Martin Willi | 2011-12-07 | 1 | -1/+1 | |
| | | ||||||
* | | Create a dummy pthread key for value "0", as some buggy PKCS#11 libraries ↵ | Martin Willi | 2011-12-07 | 1 | -0/+10 | |
| | | | | | | | | mangle it | |||||
* | | fixed copy-and-paste error | Andreas Steffen | 2011-12-04 | 1 | -1/+1 | |
| | | ||||||
* | | Reverse the changes made to openssl plugin for signature verification | Sansar Choinyambuu | 2011-11-28 | 3 | -63/+0 | |
| | | ||||||
* | | Changed the static function name in openssl_rsa_public_key object | Sansar Choinyambuu | 2011-11-28 | 1 | -2/+2 | |
| | | | | | | | | Removed unused chunk variable from PTS verify_quote_signature function | |||||
* | | use openssl rsa_verify function | Sansar Choinyambuu | 2011-11-28 | 3 | -0/+63 | |
| | | ||||||
* | | Reverse the changes made to openssl plugin for signature verification | Sansar Choinyambuu | 2011-11-28 | 3 | -63/+0 | |
| | | ||||||
* | | Changed the static function name in openssl_rsa_public_key object | Sansar Choinyambuu | 2011-11-28 | 1 | -3/+2 | |
| | | | | | | | | Removed unused chunk variable from PTS verify_quote_signature function | |||||
* | | use openssl rsa_verify function | Sansar Choinyambuu | 2011-11-28 | 3 | -0/+65 | |
| | | ||||||
* | | extended bio_reader and bio_writer to handle u_int64_t | Andreas Steffen | 2011-11-28 | 5 | -0/+84 | |
| | | ||||||
* | | Added ctime function to white list | Sansar Choinyambuu | 2011-11-28 | 1 | -0/+1 | |
| | |