aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* Use MGF1 with SHA-512 as BLISS random oracleAndreas Steffen2015-07-274-72/+58
* Generalize c_indices generation using SHA-512 random oracle.Markku-Juhani Olavi Saarinen2015-07-271-18/+24
* Fixed several bugs in the BLISS signature generation/verification step.Markku-Juhani Olavi Saarinen2015-07-271-4/+8
* ike: Fix memory leak if remote address is keptTobias Brunner2015-07-271-0/+4
* ike-rekey: Fix cleanup() callTobias Brunner2015-07-271-2/+2
* ike-rekey: Reset IKE_SA on bus before sending CREATE_CHILD_SA responseTobias Brunner2015-07-271-1/+2
* ike-rekey: Reset IKE_SA on the bus after destroying new IKE_SATobias Brunner2015-07-271-16/+15
* daemon: Flush shunts before unloading pluginsTobias Brunner2015-07-271-0/+4
* shunt-manager: Add flush() method to properly uninstall shuntsTobias Brunner2015-07-272-4/+46
* shunt-manager: Remove stored entries if installation failsTobias Brunner2015-07-271-2/+11
* shunt-manager: Add a lock to safely access the list of shunt policiesTobias Brunner2015-07-271-3/+17
* trap-manager: Resolve race conditions between flush() and install()Tobias Brunner2015-07-271-0/+31
* trap-manager: Changed how acquires we acted on are trackedTobias Brunner2015-07-271-36/+86
* trap-manager: Properly check-in IKE_SA if initiating failsTobias Brunner2015-07-271-2/+2
* ike: Fall back to the current remote IP if it resolves to %anyTobias Brunner2015-07-271-1/+6
* ike: Use address family of local address when resolving remote hostTobias Brunner2015-07-271-1/+14
* ike-cfg: Add unit tests for ike_cfg_get_family() helperTobias Brunner2015-07-273-0/+120
* ike-cfg: Add helper function to determine address family of IP addressesTobias Brunner2015-07-272-1/+59
* host: Properly handle NULL in host_create_from_string[_and_family]Tobias Brunner2015-07-272-0/+10
* Improved legibility of swanctl CRL listings5.3.3dr1Andreas Steffen2015-07-221-1/+4
* vici: Certification Authority support added.Andreas Steffen2015-07-2118-15/+1547
* vici: Compute rekey_bytes and rekey_packets if life_bytes and life_packets ar...Andreas Steffen2015-07-201-6/+20
* ike-sa-manager: Safely access the RNG instance with an rwlockTobias Brunner2015-07-141-5/+16
* vici: Asynchronize debug loggingMartin Willi2015-07-121-1/+47
* libipsec: Add a unit-test for ESP encryption using ChaCha20Poly1305Martin Willi2015-07-123-0/+139
* libipsec: Add a unit-test test runnerMartin Willi2015-07-125-8/+93
* unit-tests: Add a IKEv2 message encryption test caseMartin Willi2015-07-123-0/+140
* unit-tests: Increase failure message buffer to hold larger hex dumpsMartin Willi2015-07-122-2/+2
* unit-tests: Forward variable argument list in TEST_SUITE_DEPENDMartin Willi2015-07-125-10/+10
* unit-tests: Load libstrongswan plugins in libcharon testsMartin Willi2015-07-122-0/+16
* chapoly: Process two Poly1305 blocks in parallel in SSSE3 driverMartin Willi2015-07-121-85/+291
* chapoly: Process four ChaCha20 blocks in parallel in SSSE3 driverMartin Willi2015-07-121-16/+207
* chapoly: Add an SSSE3 based driverMartin Willi2015-06-294-1/+514
* chapoly: Add a ChaCha20/Poly1305 driver implemented in portable CMartin Willi2015-06-294-0/+488
* chapoly: Provide a generic ChaCha20/Poly1305 AEAD supporting driver backendsMartin Willi2015-06-298-0/+679
* test-vectors: Add some initial ChaCha20/Poly1305 AEAD test vectorMartin Willi2015-06-293-0/+112
* kernel-netlink: Add ChaCha20-Poly1305 AEAD supportMartin Willi2015-06-291-0/+2
* libipsec: Create AEAD with four byte salt for ChaCha20-Poly1305Martin Willi2015-06-291-0/+1
* ikev2: Derive additional 4 byte CHILD_SA nonce keymat for ChaCha20-Poly1305Martin Willi2015-06-291-0/+1
* ikev2: Use four byte salt for ChaCha20-Poly1305 AEADMartin Willi2015-06-291-0/+1
* proposal: Add a chacha20poly1305 proposal keywordMartin Willi2015-06-291-0/+1
* crypter: Define a ChaCha20/Poly1305 AEAD algorithm identifierMartin Willi2015-06-293-3/+7
* capabilities: Handle ERANGE in user and group lookupsTobias Brunner2015-06-231-12/+48
* osx: Version bump to 5.3.2-1Martin Willi2015-06-181-1/+1
* osx: Use CodeSignOnCopy for privileged helper, as suggested by XCodeMartin Willi2015-06-181-2/+2
* charon-xpc: Use DNS non-append/replace mode in osx-attr pluginMartin Willi2015-06-181-0/+2
* osx-attr: Optionally replace existing DNS server instead of appending themMartin Willi2015-06-181-3/+27
* Remove accidentally added stamp-h1Tobias Brunner2015-06-151-1/+0
* settings: Fix out-of-tree buildTobias Brunner2015-06-111-1/+1
* stroke: Add missing include for UINT16_MAXTobias Brunner2015-06-092-0/+2