Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Move ISA optimized versions under the main algo dir | Jack Lloyd | 2016-11-03 | 15 | -16/+5 |
| | | | | | | | | Previously it made sense for them to be in distinct dirs because they were standalone. However with #580 that is no longer the case, so move them to subdirs. Configure knows that anything underneath a directory has a dependency on the parent dir, so update info.txt files accordingly to remove explicit dependencies where set. | ||||
* | Deprecate LibraryInitializer | Jack Lloyd | 2016-11-03 | 3 | -28/+7 |
| | | | | | Now that #668 is landed I'm comfortable that we will not need any type of global init. | ||||
* | Remove stray non-ASCII chars which broke compilation on non UTF-8 code pages. | Jack Lloyd | 2016-11-02 | 1 | -2/+2 |
| | | | | GH #707 | ||||
* | Remove lock and alias map from SCAN_Name | Jack Lloyd | 2016-11-02 | 1 | -4/+0 |
| | | | | Not used anymore. | ||||
* | Merge GH #360 Extend configure to output bakefiles | Jack Lloyd | 2016-11-02 | 2 | -0/+89 |
|\ | |||||
| * | Update release notes | Daniel Neus | 2016-11-02 | 1 | -0/+3 |
| | | | | | | | | [ci-skip] | ||||
| * | Add support to output bakefiles | Daniel Neus | 2016-11-02 | 1 | -0/+86 |
| | | | | | | | | Bakefile is a tool which can be used to create Visual Studio or Xcode project files | ||||
* | | Change TLS default policy to disable DSA, CCM-8, and static RSA | Jack Lloyd | 2016-11-02 | 4 | -29/+107 |
|/ | | | | | | | | | | | | | | | Disables static RSA by default. The advantage here is twofold: enforcing forward security and protecting TLS servers from oracle attacks since by default they will never negotiate a suite which forces them to act as a decryption oracle. Some applications/users may be forced to enable RSA in order to speak with old or misconfigured peers, but these can be the exception not the default. Disable DSA and CCM-8 by default: if you need to enable these things, you know it. Adds TLS policy hooks to enforce DSA key sizes, default 2048 bits. Remove an incorrect warning about DTLS in the manual; the sequence number window check prevents this scenario from occuring. | ||||
* | Merge GH #702 Fix ECKCDSA verification. Closes #701 | Jack Lloyd | 2016-11-01 | 1 | -1/+1 |
|\ | |||||
| * | Fix ECKCDSA verification problem | Never | 2016-11-01 | 1 | -1/+1 |
|/ | |||||
* | Merge GH #700 Faster ECKCDSA verification | Jack Lloyd | 2016-10-31 | 1 | -10/+8 |
|\ | |||||
| * | ECKCDSA improved verification (Shamirs Trick for speed and calculate length ↵ | Never | 2016-10-31 | 1 | -10/+8 |
| | | | | | | | | of r) | ||||
* | | Test PK key creation via create_private_key API | Jack Lloyd | 2016-10-31 | 12 | -174/+106 |
|/ | |||||
* | Avoid possibility of mismatched brackets. | Jack Lloyd | 2016-10-31 | 1 | -2/+6 |
| | | | | Found by cppcheck | ||||
* | Update 1.11.34 release notes | Jack Lloyd | 2016-10-31 | 1 | -0/+14 |
| | |||||
* | Fix path to news file | Jack Lloyd | 2016-10-31 | 1 | -1/+1 |
| | |||||
* | Merge GH #699 Add socket-based HTTP client | Jack Lloyd | 2016-10-31 | 2 | -32/+101 |
|\ | |||||
| * | HTTP for plain sockets | Jack Lloyd | 2016-10-30 | 2 | -32/+101 |
| | | |||||
* | | Move license and news to top level directory | Jack Lloyd | 2016-10-31 | 6 | -6/+7 |
| | | | | | | | | | | These files are important so make them easy to find for someone unpacking the tarball for the first time. | ||||
* | | Fix for amalgamation build | Jack Lloyd | 2016-10-31 | 1 | -0/+2 |
| | | |||||
* | | More fixes for the fuzzer setup | Jack Lloyd | 2016-10-31 | 2 | -14/+14 |
| | | | | | | | | [ci skip] | ||||
* | | Fix configure when building outside of main source dir | Jack Lloyd | 2016-10-31 | 1 | -3/+12 |
| | | | | | | | | | | When configuring from fuzzer dir, object files would get names starting with '..' | ||||
* | | Compile fix | Jack Lloyd | 2016-10-31 | 1 | -2/+2 |
| | | |||||
* | | Import fuzzer drivers | Jack Lloyd | 2016-10-30 | 30 | -4/+1104 |
|/ | | | | | | | | | | | Originally from https://github.com/randombit/botan-fuzzers but merging to the main tree (without the corpus files, since I suspect the corpus files in that repo are not useful anymore) Adds --unsafe-fuzzer-mode which can be used to selectively disable cryptographic checks which get in the way of fuzzer testing. This setting is reflected in build.h and in the version string. Right now it doesn't actually disable anything. | ||||
* | Add P-521 ECDSA test | Jack Lloyd | 2016-10-30 | 1 | -0/+9 |
| | | | | GH #681 | ||||
* | Merge GH #696 Add ECKCDSA and ECGDSA speed tests | Jack Lloyd | 2016-10-30 | 1 | -0/+62 |
|\ | |||||
| * | Add speedtests for ECKCDSA and ECGDSA | Never | 2016-10-30 | 1 | -0/+62 |
| | | |||||
* | | Fix crash when default IV is empty. GH #697 | Jack Lloyd | 2016-10-30 | 1 | -1/+2 |
| | | |||||
* | | Salsa20 accepts empty IVs | Jack Lloyd | 2016-10-30 | 2 | -4/+9 |
| | | | | | | | | Treats it as an all-zero 64-bit IV. GH #697 | ||||
* | | Update 1.11.34 release notes | Jack Lloyd | 2016-10-30 | 1 | -7/+19 |
| | | |||||
* | | Remove openpgp module | Jack Lloyd | 2016-10-30 | 3 | -266/+0 |
| | | | | | | | | | | | | | | Just handled base64 encoding/decoding with a CRC and that's it. This would be better off being rewritten as part of a larger effort to support a meaningful subset of OpenPGP, and does not seem useful on its own. | ||||
* | | Remove use of deprecated constructors in PKCS11 tests | Jack Lloyd | 2016-10-30 | 1 | -6/+6 |
|/ | |||||
* | Merge GH #692 Remove deprecated RNGs and entropy sources | Jack Lloyd | 2016-10-30 | 27 | -2990/+38 |
|\ | |||||
| * | Remove HMAC_RNG, X9.31-RNG, BeOS stats, EGD reader, Unix process runner | Jack Lloyd | 2016-10-28 | 27 | -2990/+38 |
| | | | | | | | | | | Change AutoSeeded_RNG to use SHA-384, SHA-256, SHA-3(256), or SHA-1, whichever is available (in that order). | ||||
* | | Merge GH #693 Filter tests | Jack Lloyd | 2016-10-30 | 2 | -17/+117 |
|\ \ | |||||
| * | | More filter tests | Jack Lloyd | 2016-10-29 | 2 | -17/+117 |
| |/ | | | | | | | Simplify algo_filt.cpp using create_or_throw | ||||
* / | Add note on status of Pipe/Filter API | Jack Lloyd | 2016-10-29 | 1 | -0/+15 |
|/ | | | | [ci skip] | ||||
* | Update release notes with 1.11.34 so far | Jack Lloyd | 2016-10-28 | 1 | -0/+10 |
| | | | | [ci skip] | ||||
* | Merge GH #691/#488 Add GMAC. Add MessageAuthenticationCode::start_msg | Jack Lloyd | 2016-10-28 | 9 | -9/+389 |
|\ | |||||
| * | Add MAC::start_msg, update GMAC | Jack Lloyd | 2016-10-28 | 4 | -47/+59 |
| | | | | | | | | | | | | | | | | GMAC needs a per-message nonce specified with `start`, and other MACs are capable of using nonces (Skein-MAC, for instance) so move this API up to MAC class. Change GMAC::clone to clone the owned cipher. | ||||
| * | Implements GMAC with GHASH. | Matthias Gierlings | 2016-10-28 | 7 | -98/+192 |
| | | | | | | | | | | Adds support for Galois Message Authentication Code calculation based on GHASH, rather than GCM_Mode. | ||||
| * | Added implementation for GMAC | Matthias Gierlings | 2016-10-27 | 9 | -58/+332 |
| | | | | | | | | | | | | - Added GMAC class - Integrated GMAC into MAC-Class test bench. Run GMAC tests using ./botan-test mac | ||||
* | | Add TLS callbacks for debug and error logging. | Jack Lloyd | 2016-10-28 | 1 | -2/+28 |
| | | | | | | | | | | Not currently called but leaves us the opening to use them in the future without breaking ABI. | ||||
* | | HMAC_DRBG - Fix constructor init order. Use create_or_throw to simplify. | Jack Lloyd | 2016-10-28 | 1 | -6/+3 |
| | | |||||
* | | Update modern policy: Add NewHope, SQL, ChaCha20 SSE2. Prohibit TLS-CBC | Jack Lloyd | 2016-10-28 | 1 | -1/+8 |
| | | |||||
* | | Remove bogus filter dependency in TSS | Jack Lloyd | 2016-10-28 | 2 | -2/+0 |
| | | | | | | | | [ci skip] | ||||
* | | Merge GH #687 Avoid unused return value warning under GCC | Jack Lloyd | 2016-10-28 | 1 | -2/+3 |
|\ \ | |||||
| * | | Fixes randombit/botan#677 | Matthias Gierlings | 2016-10-27 | 1 | -2/+3 |
| |/ | |||||
* | | Merge GH #690 HMAC_DRBG: Make max_number_of_bytes_per_request configurable | Jack Lloyd | 2016-10-28 | 3 | -28/+139 |
|\ \ | |||||
| * | | make max_number_of_bytes_per_request configurable | Daniel Neus | 2016-10-28 | 3 | -28/+139 |
|/ / |