aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Add 2x unrolling for SHACAL2 on x86Jack Lloyd2017-08-141-2/+71
|
* Add support for SHACAL2 using x86 SHA extensionsJack Lloyd2017-08-144-0/+109
|
* Notify callers of parallel ops for AES, IDEA, Noekeon, SHACAL2 and ThreefishJack Lloyd2017-08-1410-0/+85
|
* Pass by reference for MSVC x86Jack Lloyd2017-08-141-6/+8
| | | | | It complains it cannot pass the __m128i without loss of alignment. (Why, I have no idea.)
* Add SHACAL2 in generic SIMDJack Lloyd2017-08-136-0/+229
| | | | Bit over 2x faster on my desktop
* Add SHACAL2Jack Lloyd2017-08-136-1/+4303
| | | | 256 bit ARX block cipher with hardware support, what's not to love.
* Modify GOST-34.11 hash to avoid a GCC miscompilation.Jack Lloyd2017-08-131-1/+4
| | | | | | | | | | | | For whatever reason GCC 7 on i386 miscompiles this loop under -O3. I was not able to reduce the bug to a small testcase - extracting the problem section of the code to its own file, it behaves correctly. Also oddly, I was never able to repro this using Arch's gcc-multilib i386 compiler. But when compiled with the 'native' i386 compiler in a chroot it immediately fails. See GH #1148 and GH #882
* Merge GH #1150 Silence clang warning in create_private_key()Jack Lloyd2017-08-131-1/+1
|\
| * Silence clang warning in create_private_key().Alexander Bluhm2017-08-131-1/+1
| | | | | | | | | | | | If compiled with OpenSSL, clang emitted the warning "using the result of an assignment as a condition without parentheses". Putting parentheses around the assignment fixes this.
* | Merge GH #1149 FFI test must search test data relative to data dirJack Lloyd2017-08-131-1/+1
|\ \ | |/ |/|
| * FFI test must search test data relative to data dir.Alexander Bluhm2017-08-131-1/+1
|/ | | | | | | The Test::data_file() method adds the current data dir prefix to the test data path so that it can be overwritten with the --data-dir option. This was missing in the ffi test and could result in a botan_x509_cert_load_file exception.
* Update for 2.2.0 release2.2.0Jack Lloyd2017-08-072-4/+4
|
* Merge GH #1145 Enable http_util in the module policy filesJack Lloyd2017-08-074-1/+6
|\
| * Add http_util to module policies (GH #1109)René Korthaus2017-08-074-1/+6
|/ | | | | | http_util is required by the x509 module to perform online OCSP checks, which should be defaulted to ON. Without being part of the policy, it would be disabled.
* Merge GH #1144 Fix bug for ECDSA signing an all-zero hashJack Lloyd2017-08-074-2/+36
|\
| * Fix issue signing an ECDSA hash of all-zeros (GH #1143)Jack Lloyd2017-08-074-2/+36
| | | | | | | | | | The tests were generated by Botan but I was able to verify the resulting signatures using Golang's ecdsa module.
* | A few more FFI testsJack Lloyd2017-08-071-1/+39
|/
* Update newsJack Lloyd2017-08-071-2/+14
|
* Merge GH #1142 Add SM2 encryption schemeJack Lloyd2017-08-0714-17/+561
|\
| * When creating an EC curve with default params, use algo-specific curveJack Lloyd2017-08-041-1/+17
| | | | | | | | | | Eg previously ./botan keygen --algo=GOST-34.10 would create a GOST-34.10 curve over P-256, probably not useful in most cases.
| * Add SM2 encryption to FFIJack Lloyd2017-08-044-1/+130
| | | | | | | | Also add hooks for keygen, etc
| * Add SM2 encryption schemeJack Lloyd2017-08-0410-15/+414
| | | | | | | | This is a contribution from Ribose Inc (@riboseinc)
* | Merge GH #1139 Replace --destdir flag with DESTDIR env variableJack Lloyd2017-08-078-31/+146
|\ \
| * | Handle and test error cases in prepend_destdir()Simon Warta2017-08-042-44/+50
| | | | | | | | | | | | | | | | | | - only / file systems supported - only absolute prefixes are supported - result must not escape DESTDIR
| * | Fix typo in script nameSimon Warta2017-08-042-1/+1
| | |
| * | Pull out python_unittests_unix.pySimon Warta2017-08-043-30/+56
| | | | | | | | | | | | | | | The path tests can only work on UNIX-like OSs because Python's path joining is required to use / as the path separator
| * | Revert "configure.py: raise error when --prefix is not absolute path"Simon Warta2017-08-041-4/+0
| | | | | | | | | | | | | | | | | | | | | This reverts commit b6b575d961b15d59f9382086fd59d1e5062a3cdb. In order to disallow prepend_prefix for relative paths, we do not need to disallow a relativ --refix for users that do not use DESTDIR
| * | configure.py: raise error when --prefix is not absolute pathZoltan Gyarmati2017-08-041-0/+4
| | |
| * | Turn --destdir option into an environment variable, fixes #1101, fixes #996, ↵Zoltan Gyarmati2017-08-046-31/+114
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | supersedes #997 This commit removes the (broken) --destdir command line option and introduces the DESTDIR environment variable for the 'make install' target. When it's set, the installation will take place in the DESTDIR directory, under the prefix set by --prefix, with all of the internal references (pkgconfig file, etc) containing only the prefix. This behavior is more standard (as in autotools and co.), so makes packaging easier. Based on work of danimo and zgyarmati
* | | Merge GH #1138 Add support for Windows sockets in http_util and TLS command ↵Jack Lloyd2017-08-076-4/+144
|\ \ \ | | | | | | | | | | | | line utils
| * | | Fix for amalgamation build on WindowsRené Korthaus2017-08-041-0/+1
| | | |
| * | | Use anonymous namespace to fix static buildRené Korthaus2017-08-041-0/+4
| | | |
| * | | Add support for Windows sockets to http_utilRené Korthaus2017-08-045-4/+139
| |/ / | | | | | | | | | | | | | | | Based on the work by @slicer4ever, adds support for Windows sockets to http_util. As a bonus, we get Windows support for tls_client and tls_server CLI.
* | | Merge GH #1114 Add Streebog hash (GOST 34.11-2012)Jack Lloyd2017-08-0711-1/+1931
|\ \ \
| * | | Remove STREEBOG_AX and STREEBOG_C from header.Daniel Wyatt2017-08-041-4/+0
| | | | | | | | | | | | | | | | (Missed hunk in previous commit)
| * | | streebog: Addressing review comments.Daniel Wyatt2017-08-043-852/+46
| | | |
| * | | Add Streebog hash (GOST R 34.11-2012).Daniel Wyatt2017-08-0411-1/+2741
| |/ /
* | / Update news and todoJack Lloyd2017-08-042-3/+9
| |/ |/| | | | | [ci skip]
* | Complete merge of #1137 ChaCha_RNGJack Lloyd2017-08-0410-392/+518
|\ \ | |/ |/| | | | | For whatever reason only the first commit in that branch got merged to master. Not sure what happened.
| * Reset the ChaCha key in clearJack Lloyd2017-08-031-0/+1
| | | | | | | | | | This is not necessary for setup, but we want to zero the key out in the event someone calls clear explicitly.
| * Use new reset_reseed_counter function within Stateful_RNG as wellJack Lloyd2017-08-031-3/+3
| |
| * Add Stateful_RNG::reset_reseed_counterJack Lloyd2017-08-035-6/+9
| | | | | | | | Instead of giving subclasses access to the variable directly.
| * Refactor stateful RNG tests to cover both HMAC_DRBG and ChaCha_RNGJack Lloyd2017-08-038-383/+506
| |
| * Add ChaCha_RNGJack Lloyd2017-08-039-48/+451
| |
* | Merge GH #1137 Add ChaCha_RNGJack Lloyd2017-08-039-48/+451
|\ \
| * | Add ChaCha_RNGJack Lloyd2017-07-319-48/+455
| | |
* | | Initialize member var in Certificate_Status_RequestJack Lloyd2017-08-031-1/+2
| | | | | | | | | | | | | | | This var is only used when encoding so was never read from, but leaving it uninitialized is bad news. Flagged by Coverity.
* | | Change how CPU endianness is detected.Jack Lloyd2017-08-032-17/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is kind of an artificial change to appease Coverity but maybe a bit cleaner in any case. The issue is Coverity detects the throw in the case of PDP endian being found at runtime, and assumes it might happen. And since OS::get_processor_timestamp calls CPUID on x86 (to check for RDTSC), it might throw. And so on up the call chain until it detect a throw escaping from ~Timer_Scope in speed.cpp, which would crash. However I do not have a PDP-endian x86 around to confirm this ... :)
* | | Add virtual destructor to FFI botan_structJack Lloyd2017-08-031-1/+1
| | | | | | | | | | | | | | | | | | As we do inherit from it, and delete through the base pointer. Found by Coverity scanner.
* | | Test encoding of challenge password in PKCS10 requestsJack Lloyd2017-08-031-0/+5
| | |