Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add SM2 encryption scheme | Jack Lloyd | 2017-08-04 | 10 | -15/+414 |
| | | | | This is a contribution from Ribose Inc (@riboseinc) | ||||
* | Complete merge of #1137 ChaCha_RNG | Jack Lloyd | 2017-08-04 | 10 | -392/+518 |
|\ | | | | | | | | | For whatever reason only the first commit in that branch got merged to master. Not sure what happened. | ||||
| * | Reset the ChaCha key in clear | Jack Lloyd | 2017-08-03 | 1 | -0/+1 |
| | | | | | | | | | | This is not necessary for setup, but we want to zero the key out in the event someone calls clear explicitly. | ||||
| * | Use new reset_reseed_counter function within Stateful_RNG as well | Jack Lloyd | 2017-08-03 | 1 | -3/+3 |
| | | |||||
| * | Add Stateful_RNG::reset_reseed_counter | Jack Lloyd | 2017-08-03 | 5 | -6/+9 |
| | | | | | | | | Instead of giving subclasses access to the variable directly. | ||||
| * | Refactor stateful RNG tests to cover both HMAC_DRBG and ChaCha_RNG | Jack Lloyd | 2017-08-03 | 8 | -383/+506 |
| | | |||||
| * | Add ChaCha_RNG | Jack Lloyd | 2017-08-03 | 9 | -48/+451 |
| | | |||||
* | | Merge GH #1137 Add ChaCha_RNG | Jack Lloyd | 2017-08-03 | 9 | -48/+451 |
|\ \ | |||||
| * | | Add ChaCha_RNG | Jack Lloyd | 2017-07-31 | 9 | -48/+455 |
| | | | |||||
* | | | Initialize member var in Certificate_Status_Request | Jack Lloyd | 2017-08-03 | 1 | -1/+2 |
| | | | | | | | | | | | | | | | This var is only used when encoding so was never read from, but leaving it uninitialized is bad news. Flagged by Coverity. | ||||
* | | | Change how CPU endianness is detected. | Jack Lloyd | 2017-08-03 | 2 | -17/+34 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is kind of an artificial change to appease Coverity but maybe a bit cleaner in any case. The issue is Coverity detects the throw in the case of PDP endian being found at runtime, and assumes it might happen. And since OS::get_processor_timestamp calls CPUID on x86 (to check for RDTSC), it might throw. And so on up the call chain until it detect a throw escaping from ~Timer_Scope in speed.cpp, which would crash. However I do not have a PDP-endian x86 around to confirm this ... :) | ||||
* | | | Add virtual destructor to FFI botan_struct | Jack Lloyd | 2017-08-03 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | As we do inherit from it, and delete through the base pointer. Found by Coverity scanner. | ||||
* | | | Test encoding of challenge password in PKCS10 requests | Jack Lloyd | 2017-08-03 | 1 | -0/+5 |
| | | | |||||
* | | | Add a test of PGP S2K iteration encoding | Jack Lloyd | 2017-08-03 | 1 | -0/+53 |
| | | | |||||
* | | | Add release-2 and coverity_scan branches to Travis build | Jack Lloyd | 2017-08-03 | 1 | -0/+2 |
| |/ |/| | |||||
* | | Add explicit tests for RDRAND_RNG and System_RNG | Jack Lloyd | 2017-08-03 | 2 | -9/+105 |
| | | |||||
* | | Fix some maintainer mode warnings | Jack Lloyd | 2017-08-03 | 3 | -9/+9 |
| | | |||||
* | | Merge GH #1094 Add initial BearSSL provider | Jack Lloyd | 2017-08-02 | 8 | -4/+445 |
|\ \ | |||||
| * | | BearSSL: replace more NULLs with nullptr | Patrick Wildt | 2017-07-10 | 1 | -4/+4 |
| | | | | | | | | | | | | Based on feedback from @securitykernel on the PR. | ||||
| * | | BearSSL: implement PR feedback and compare ECGroup OID name | Patrick Wildt | 2017-07-05 | 4 | -18/+35 |
| | | | | | | | | | | | | | | | | | | | | | This commit implements the feedback from @securitykernel on the PR and also changes the EC Group comparison to use the OID, akin to OpenSSL. The EC Group comparison was needed before GH #1093 was merged, but now we can go use the OpenSSL variant. | ||||
| * | | BearSSL: move includes into extern "C" | Patrick Wildt | 2017-07-05 | 2 | -3/+8 |
| | | | | | | | | | | | | | | | Without the specific extern "C" declaration for the includes the C functions might get C++'d so the linking stage fails. | ||||
| * | | BearSSL: Support for ECDSA | Patrick Wildt | 2017-07-05 | 4 | -2/+242 |
| | | | | | | | | | | | | | | | | | | This commit adds support for ECDSA using BearSSL as a backend. This means we can test BearSSL's ECDSA algorithms using the extensive Botan testsuite. | ||||
| * | | BearSSL: Initial support and hash tests | Patrick Wildt | 2017-07-05 | 5 | -2/+181 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | BearSSL is an implementation of the SSL/TLS protocol in C aiming to be correct and secure, small and highly portable. Thus making it nicer to be included in a rather sparse bootloader. This commit adds support for BearSSL's hash routines only, with more stuff coming up in following commits. The goal is to be able to test BearSSL using Botan's extensive testsuite. | ||||
* | | | Merge GH #1136 Improvements to compiler runtime checks | Jack Lloyd | 2017-08-02 | 5 | -33/+56 |
|\ \ \ | |_|/ |/| | | |||||
| * | | Add two digit clang version test from crystax ndk | Simon Warta | 2017-08-01 | 1 | -0/+14 |
| | | | |||||
| * | | Log success/failure without early return in version_from_compiler_output() | Simon Warta | 2017-07-31 | 1 | -3/+3 |
| | | | |||||
| * | | Use clang/mac code branch when cc_version is unset | Simon Warta | 2017-07-31 | 1 | -3/+3 |
| | | | | | | | | | | | | This is easier to extend than the elif construction | ||||
| * | | Remove special case and early return for msvc matching | Simon Warta | 2017-07-31 | 1 | -8/+5 |
| | | | |||||
| * | | Use native compiler versioning of MSVC | Simon Warta | 2017-07-31 | 4 | -12/+12 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | While using marketing names like 2013, 2015 etc. is more convenient at first sight, it requires keeping a table about all supported compiler versions, as there is no formular to calculate between the representations. Keeping a list of compilers leads to the following issue: if one version of Botan is released in 2017, requiring MSVS 2015 for one module, this source can be compiled using MSVS 2015 and 2017 but not a future version like 2019. Also preview/development versions of MSVC that may use an intermediate version number cannot be handled with the marketing name table because they may be unknown to the general public. | ||||
| * | | Remove low compiler version restrictions | Simon Warta | 2017-07-31 | 1 | -3/+3 |
| | | | | | | | | | | | | | | | | | | All minimum compiler versions in rdseed are less or equal the minimum compiler version for the Botan 2.x branch. Remove those explicit restrictions to allow users with unknown cc_version to compile rdseed | ||||
| * | | Explicitly handle negative cases in supported_compiler() | Simon Warta | 2017-07-31 | 1 | -8/+13 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Two cases only returned a falsy None implicitly by reaching the end of the function: - when user's compiler is not listed in the list of compiler choices - when user's compiler version is None and the module requires a min version This changes no behavior. | ||||
| * | | Refactor supported_compiler | Simon Warta | 2017-07-31 | 1 | -5/+12 |
| | | | |||||
* | | | Additional news entries | Jack Lloyd | 2017-07-31 | 1 | -0/+4 |
|/ / | |||||
* | | Merge GH #1133 Fix MSVC compiler detection fixing #1125 | Jack Lloyd | 2017-07-31 | 3 | -40/+134 |
|\ \ | |||||
| * | | Use _MSC_VER to get MSVC version | Simon Warta | 2017-07-30 | 3 | -17/+17 |
| | | | |||||
| * | | Adapt MSVC version regexp to non-english outputs | Simon Warta | 2017-07-30 | 2 | -1/+10 |
| | | | |||||
| * | | Fix compiler version matching patterns | Simon Warta | 2017-07-30 | 2 | -9/+15 |
| | | | |||||
| * | | Refactor and test compiler version detection | Simon Warta | 2017-07-30 | 2 | -34/+113 |
| | | | |||||
* | | | Merge GH #1134 Run pylint on install.py | Jack Lloyd | 2017-07-31 | 2 | -23/+35 |
|\ \ \ | |||||
| * | | | Deduplicate pylint arguments in lint.sh | Simon Warta | 2017-07-30 | 1 | -7/+11 |
| | | | | |||||
| * | | | Run pylint on install.py in CI | Simon Warta | 2017-07-30 | 1 | -0/+5 |
| | | | | |||||
| * | | | install.py: silence remaining code style issues in main() | Simon Warta | 2017-07-30 | 1 | -0/+1 |
| | | | | |||||
| * | | | install.py: let main() explicitly take arguments and return 0 | Simon Warta | 2017-07-30 | 1 | -4/+3 |
| | | | | |||||
| * | | | install.py: pull out calculate_exec_mode | Simon Warta | 2017-07-30 | 1 | -7/+10 |
| | | | | |||||
| * | | | install.py: disable two pylint warnings locally | Simon Warta | 2017-07-30 | 1 | -2/+2 |
| | | | | |||||
| * | | | install.py: fix whitespace issues found by pylint | Simon Warta | 2017-07-30 | 1 | -6/+6 |
| |/ / | |||||
* | | | Merge GH #1132 Fix Doxygen errors and add -Wdocumentation flag to clang ↵ | Jack Lloyd | 2017-07-31 | 12 | -18/+14 |
|\ \ \ | | | | | | | | | | | | | maintainer build | ||||
| * | | | Add missing override annotation | Jack Lloyd | 2017-07-28 | 1 | -1/+1 |
| | | | | |||||
| * | | | Fix warnings from clangs -Wdocumentation flag | Jack Lloyd | 2017-07-28 | 11 | -17/+13 |
| |/ / | |||||
* | | | Merge GH #1131 Confirm OpenSSL supports curve at runtime before attempting ↵ | Jack Lloyd | 2017-07-31 | 1 | -12/+35 |
|\ \ \ | | | | | | | | | | | | | to use it |