aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Final updates for 1.7.5 release1.7.5lloyd2008-04-122-2/+2
|
* Updates for 1.7.5, now tentatively planned for tomorrow.lloyd2008-04-122-18/+17
|
* Remove setting of unused blinder_size config varlloyd2008-04-121-1/+0
|
* Modify areas that still assumed Pipe::message_id was exactly a u32bit.lloyd2008-04-126-35/+40
| | | | | | | | | | This was done by replacing Pipe::message_id with a completely opaque type and adding only the necessary operations. In this revision Pipe::message_id does remain a u32bit. However it may become an opaque type in the future. Move the Invalid_Message_Number exception to Pipe since that is the only piece of code which throws it.
* Use existing reference to p in Elg_Core constructor for small code cleanuplloyd2008-04-121-2/+2
|
* In decimal string inputs: ignore spaces, and for other bad inputs throwlloyd2008-04-121-0/+7
| | | | an exception saying so.
* Make the size of the random value used to blind the private keylloyd2008-04-122-15/+5
| | | | operations (to prevent timing attacks) a compile time constant.
* Remove Config::option_as_u32bit - the only advantage it had over callinglloyd2008-04-127-42/+3
| | | | | | | | | | | | | to_u32but on the return value from Config::option was that it passed it through parse_expr, which did some simple evaluation tricks so you could say 64*1024. That does not seem worth the cost in code, especially because most of the values so controlled are probably never changed. By making them compile time constants, additional optimizations are possible in the source as well as by the compiler. Remove the pkcs8_tries config option. Hardcode that value to 3 instead. I want to rewrite that code in the relatively near future and all that will (hopefully) go away.
* Make the memory allocator's chunk size a compile time constant, via alloyd2008-04-126-26/+4
| | | | new build.h macro BOTAN_MEM_POOL_CHUNK_SIZE
* Update the changeloglloyd2008-04-121-5/+4
|
* Fix some relatively minor linker namespace pollution issueslloyd2008-04-114-33/+29
|
* Wrap lines to 80 columnslloyd2008-04-102-4/+12
|
* Rename fips140.h to selftest.h, since it doesn't really have much to dolloyd2008-04-103-23/+9
| | | | | | | | | | | with FIPS-140 aside from being a startup self test. Remove the test of X9.19 MAC at startup because it's not that important, and loading it in the startup means a prototypical object will be created and exist in memory for the entire process runtime. This actually raises an interesting idea, that periodically the cache of objects could be cleared and, if one is needed again, it can be created again as if it was the first time.
* Remove unused Config::option_as_listlloyd2008-04-102-9/+0
|
* Remove severa global configuration variables related to entropy gathering,lloyd2008-04-1011-54/+24
| | | | instead passing those values as arguments.
* Remove the config option rng/ms_capi_prov_type - the CryptoAPI entropylloyd2008-04-102-9/+3
| | | | | source will default to using the PROV_RSA_FULL provider if an empty string is passed to the constructor.
* Remove the pem/ config arguments. Replace with arguments to the individuallloyd2008-04-103-24/+13
| | | | functions in pem.h. All have defaults with reasonable values.
* Add a second argument to X509_Cert_Options, which replaceslloyd2008-04-103-12/+7
| | | | | | | | the configuration value default_expire Remove signing_offset as well - it is only used for setting the default time of a X509_Cert_Options: not worth the cost of a global variable.
* Remove the unused function Config::option_as_boollloyd2008-04-102-17/+0
|
* Update ca.cpp with new signature of X509_CA::sign_requestlloyd2008-04-101-1/+5
|
* Change the interface of X509_CA::sign_request as follows:lloyd2008-04-103-21/+15
| | | | | | | | | | | - The allow_ca policy value is no longer checked. Callers should check if the request is for a CA cert and treat it accordingly; this makes it simpler to to case-by-case decisions (expecially among multiple threads) - Instead of a single time value, a u32bit representing the number of seconds from now the certificate should expire, the start and end times are passed explicitly as two X509_Time values.
* Fix some completely bogus code in zlib.cpp that was causing compilation ↵lloyd2008-04-101-8/+8
| | | | | | failures. Seemingly from a bad merge around Christmas?
* Summary of the notable changes since 1.7.4lloyd2008-04-101-0/+9
|
* Change the copyrights in all files in the Botan tree to directly reflectlloyd2008-04-10474-477/+507
| | | | | | the actual copyright holders. For rationale, see my post to botan-devel on April 9, subject 'Changing license to directly reflect contributors' (http://www.randombit.net/pipermail/botan-devel/2008-April/000527.html)
* Remove Extensions::copy_this(). Define the Extensions copy constructor inlloyd2008-04-072-19/+25
| | | | terms of Extensions::operator=
* Timer::combine_timers should be protected, not private, since subclasses needlloyd2008-04-071-1/+1
| | | | to access it.
* Move combine_timers from a free-standing function in util.h to a privatelloyd2008-04-073-3/+3
| | | | | static function of the Timer base class - since that is the only code which actually needs to access it.
* Don't hard-code the user and group when doing an install: instead uselloyd2008-04-0612-48/+10
| | | | | whatever the current user/group is. If you wish to override, edit the makefile or override the INSTALL_CMD_* variables on the command line.
* Remove the Named_Mutex_Holder and associated code. Convert all uses tolloyd2008-04-026-77/+56
| | | | | | | | | | | | | | instead allocate a reference to a mutex locally and use the more typical Mutex_Holder RAII object. Named_Mutex_Holder (and in particular the string->mutex mappings contained in the global state) have been found to be pretty expensive in at least some situations (see post by Jack Cummings to monotone-devel 2008-03-12), and doesn't really buy us that much in terms of ease of use. Also, it relies on the global state object, which has shown itself to be a rich source of race conditions and locking bugs. The intent is to incrementally remove all of the shared / global state and require applications to maintain that state where necessary.
* Bump version in configure.pl to 1.7.5lloyd2008-03-311-1/+1
|
* Startup a changelog entry for 1.7.5 to document notable stuff since 1.7.4lloyd2008-03-141-0/+4
|
* Wrap lineslloyd2008-03-142-2/+4
|
* Use a special typedef, Pipe::message_id, rather than a bare u32bit,lloyd2008-03-143-23/+25
| | | | to represent the message number in a Pipe
* Add a new constructor for DataSource_Stream taking in a std::istream.lloyd2008-03-112-8/+25
| | | | | Previously the only method allowed was with a pathname, which is pretty inflexible since it prevents you from using devices like std::cin, etc
* In DataSink_Stream, allow explicitly setting a pathname (forlloyd2008-03-112-14/+18
| | | | | | identification purposes) when passing in a std::ostream, since there is no portable way to go from a std::ostream to the file or other device that it names
* Update mp_asm64 module to use new signatures for word_madd{2,3} functions1.7.4lloyd2008-03-101-6/+6
|
* Changes for 1.7.4lloyd2008-03-103-2/+11
|
* Mostly revert 2f4fd18182d5a75c40cd831e7ee3c314be5c57d6, only keep thelloyd2008-03-10437-437/+437
| | | | | updated dates on files that have actually changed this year. This makes the diff across versions readable again.
* Add to the todo: Tests for the simple functions (bigint_*, rotate_left, etc)lloyd2008-03-101-0/+4
|
* On NetBSD with GCC, define _NETBSD_SOURCE; according to a report on thelloyd2008-03-101-1/+1
| | | | Monotone mailing list, it was needed for a build.
* Unroll the loops in SHA_160::hash that unpack the input and perform thelloyd2008-03-091-4/+15
| | | | | expansion. While I would prefer to have the compiler to this, using GCC 4.1.2 it is 4% faster on a Core2 Q6600 with the loops partially unrolled.
* Add a version of bit_ops.h with bswapl/bswapq statements. The xor_buflloyd2008-03-092-0/+91
| | | | | | | | takes advantage of unaligned reads/writes being legal for some extra performance, but should be rewritten to use SSE2 and non-termporal writes. Most of the functions in bit_ops.cpp are implemented by x86-64, just not easily accessible from C++
* Increase the size of the buffers in ARC4 and WiderWake4+1 from 1K tolloyd2008-03-092-2/+6
| | | | DEFAULT_BUFFERSIZE (normally 4K); measurably faster on a Core2
* If the macro BOTAN_TARGET_UNALIGNED_LOADSTOR_OK (from build.h) is on,lloyd2008-03-091-0/+86
| | | | | | | | | | | | | the word read/write functions will be faster through the use of (slightly unsafe) pointer manipulations. On some CPUs (like SPARC), these antics can cause crashes (usually visible by SIGBUS) if what you are attempting to read or write as an integer is not aligned on a word boundary. However they are safe on x86 and x86-64. Performance increases across the board on a Core2. In most algorithms the improvement seems to be about 3%, except a few standouts like RC6 (15%), MD4 (20%), RIPEMD-128 (8%). Will be better with faster xor_buf and byte swapping.
* Rename offset_ variables to idx_lloyd2008-03-091-30/+30
|
* Avoid closing an invalid file descriptor, even though it is basicallylloyd2008-03-091-1/+1
| | | | harmless, to avoid a valgrind warning
* Alas, my definition of the new improved reverse_bytes for 64-bit values waslloyd2008-03-091-2/+5
| | | | wrong, and didn't work at all. New corrected (and tested) version.
* Alter bigint_madd2 and bigint_madd3 to take only 3 (4, resp) arguments,lloyd2008-03-097-53/+56
| | | | | | | with the last one being both one of the input values and the output carry register, since almost always they were in fact the same variable. Also update the x86 and x86-64 modules.
* Also inline xor_buf, both for immediate effeciency gains and for futurelloyd2008-03-092-37/+31
| | | | writing of it in assembly.
* Put reverse_bytes into bit_ops.h so they can be inlined. Rewrite the versionlloyd2008-03-082-33/+17
| | | | | | | for 64-bit to not use 64-bit constants - that way GCC won't complain everwhere. Plan is for a module to replace all of these with asm (bswap, xchg on x86), at least for x86-64