Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Reset the ChaCha key in clear | Jack Lloyd | 2017-08-03 | 1 | -0/+1 |
| | | | | | This is not necessary for setup, but we want to zero the key out in the event someone calls clear explicitly. | ||||
* | Use new reset_reseed_counter function within Stateful_RNG as well | Jack Lloyd | 2017-08-03 | 1 | -3/+3 |
| | |||||
* | Add Stateful_RNG::reset_reseed_counter | Jack Lloyd | 2017-08-03 | 5 | -6/+9 |
| | | | | Instead of giving subclasses access to the variable directly. | ||||
* | Refactor stateful RNG tests to cover both HMAC_DRBG and ChaCha_RNG | Jack Lloyd | 2017-08-03 | 8 | -383/+506 |
| | |||||
* | Add ChaCha_RNG | Jack Lloyd | 2017-08-03 | 9 | -48/+451 |
| | |||||
* | Add explicit tests for RDRAND_RNG and System_RNG | Jack Lloyd | 2017-08-03 | 2 | -9/+105 |
| | |||||
* | Fix some maintainer mode warnings | Jack Lloyd | 2017-08-03 | 3 | -9/+9 |
| | |||||
* | Merge GH #1094 Add initial BearSSL provider | Jack Lloyd | 2017-08-02 | 8 | -4/+445 |
|\ | |||||
| * | BearSSL: replace more NULLs with nullptr | Patrick Wildt | 2017-07-10 | 1 | -4/+4 |
| | | | | | | | | Based on feedback from @securitykernel on the PR. | ||||
| * | BearSSL: implement PR feedback and compare ECGroup OID name | Patrick Wildt | 2017-07-05 | 4 | -18/+35 |
| | | | | | | | | | | | | | | This commit implements the feedback from @securitykernel on the PR and also changes the EC Group comparison to use the OID, akin to OpenSSL. The EC Group comparison was needed before GH #1093 was merged, but now we can go use the OpenSSL variant. | ||||
| * | BearSSL: move includes into extern "C" | Patrick Wildt | 2017-07-05 | 2 | -3/+8 |
| | | | | | | | | | | Without the specific extern "C" declaration for the includes the C functions might get C++'d so the linking stage fails. | ||||
| * | BearSSL: Support for ECDSA | Patrick Wildt | 2017-07-05 | 4 | -2/+242 |
| | | | | | | | | | | | | This commit adds support for ECDSA using BearSSL as a backend. This means we can test BearSSL's ECDSA algorithms using the extensive Botan testsuite. | ||||
| * | BearSSL: Initial support and hash tests | Patrick Wildt | 2017-07-05 | 5 | -2/+181 |
| | | | | | | | | | | | | | | | | | | BearSSL is an implementation of the SSL/TLS protocol in C aiming to be correct and secure, small and highly portable. Thus making it nicer to be included in a rather sparse bootloader. This commit adds support for BearSSL's hash routines only, with more stuff coming up in following commits. The goal is to be able to test BearSSL using Botan's extensive testsuite. | ||||
* | | Merge GH #1136 Improvements to compiler runtime checks | Jack Lloyd | 2017-08-02 | 5 | -33/+56 |
|\ \ | |||||
| * | | Add two digit clang version test from crystax ndk | Simon Warta | 2017-08-01 | 1 | -0/+14 |
| | | | |||||
| * | | Log success/failure without early return in version_from_compiler_output() | Simon Warta | 2017-07-31 | 1 | -3/+3 |
| | | | |||||
| * | | Use clang/mac code branch when cc_version is unset | Simon Warta | 2017-07-31 | 1 | -3/+3 |
| | | | | | | | | | | | | This is easier to extend than the elif construction | ||||
| * | | Remove special case and early return for msvc matching | Simon Warta | 2017-07-31 | 1 | -8/+5 |
| | | | |||||
| * | | Use native compiler versioning of MSVC | Simon Warta | 2017-07-31 | 4 | -12/+12 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | While using marketing names like 2013, 2015 etc. is more convenient at first sight, it requires keeping a table about all supported compiler versions, as there is no formular to calculate between the representations. Keeping a list of compilers leads to the following issue: if one version of Botan is released in 2017, requiring MSVS 2015 for one module, this source can be compiled using MSVS 2015 and 2017 but not a future version like 2019. Also preview/development versions of MSVC that may use an intermediate version number cannot be handled with the marketing name table because they may be unknown to the general public. | ||||
| * | | Remove low compiler version restrictions | Simon Warta | 2017-07-31 | 1 | -3/+3 |
| | | | | | | | | | | | | | | | | | | All minimum compiler versions in rdseed are less or equal the minimum compiler version for the Botan 2.x branch. Remove those explicit restrictions to allow users with unknown cc_version to compile rdseed | ||||
| * | | Explicitly handle negative cases in supported_compiler() | Simon Warta | 2017-07-31 | 1 | -8/+13 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Two cases only returned a falsy None implicitly by reaching the end of the function: - when user's compiler is not listed in the list of compiler choices - when user's compiler version is None and the module requires a min version This changes no behavior. | ||||
| * | | Refactor supported_compiler | Simon Warta | 2017-07-31 | 1 | -5/+12 |
| | | | |||||
* | | | Additional news entries | Jack Lloyd | 2017-07-31 | 1 | -0/+4 |
|/ / | |||||
* | | Merge GH #1133 Fix MSVC compiler detection fixing #1125 | Jack Lloyd | 2017-07-31 | 3 | -40/+134 |
|\ \ | |||||
| * | | Use _MSC_VER to get MSVC version | Simon Warta | 2017-07-30 | 3 | -17/+17 |
| | | | |||||
| * | | Adapt MSVC version regexp to non-english outputs | Simon Warta | 2017-07-30 | 2 | -1/+10 |
| | | | |||||
| * | | Fix compiler version matching patterns | Simon Warta | 2017-07-30 | 2 | -9/+15 |
| | | | |||||
| * | | Refactor and test compiler version detection | Simon Warta | 2017-07-30 | 2 | -34/+113 |
| | | | |||||
* | | | Merge GH #1134 Run pylint on install.py | Jack Lloyd | 2017-07-31 | 2 | -23/+35 |
|\ \ \ | |||||
| * | | | Deduplicate pylint arguments in lint.sh | Simon Warta | 2017-07-30 | 1 | -7/+11 |
| | | | | |||||
| * | | | Run pylint on install.py in CI | Simon Warta | 2017-07-30 | 1 | -0/+5 |
| | | | | |||||
| * | | | install.py: silence remaining code style issues in main() | Simon Warta | 2017-07-30 | 1 | -0/+1 |
| | | | | |||||
| * | | | install.py: let main() explicitly take arguments and return 0 | Simon Warta | 2017-07-30 | 1 | -4/+3 |
| | | | | |||||
| * | | | install.py: pull out calculate_exec_mode | Simon Warta | 2017-07-30 | 1 | -7/+10 |
| | | | | |||||
| * | | | install.py: disable two pylint warnings locally | Simon Warta | 2017-07-30 | 1 | -2/+2 |
| | | | | |||||
| * | | | install.py: fix whitespace issues found by pylint | Simon Warta | 2017-07-30 | 1 | -6/+6 |
| |/ / | |||||
* | | | Merge GH #1132 Fix Doxygen errors and add -Wdocumentation flag to clang ↵ | Jack Lloyd | 2017-07-31 | 12 | -18/+14 |
|\ \ \ | | | | | | | | | | | | | maintainer build | ||||
| * | | | Add missing override annotation | Jack Lloyd | 2017-07-28 | 1 | -1/+1 |
| | | | | |||||
| * | | | Fix warnings from clangs -Wdocumentation flag | Jack Lloyd | 2017-07-28 | 11 | -17/+13 |
| |/ / | |||||
* | | | Merge GH #1131 Confirm OpenSSL supports curve at runtime before attempting ↵ | Jack Lloyd | 2017-07-31 | 1 | -12/+35 |
|\ \ \ | | | | | | | | | | | | | to use it | ||||
| * | | | Check if curve is built into OpenSSL at runtime | René Korthaus | 2017-07-28 | 1 | -12/+35 |
| |/ / | |||||
* | | | Add test for FFI keywrap, and constify args | Jack Lloyd | 2017-07-31 | 3 | -9/+46 |
| | | | |||||
* | | | Merge GH #1129 Split up ffi.cpp | Jack Lloyd | 2017-07-31 | 19 | -2314/+2552 |
|\ \ \ | |||||
| * | | | Split up ffi.cpp into several files | Jack Lloyd | 2017-07-31 | 19 | -2314/+2552 |
|/ / / | | | | | | | | | | | | | It was getting pretty big and would get worse over time, eg whenver I get around to adding TLS support. | ||||
* | | | Merge GH #1128 Improve FFI exception safety | Jack Lloyd | 2017-07-31 | 5 | -703/+368 |
|\ \ \ | |||||
| * | | | Add missing return in ffi_delete_object | Jack Lloyd | 2017-07-25 | 1 | -4/+5 |
| | | | | | | | | | | | | | | | | | | | | Somehow this still passed all the tests, downside of 0 as the success return I suppose. | ||||
| * | | | Merge commit 'e015fd170' into ffi-fixes | Jack Lloyd | 2017-07-25 | 3 | -2/+13 |
| |\ \ \ | | | | | | | | | | | | | | | | From PR #1097 | ||||
| | * | | | Don't crash if openssl can't allocate a new context | Kirill A. Korinsky | 2017-06-29 | 3 | -2/+13 |
| | | | | | |||||
| * | | | | In FFI, check the object magic before deleting | Jack Lloyd | 2017-07-25 | 1 | -30/+42 |
| | | | | | | | | | | | | | | | | | | | | | | | | | Previously any X_destroy function would just delete its arg regardless of whatever the application passed in. | ||||
| * | | | | Better exception guarding in FFI | Jack Lloyd | 2017-07-25 | 2 | -671/+312 |
| | |/ / | |/| | | | | | | | | | | | | | | Based on PR #1097 but I wanted to decrease the verbosity of the resulting code. |