Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Merge GH #2298 Clean up prime generation logic | Jack Lloyd | 2020-03-06 | 3 | -44/+52 |
|\ | |||||
| * | Clean up prime generation logic slightly | Jack Lloyd | 2020-03-06 | 3 | -44/+52 |
| | | | | | | | | | | | | We were trying to generate safe primes using a weak check on q but actually this was rounded up to 128 bit probability check anyway. So just do that from the start then check p=2*q+1 | ||||
* | | Merge GH #2297 Add BigInt::ct_cond_add | Jack Lloyd | 2020-03-06 | 4 | -25/+38 |
|\ \ | |||||
| * | | Add BigInt::ct_cond_add | Jack Lloyd | 2020-03-06 | 4 | -25/+38 |
| |/ | | | | | | | Also make low_zero_bits constant time. | ||||
* | | Merge GH #2296 Optimize inverse_mod | Jack Lloyd | 2020-03-06 | 3 | -95/+95 |
|\ \ | |||||
| * | | Optimize inverse_mod | Jack Lloyd | 2020-03-06 | 3 | -95/+95 |
| |/ | | | | | | | About 25% faster | ||||
* | | Merge GH #2295 Optimize NIST field reduction functions | Jack Lloyd | 2020-03-06 | 1 | -94/+90 |
|\ \ | |||||
| * | | Optimize NIST prime reductions | Jack Lloyd | 2020-03-06 | 1 | -94/+90 |
| |/ | | | | | | | | | Depending on curve, improves ECDSA sign and verify performance by between 3 and 9%. | ||||
* | | Merge GH #2294 Remove install_name hacks for macOS | Jack Lloyd | 2020-03-06 | 7 | -27/+1 |
|\ \ | |||||
| * | | Remove support for running macOS binaries from local dir | Jack Lloyd | 2020-03-04 | 7 | -27/+1 |
| | | | | | | | | | | | | | | | | | | | | | | | | This is a lot of complications just to work around a user misaprehension about ld paths. And likely most macOS users are getting it via Homebrew anyway. Taken from #1505 | ||||
* | | | Remove commented out non-constant-time code | Jack Lloyd | 2020-03-06 | 1 | -19/+0 |
| |/ |/| | | | | | Quick testing indicates it is not even faster than the CT version anymore. | ||||
* | | Reorder report from TLS HTTP test server cli | Jack Lloyd | 2020-03-04 | 1 | -1/+1 |
|/ | |||||
* | Merge GH #2293 Fix DER encoded ECDSA signatures with PKCS11 | Jack Lloyd | 2020-03-04 | 2 | -9/+37 |
|\ | |||||
| * | Add missing overloads to PKCS11_ECDSA_PrivateKey | René Korthaus | 2020-03-04 | 2 | -9/+37 |
|/ | | | | | | | | Since we don't derive from ECDSA_PrivateKey, message_parts() and message_part_size() need to be implemented additionally here. Fixes generating PKCS#11 ECDSA signatures as a DER sequence, which is required by strongswan, for example. | ||||
* | Merge GH #2278 Support raw block ciphers from CommonCrypto | Jack Lloyd | 2020-03-03 | 3 | -8/+17 |
|\ | |||||
| * | CommonCrypto: improve name parsing for block cipher | Richard Huveneers | 2020-02-18 | 3 | -8/+17 |
| | | | | | | | | | | | | make_commoncrypto_block_cipher called commoncrypto_opts_from_algo to parse the supplied name. commoncrypto_opts_from_algo requires the supplied string to contain a cipher mode and non-empty padding which made make_commoncrypto_block_cipher always fail. The logic to parse just the algo_name has been moved to a seperate function commoncrypto_opts_from_algo_name. | ||||
* | | Merge GH #2289 Avoid inlining the deprecated modular inverse functions | Jack Lloyd | 2020-03-03 | 3 | -13/+21 |
|\ \ | |||||
| * | | Avoid inlining the deprecated modular inverse functions | Jack Lloyd | 2020-03-02 | 3 | -13/+21 |
| | | | | | | | | | | | | | | | | | | | | | | | | Since doing so breaks ABI which otherwise is not touched so far in 2.14.0 release. Add BOTAN_DEPRECATED_API which is combination of DLL export and a deprecation warning. | ||||
* | | | Fuzzer improvements | Jack Lloyd | 2020-03-03 | 2 | -19/+23 |
| | | | |||||
* | | | Fix SHACAL2 AVX2 inlining | Jack Lloyd | 2020-03-03 | 2 | -13/+22 |
| | | | | | | | | | | | | | | | If compiled without -mavx2 (eg in amalgamation) things would not be inlined correctly | ||||
* | | | Update expiration of git signing PGP key | Jack Lloyd | 2020-03-03 | 1 | -26/+33 |
| | | | |||||
* | | | Fix formatting | Jack Lloyd | 2020-03-03 | 1 | -1/+1 |
|/ / | |||||
* | | Update news | Jack Lloyd | 2020-03-02 | 1 | -8/+10 |
| | | |||||
* | | Merge GH #2288 Avoid using symlink on Windows even when cross compiling | Jack Lloyd | 2020-03-02 | 1 | -13/+21 |
|\ \ | |||||
| * | | Avoid using symlink on Windows even when cross compiling | Jack Lloyd | 2020-03-02 | 1 | -13/+21 |
|/ / | | | | | | | Fixes #2286. See also #2285. | ||||
* | | Update news | Jack Lloyd | 2020-03-01 | 1 | -0/+22 |
| | | |||||
* | | Merge GH #2287 Remove use of BEEA for modular inversion computations | Jack Lloyd | 2020-03-01 | 11 | -393/+490 |
|\ \ | |||||
| * | | Clarify const-time guarantees of inverse_mod function [ci skip] | Jack Lloyd | 2020-03-01 | 1 | -2/+5 |
| | | | |||||
| * | | Remove use of Binary Extended Euclidean Algorithm for inversion | Jack Lloyd | 2020-03-01 | 11 | -393/+487 |
|/ / | | | | | | | | | Instead use two specialized algorithms, one for odd modulus and the other for power of 2 modulus, then combine the results using CRT. | ||||
* | | Remove unused member variable | Jack Lloyd | 2020-03-01 | 2 | -3/+1 |
| | | |||||
* | | Fix shadow warnings from GCC | Jack Lloyd | 2020-03-01 | 1 | -2/+2 |
| | | |||||
* | | Merge GH #2280 Add support for CryptoAPI certstore on MinGW | Jack Lloyd | 2020-02-22 | 5 | -2/+17 |
|\ \ | |||||
| * | | Disable certstore system test on Wine (cross-mingw64 target) - fixes CI | PGP | 2020-02-22 | 1 | -0/+4 |
| | | | |||||
| * | | Conditionally disable test case (feature macro: BOTAN_HAS_CERTSTOR_WINDOWS) | pgp | 2020-02-21 | 1 | -0/+7 |
| | | | |||||
| * | | Use WINCRYPT_UNUSED_PARAM instead of NULL in CertFindCertificateInStore as well | pgp | 2020-02-21 | 1 | -1/+1 |
| | | | |||||
| * | | Avoid mingw warning in case of NULL as unused argument to win32 API that ↵ | pgp | 2020-02-21 | 1 | -1/+3 |
| | | | | | | | | | | | | accept non-pointer types | ||||
| * | | Enable certstore_system_windows also for mingw configuration | PGP | 2020-02-20 | 2 | -0/+2 |
|/ / | |||||
* | | Correct comment [ci skip] | Jack Lloyd | 2020-02-20 | 1 | -1/+1 |
| | | |||||
* | | Merge GH #2279 Avoid a crash in system_rng test on macOS 10.5 | Jack Lloyd | 2020-02-19 | 1 | -1/+5 |
|\ \ | |||||
| * | | Fix a crash in System_RNG on macOS 10.15 | Jack Lloyd | 2020-02-19 | 1 | -1/+5 |
|/ / | | | | | | | See #2268 | ||||
* | | Move Clang 8 build down in the Travis list | Jack Lloyd | 2020-02-18 | 1 | -8/+8 |
| | | |||||
* | | In X509 DN fuzzer allow the names to be different lengths | Jack Lloyd | 2020-02-18 | 1 | -8/+3 |
| | | | | | | | | | | No reason to restrict them to have the same length here since the encodings can differ (UTF-8 vs UCS-4, etc) | ||||
* | | Merge GH #2277 Avoid double free in PKCS8::load_key under Clang 8 | Jack Lloyd | 2020-02-18 | 4 | -2/+135 |
|\ \ | |/ |/| | |||||
| * | use bind rather than a lambda | Hannes Rantzsch | 2020-02-18 | 1 | -2/+6 |
| | | | | | | | | This avoids crashing due to a bug in Clang 8. | ||||
| * | travis: run tests on Ubuntu with Clang 8 | Hannes Rantzsch | 2020-02-18 | 2 | -0/+12 |
| | | |||||
| * | test case to reproduce the bug | Hannes Rantzsch | 2020-02-18 | 1 | -0/+117 |
| | | |||||
* | | Merge GH #2272 Fix header inclusion for CommonCrypto code | Jack Lloyd | 2020-02-15 | 6 | -14/+11 |
|\ \ | |||||
| * | | Fix | Jack Lloyd | 2020-02-15 | 1 | -0/+1 |
| | | | |||||
| * | | Fix inclusion of headers for commoncrypto module | Jack Lloyd | 2020-02-15 | 5 | -14/+10 |
| | | | | | | | | | | | | GH #2271 | ||||
* | | | Merge GH #2270 Small cleanups | Jack Lloyd | 2020-02-15 | 3 | -7/+13 |
|\ \ \ |