aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Reject s == 0 or r == 0 in a ECC signature.lloyd2011-05-193-13/+22
| | | | | | | | | | | | | | | In ECDSA, this cases should all be caught by the later check that R is not zero, so I don't believe there is any security danger. However the GOST 34.10 implementation did not have either check. Fortunately, the function that extracts the affine X coordinate from the Jacobian coordinates will throw an exception if the point is at infinity, so we would not in fact accept invalid signatures, but this is mostly by luck. And still represents a bit of a DoS potential. I checked the history, it looks like not checking for zeros at the start traces back to the original InSiTo code, and I copied the ECDSA code for GOST without thinking about it too much.
* Small cleanup in the Barrett reducer, now doesn't create a temp iflloyd2011-05-182-33/+35
| | | | abs(x) < modulus. Also remove unused member variables.
* Fix the very basic operations for encoding and decoding alloyd2011-05-175-95/+28
| | | | | | | | | certificate policies extension, though it's really not supported at all. Remove test code from secmem.h Fix building the examples
* Modify ECC points to do all math in Montgomery form, rather thanlloyd2011-05-176-161/+153
| | | | | | | | | | | | | converting back and forth. This gives a 10 to 20% speedup on a Core i7. In addition, the CurveGFp no longer contains a Barrett reducer, saving 3 BigInts worth of memory. Add a #if'ed out alternative to point multiplication using the Montgomery ladder technique. It runs in (more or less) constant time, but rather significantly slower than the 4 bit window technique currently used. Tweak the window sizes to match the theoretical optimums.
* Fix building the tests when ECC is turned off.lloyd2011-05-171-2/+13
|
* Add RSA constructor that does not require a password. Patch submittedlloyd2011-05-161-0/+18
| | | | to the list by William Emmanuel S. Yu <[email protected]>
* Fixes for base64 incremental decoding.lloyd2011-05-164-122/+54
| | | | | | Define the Base64_Decoder filter in terms of base64_decode Don't use locked memory in the hex or base64 filters.
* Always writing to/reading from the carry word makes valgrind unhappy.lloyd2011-05-161-1/+2
|
* Fixes for maintainer mode warningslloyd2011-05-162-5/+9
|
* The new method of doing comparisons did not work all of the time: iflloyd2011-05-132-1/+85
| | | | | | | | | | | the low bytes were equal, then the saturating subtraction result in that byte would be 0 with the high byte containing a non-zero value. To deal with this, shift and or together the two values into the low byte. Add some new tests which check out the SIMD implementation more carefully, including values that trigger the problem in the earlier version.
* Add specialization for i486 that uses -mtune=generic, as Debianlloyd2011-05-132-13/+12
| | | | | | | | | | | | invokes the build with --cpu=i486 on x86-32. Add -momit-leaf-frame-pointer to x86 specializations. Use -march=atom for atom32 as well. Use -mcpu=cell for Cell PPU - it's not documented, but GCC 4.6 has it. Remove ancient/untested rs64a support from ppc64
* Add (undocumented) option --no-optimizations which turns off alllloyd2011-05-131-9/+18
| | | | compiler optimizations in the build.
* I can't spelllloyd2011-05-134-9/+9
|
* Fix the problem that prevented the SSE2 IDEA implementation fromlloyd2011-05-123-6/+7
| | | | | | | | | | working correctly under Clang - the technique for emulating unsigned compare relied on signed overflow. The new method does not, and works under GCC, ICC, and Clang. Even better, the compare takes only 2 instructions instead of 4. Prevent using any of the asm implementations under Clang on x86-32. All of them crash under Clang 2.9, unclear why.
* Add base64_decode. Seems to work OK, though incremental decoding islloyd2011-05-125-10/+225
| | | | not well tested.
* Renaming the ppc target to ppc32 prevented -mcpu flags from being setlloyd2011-05-123-2/+8
| | | | | | | by GCC. Add Niagra targets for sparc, and extend/fix the Sun Studio flags for SPARC64.
* Add support for targetting the PowerPCSPE (an embedded PPC with anlloyd2011-05-123-5/+16
| | | | | experimental Debian port), and add aliases for ARM to match the Debian architectures.
* Modify soname to match Unix conventions at suggestion of Debianlloyd2011-05-128-23/+48
| | | | | | | | | | maintainer. Namespace the headers in /usr/local/include/botan-1.9/botan, so multiple versions can be installed in parallel. Down version to 1.9.18 since there are a good number of changes in this release already.
* Add back BigInt::to_u32bitlloyd2011-05-104-20/+55
| | | | | | | Fix BigInt::get_substring when length is equal to 32 - an overflow would cause the mask to be equal to 0 thus producing nothing at all. Disable CVC by default, it's not ready for prime time in any sense.
* Make different targets for 32 and 64 bit Atom processors, since mostlloyd2011-05-095-6/+14
| | | | consumer/desktop level Atoms are actually 32 bit.
* dword was set to a size_t if we were using a 16 bit limb. Caused by anlloyd2011-05-091-1/+1
| | | | overzealous perl script...
* Disable CMS by default, since it's pretty untested and likely unusablelloyd2011-05-064-4/+72
| | | | | | | | currently. Include the source directory name in object file names. Add some more DES test vectors.
* Search for the delimiter bytes in OAEP using a loop that doesn't havelloyd2011-05-052-25/+39
| | | | | | | conditionals to help avoid timing anylsis. Unfortunately GCC is too smart for us and compiles it to jumps anyway; probably would need to put the delim search into its own function and pass variables by volatile pointers to force the compiler to do what we want.
* Archive rebuild changed link :(lloyd2011-05-051-1/+1
|
* Basic ref on SSL clientslloyd2011-05-031-1/+29
|
* Print comments only on modules that will be usedlloyd2011-05-031-2/+7
|
* When building for GCC, always get the version number, and turn off TR1lloyd2011-05-039-31/+77
| | | | | | | | | | | and -fvisibility support if the version is too old. You can also turn them off explicitly with the (hidden) option --without-visibility. We get the version number from the binary specified with --cc-bin, if the user set that, rather than from plain 'g++'. Fix Solaris install - apparently 'install' cmd is broken/dumb. Fix Ekopath flags for submodels.
* Tweak settings for SuperH setup, based on Debian bug 594159. Since aslloyd2011-05-023-8/+9
| | | | | far as I know this is the first and only real use, or even test, of botan on the SH, I'll let them pick the names and flags...
* Don't justify text, makes tables look terriblelloyd2011-05-021-0/+1
|
* Doc and theming updateslloyd2011-05-0210-49/+86
|
* A few more WinSock fixes for TLS exampleslloyd2011-04-293-9/+12
|
* Calling &str[str.size()] is only valid if str is const; otherwise thelloyd2011-04-298-40/+110
| | | | | | | | | | | | | | results are undefined. This happens to work under GCC and most other compilers, but does not under Visual C++ 2010. This broke hex_encode when encoding an empty input, and this subsequently broke SSL handshaking. 2010 includes a TR1 that works fine for SSL, but it puts the headers in the main header space rather than under tr1/, so account for that. Hack the socket header into working under WinSock Tick version to 1.10.0
* Log the chosen MP modulelloyd2011-04-291-0/+3
|
* Fix download links.lloyd2011-04-292-29/+15
| | | | Prune the users list and update some dead links
* Tick to 1.9.17 release1.9.17lloyd2011-04-293-3/+5
|
* Add new options --cc-bin for setting the name/path to the compilerlloyd2011-04-291-6/+14
| | | | binary. Nicer than having to edit the makefile...
* Default sun4u to sparc32-v9 rather than sparc64lloyd2011-04-293-4/+7
|
* Log that we are assuming the existence of TR1 during configurelloyd2011-04-291-6/+11
|
* Flatten out the mp directory since no alternative asm implemenationslloyd2011-04-256-13/+3
| | | | | | | for Montgomery or multiply/square currently exist and almost ceratainly won't be added during 1.10 Fix the name for Sun Studio in mp_asm64
* Rename AES_XXX_Intel to AES_XXX_NI, since AMD's Bulldozer will alsolloyd2011-04-255-33/+37
| | | | support AES-NI.
* Use STLport with Sun Studio by default on Linux. It is probably thelloyd2011-04-252-1/+3
| | | | | | | | | right thing for most modern distros, and if someone is using Sun CC on Linux they probably know if they don't want that. Record successful Sun Studio 5.10 build, also note that Clang 2.9 also seems to miscompile SSE2 IDEA. The Clang 2.9 build on FreeBSD did not have this failure, wonder what happened there.
* Document KDF properly.lloyd2011-04-2211-235/+218
| | | | | | | | Split log by release series instead of year. Make dedicated landing page. If SPHINX_OPTS is set, it will be passed to sphinx-build
* Merge last bits from the tutorial.lloyd2011-04-2218-1666/+746
| | | | | | Many other cleanups and changes in the docs. Make the index page a functional standin for the current site so the entire website can be built using Sphinx.
* Rename all references of ia32 to x86-32 and amd64 to x86-64.lloyd2011-04-2251-205/+213
| | | | | | Back the reported version from 1.10.0 to 1.9.17 for the time being. Still on the fence if this will be 1.10.0 or another release candidate instead.
* Some small cleanups in output. Fully namespace optparselloyd2011-04-221-32/+32
|
* Intel C++ doesn't seem to have an option for setting the soname, so itlloyd2011-04-223-2/+3
| | | | | | | | | | | | will default to the full output file name. That actually worked as expected when the so was always written as libbotan-1.8.2, but doesn't anymore since soname does not match the written file. This probably won't work right on Windows, but I don't have access to Intel C++ on Windows. Note good Intel C++ 11.1 build in build log Note that CPython 2.7 works for configuring the build
* Enable unix_procs for FreeBSD. It was disabled in 2006 to worklloyd2011-04-2113-294/+311
| | | | | | | | | | | | | | | | | | | | | | | | around a bug in FreeBSD 6.1, which is long EOL. If we can't figure out the CPU in configure.py, if running verbosely dump the entire list of CPUs we know about. Some doc cleanups. Rename the 'beos' target to 'haiku', since testing shows that botan can't compile under the old BeOS GCC 2.95 anyway. Remove the call to idle_time in the stats entropy source - it causes a crash on Haiku R1-alpha2 somewhere inside a system DLL. I didn't bother debugging it beyond looking at the backtrace. Add a 'bepc' alias for i386 as that is what Haiku reports its processor as. Fix the install dirs to match Haiku R1, though apparently they will change in R2 anyway when they add package management. Enable use of gmtime_r on Haiku.
* More doc updateslloyd2011-04-219-267/+396
|
* Some doc updates, include the DSA examples in pubkey, remove outdatedlloyd2011-04-2010-99/+62
| | | | | and probably useless threads section, also fix compilation of several examples.
* It's likely that other FPE methods will be desirable once they arelloyd2011-04-206-12/+85
| | | | | | | standardized by NIST; the FPE currently included is just a random one that was relatively easy to implement. Move the header to fpe_fe1.h, and rename the function. Update the example and add some documentation for it.
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-21 01:36:13 +0000