Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | | | Add ability to specify iterations when encrypting a private key | Jack Lloyd | 2017-02-26 | 7 | -38/+390 | |
| | | | | | | | | | | | | | | | | GH #896 | |||||
* | | | | Document new C APIs added in GH #946 | Jack Lloyd | 2017-03-29 | 1 | -5/+186 | |
| | | | | ||||||
* | | | | Merge GH #946 Expose multiple precision integers in C interface | Jack Lloyd | 2017-03-29 | 5 | -27/+731 | |
|\ \ \ \ | ||||||
| * | | | | Expose BigInt API subset to C API | Jack Lloyd | 2017-03-28 | 5 | -27/+731 | |
| | | | | | | | | | | | | | | | | | | | | Also adds RSA key constructors using BN | |||||
* | | | | | Merge GH #947 Add support for getentropy syscall | Jack Lloyd | 2017-03-29 | 5 | -1/+79 | |
|\ \ \ \ \ | ||||||
| * | | | | | Use getentropy(2) as random source. | Alexander Bluhm | 2017-03-29 | 5 | -1/+79 | |
| | |_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Gather entropy from system call getentropy(2). This is available since in OpenBSD 5.6 and Solaris 11.3. It can provide up to 256 bytes entropy from the kernel without blocking. As a system call it does not need a file descriptor and works in chroot(2) environments without device nodes. | |||||
* | | | | | Merge GH #945 Remove old timing test suite | Jack Lloyd | 2017-03-29 | 19 | -610/+5 | |
|\ \ \ \ \ | |/ / / / |/| | | | | ||||||
| * | | | | Remove old timing test suite | Jack Lloyd | 2017-03-28 | 19 | -610/+5 | |
| |/ / / | | | | | | | | | | | | | Replaced by version in cli added in #894 | |||||
* | | | | Update release notes | Jack Lloyd | 2017-03-28 | 1 | -0/+15 | |
| | | | | | | | | | | | | | | | | [ci skip] | |||||
* | | | | Note that bcrypt bug was introduced in 1.11.0 | Jack Lloyd | 2017-03-28 | 1 | -2/+4 | |
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | Specifically 9644a3ecebb15. So 1.10 was not affected, as it instead throws an exception for passwords longer than 56 chars, which is incompatible with other bcrypt APIs but does not introduce any security problems. [ci skip] | |||||
* | | | Merge GH #944 Add check_key to C API | Jack Lloyd | 2017-03-28 | 4 | -2/+28 | |
|\ \ \ | ||||||
| * | | | Expose PK::check_key functions in C interface | Jack Lloyd | 2017-03-27 | 4 | -2/+28 | |
| | | | | ||||||
* | | | | Merge GH #942 Avoid passing IP as hostname in tls_client command line util | Jack Lloyd | 2017-03-28 | 2 | -1/+15 | |
|\ \ \ \ | ||||||
| * | | | | Add documentation that SNI must be FQDN. | Alexander Bluhm | 2017-03-27 | 1 | -0/+4 | |
| | | | | | | | | | | | | | | | | | | | | server_info parameter of TLS::Client must not be an IP address. | |||||
| * | | | | tls_client must not pass an IP address as server information | Alexander Bluhm | 2017-03-25 | 1 | -1/+11 | |
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | RFC 6066 section 3 says: Literal IPv4 and IPv6 addresses are not permitted in "HostName". But if a user passes an IP address to botan tls_client as connect address, this is also used for SNI. Some TLS server like libtls from the LibreSSL project check that a provided hostname is a DNS name. The TLS connection attempt from botan is rejected with a fatal alert. | |||||
* | | | | Merge GH #938 Fix incorrect bcrypt truncation | Jack Lloyd | 2017-03-28 | 6 | -15/+341 | |
|\ \ \ \ | ||||||
| * | | | | Avoid long tests for each bcrypt password | Jack Lloyd | 2017-03-24 | 1 | -2/+22 | |
| | | | | | ||||||
| * | | | | Add relnotes and CVE | Jack Lloyd | 2017-03-24 | 2 | -1/+5 | |
| | | | | | ||||||
| * | | | | Fix incorrect password truncation in bcrypt password hashing. | Jack Lloyd | 2017-03-24 | 5 | -14/+316 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The 56 char bound is bogus; Blowfish itself allows at most 448 bits in the key schedule, but Bcrypt's modification allows up to 72 chars for the password. Bug pointed out by Solar Designer. Also reject work factors 0...3 since all other extant bcrypt implementations require at least work factor 4. Adds more bcrypt tests generated by crypt_bcrypt and OpenBSD's version. | |||||
* | | | | | Merge GH #936 Fix pkg-config with --build-dir | Jack Lloyd | 2017-03-28 | 2 | -17/+14 | |
|\ \ \ \ \ | |_|/ / / |/| | | | | ||||||
| * | | | | Fix build variable botan_pkgconfig | Simon Warta | 2017-03-25 | 1 | -8/+2 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | This avoids an extra "hello/" path segment when configured with `./configure.py --with-build-dir hello` | |||||
| * | | | | Use JSON to store build config | Simon Warta | 2017-03-25 | 2 | -3/+6 | |
| | | | | | | | | | | | | | | | | | | | | to improve debuggability | |||||
| * | | | | configure: write if condition positive | Simon Warta | 2017-03-25 | 1 | -6/+6 | |
|/ / / / | ||||||
* / / / | shellcheck fix in website.sh | Jack Lloyd | 2017-03-24 | 1 | -5/+3 | |
|/ / / | | | | | | | | | | [ci skip] | |||||
* | | | Release notes for Botan 2.1 | Jack Lloyd | 2017-03-23 | 1 | -0/+50 | |
| | | | | | | | | | | | | | | | | | | GH #866 [ci skip] | |||||
* | | | Merge GH #937 Fix pdf download URL [ci skip] | Jack Lloyd | 2017-03-23 | 2 | -11/+9 | |
|\ \ \ | ||||||
| * | | | Use a hardcoded URL for the PDF download | René Korthaus | 2017-03-23 | 2 | -11/+9 | |
|/ / / | ||||||
* | | | Fix some compiler warnings. | Jack Lloyd | 2017-03-22 | 3 | -3/+3 | |
| | | | ||||||
* | | | Remove duplicate include GH #928 | Jack Lloyd | 2017-03-22 | 1 | -1/+0 | |
| | | | ||||||
* | | | Merge GH #929 Add ppc64le target [ci skip] | Jack Lloyd | 2017-03-22 | 1 | -0/+22 | |
|\ \ \ | ||||||
| * | | | Add ppc64le (POWER8 little endian) as supported cpu | Gustavo Serra Scalet | 2017-03-20 | 1 | -0/+22 | |
| | | | | ||||||
* | | | | Merge GH #897 Add generic memory type BER decoder | Jack Lloyd | 2017-03-22 | 1 | -0/+32 | |
|\ \ \ \ | ||||||
| * | | | | Add generic memory type value BER decoder | Nuno Goncalves | 2017-03-07 | 1 | -0/+32 | |
| | | | | | | | | | | | | | | | | | | | | Signed-off-by: Nuno Goncalves <[email protected]> | |||||
* | | | | | Merge GH #923 Build PDF handbook | Jack Lloyd | 2017-03-22 | 2 | -1/+17 | |
|\ \ \ \ \ | ||||||
| * | | | | | Provide the handbook as a PDF download | René Korthaus | 2017-03-16 | 2 | -1/+17 | |
| | |/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Extends the website script to include a link to the manual as a PDF file for download. Also includes links to search and index only for html, as it does not work for latex. | |||||
* | | | | | Merge GH #931 Add support for reaching IPv6 hosts in the tls_client CLI | Jack Lloyd | 2017-03-22 | 1 | -20/+26 | |
|\ \ \ \ \ | ||||||
| * | | | | | Add support for reaching IPv6 hosts in the tls_client CLI | René Korthaus | 2017-03-21 | 1 | -20/+26 | |
| | | | | | | ||||||
* | | | | | | Merge GH #932 Guard filters tests with all necessary macros | Jack Lloyd | 2017-03-22 | 1 | -12/+32 | |
|\ \ \ \ \ \ | ||||||
| * | | | | | | Guard filters tests with all necessary macros | René Korthaus | 2017-03-21 | 1 | -12/+32 | |
| |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | The filters tests were missing many BOTAN_HAS guards for hash functions, MACs and ciphers used. | |||||
* | | | | | | Merge GH #933 Allow years past 2037 for 64-bit time_t | Jack Lloyd | 2017-03-22 | 3 | -5/+10 | |
|\ \ \ \ \ \ | |/ / / / / |/| | | | | | ||||||
| * | | | | | Fix #917: calendar_point::to_std_timepoint() does not support years after 2037 | Daniel Neus | 2017-03-21 | 3 | -5/+10 | |
|/ / / / / | | | | | | | | | | | | | | | | Only throw on systems where 32 bit std::time_t is used. | |||||
* | | | | | Fix DragonflyBSD fs access | Jack Lloyd | 2017-03-19 | 1 | -0/+2 | |
| | | | | | | | | | | | | | | | | | | | | GH #887 | |||||
* | | | | | Merge GH #915 Fix OS::get_processor_timestamp() | Jack Lloyd | 2017-03-19 | 1 | -1/+2 | |
|\ \ \ \ \ | ||||||
| * | | | | | Fix OS::get_processor_timestamp() tests | Daniel Neus | 2017-03-14 | 1 | -1/+2 | |
| | |/ / / | |/| | | | ||||||
* | | | | | Merge GH #906 Refactoring in configure to resolve pylint warnings | Jack Lloyd | 2017-03-19 | 2 | -187/+266 | |
|\ \ \ \ \ | ||||||
| * | | | | | pylint: reduce lifespan of unchecked LexResult object in ModulePolicyInfo | Simon Warta | 2017-03-08 | 1 | -4/+8 | |
| | | | | | | ||||||
| * | | | | | pylint: reduce lifespan of unchecked LexResult object in OsInfo | Simon Warta | 2017-03-08 | 1 | -21/+43 | |
| | | | | | | ||||||
| * | | | | | pylint: reduce lifespan of unchecked LexResult object in ArchInfo | Simon Warta | 2017-03-08 | 1 | -13/+18 | |
| | | | | | | ||||||
| * | | | | | pylint: reduce lifespan of unchecked LexResult object in CompilerInfo | Simon Warta | 2017-03-08 | 1 | -50/+66 | |
| | | | | | | ||||||
| * | | | | | pylint: use LexResult to store result of lexer | Simon Warta | 2017-03-08 | 2 | -21/+16 | |
| | | | | | |