Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Doc updates | Jack Lloyd | 2017-09-29 | 1 | -3/+4 |
| | |||||
* | Better tests for SIV | Jack Lloyd | 2017-09-24 | 1 | -1/+1 |
| | | | | | | | | | | | | Correct errors in the AEAD tests that assumed process/update always return something - that isn't true for SIV Minor optimizations in CMAC and CTR to cache the block size instead of making a zillion virtual calls for it. Generalize SIV slightly to where it could support a non-128 bit cipher, but don't pull the trigger on it since I can't find any implementations to crosscheck with. | ||||
* | Cryptobox code modernization | Jack Lloyd | 2017-09-22 | 1 | -0/+4 |
| | | | | Only encrypt so it's easy to verify everything still works. | ||||
* | Tweaks to doc on versioning | Jack Lloyd | 2017-09-22 | 1 | -18/+26 |
| | |||||
* | Complete SRP6 doc | Jack Lloyd | 2017-09-20 | 1 | -4/+32 |
| | | | | | | | | Still sparse but not actually truncated anymore. Closes #1029 [ci skip] | ||||
* | Merge GH #872 Add ability for TLS servers to prohibit renegotiation | Jack Lloyd | 2017-09-19 | 1 | -0/+8 |
|\ | |||||
| * | Add TLS::Policy::allow_client_initiated_renegotiation | Jack Lloyd | 2017-02-19 | 1 | -0/+8 |
| | | | | | | | | Parallel of the server policy flag. | ||||
* | | Minor additions to hash manual | Jack Lloyd | 2017-09-18 | 1 | -3/+6 |
| | | | | | | | | [ci skip] | ||||
* | | Document how to use TLS-Attacker | Jack Lloyd | 2017-09-02 | 1 | -0/+18 |
| | | |||||
* | | Change http://botan.randombit.net to https URIs | Jack Lloyd | 2017-09-01 | 1 | -1/+1 |
| | | | | | | | | | | | | Not a big deal since the site already uses HSTS, but whatever. [ci skip] | ||||
* | | Correct manual re key agreement schemes | Jack Lloyd | 2017-08-29 | 1 | -6/+10 |
| | | | | | | | | See #1166 | ||||
* | | Add some docs about fuzzing | Jack Lloyd | 2017-08-29 | 2 | -0/+71 |
| | | |||||
* | | Add dh functions in ffi | Konstantinos Kolelis | 2017-08-22 | 1 | -1/+16 |
| | | |||||
* | | Add http_util to module policies (GH #1109) | René Korthaus | 2017-08-07 | 1 | -1/+3 |
| | | | | | | | | | | | | http_util is required by the x509 module to perform online OCSP checks, which should be defaulted to ON. Without being part of the policy, it would be disabled. | ||||
* | | Add Streebog hash (GOST R 34.11-2012). | Daniel Wyatt | 2017-08-04 | 1 | -0/+1 |
| | | |||||
* | | Add ChaCha_RNG | Jack Lloyd | 2017-07-31 | 1 | -0/+13 |
| | | |||||
* | | Remove "pkcs11" provider paramater for pk ops in handbook and tests | René Korthaus | 2017-07-04 | 1 | -4/+4 |
| | | | | | | | | | | | | | | | | | | We have special key types for PKCS#11 public and private keys. When using the PK ops classes, passing the "pkcs11" provider parameter is not necessary, as the PK ops is internally chosen by the PKCS#11 key class, in contrast to other providers such as openssl, which don't have special key classes. Updates the handbook code examples and the tests. | ||||
* | | Updated key checking in manual | Never | 2017-06-16 | 1 | -1/+25 |
| | | |||||
* | | Add botan_hash_copy_state FFI function. | Daniel Wyatt | 2017-05-25 | 1 | -0/+4 |
| | | |||||
* | | Make Botan compile with LibreSSL again. | Alexander Bluhm | 2017-05-24 | 1 | -1/+1 |
| | | | | | | | | | | | | Add some #ifdef LIBRESSL_VERSION_NUMBER in addition to the OPENSSL_VERSION_NUMBER switch. Narrow down API compatiblity between LibreSSL and OpenSSL version in docs. | ||||
* | | Doc and 32-bit build fixes | Jack Lloyd | 2017-05-22 | 2 | -0/+4 |
| | | |||||
* | | Add HOTP (RFC 4226) and TOTP (RFC 6238) | Jack Lloyd | 2017-05-19 | 1 | -0/+64 |
| | | |||||
* | | Fix botan_privkey_load_rsa misleading parameter names. | Daniel Wyatt | 2017-05-13 | 1 | -2/+2 |
| | | | | | | | | RSA_PrivateKey's constructor take p,q,e,d,n. | ||||
* | | Mention LibreSSL in the docs. | Alexander Bluhm | 2017-04-28 | 1 | -0/+1 |
| | | | | | | | | | | The --with-openssl compile option can also used with LibreSSL. Move the feature from the todo list to the documentation. | ||||
* | | Fix typo | Antonio Coratelli | 2017-04-21 | 1 | -1/+1 |
| | | |||||
* | | Fix typo in building.rst [ci skip] | René Korthaus | 2017-04-18 | 1 | -1/+1 |
| | | |||||
* | | Support for ElGamal in FFI interface | Krzysztof Kwiatkowski | 2017-04-14 | 1 | -0/+12 |
| | | | | | | | | | | | | * Adds `botan_pubkey_load_elgamal' and `botan_privkey_load_elgamal' functions to FFI interface. * Adds test `ffi_test_elgamal' | ||||
* | | Add HMAC CLI command | René Korthaus | 2017-04-13 | 1 | -0/+5 |
| | | |||||
* | | Merge GH #966 Add SM3 hash function | Jack Lloyd | 2017-04-05 | 1 | -0/+1 |
|\ \ | |||||
| * | | Add SM3 hash function | Daniel Wyatt | 2017-04-03 | 1 | -0/+1 |
| | | | |||||
* | | | Add block cipher interface to C API | Jack Lloyd | 2017-04-04 | 1 | -0/+44 |
| | | | |||||
* | | | Merge GH #964 Add various useful FFI functions for public key crypto | Jack Lloyd | 2017-04-04 | 1 | -0/+28 |
|\ \ \ | |/ / |/| | | |||||
| * | | Document new functions | Jack Lloyd | 2017-04-02 | 1 | -0/+28 |
| | | | |||||
* | | | Fix doc formatting | Jack Lloyd | 2017-04-02 | 1 | -1/+2 |
| | | | |||||
* | | | Add some more useful bigint functions to C interface | Jack Lloyd | 2017-03-31 | 1 | -2/+33 |
|/ / | |||||
* | | Document functions added in GH #899 | Jack Lloyd | 2017-03-29 | 1 | -0/+30 |
| | | |||||
* | | Document new C APIs added in GH #946 | Jack Lloyd | 2017-03-29 | 1 | -5/+186 |
| | | |||||
* | | Merge GH #942 Avoid passing IP as hostname in tls_client command line util | Jack Lloyd | 2017-03-28 | 1 | -0/+4 |
|\ \ | |||||
| * | | Add documentation that SNI must be FQDN. | Alexander Bluhm | 2017-03-27 | 1 | -0/+4 |
| | | | | | | | | | | | | server_info parameter of TLS::Client must not be an IP address. | ||||
* | | | Fix incorrect password truncation in bcrypt password hashing. | Jack Lloyd | 2017-03-24 | 1 | -4/+21 |
|/ / | | | | | | | | | | | | | | | | | | | The 56 char bound is bogus; Blowfish itself allows at most 448 bits in the key schedule, but Bcrypt's modification allows up to 72 chars for the password. Bug pointed out by Solar Designer. Also reject work factors 0...3 since all other extant bcrypt implementations require at least work factor 4. Adds more bcrypt tests generated by crypt_bcrypt and OpenBSD's version. | ||||
* | | Use a hardcoded URL for the PDF download | René Korthaus | 2017-03-23 | 1 | -1/+1 |
| | | |||||
* | | Merge GH #923 Build PDF handbook | Jack Lloyd | 2017-03-22 | 1 | -1/+7 |
|\ \ | |||||
| * | | Provide the handbook as a PDF download | René Korthaus | 2017-03-16 | 1 | -1/+7 |
| | | | | | | | | | | | | | | | | | | | | | Extends the website script to include a link to the manual as a PDF file for download. Also includes links to search and index only for html, as it does not work for latex. | ||||
* | | | Add a note that no RNG is part of the minimized build | René Korthaus | 2017-03-17 | 1 | -2/+12 |
|/ / | | | | | | | | | Also adds a description for the --list-modules and --module-policy option. | ||||
* | | Document --with-build-dir correctly in building manual. | Alexander Bluhm | 2017-03-09 | 1 | -1/+1 |
| | | |||||
* | | Merge GH #905 Fix TLS doc re default DH minimum size | Jack Lloyd | 2017-03-07 | 1 | -1/+1 |
|\ \ | |||||
| * | | Fix the default value (2048) of minimum_dh_group_size in the documentation | louiz’ | 2017-03-07 | 1 | -1/+1 |
| |/ | |||||
* / | Allow OCSP requests without the full subject certificate | Nuno Goncalves | 2017-03-04 | 1 | -6/+18 |
|/ | | | | | | | | | | | | | | | | A OCSP request doesn't need the full subject certificate. This extends the API to require instead of the subject certificate: * OCSP::Request: subject serial. * OCSP::online_check: subject serial AND ocsp responder url. API breaking change: * removal of OCSP::Request::subject() as OCSP::Request doesn't need to hold the certificate, but only the serial. Signed-off-by: Nuno Goncalves <[email protected]> | ||||
* | Document hash, rng, mac, pbkdf and kdf in ffi handbook | René Korthaus | 2017-02-19 | 1 | -24/+73 |
| | |||||
* | Add all ffi functions and types to ffi.rst | René Korthaus | 2017-02-19 | 1 | -19/+236 |
| |