aboutsummaryrefslogtreecommitdiffstats
path: root/doc
Commit message (Collapse)AuthorAgeFilesLines
* Fix doc bugslloyd2015-01-052-2/+2
|
* Update relnoteslloyd2015-01-041-0/+8
|
* Add DTLS-SRTP key establishment from RFC 5764 (required for WebRTC).lloyd2015-01-041-4/+5
| | | | | | | | | | | | | | Github issue 27. Refactor server hello handling to make it easier to handle other extensions. The manual specified that 224 bit NIST primes were disabled by default for TLS but they were not. Additionaly disable the 256k1 curve and reorder the remaining curves by size. Rewrite the max fragment length extension code to roughly what an ideal compiler would have turned the original code into, using a switch instead of a lookup into a small constant std::map.
* Tick version to 1.11.13lloyd2015-01-033-1/+6
|
* Update for 1.11.12 release1.11.12lloyd2015-01-024-6/+10
|
* Point to github on index pagelloyd2015-01-021-3/+6
|
* Add ChaCha20Poly1305 TLS ciphersuites compatible with Google's implementationlloyd2014-12-312-9/+13
|
* More info on AEAD decryption handlinglloyd2014-12-311-0/+10
|
* Add AEAD based on ChaCha20 and Poly1305 defined in ↵lloyd2014-12-291-2/+3
| | | | draft-irtf-cfrg-chacha20-poly1305-03
* Add Poly1305, based on poly1305-donna by Andrew Moon.lloyd2014-12-293-1/+5
|
* Update algoslloyd2014-12-271-1/+2
|
* When encrypting McEliece or Curve25519 keys, default to GCM instead of CBC.lloyd2014-12-271-3/+9
| | | | Add OIDS for OCB mode with various ciphers.
* Add Curve25519 based on curve25519-donna by Adam Langley.lloyd2014-12-273-0/+9
| | | | | | This uses only the c64 version from curve25519-donna; on systems that don't have a native uint128_t type, a donna128 type stands in for just enough 128-bit operations to satisfy donna.cpp
* Mention github issueslloyd2014-12-271-4/+5
|
* Update download link and tick version number.lloyd2014-12-223-2/+6
|
* Update for 1.11.11 release1.11.11lloyd2014-12-221-1/+4
|
* Enable system_rng on Windows and MinGW (untested)lloyd2014-12-211-0/+10
|
* Update TLS doclloyd2014-12-201-11/+26
|
* Add abstract database interface so applications can easily store infolloyd2014-12-201-0/+12
| | | | | | in places other than sqlite3, though sqlite3 remains the only implementation. The interface is currently limited to precisely the functionality the TLS session manager needs and will likely expand.
* Add 1.10.9 releaselloyd2014-12-132-5/+23
|
* Tick to 1.11.11lloyd2014-12-131-0/+3
|
* Make the connection between calling TLS::Channel::send and a newlloyd2014-12-131-3/+9
| | | | wire record being created more clear.
* Update for 1.11.10 release1.11.10lloyd2014-12-102-16/+18
|
* Implement RFC 6979 determinstic signatures for DSA and ECDSA.lloyd2014-12-101-0/+4
| | | | | Drop the GNU MP engine. Its implementations were potentially faster in some scenarios but not well protected against side channels.
* Add a basic speed test for McEliecelloyd2014-12-081-7/+8
|
* Remove the Overbeck conversion at Dr. Strenzke's request.lloyd2014-12-061-2/+5
| | | | | | | | While a CCA2 proof of this scheme exists, it is written in German and for various reasons publishing a translation would be a complicated affair. Without a (well studied) English proof it is harder to understand the security of the overall scheme. Thus only KEM, which seems much easier to prove, will be offered.
* Add an easy way to directly use the system PRNG.lloyd2014-12-021-0/+9
|
* Add an implementation of McEliece encryption based on HyMESfstrenzke2014-11-263-4/+13
| | | | | | | (https://www.rocq.inria.fr/secret/CBCrypto/index.php?pg=hymes). The original version is LGPL but cryptsource GmbH has secured permission to release it under a BSD license. Also includes the Overbeck CCA2 message encoding scheme.
* Cleanup PBES2 and add GCM supportlloyd2014-11-191-0/+6
|
* Add gzip compression transform and compress command line prog.lloyd2014-11-191-0/+5
|
* Fix warnings in Altivec header and add AltiVec detection for POWER8lloyd2014-11-161-0/+2
|
* Add some util functions for timing attack countermeasures from Falkolloyd2014-11-151-1/+1
|
* A TLS Server can now process either TLS or DTLS but not either,lloyd2014-11-152-25/+38
| | | | | with the setting set in the constructor. This prevents various surprising things from happening to applications and simplifies record processing.
* Fix relnotes index titlelloyd2014-11-151-0/+4
|
* Update relnoteslloyd2014-11-151-0/+15
|
* Replace Transformatio::nstart with start_raw so we can do a full setlloyd2014-11-051-1/+1
| | | | of overloads in the base class with the same name.
* Various small fixes and cleanups, new is_prime utillloyd2014-11-031-0/+8
|
* Add TLS fallback signalling (draft-ietf-tls-downgrade-scsv-00)lloyd2014-10-311-0/+6
|
* Correct documentationlloyd2014-10-141-1/+1
|
* Some documentation updates WRT DTLS and X.509 cert path processinglloyd2014-10-062-25/+100
|
* Fix decoding indefinite length BER constructs that contain a contextlloyd2014-09-271-0/+3
| | | | sensitive tag of zero. Github pull 26 from Janusz Chorko.
* Correct CCM for L != 2. Bugzilla 270lloyd2014-05-161-0/+5
|
* Any fixed MR iterations is probably wrong for somebody. Allow the userlloyd2014-04-252-11/+22
| | | | | | to specify a probability as well as if n was randomly chosen or not. If the input is random use a better bounds to reduce the number of needed tests.
* Doc fixlloyd2014-04-161-1/+1
|
* Use 20 Miller-Rabin iterations regardless of the size of the integer. Thislloyd2014-04-131-0/+5
| | | | | provides a much better worst-case error bound. Also take the nonce from anywhere in the usable range rather than limiting the bit size.
* Deindent to avoid github manglinglloyd2014-04-131-36/+34
|
* Update release note pointers1.11.9lloyd2014-04-102-6/+8
|
* Add 1.10.8 release noteslloyd2014-04-101-0/+12
|
* Fix a bug in Miller-Rabin primality testing introduced in 1.8.3lloyd2014-04-101-1/+8
| | | | | | | | where we chose a single random nonce and tested it repeatedly, rather than choosing new nonces each time. Reported by Jeff Marrison. Also remove a pointless comparison (also pointed out by Jeff) and add an initial test using a witness of 2.
* X.509 path validation now performs all possible tests and returns alloyd2014-04-051-0/+9
| | | | | | set of error codes, instead of failing immediately on first error. This prevents a 'weak' error like an expired certificate from hiding a major error such as signature validation failure or hard revocation.
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-25 20:47:06 +0000