aboutsummaryrefslogtreecommitdiffstats
path: root/doc
Commit message (Collapse)AuthorAgeFilesLines
* Add some util functions for timing attack countermeasures from Falkolloyd2014-11-151-1/+1
|
* A TLS Server can now process either TLS or DTLS but not either,lloyd2014-11-152-25/+38
| | | | | with the setting set in the constructor. This prevents various surprising things from happening to applications and simplifies record processing.
* Fix relnotes index titlelloyd2014-11-151-0/+4
|
* Update relnoteslloyd2014-11-151-0/+15
|
* Replace Transformatio::nstart with start_raw so we can do a full setlloyd2014-11-051-1/+1
| | | | of overloads in the base class with the same name.
* Various small fixes and cleanups, new is_prime utillloyd2014-11-031-0/+8
|
* Add TLS fallback signalling (draft-ietf-tls-downgrade-scsv-00)lloyd2014-10-311-0/+6
|
* Correct documentationlloyd2014-10-141-1/+1
|
* Some documentation updates WRT DTLS and X.509 cert path processinglloyd2014-10-062-25/+100
|
* Fix decoding indefinite length BER constructs that contain a contextlloyd2014-09-271-0/+3
| | | | sensitive tag of zero. Github pull 26 from Janusz Chorko.
* Correct CCM for L != 2. Bugzilla 270lloyd2014-05-161-0/+5
|
* Any fixed MR iterations is probably wrong for somebody. Allow the userlloyd2014-04-252-11/+22
| | | | | | to specify a probability as well as if n was randomly chosen or not. If the input is random use a better bounds to reduce the number of needed tests.
* Doc fixlloyd2014-04-161-1/+1
|
* Use 20 Miller-Rabin iterations regardless of the size of the integer. Thislloyd2014-04-131-0/+5
| | | | | provides a much better worst-case error bound. Also take the nonce from anywhere in the usable range rather than limiting the bit size.
* Deindent to avoid github manglinglloyd2014-04-131-36/+34
|
* Update release note pointers1.11.9lloyd2014-04-102-6/+8
|
* Add 1.10.8 release noteslloyd2014-04-101-0/+12
|
* Fix a bug in Miller-Rabin primality testing introduced in 1.8.3lloyd2014-04-101-1/+8
| | | | | | | | where we chose a single random nonce and tested it repeatedly, rather than choosing new nonces each time. Reported by Jeff Marrison. Also remove a pointless comparison (also pointed out by Jeff) and add an initial test using a witness of 2.
* X.509 path validation now performs all possible tests and returns alloyd2014-04-051-0/+9
| | | | | | set of error codes, instead of failing immediately on first error. This prevents a 'weak' error like an expired certificate from hiding a major error such as signature validation failure or hard revocation.
* Fix an OCSP response decoding bug, we were not decoding KeyID properly.lloyd2014-04-051-0/+4
| | | | | | | | Also prioritize checking the status code before the dates, as otherwise an attacker could substitue a valid but expired response which marked the cert as revoked and we would still just return OCSP_EXPIRED. Obviously they can still play this game with an old (valid) OCSP response, but no point making it easy.
* Add RFC 6979 nonce generator. Also some HMAC_DRBG cleanups.lloyd2014-03-221-0/+3
|
* Add HMAC_DRBGlloyd2014-03-211-0/+4
|
* Use stdint.h instead of cstdint for Clang. Bugzilla 266lloyd2014-02-211-0/+3
|
* Website tweakslloyd2014-02-194-22/+28
|
* Transformation_Filter calls send() inside of start_msg() which meanslloyd2014-02-171-0/+4
| | | | | | | | | | that any filters which follow in the pipe will get write() called on them before start_msg(), causing confusion and/or crashes. This patch fixes it for the case when start() returns an empty vector which covers all current use cases. I'll have to figure out another approach for the general case (or decide the general case isn't worth supporting and remove the return value from start).
* Don't assume the leading cert chain is presented in-orderlloyd2014-02-161-0/+3
|
* Tick version to 1.11.9lloyd2014-02-151-0/+2
|
* Website tweakslloyd2014-02-152-28/+28
|
* Release 1.11.81.11.8lloyd2014-02-143-8/+24
|
* Fix minimized builds. Patch by Markus Wanner sent to botan-devellloyd2014-02-082-1/+4
|
* Fix a bug introduced in 1.11.6 where we tried to check CRL signatureslloyd2014-02-083-3/+4
| | | | | | against the wrong key, causing any check to fail. Clean up the NIST X.509 path validation tests and run them by default.
* Install command line applloyd2014-02-081-0/+3
|
* Remove Square, Skipjack, Luby-Rackoff, and Blue Midnight Wish.lloyd2014-02-082-4/+8
|
* Have Skein call Threefish, rather than duplicating the code.lloyd2014-02-081-2/+8
|
* Resurrect algos.rstlloyd2014-02-083-7/+111
|
* Simplifylloyd2014-01-311-11/+1
|
* Add ChaChalloyd2014-01-311-0/+12
|
* Link to instructions for Android by Daniel Seitherlloyd2014-01-231-5/+2
|
* Fix binary nameslloyd2014-01-201-6/+6
|
* Fix Skein_512::clearlloyd2014-01-181-0/+5
|
* Remove PBES1 entirelylloyd2014-01-181-0/+5
|
* Website tweaks. Rename TLS suite script options.lloyd2014-01-115-26/+34
|
* Fix link. Release 1.11.71.11.7lloyd2014-01-103-5/+6
|
* Split up docs into the reference manual, the website, and everything else.lloyd2014-01-1041-315/+196
| | | | | | | | | | | Add `website` target to makefile. Some progress towards fixing minimized builds. TLS now hard requires ECDSA and GCM since otherwise a minimized build has only insecure options. Remove boost_thread dependency in command line tool
* Move lib into srclloyd2014-01-101-5/+0
|
* Split up test vectors into per-algo files and app into botan-test forlloyd2014-01-103-75/+70
| | | | the tests and botan for everything else.
* Move python to src, add to main makefilelloyd2014-01-071-15/+8
|
* Fix qca linkslloyd2014-01-071-2/+3
|
* Fix include path of example sources in docslloyd2014-01-068-27/+15
|
* Add 1.10.7 release noteslloyd2014-01-061-0/+4
|
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-02 01:03:00 +0000