Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Increase ASN1_Time maximum allowed year to 3100 | Jack Lloyd | 2019-05-13 | 1 | -1/+2 |
| | | | | See #1931 | ||||
* | Fix X509_DN comparison | Jack Lloyd | 2019-05-08 | 3 | -2/+5 |
| | | | | | | An issue in #1936 indicated that X509_DN operator< was not behaving correctly. Indeed, DNs could compare in such a way that DN1 < DN2 && DN2 < DN1. STL containers do not like this. | ||||
* | s/as_string/to_string/ | Jack Lloyd | 2019-03-01 | 4 | -7/+10 |
| | | | | | A few older APIs use as_string where everywhere else uses to_string. Add to_string's where missing, and deprecate X::as_string. | ||||
* | Revamp BigInt encoding and decoding. | Jack Lloyd | 2019-01-24 | 1 | -1/+1 |
| | | | | Deprecate some crufty functions. Optimize binary encoding/decoding. | ||||
* | Fix some warnings from PVS-Studio | Jack Lloyd | 2019-01-17 | 1 | -1/+1 |
| | | | | No real bugs, but pointed out some odd constructs and duplicated logic | ||||
* | Remove trailing whitespace | Jack Lloyd | 2019-01-13 | 1 | -1/+1 |
| | |||||
* | Make ctz and high_bit faster and const-time-ish | Jack Lloyd | 2018-12-22 | 1 | -1/+1 |
| | | | | | | | They get compiled as const-time on x86-64 with GCC but I don't think this can be totally relied on. But it is anyway an improvement. And, faster, because we compute it recursively | ||||
* | Remove support for Visual C++ 2013 | Jack Lloyd | 2018-10-01 | 1 | -2/+0 |
| | | | | Closes GH #1557 | ||||
* | Add OIDs for SIV and OCB mode ciphers | Jack Lloyd | 2018-08-23 | 1 | -0/+26 |
| | |||||
* | Add PBES2 as alias for PBE-PKCS5v20 | Jack Lloyd | 2018-08-23 | 1 | -1/+2 |
| | | | | Easier to remember and type. | ||||
* | Cleanup of BigInt encoding/decoding functions | Jack Lloyd | 2018-08-14 | 1 | -1/+1 |
| | | | | | | | | | | | | | Instigated by finding a bug where BigInt::encode with decimal output would often have a leading '0' char. Which is papered over in the IO operator, but was exposed by botan_mp_to_str which called BigInt::encode directly. Split BigInt::encode/decode into two versions, one taking the Base argument and the other using the (previously default) binary base. With a view of eventually deprecating the versions taking a base. Add BigInt::to_dec_string() and BigInt::to_hex_string() | ||||
* | Add path validation to FFI | Jack Lloyd | 2018-08-13 | 2 | -0/+9 |
| | |||||
* | Add some final annotations | Jack Lloyd | 2018-08-13 | 1 | -1/+1 |
| | |||||
* | Combine SM2 key types for signatures and encryption | Jack Lloyd | 2018-08-01 | 1 | -1/+2 |
| | | | | | | It seems in practice the same key may be end up used for both operations, so maintaining a distinction at the type level just complicates things. | ||||
* | Add OID for HMAC with SHA-512/256 | Jack Lloyd | 2018-08-01 | 1 | -1/+3 |
| | |||||
* | Add OID for SM2 with SM3 signatures | Jack Lloyd | 2018-07-24 | 1 | -1/+3 |
| | |||||
* | Remove RC2 related OIDs | Jack Lloyd | 2018-07-13 | 1 | -5/+1 |
| | | | | Since RC2 has been removed since 1c0bc3cc6b no reason to have these around. | ||||
* | Add a couple of OIDs commonly seen in certificates | Jack Lloyd | 2018-07-04 | 1 | -1/+5 |
| | |||||
* | Add OID for ChaCha20Poly1305 | Jack Lloyd | 2018-07-01 | 1 | -1/+3 |
| | | | | From RFC 8103 | ||||
* | Add missing statement | Jack Lloyd | 2018-06-08 | 1 | -0/+1 |
| | |||||
* | Attempt at MSVC 2013 workaround | Jack Lloyd | 2018-06-08 | 1 | -2/+4 |
| | |||||
* | Expose BER_Decoder constructor taking BER_Object&& | Jack Lloyd | 2018-06-08 | 1 | -2/+8 |
| | |||||
* | Reduce copying/allocations when BER decoding | Jack Lloyd | 2018-06-08 | 2 | -81/+194 |
| | | | | | | | We are constrained in how far we can go because BER_Object must mandatorily copy its value (due to the public member variable exposting the bytes). But this reduces the number of allocations when parsing a sample X.509 certificate by about 15% | ||||
* | Allow passing a writer function callback to DER_Encoder | Jack Lloyd | 2018-06-08 | 2 | -10/+18 |
| | |||||
* | Declare copy and move constructors on BER_Object | Jack Lloyd | 2018-06-08 | 1 | -0/+8 |
| | |||||
* | Improve error reporting on unexpected EOF when decoding ASN | Jack Lloyd | 2018-06-08 | 1 | -4/+17 |
| | |||||
* | Improve error message on BER decoding error | Jack Lloyd | 2018-05-24 | 2 | -6/+50 |
| | |||||
* | Add OIDS for Camellia and SM4 in GCM and CBC modes | Jack Lloyd | 2018-05-22 | 1 | -1/+17 |
| | | | | Making them usable for private key encryption | ||||
* | DER improvements | Jack Lloyd | 2018-05-22 | 5 | -36/+103 |
| | | | | | | | | | | | Let DER_Encoder write to a user specified vector instead of only to an internal vector. This allows encoding to a std::vector without having to first write to a locked vector and then copying out the result. Add ASN1_Object::BER_encode convenience method. Replaces X509_Object::BER_encode which had the same logic but was restricted to a subtype. This replaces many cases where DER_Encoder was just used to encode a single object (X509_DN, AlgorithmIdentifier, etc). | ||||
* | Merge GH #1571 DER_Encoder optimizations | Jack Lloyd | 2018-05-21 | 2 | -83/+123 |
|\ | |||||
| * | Make MSVC happy | Jack Lloyd | 2018-05-21 | 1 | -0/+13 |
| | | |||||
| * | Cleanups and optimizations in DER_Encoder | Jack Lloyd | 2018-05-21 | 2 | -83/+110 |
| | | |||||
* | | Use BER_Decoder::get_next to cleanup X.509 cert decoding code | Jack Lloyd | 2018-05-21 | 2 | -1/+11 |
|/ | |||||
* | Add Scrypt key dervation function | Jack Lloyd | 2018-05-16 | 1 | -1/+3 |
| | |||||
* | Add message to BOTAN_ARG_CHECK and use it more widely | Jack Lloyd | 2018-05-13 | 1 | -10/+6 |
| | |||||
* | Add OpenPGP-specific curve OIDs | Marcus Brinkmann | 2018-05-02 | 1 | -1/+5 |
| | |||||
* | Allow year up to 2200 in ASN1 time objects | Jack Lloyd | 2018-04-12 | 2 | -4/+19 |
| | | | | | | Also tighten up checking of days Fixes GH #1536 | ||||
* | Avoid creating a map from a DN when not required | Jack Lloyd | 2018-03-21 | 1 | -0/+2 |
| | |||||
* | Support Ed25519 certificate format | Jack Lloyd | 2018-03-20 | 1 | -1/+1 |
| | | | | Able to create certificate chain and verify it with OpenSSL 1.1.1 | ||||
* | Remove use of ;; to end lines | Jack Lloyd | 2018-03-19 | 1 | -1/+1 |
| | |||||
* | Support custom DN entries | Jack Lloyd | 2018-03-14 | 1 | -0/+5 |
| | | | | GH #1490 | ||||
* | Allow decoding ASN.1 OID 0.0 | Jack Lloyd | 2018-03-05 | 1 | -1/+3 |
| | | | | | | | | I had no idea this was a valid OID but apparently it is. And for some who-knows-why reason FreeTSA certificate includes it in their certificate policy extension. GH #355 | ||||
* | Use API annotations | Jack Lloyd | 2018-03-02 | 1 | -2/+2 |
| | |||||
* | Use BOTAN_DEFAULT_BUFFER_SIZE instead of DEFAULT_BUFFERSIZE | Jack Lloyd | 2018-03-01 | 1 | -1/+1 |
| | |||||
* | Merge GH #1448 Support custom curves in TLS handshake | Jack Lloyd | 2018-02-19 | 1 | -10/+0 |
|\ | |||||
| * | Remove house curve support | Jack Lloyd | 2018-02-13 | 1 | -10/+0 |
| | | |||||
* | | Of course they are public member variables, not functions ... | Jack Lloyd | 2018-02-13 | 3 | -3/+3 |
| | | |||||
* | | Add BOTAN_DEPRECATED_PUBLIC_MEMBER_FUNCTIONS | Jack Lloyd | 2018-02-13 | 3 | -1/+3 |
|/ | | | | | | Makes such things easier to find in the future. Also adds BOTAN_NO_DEPRECATED which causes them to be private instead. | ||||
* | Use new literal syntax for OIDs | Jack Lloyd | 2018-02-07 | 2 | -204/+210 |
| | | | | Reduces size of oid_maps object file by a ~16K | ||||
* | Merge GH #1444 Add (back) modifyable OID maps | Jack Lloyd | 2018-02-07 | 3 | -413/+560 |
|\ |