aboutsummaryrefslogtreecommitdiffstats
path: root/src/lib/prov
Commit message (Collapse)AuthorAgeFilesLines
* Remove support for Visual C++ 2013Jack Lloyd2018-10-016-6/+6
| | | | Closes GH #1557
* Fix more MSVC warningsJack Lloyd2018-10-011-7/+31
|
* Fix more MSVC warningsJack Lloyd2018-10-013-16/+39
|
* Move UUID to utils, test it, and fix bugs.Jack Lloyd2018-09-302-106/+1
| | | | Fixes #1695
* Refactor mode tests, and correct bugs foundJack Lloyd2018-09-294-7/+30
| | | | | | | | | | | | | | | | | | | Several problems in CBC found by adding tests - If you set a key, then set a nonce, then set a new key, you could encrypt without setting a new nonce. - It was possible to call CBC finish without setting a nonce, which would crash. - If you had an CBC decryption object, set a key, set a nonce, then reset message state, it should throw because no nonce is set. Instead it would carry on using an all-zero nonce. Disable CommonCrypto with PKCS7 padding as it seems to have some problem that I cannot figure out from the build logs. This work sponsored by Ribose Inc
* Use new CAST-128 specific feature macro hereJack Lloyd2018-09-151-1/+1
|
* Add CommonCrypto block cipher supportJose Pereira2018-09-105-3/+204
|
* Merge GH #1674 Add CommonCrypto cipher modesJack Lloyd2018-09-105-5/+443
|\
| * Add CommonCrypto cipher modes supportJose Pereira2018-09-095-5/+443
| |
* | Add RandomNumberGenerator::accepts_inputJack Lloyd2018-09-062-0/+5
|/
* Merge GH #1667 Add hashing with CommonCryptoJack Lloyd2018-09-043-0/+186
|\
| * Add commoncrypto OS feature so it cannot be enabled on other systemsJack Lloyd2018-09-041-0/+4
| |
| * Indent to match conventions.Jack Lloyd2018-09-042-75/+73
| | | | | | | | | | Move CommonCrypto.h out of our commoncrypto.h since that header is included around the library.
| * Add support for hashing with CommonCryptoJose Pereira2018-09-033-0/+184
| |
* | Remove use of OpenSSL IDEAJack Lloyd2018-09-041-5/+0
|/ | | | | | | | | It appears at least some versions of Ubuntu 16.04 have OpenSSLs which don't define OPENSSL_NO_IDEA and include declarations for EVP_idea_ecb, but the function is not found at link time. Thus enabling OpenSSL engine fails. It is not worth a further fight here.
* Add nonce-set checks for OpenSSL CBC mode implsJack Lloyd2018-08-171-1/+5
|
* Fix for OpenSSLJack Lloyd2018-08-121-0/+4
|
* Add function to return the size of a key agreement outputJack Lloyd2018-08-121-0/+1
| | | | Very useful when using "Raw" DH/ECDH via the FFI API.
* Add functions to get size of PK ciphertext,plaintextJack Lloyd2018-08-103-1/+9
| | | | Needed for https://github.com/strongswan/strongswan/pull/109
* Add PK_Signer::signature_lengthJack Lloyd2018-08-107-11/+29
|
* Fix OpenSSL modesJack Lloyd2018-08-051-1/+12
|
* Support calling Whirlpool in OpenSSLJack Lloyd2018-07-261-0/+5
| | | | Available since 1.0.0, not sure how this was missed.
* Handle another possible OpenSSL error only seen on non-x86_64Jack Lloyd2018-07-171-7/+16
| | | | GH #1627
* Handle EC_R_BAD_SIGNATURE from OpenSSLJack Lloyd2018-05-312-0/+14
|
* Fix problems with failure to build in various configurationsJack Lloyd2018-03-311-0/+3
|
* Add PointGFp::encode as replacement for EC2OSPJack Lloyd2018-03-104-6/+6
| | | | | | Literally every single call to EC2OSP is converting the returned secure_vector to a std::vector. Which makes sense since private points are not really a thing in any protocol I know of.
* Ensure exception types are exported from DLLJack Lloyd2018-03-063-4/+4
| | | | GH #983
* Fix compliation problem in PKCS11Jack Lloyd2018-02-076-1/+6
| | | | | | | | | ./configure.py --amal --mini --enable-modules=pkcs11 would fail to build because the guarded includes of pk_keys.h ended up hiding the declaration entirely. This is really a bug in how the amalgamation is generated but may be hard to fix in the general case.
* Avoid deprecated functions in OpenSSL provider [ci skip]Jack Lloyd2018-02-011-3/+3
|
* Use shared representation of EC_GroupJack Lloyd2018-01-311-5/+5
| | | | Hide CurveGFp with an eye for eventual removal
* Fix a leak in OpenSSL block ciphersJack Lloyd2018-01-281-0/+3
| | | | Introduced when support for 1.1.0 API was added in #1056
* Correct OpenSSL RC4 namingJack Lloyd2017-12-281-1/+1
|
* Fix seek test with OpenSSL RC4Jack Lloyd2017-11-141-1/+1
|
* Remove duplicated includeJack Lloyd2017-11-131-1/+0
|
* Missing include: #include <cstdlib> is needed for std::free.Yuri2017-11-111-0/+1
|
* Add checks that keyed algorithms are actually keyed before useJack Lloyd2017-10-262-3/+17
| | | | | Previously calling update or encrypt without calling set_key first would result in invalid outputs or else crashing.
* Accept SHA-1, SHA1, or SHA-160 equallyJack Lloyd2017-10-132-2/+2
| | | | | | Fixes #1235 [ci skip]
* Add limits.h header for INT_MAXAlon Bar-Lev2017-10-131-0/+1
| | | | | Gentoo-Bug: https://bugs.gentoo.org/633468 Signed-off-by: Alon Bar-Lev <[email protected]>
* Remove needless mutableJack Lloyd2017-10-121-2/+2
| | | | [ci skip]
* Add limits.h header for INT_MAXJack Lloyd2017-10-041-0/+1
| | | | Gentoo bug https://bugs.gentoo.org/633468
* Avoid empty methods, use =default or add a commentJack Lloyd2017-10-032-5/+0
| | | | Sonar
* Add missing cstdlib include to openssl_rsa.cppilovezfs2017-10-031-0/+1
| | | | Fixes the build with Xcode 8 and earlier.
* Remove protected m_handle data from PKCS11::ObjectJack Lloyd2017-10-023-6/+18
|
* Further build/test fixes for restricted configurationsJack Lloyd2017-09-241-0/+4
|
* More header cleanupsJack Lloyd2017-09-231-1/+0
|
* Refer to free in std::Jack Lloyd2017-09-221-1/+1
|
* Avoid new/delete in BearSSL ECDSA codeJack Lloyd2017-09-221-17/+10
| | | | Especially storing private key that way was bad, wasn't zeroed.
* Apply final annotations to the library alsoJack Lloyd2017-09-2221-36/+37
| | | | | Done by a perl script which converted all classes to final, followed by selective reversion where it caused compilation failures.
* More include header cleanupsJack Lloyd2017-09-211-0/+1
|
* Header file cleanupsJack Lloyd2017-09-212-1/+1
| | | | Some help from include-what-you-use