aboutsummaryrefslogtreecommitdiffstats
path: root/src/lib
Commit message (Collapse)AuthorAgeFilesLines
* Compile fixlloyd2014-04-131-2/+2
|
* Have TLS_Data_Reader decoding errors include the actual msg type namelloyd2014-04-1212-44/+47
|
* Verify that the server did not send any extension that the client didn'tlloyd2014-04-116-12/+41
| | | | offer. Previously the client only checked a couple of special cases.
* Fix a bug in Miller-Rabin primality testing introduced in 1.8.3lloyd2014-04-101-5/+6
| | | | | | | | where we chose a single random nonce and tested it repeatedly, rather than choosing new nonces each time. Reported by Jeff Marrison. Also remove a pointless comparison (also pointed out by Jeff) and add an initial test using a witness of 2.
* Better TLS checkslloyd2014-04-101-1/+2
|
* A std::deque's memory is not guaranteed to be contiguouslloyd2014-04-061-1/+1
|
* Make X.509 extension decoding failures point back to the problem extensionlloyd2014-04-052-10/+17
|
* Add ECDHE_ECDSA CCM suiteslloyd2014-04-051-2/+14
|
* X.509 path validation now performs all possible tests and returns alloyd2014-04-054-137/+153
| | | | | | set of error codes, instead of failing immediately on first error. This prevents a 'weak' error like an expired certificate from hiding a major error such as signature validation failure or hard revocation.
* Check Content-Length of HTTP responseslloyd2014-04-051-1/+10
|
* Fix an OCSP response decoding bug, we were not decoding KeyID properly.lloyd2014-04-051-4/+5
| | | | | | | | Also prioritize checking the status code before the dates, as otherwise an attacker could substitue a valid but expired response which marked the cert as revoked and we would still just return OCSP_EXPIRED. Obviously they can still play this game with an old (valid) OCSP response, but no point making it easy.
* Remove debug headerslloyd2014-04-051-3/+0
|
* NetBSD portability fix and some performance tweaks in locking allocatorlloyd2014-04-051-1/+11
|
* Avoid a ubsan warning on GCC 4.9 due uninitialized sign enum beinglloyd2014-03-302-5/+1
| | | | read during swap (in the move constructor)
* Support 0 length salts in PSSR. Bugzilla 268lloyd2014-03-272-3/+12
|
* Add rng command which can dump RNG outputs or raw entropy sampleslloyd2014-03-221-2/+2
|
* Simpify HMAC_RNG reseeding process. Actually update HMAC_DRBG reseed counter.lloyd2014-03-226-63/+33
|
* Add RFC 6979 nonce generator. Also some HMAC_DRBG cleanups.lloyd2014-03-225-11/+99
|
* Add HMAC_DRBGlloyd2014-03-214-1/+159
|
* Use stdint.h instead of cstdint for Clang. Bugzilla 266lloyd2014-02-211-7/+9
|
* Fix Transformation_Filter namelloyd2014-02-211-2/+1
|
* Transformation_Filter calls send() inside of start_msg() which meanslloyd2014-02-171-0/+3
| | | | | | | | | | that any filters which follow in the pipe will get write() called on them before start_msg(), causing confusion and/or crashes. This patch fixes it for the case when start() returns an empty vector which covers all current use cases. I'll have to figure out another approach for the general case (or decide the general case isn't worth supporting and remove the return value from start).
* Missing include for std::to_string, noticed with Clang 3.4 w/ libc++lloyd2014-02-161-0/+2
|
* Don't assume the leading cert chain is presented in-orderlloyd2014-02-161-5/+17
|
* Add missing std includeslloyd2014-02-162-0/+2
|
* Fix macro feature checklloyd2014-02-151-1/+1
|
* Change X9.31 to automatically reseed if randomize is called while unseeded.lloyd2014-02-132-10/+15
| | | | | If no entropy sources at all are enabled in the build, throw an exception immediately rather than having the poll mysteriously fail.
* Remove unused includelloyd2014-02-131-1/+0
|
* Remove dependency on boost string algoslloyd2014-02-133-13/+30
|
* Check the feature macro before assuming boost.filesystemlloyd2014-02-101-0/+7
|
* Clang fixeslloyd2014-02-092-1/+1
|
* More fixes for minified buildslloyd2014-02-093-6/+10
|
* Fix a bug introduced in 1.11.6 where we tried to check CRL signatureslloyd2014-02-084-13/+13
| | | | | | against the wrong key, causing any check to fail. Clean up the NIST X.509 path validation tests and run them by default.
* Remove the engine hookslloyd2014-02-082-41/+0
|
* Remove Square, Skipjack, Luby-Rackoff, and Blue Midnight Wish.lloyd2014-02-0813-1394/+0
|
* Have Skein call Threefish, rather than duplicating the code.lloyd2014-02-085-184/+149
|
* Compile fixeslloyd2014-02-082-1/+2
|
* Add std::chrono clock polllloyd2014-02-021-11/+30
|
* Avoid Windows macro damage. Github issue 13.lloyd2014-02-021-0/+2
|
* Add the CMAC constants for 256 and 512 bit block cipherslloyd2014-02-021-6/+28
| | | | | Also add test vectors for Threefish-512 CMAC and EAX, both generated by the library.
* Round up Transformation_Filters internal buffer size to the next multiple of ↵lloyd2014-01-311-2/+17
| | | | | | 1024 if the underlying transform uses a small update granularity.
* Add ChaChalloyd2014-01-317-90/+361
|
* Add header guard and fix amalgamation. Github issue 10.lloyd2014-01-311-0/+5
|
* Avoid strict overflow warnings in GCC 4.8lloyd2014-01-242-4/+16
|
* Fix algo factory compilelloyd2014-01-186-8/+1
|
* Avoid memory overread in last block of CFB encryption.lloyd2014-01-181-1/+1
|
* More unique_ptrlloyd2014-01-182-25/+19
|
* Guess I won't be needing theselloyd2014-01-1881-81/+0
|
* More unique_ptr, and pull <memory> all the way up to types.hlloyd2014-01-1810-115/+69
|
* More unique_ptrlloyd2014-01-188-149/+74
|
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-03 12:03:08 +0000