Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Merge GH #665 Add IncludeOS target, make filesystem/threads optional | Jack Lloyd | 2016-10-17 | 59 | -85/+281 |
|\ | |||||
| * | Add ISA annotations to functions using SIMD, AES, etc | Jack Lloyd | 2016-10-14 | 9 | -0/+44 |
| | | | | | | | | | | | | | | | | Also emit `#pragma GCC target` in the ISA specific amalgamation files. This allows compiling without any special compiler flags, at least with GCC 6.2 and Clang 3.8. The ISA annotations are ignored in MSVC, which just emits whatever instruction the intrinsic requires. | ||||
| * | More no-filesystem fixes | Jack Lloyd | 2016-10-12 | 5 | -0/+12 |
| | | |||||
| * | Fix mutex in oids.cpp | Jack Lloyd | 2016-10-12 | 1 | -7/+7 |
| | | | | | | | | Remove bogus includes for TLS tests | ||||
| * | Abstract out mutex type. Make threads optional. | Jack Lloyd | 2016-10-12 | 30 | -62/+162 |
| | | |||||
| * | Add IncludeOS target. Make filesystem support optional. | Jack Lloyd | 2016-10-10 | 16 | -17/+57 |
| | | |||||
* | | Remove constexpr use introduced in 20f7e4ec | Jack Lloyd | 2016-10-16 | 2 | -7/+7 |
| | | | | | | | | Turns out MSVC 2013 doesn't have constexpr at all (!!) | ||||
* | | util: Some simple constexpr uses | Jack Lloyd | 2016-10-13 | 3 | -31/+9 |
| | | | | | | | | Remove unused and empty get_byte.h | ||||
* | | Change Certificate_Store_in_SQL to take RNG as argument. | Jack Lloyd | 2016-10-13 | 4 | -14/+19 |
| | | | | | | | | | | Previously it created a new AutoSeeded_RNG in each function, sometimes without even using it. | ||||
* | | ffi: Avoid deprecated PK constructors. | Jack Lloyd | 2016-10-13 | 1 | -4/+4 |
| | | | | | | | | The system rng is already a hard requirement for FFI anyway. | ||||
* | | Merge GH #659 TLS CBC is optional | Jack Lloyd | 2016-10-13 | 6 | -2/+18 |
|\ \ | |||||
| * | | Make TLS CBC optional | Jack Lloyd | 2016-10-08 | 6 | -2/+18 |
| | | | |||||
* | | | Merge GH #646 Fix MSVC debug configurations. Add debug builds to AppVeyor | Jack Lloyd | 2016-10-13 | 1 | -0/+9 |
|\ \ \ | |||||
| * | | | Diable static_assert in secure_allocator in MSVC debug | Simon Warta | 2016-10-13 | 1 | -0/+9 |
| | | | | |||||
* | | | | Merge GH #663 Compression docs | Jack Lloyd | 2016-10-11 | 1 | -1/+38 |
|\ \ \ \ | |||||
| * | | | | Improve compression doc [ci skip] | René Korthaus | 2016-10-11 | 1 | -1/+38 |
| | | | | | |||||
* | | | | | Merge GH #662 Doxygen comments | Jack Lloyd | 2016-10-11 | 12 | -146/+395 |
|\ \ \ \ \ | |||||
| * | | | | | Improve cert doxygen [ci skip] | René Korthaus | 2016-10-11 | 12 | -146/+395 |
| |/ / / / | |||||
* / / / / | Improve base doxygen [ci skip] | René Korthaus | 2016-10-11 | 3 | -1/+22 |
|/ / / / | |||||
* | | / | Add doxygen mainpage | René Korthaus | 2016-10-10 | 1 | -0/+57 |
| |_|/ |/| | | | | | | | | Adds a Crypto++-like doxygen mainpage. Replaces the formerly empty mainpage. | ||||
* | | | Merge GH #655 Fix Win32 CryptoAPI source | Jack Lloyd | 2016-10-10 | 1 | -1/+1 |
|\ \ \ | |||||
| * | | | The implicit constructor does not specify a provider. | slaviber | 2016-10-07 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | | | | | With no provider specified, Win32_CAPI_EntropySource::poll does not call ::CryptGenRandom and returns 0, leading to subsequent PRNG_Unseeded exceptions. | ||||
* | | | | Fix Clang warnings | Jack Lloyd | 2016-10-09 | 2 | -4/+2 |
| | | | | |||||
* | | | | The other half of 55b8fb5 | Jack Lloyd | 2016-10-09 | 1 | -7/+9 |
| | | | | | | | | | | | | | | | | GH #656 | ||||
* | | | | OpenSSL EC: Correctly handle OpenSSL not supporting the curve | Jack Lloyd | 2016-10-09 | 2 | -6/+6 |
| | | | | | | | | | | | | | | | | GH #656 | ||||
* | | | | This happening is actually a user error (eg, wrong key type) | Jack Lloyd | 2016-10-09 | 1 | -7/+14 |
| | | | | |||||
* | | | | Make pk_ops.h internal | Jack Lloyd | 2016-10-08 | 13 | -37/+113 |
| | | | | | | | | | | | | | | | | Some fixes for missing system_rng in ECIES and tests. | ||||
* | | | | Add missing try/catch blocks. | Jack Lloyd | 2016-10-07 | 1 | -1/+27 |
| | | | | | | | | | | | | | | | | Document that create_*_op is public but not for public consumption. | ||||
* | | | | OpenSSL fixes | Jack Lloyd | 2016-10-07 | 2 | -4/+4 |
| | | | | |||||
* | | | | Revert PK_Verifier change (don't require RNG there). | Jack Lloyd | 2016-10-07 | 36 | -166/+208 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Verification is deterministic and public, so really no RNG is ever needed. Change provider handling - accepts "base", "openssl", or empty, otherwise throws a Provider_Not_Found exception. | ||||
* | | | | Remove Algo_Registry usage from public key code. | Jack Lloyd | 2016-10-07 | 61 | -388/+1080 |
| |_|/ |/| | | | | | | | | | | | | | | | | | | | | Instead the key types exposes operations like `create_encryption_op` which will return the relevant operation if the algorithm supports it. Changes pubkey.h interface, now RNG is passed at init time. Blinder previous created its own RNG, now it takes it from app. | ||||
* | | | TLS: Split CBC+HMAC modes to standalone AEAD_Mode | Jack Lloyd | 2016-10-07 | 7 | -338/+683 |
| | | | | | | | | | | | | | | | Now record layer only deals with an AEAD, and the weird complications of CBC modes mostly hidden in tls_cbc.cpp | ||||
* | | | Merge GH #645 TLS compressed points | Jack Lloyd | 2016-10-07 | 10 | -5/+143 |
|\ \ \ | |/ / |/| | | |||||
| * | | Minor improvements | René Korthaus | 2016-10-03 | 3 | -25/+7 |
| | | | |||||
| * | | Support encoding of supported point formats extension | René Korthaus | 2016-10-03 | 10 | -5/+161 |
| |/ | |||||
* | | Merge GH #631 Cert store in SQL | Jack Lloyd | 2016-10-04 | 21 | -82/+587 |
|\ \ | | | | | | | | | | Also changes Cert store interface to return shared_ptr, see GH #471 | ||||
| * | | 2nd review round | seu | 2016-10-02 | 4 | -50/+68 |
| | | | |||||
| * | | remove superfluous includes | Kai Michaelis | 2016-10-02 | 2 | -9/+0 |
| | | | |||||
| * | | 1st review round | Kai Michaelis | 2016-10-02 | 3 | -15/+8 |
| | | | |||||
| * | | Certificate store using SQLite | Kai Michaelis | 2016-10-02 | 18 | -82/+585 |
| | | | |||||
* | | | Merge GH #648 Accept read-only access to /dev/urandom | Jack Lloyd | 2016-10-04 | 1 | -0/+6 |
|\ \ \ | | | | | | | | | | | | | See also GH #647 | ||||
| * | | | Resolve #647 | Nathan Hourt | 2016-10-03 | 1 | -0/+6 |
| | |/ | |/| | | | | Implement a backoff approach to opening the system RNG: if opening read-write fails, try to open read-only. This will allow the RNG to be used, but attempts to add entropy will fail. If opening as read-only also fails, only then throw an exception. | ||||
* | | | Merge GH #641: If RC4 is disabled, disable OpenSSL version also | Jack Lloyd | 2016-10-04 | 1 | -1/+1 |
|\ \ \ | |||||
| * | | | fix compiler error: openssl w/o rc4 | t0b3 | 2016-10-01 | 1 | -1/+1 |
| | |/ | |/| | | | | | | | | | | | | | Compiling botan with disabled rc4 module fails in case of openssl w/o rc4... Error: ./src/lib/prov/openssl/openssl_rc4.cpp:15:25: fatal error: openssl/rc4.h: No such file or directory #include <openssl/rc4.h> | ||||
* | | | Fix entropy source selection logic on Windows | Jack Lloyd | 2016-10-04 | 1 | -1/+2 |
| |/ |/| | | | | | Fixes GH #644 | ||||
* | | SIV is restricted to 128 bit ciphers | Jack Lloyd | 2016-10-02 | 1 | -0/+2 |
| | | |||||
* | | Missing inline specifier | Jack Lloyd | 2016-10-02 | 1 | -1/+1 |
|/ | |||||
* | New TLS positive and negative tests. | Juraj Somorovsky | 2016-09-30 | 2 | -7/+7 |
| | | | | | | | | | | | | | | | | | | | TLS message parsing: - CertificateVerify - HelloVerify - ClientHello (with extensions) - ServerHello (with extensions) - NewSessionTicket - Alert TLS message processing: - HelloVerify TLS Policy tests Unit tests with TLS client authentication Added test_throws method that checks the correct exception message. | ||||
* | Removed redundant check in ClientHello parser | Juraj Somorovsky | 2016-09-30 | 1 | -3/+0 |
| | |||||
* | Vector out of bounds fix | Juraj Somorovsky | 2016-09-30 | 1 | -1/+1 |
| |