aboutsummaryrefslogtreecommitdiffstats
path: root/src/lib
Commit message (Collapse)AuthorAgeFilesLines
* Allow setting the validation time during PKIX path validationJack Lloyd2016-10-212-18/+29
| | | | | | | Previously validation asked the system clock which is not always the correct thing (for example when using Roughtime protocol). Had been on the todo list forever, forced into it by some of the test certs expiring today.
* Add create_private_key, expose key loading functions in pk_algs.hJack Lloyd2016-10-207-69/+225
|
* Tighten up TLS server handshake logic.Jack Lloyd2016-10-201-20/+15
| | | | | | | | | Previously client was allowed to omit the Certificate message, a leftover from supporting SSLv3. In all versions of TLS, an empty message must be sent if the client does not want to use a cert. No known security impact, but nothing we need to allow anymore. Clean up the handshake switch a bit by using return statements.
* Merge GH #669 Add SHA-3, SHAKE-128, and BoringSSL-mode NewHopeJack Lloyd2016-10-2015-209/+554
|\
| * Add SHAKE-128 as stream cipherJack Lloyd2016-10-198-106/+240
| | | | | | | | | | Updates NewHope to use that instead of the hard-coded SHAKE-128, and adds toggle for BoringSSL compat mode using AES-128/CTR + SHA-256.
| * Add proper SHA-3Jack Lloyd2016-10-1910-115/+326
| | | | | | | | | | | | | | | | | | | | Kind of a copy and paste of Keccak, but only a single copy of the permutation at least. Keccak depends on SHA-3 instead of the reverse, so that SHA-3 can be enabled without also bringing in an unapproved hash function. Updates newhope code and removes API function newhope_hash which was an unofficial SHA-3-256.
* | Reorganize anon namespace code to fix last doxygen warn [ci skip]René Korthaus2016-10-201-8/+8
| |
* | Fix doxygen warnings [ci skip]René Korthaus2016-10-1939-58/+101
| |
* | Minor doxygen fixes [ci skip]René Korthaus2016-10-1910-10/+10
| |
* | Improve pubkey doxygen [ci skip]René Korthaus2016-10-1915-17/+251
| |
* | Improve tls doxygen [ci skip]René Korthaus2016-10-199-0/+99
| |
* | Improve stream doxygen [ci skip]René Korthaus2016-10-194-7/+26
| |
* | Improve rng doxygen [ci skip]René Korthaus2016-10-196-11/+82
| |
* | Improve pkcs11 doxygen [ci skip]René Korthaus2016-10-193-13/+49
| |
* | Improve pk_pad doxygen [ci skip]René Korthaus2016-10-196-5/+13
| |
* | Improve pbkdf doxygen [ci skip]René Korthaus2016-10-191-4/+54
| |
* | Improve modes doxygen [ci skip]René Korthaus2016-10-199-8/+104
| |
* | Improve misc doxygen [ci skip]René Korthaus2016-10-192-0/+18
| |
* | Improve mac doxygen [ci skip]René Korthaus2016-10-191-4/+6
| |
* | Improve kdf doxygen [ci skip]René Korthaus2016-10-198-8/+54
| |
* | Improve hash doxygen [ci skip]René Korthaus2016-10-192-4/+13
| |
* | Improve block doxygen [ci skip]René Korthaus2016-10-191-3/+6
|/
* Maintainer mode fixesJack Lloyd2016-10-173-14/+12
|
* In TLS::Session_Keys return values by referenceJack Lloyd2016-10-171-6/+6
|
* Update SRP6 versionJack Lloyd2016-10-171-1/+1
| | | | API changed in 227d59d88 but did not bump the version.
* Indent include so amalgamation works correctlyJack Lloyd2016-10-171-2/+1
| | | | | Otherwise <future> is thrown into the top of botan_all.h which causes problems on IncludeOS
* Merge GH #665 Add IncludeOS target, make filesystem/threads optionalJack Lloyd2016-10-1759-85/+281
|\
| * Add ISA annotations to functions using SIMD, AES, etcJack Lloyd2016-10-149-0/+44
| | | | | | | | | | | | | | | | Also emit `#pragma GCC target` in the ISA specific amalgamation files. This allows compiling without any special compiler flags, at least with GCC 6.2 and Clang 3.8. The ISA annotations are ignored in MSVC, which just emits whatever instruction the intrinsic requires.
| * More no-filesystem fixesJack Lloyd2016-10-125-0/+12
| |
| * Fix mutex in oids.cppJack Lloyd2016-10-121-7/+7
| | | | | | | | Remove bogus includes for TLS tests
| * Abstract out mutex type. Make threads optional.Jack Lloyd2016-10-1230-62/+162
| |
| * Add IncludeOS target. Make filesystem support optional.Jack Lloyd2016-10-1016-17/+57
| |
* | Remove constexpr use introduced in 20f7e4ecJack Lloyd2016-10-162-7/+7
| | | | | | | | Turns out MSVC 2013 doesn't have constexpr at all (!!)
* | util: Some simple constexpr usesJack Lloyd2016-10-133-31/+9
| | | | | | | | Remove unused and empty get_byte.h
* | Change Certificate_Store_in_SQL to take RNG as argument.Jack Lloyd2016-10-134-14/+19
| | | | | | | | | | Previously it created a new AutoSeeded_RNG in each function, sometimes without even using it.
* | ffi: Avoid deprecated PK constructors.Jack Lloyd2016-10-131-4/+4
| | | | | | | | The system rng is already a hard requirement for FFI anyway.
* | Merge GH #659 TLS CBC is optionalJack Lloyd2016-10-136-2/+18
|\ \
| * | Make TLS CBC optionalJack Lloyd2016-10-086-2/+18
| | |
* | | Merge GH #646 Fix MSVC debug configurations. Add debug builds to AppVeyorJack Lloyd2016-10-131-0/+9
|\ \ \
| * | | Diable static_assert in secure_allocator in MSVC debugSimon Warta2016-10-131-0/+9
| | | |
* | | | Merge GH #663 Compression docsJack Lloyd2016-10-111-1/+38
|\ \ \ \
| * | | | Improve compression doc [ci skip]René Korthaus2016-10-111-1/+38
| | | | |
* | | | | Merge GH #662 Doxygen commentsJack Lloyd2016-10-1112-146/+395
|\ \ \ \ \
| * | | | | Improve cert doxygen [ci skip]René Korthaus2016-10-1112-146/+395
| |/ / / /
* / / / / Improve base doxygen [ci skip]René Korthaus2016-10-113-1/+22
|/ / / /
* | | / Add doxygen mainpageRené Korthaus2016-10-101-0/+57
| |_|/ |/| | | | | | | | Adds a Crypto++-like doxygen mainpage. Replaces the formerly empty mainpage.
* | | Merge GH #655 Fix Win32 CryptoAPI sourceJack Lloyd2016-10-101-1/+1
|\ \ \
| * | | The implicit constructor does not specify a provider.slaviber2016-10-071-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | With no provider specified, Win32_CAPI_EntropySource::poll does not call ::CryptGenRandom and returns 0, leading to subsequent PRNG_Unseeded exceptions.
* | | | Fix Clang warningsJack Lloyd2016-10-092-4/+2
| | | |
* | | | The other half of 55b8fb5Jack Lloyd2016-10-091-7/+9
| | | | | | | | | | | | | | | | GH #656