Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Accept ChaCha20 as a name | Jack Lloyd | 2017-12-18 | 1 | -0/+6 |
| | |||||
* | Windows has a different return type | Jack Lloyd | 2017-12-17 | 1 | -2/+4 |
| | |||||
* | Merge BSD and Winsock variations together | Jack Lloyd | 2017-12-17 | 1 | -105/+61 |
| | |||||
* | Missing include | Jack Lloyd | 2017-12-17 | 1 | -0/+1 |
| | |||||
* | Expose timeouts on the freestanding OCSP request utils | Jack Lloyd | 2017-12-17 | 2 | -6/+24 |
| | |||||
* | Add an overall timeout to the HTTP request | Jack Lloyd | 2017-12-17 | 1 | -0/+8 |
| | |||||
* | Use HTTP level timeouts instead of polling on the std::future | Jack Lloyd | 2017-12-17 | 2 | -25/+8 |
| | |||||
* | Expose timeouts to the HTTP API | Jack Lloyd | 2017-12-17 | 2 | -11/+26 |
| | |||||
* | Handle timeouts in BSD sockets | Jack Lloyd | 2017-12-17 | 1 | -5/+61 |
| | |||||
* | Add timeouts to Asio sockets | Jack Lloyd | 2017-12-17 | 6 | -39/+117 |
| | |||||
* | Clean up XMSS self-benchmark | Jack Lloyd | 2017-12-16 | 1 | -6/+4 |
| | | | | Clang complained that the lambda was capturing unnecessary variables. | ||||
* | Avoid using @deprecated annotation here | Jack Lloyd | 2017-12-16 | 1 | -2/+4 |
| | | | | | | Clang's documentation checker complains since it's not actually annotated as deprecated. Change comment to just indicate that it is not a public API function and will be removed in the future. | ||||
* | Fix a bug in PEM decoding | Jack Lloyd | 2017-12-16 | 2 | -31/+21 |
| | | | | | | | | If the label param was set to a non-empty string, the decoding would treat it as part of the label and then end up throwing a decoding error. The key fix here is adding the clear() call in decode. Private bug report by email. Add some basic tests for the PEM decoder. | ||||
* | Add ability to fingerprint public keys | Jack Lloyd | 2017-12-14 | 4 | -38/+59 |
| | |||||
* | Default to not setting a timestamp in the gzip header | Jack Lloyd | 2017-12-14 | 2 | -5/+6 |
| | | | | But allow it to be set via a constructor arg. | ||||
* | Drop IRIX support | Jack Lloyd | 2017-12-13 | 4 | -4/+0 |
| | | | | | | It turns out that GCC dropped support for IRIX in 4.8, so likely there was never even a C++11 compiler that could have been used to compile 2.x in any case. | ||||
* | Fix pragma message to avoid warning | schregger | 2017-12-12 | 1 | -1/+1 |
| | | | Missing parentheses around pragma message caused warnings in Visual Studio. | ||||
* | Rename SSE4.x names to avoid underscores | Jack Lloyd | 2017-12-11 | 2 | -2/+2 |
| | | | | | | This breaks how we determine the ISA flags for amalgamation files. The code for doing that is kind of a hack but I don't want to mess with it right now, easier to just rename the ISA internally. | ||||
* | Rename the SSE4 ISA extensions | Jack Lloyd | 2017-12-11 | 2 | -2/+2 |
| | | | | Simplifies macro generation | ||||
* | Rename CRC24 tables | Jack Lloyd | 2017-12-10 | 1 | -9/+9 |
| | | | | These conflict with name of temp variables and MSVC gets noisy. | ||||
* | Enable using NEON on Clang | Jack Lloyd | 2017-12-10 | 2 | -18/+19 |
| | | | | | Clang doesn't like the way SIMD shifts were implemented, I guess it fails to inline the constant. Make it a template parameter instead. | ||||
* | Avoid saving a resumed session multiple times | Jack Lloyd | 2017-12-07 | 1 | -1/+3 |
| | |||||
* | Handle #1303 on the server side | Jack Lloyd | 2017-12-07 | 1 | -1/+13 |
| | |||||
* | On resuming a client session, save the certificates that were used. | Jack Lloyd | 2017-12-07 | 3 | -3/+17 |
| | | | | GH #1303 | ||||
* | Fix formatting in TLS server code [ci skip] | Jack Lloyd | 2017-12-07 | 1 | -193/+179 |
| | |||||
* | Add a new version function returning just the version without extras | Jack Lloyd | 2017-12-06 | 2 | -16/+40 |
| | |||||
* | Merge GH #1339 Add ability to query supported named groups | Jack Lloyd | 2017-12-06 | 2 | -0/+41 |
|\ | |||||
| * | Add known_named_groups to EC_Group to list known curves. Fixes GX #1338. | J08nY | 2017-12-05 | 2 | -0/+41 |
| | | |||||
* | | Fix signed vs unsigned comparison warning | Jack Lloyd | 2017-12-05 | 1 | -1/+1 |
| | | |||||
* | | Cryptobox doesn't require filters anymore | Jack Lloyd | 2017-12-05 | 1 | -6/+3 |
| | | |||||
* | | Merge GH #1267 Multithreaded signing in XMSS | Jack Lloyd | 2017-12-05 | 29 | -170/+649 |
|\ \ | |||||
| * | | Fixes lambda capture error in MSVC | Matthias Gierlings | 2017-11-23 | 1 | -1/+3 |
| | | | | | | | | | | | | | | | MSVC seems to not allow defining aliases inside lambda capture expressions. Defining the aliases beforehand, outside the lambda fixes the issue. | ||||
| * | | Adds runtime benchmark to guess phys. core count. | Matthias Gierlings | 2017-11-23 | 3 | -3/+122 |
| | | | | | | | | | | | | | | | | | | | | | Adds a small runtime benchmark to prevent performance degradation by overprovisioning SMT CPUs with too many threads. This is a temporary workaround until a hardware and OS independent detection of the physical core count through Botan::CPUID is in place. | ||||
| * | | Updates documentation, news and copyright notices. | Matthias Gierlings | 2017-11-21 | 28 | -34/+45 |
| | | | | | | | | | | | | | | | | | | - Adds XMSS to the index of supported signature schemes. - Adds XMSS multithreading support to news.rst - Updates copyright notices of edited files. | ||||
| * | | Adds guards for environments without threads | Matthias Gierlings | 2017-11-21 | 1 | -1/+7 |
| | | | |||||
| * | | Implements multithreading support for XMSS | Matthias Gierlings | 2017-11-21 | 26 | -136/+477 |
| | | | |||||
* | | | Merge GH #1335 Support uninitialized X509 objects | Jack Lloyd | 2017-12-05 | 10 | -136/+130 |
|\ \ \ | |||||
| * | | | Need binary IO for Windows | Jack Lloyd | 2017-12-04 | 4 | -14/+4 |
| | | | | |||||
| * | | | Support uninitialized certificate objects | Jack Lloyd | 2017-12-04 | 10 | -136/+140 |
| | |/ | |/| | | | | | | | | | | | | | | | | Issued raised by @securitykernel on Slack, there was no non-hacky way to decode a list of certificate objects because creating an uninitialized one wasn't allowed. However after #884 that got much closer to being viable, this is the last pieces. | ||||
* | | | Remove use of "using namespace std" | Jack Lloyd | 2017-12-04 | 2 | -15/+17 |
| | | | |||||
* | | | Simplify date conversion by avoiding OS utilities | Jack Lloyd | 2017-12-04 | 4 | -117/+61 |
|/ / | | | | | | | | | | | | | We have to rely on non-portable OS calls to convert UTC times, and they are not available on many systems (including Solaris and MinGW). But instead there is a simple algorithm due to Howard Hinnant that does the same job. Woo. | ||||
* | | Add copyright statements to files modified in the preceding 2 commits | Harry Reimann | 2017-12-04 | 13 | -0/+13 |
| | | |||||
* | | Move TLS signature and key exchange code into callbacks | Harry Reimann | 2017-12-04 | 7 | -96/+237 |
| | | | | | | | | | | | | | | Give applications using an external crypto device for signature generation and/or verification and/or (ec)dh key exchange while establishing a TLS session hooks to implement the corresponding functionality. | ||||
* | | Make support for certificate status messages optional via policy | Harry Reimann | 2017-12-04 | 6 | -10/+40 |
| | | | | | | | | | | | | | | | | Don't postpone the verification of a server certificate if certificate status messages are not expected in client handshake. When using an external crypto device it may be necessary to verify the certificate before using the public key for verification of the signature in the server key exchange message. | ||||
* | | Code formatting tweak in Poly1305 code | Jack Lloyd | 2017-12-03 | 1 | -5/+5 |
| | | |||||
* | | Avoid calling lookup("DES") twice when clone will do the job. | Jack Lloyd | 2017-12-03 | 1 | -1/+1 |
| | | |||||
* | | Create two macros for CAST-128 vs CAST-256 | Jack Lloyd | 2017-12-03 | 2 | -2/+9 |
| | | | | | | | | Since eventually CAST-256 is going away. | ||||
* | | Merge GH #1329 Remove unaligned mem options | Jack Lloyd | 2017-12-02 | 1 | -29/+22 |
|\ \ | |||||
| * | | Remove unaligned mem check | Jack Lloyd | 2017-12-02 | 1 | -29/+22 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This previously enabled doing something unsafe (misaligned reads), but it turns out even on hardware that supports this, it is not safe to do because the compiler may do something unfortunate. Now memcpy is used, which is safe on any platform. Should provide a noticable speedup for ARM and PPC64, which previously used the byte-at-a-time fallback code. | ||||
* | | | Merge GH #1330 Fix typo | Jack Lloyd | 2017-12-02 | 1 | -1/+1 |
|\ \ \ |