Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Use explicit on more single-argument constructors | Jack Lloyd | 2017-09-30 | 14 | -20/+23 |
| | |||||
* | Avoid bogus declarations in GMAC | Jack Lloyd | 2017-09-30 | 1 | -25/+3 |
| | | | | | These functions are declared/defined on MessageAuthenticationCode, and call the start_msg virtual. | ||||
* | Address some MSVC warnings | Jack Lloyd | 2017-09-30 | 7 | -134/+139 |
| | |||||
* | Use class instead of struct for objects with member functions | Jack Lloyd | 2017-09-30 | 13 | -156/+183 |
| | | | | Flagged by Sonar and quite reasonable | ||||
* | Add annotation so GCC/Clang/MSVC know it is an allocation function. | Jack Lloyd | 2017-09-30 | 2 | -1/+12 |
| | |||||
* | Merge GH #1231 Hide secure_allocator allocate in a function | Jack Lloyd | 2017-09-30 | 5 | -22/+55 |
|\ | |||||
| * | Missing include, noticed by OS X | Jack Lloyd | 2017-09-29 | 1 | -0/+1 |
| | | |||||
| * | In secure_allocator, hide mlock/new usage in a function in mem_ops | Jack Lloyd | 2017-09-29 | 5 | -22/+54 |
| | | | | | | | | | | | | | | Switch to calloc/free instead of new/delete - shouldn't matter since we are only allocate integral types. This change reduces the size of libbotan-2.so by ~300 Kb on my system. | ||||
* | | Thinko fix | Jack Lloyd | 2017-09-30 | 1 | -1/+1 |
| | | |||||
* | | Compat typedef PBKDF -> S2K | Jack Lloyd | 2017-09-29 | 1 | -1/+12 |
|/ | | | | [ci skip] | ||||
* | Avoid throwing in pool allocator deallocation path | Jack Lloyd | 2017-09-29 | 1 | -8/+1 |
| | | | | | | std::terminate can ruin your day Coverity find | ||||
* | Merge GH #1229 Simplify allocator and avoid MSVC perf issue | Jack Lloyd | 2017-09-29 | 1 | -37/+5 |
|\ | |||||
| * | Add back size_type typedef | Jack Lloyd | 2017-09-29 | 1 | -0/+1 |
| | | | | | | | | | | | | | | Lacking this seems to cause interesting issues with Apple Clang on 32-bit ARM. It seems like it implicitly defines a size_type that is the same size as size_t, but not actually size_t, so we get an unsigned long vs unsigned int mismatch on the type. | ||||
| * | Of course MSVC 2013 has to be special | Jack Lloyd | 2017-09-29 | 1 | -0/+7 |
| | | |||||
| * | Simplifiy secure_allocator | Jack Lloyd | 2017-09-29 | 1 | -44/+4 |
| | | | | | | | | | | | | | | | | | | According to https://howardhinnant.github.io/allocator_boilerplate.html we don't need most of what was in there in C++11 and later. I think I originally wrote that code referencing a C++03 doc. Specifically avoiding construct, destruct prevents a performance issue in MSVC (GH #1228) | ||||
* | | In TLS CBC padding check, only need to verify last 256 bytes | Jack Lloyd | 2017-09-29 | 1 | -8/+16 |
|/ | | | | | No reason to scan the entire record since it's assured at most 256 bytes of padding are used. Inspired by GH #1227 | ||||
* | Add a test of TLS CBC padding verification | Jack Lloyd | 2017-09-29 | 2 | -9/+12 |
| | | | | See also GH #1227 | ||||
* | Include pk_keys.h in pkcs8.h and x509_key.h | Jack Lloyd | 2017-09-29 | 2 | -2/+2 |
| | | | | Not strictly required but seems likely to cause problems for applications. | ||||
* | Require HMAC for HKDF | Jack Lloyd | 2017-09-28 | 1 | -0/+4 |
| | | | | Not actually strictly required but in practice doesn't make much sense. | ||||
* | Fixes for MSVC | Jack Lloyd | 2017-09-28 | 2 | -2/+2 |
| | | | | BOTAN_UNUSED "uses" the RNG :/ | ||||
* | Further header cleanups | Jack Lloyd | 2017-09-28 | 17 | -9/+29 |
| | |||||
* | Add variants of PKCS8::load_key that don't require an RNG argument | Jack Lloyd | 2017-09-28 | 2 | -32/+112 |
| | | | | | It's not used and only there for compat with existing callers, but no reason we can't offer a version that doesn't require it. | ||||
* | Doxygen comment | Jack Lloyd | 2017-09-28 | 1 | -0/+6 |
| | | | | [ci skip] | ||||
* | Header cleanups | Jack Lloyd | 2017-09-28 | 5 | -5/+3 |
| | |||||
* | Merge GH #1224 Address side channel in Montgomery exponentiation | Jack Lloyd | 2017-09-28 | 6 | -36/+98 |
|\ | |||||
| * | Add valgrind annotations to check const_time_lookup | Jack Lloyd | 2017-09-26 | 1 | -0/+5 |
| | | |||||
| * | Use a side channel silent table look up in the Montgomery exponentiation | Jack Lloyd | 2017-09-25 | 6 | -36/+93 |
| | | |||||
* | | Make poly_dbl.h a submodule of utils | Jack Lloyd | 2017-09-27 | 8 | -1/+20 |
| | | | | | | | | | | Only required by a few modules and if none of them are in use then the whole thing can just be skipped from the build. | ||||
* | | Add HKDF-Expand-Label | Jack Lloyd | 2017-09-27 | 3 | -2/+62 |
| | | | | | | | | Step 1/n of TLS 1.3 | ||||
* | | Move the SecureVector typedef to secmem.h | Jack Lloyd | 2017-09-27 | 2 | -12/+3 |
| | | | | | | | | No point making someone include a deprecated header to get this. | ||||
* | | You can't have attributes on a template typedef, apparently. | Jack Lloyd | 2017-09-26 | 1 | -1/+0 |
| | | | | | | | | [ci skip] | ||||
* | | Add some more includes to botan.h | Jack Lloyd | 2017-09-26 | 1 | -10/+34 |
|/ | | | | | | This is basically just for Monotone [ci skip] | ||||
* | Correct Doxygen error | Jack Lloyd | 2017-09-24 | 1 | -1/+0 |
| | | | | [ci skip] | ||||
* | Avoid debug iterator error | Jack Lloyd | 2017-09-24 | 1 | -6/+12 |
| | |||||
* | Missing include | Jack Lloyd | 2017-09-24 | 1 | -0/+1 |
| | |||||
* | Test SIV multi-AD function | Jack Lloyd | 2017-09-24 | 1 | -2/+2 |
| | |||||
* | Better tests for SIV | Jack Lloyd | 2017-09-24 | 6 | -39/+55 |
| | | | | | | | | | | | | Correct errors in the AEAD tests that assumed process/update always return something - that isn't true for SIV Minor optimizations in CMAC and CTR to cache the block size instead of making a zillion virtual calls for it. Generalize SIV slightly to where it could support a non-128 bit cipher, but don't pull the trigger on it since I can't find any implementations to crosscheck with. | ||||
* | Further build/test fixes for restricted configurations | Jack Lloyd | 2017-09-24 | 9 | -1/+32 |
| | |||||
* | More build fixes | Jack Lloyd | 2017-09-24 | 2 | -1/+3 |
| | |||||
* | More header cleanups | Jack Lloyd | 2017-09-23 | 12 | -4/+13 |
| | |||||
* | Fixes for headers missing in certain configurations | Jack Lloyd | 2017-09-23 | 1 | -0/+1 |
| | |||||
* | It's easier to use calloc here | Jack Lloyd | 2017-09-22 | 1 | -8/+2 |
| | | | | | Assumption is calloc checks for overflow (!) so if it returns a pointer that means no overflow occurred. | ||||
* | Refer to free in std:: | Jack Lloyd | 2017-09-22 | 1 | -1/+1 |
| | |||||
* | Attempt to make MSVC happy | Jack Lloyd | 2017-09-22 | 1 | -0/+12 |
| | |||||
* | Avoid creating invalid iterator references when input_len == 0 | Jack Lloyd | 2017-09-22 | 1 | -4/+10 |
| | |||||
* | Avoid deprecated warning in tls_blocking.cpp | Jack Lloyd | 2017-09-22 | 1 | -0/+6 |
| | | | | We don't care because the whole file is itself deprecated. | ||||
* | Deprecate modification of Pipe objects | Jack Lloyd | 2017-09-22 | 3 | -18/+21 |
| | | | | | This is a feature that is hairy to implement and really makes application code confusing. | ||||
* | Avoid GCC signed-overflow warning | Jack Lloyd | 2017-09-22 | 1 | -2/+2 |
| | |||||
* | Refactor to avoid explicit delete in BER_Decoder | Jack Lloyd | 2017-09-22 | 2 | -26/+12 |
| | |||||
* | Avoid new/delete in BearSSL ECDSA code | Jack Lloyd | 2017-09-22 | 1 | -17/+10 |
| | | | | Especially storing private key that way was bad, wasn't zeroed. |