aboutsummaryrefslogtreecommitdiffstats
path: root/src/lib
Commit message (Collapse)AuthorAgeFilesLines
...
* | VC2013 doesn't support __func__. Github #22lloyd2014-05-151-4/+4
| |
* | Visual C++'s iterator debugging gets cranky with &vec[vec.size()].lloyd2014-05-152-2/+2
|/ | | | Github #21
* Add default constructors to work around VC2013 issue. Github #17lloyd2014-05-012-0/+4
|
* Avoid initializer lists here, VC2013 doesn't like it. Github #18lloyd2014-05-012-5/+7
|
* Require one plausible entropy source in auto_rng, prevents the commonlloyd2014-04-271-0/+1
| | | | error of generating an amalagamation build with all of them disabled.
* Any fixed MR iterations is probably wrong for somebody. Allow the userlloyd2014-04-256-16/+57
| | | | | | to specify a probability as well as if n was randomly chosen or not. If the input is random use a better bounds to reduce the number of needed tests.
* Avoid std::chrono::steady_clock, missing in some distro gccslloyd2014-04-251-1/+0
|
* Avoid crash if read returns an error. Canonical case is on the blocking devicelloyd2014-04-241-1/+2
| | | | | with concurrent readers; if someone else got the entropy first we can get -1/errno=EAGAIN
* Use MADV_DONTDUMP on Linux, equiv to MAP_NOCORE on BSDlloyd2014-04-141-1/+5
|
* Use 20 Miller-Rabin iterations regardless of the size of the integer. Thislloyd2014-04-134-186/+42
| | | | | provides a much better worst-case error bound. Also take the nonce from anywhere in the usable range rather than limiting the bit size.
* Compile fixlloyd2014-04-131-2/+2
|
* Have TLS_Data_Reader decoding errors include the actual msg type namelloyd2014-04-1212-44/+47
|
* Verify that the server did not send any extension that the client didn'tlloyd2014-04-116-12/+41
| | | | offer. Previously the client only checked a couple of special cases.
* Fix a bug in Miller-Rabin primality testing introduced in 1.8.3lloyd2014-04-101-5/+6
| | | | | | | | where we chose a single random nonce and tested it repeatedly, rather than choosing new nonces each time. Reported by Jeff Marrison. Also remove a pointless comparison (also pointed out by Jeff) and add an initial test using a witness of 2.
* Better TLS checkslloyd2014-04-101-1/+2
|
* A std::deque's memory is not guaranteed to be contiguouslloyd2014-04-061-1/+1
|
* Make X.509 extension decoding failures point back to the problem extensionlloyd2014-04-052-10/+17
|
* Add ECDHE_ECDSA CCM suiteslloyd2014-04-051-2/+14
|
* X.509 path validation now performs all possible tests and returns alloyd2014-04-054-137/+153
| | | | | | set of error codes, instead of failing immediately on first error. This prevents a 'weak' error like an expired certificate from hiding a major error such as signature validation failure or hard revocation.
* Check Content-Length of HTTP responseslloyd2014-04-051-1/+10
|
* Fix an OCSP response decoding bug, we were not decoding KeyID properly.lloyd2014-04-051-4/+5
| | | | | | | | Also prioritize checking the status code before the dates, as otherwise an attacker could substitue a valid but expired response which marked the cert as revoked and we would still just return OCSP_EXPIRED. Obviously they can still play this game with an old (valid) OCSP response, but no point making it easy.
* Remove debug headerslloyd2014-04-051-3/+0
|
* NetBSD portability fix and some performance tweaks in locking allocatorlloyd2014-04-051-1/+11
|
* Avoid a ubsan warning on GCC 4.9 due uninitialized sign enum beinglloyd2014-03-302-5/+1
| | | | read during swap (in the move constructor)
* Support 0 length salts in PSSR. Bugzilla 268lloyd2014-03-272-3/+12
|
* Add rng command which can dump RNG outputs or raw entropy sampleslloyd2014-03-221-2/+2
|
* Simpify HMAC_RNG reseeding process. Actually update HMAC_DRBG reseed counter.lloyd2014-03-226-63/+33
|
* Add RFC 6979 nonce generator. Also some HMAC_DRBG cleanups.lloyd2014-03-225-11/+99
|
* Add HMAC_DRBGlloyd2014-03-214-1/+159
|
* Use stdint.h instead of cstdint for Clang. Bugzilla 266lloyd2014-02-211-7/+9
|
* Fix Transformation_Filter namelloyd2014-02-211-2/+1
|
* Transformation_Filter calls send() inside of start_msg() which meanslloyd2014-02-171-0/+3
| | | | | | | | | | that any filters which follow in the pipe will get write() called on them before start_msg(), causing confusion and/or crashes. This patch fixes it for the case when start() returns an empty vector which covers all current use cases. I'll have to figure out another approach for the general case (or decide the general case isn't worth supporting and remove the return value from start).
* Missing include for std::to_string, noticed with Clang 3.4 w/ libc++lloyd2014-02-161-0/+2
|
* Don't assume the leading cert chain is presented in-orderlloyd2014-02-161-5/+17
|
* Add missing std includeslloyd2014-02-162-0/+2
|
* Fix macro feature checklloyd2014-02-151-1/+1
|
* Change X9.31 to automatically reseed if randomize is called while unseeded.lloyd2014-02-132-10/+15
| | | | | If no entropy sources at all are enabled in the build, throw an exception immediately rather than having the poll mysteriously fail.
* Remove unused includelloyd2014-02-131-1/+0
|
* Remove dependency on boost string algoslloyd2014-02-133-13/+30
|
* Check the feature macro before assuming boost.filesystemlloyd2014-02-101-0/+7
|
* Clang fixeslloyd2014-02-092-1/+1
|
* More fixes for minified buildslloyd2014-02-093-6/+10
|
* Fix a bug introduced in 1.11.6 where we tried to check CRL signatureslloyd2014-02-084-13/+13
| | | | | | against the wrong key, causing any check to fail. Clean up the NIST X.509 path validation tests and run them by default.
* Remove the engine hookslloyd2014-02-082-41/+0
|
* Remove Square, Skipjack, Luby-Rackoff, and Blue Midnight Wish.lloyd2014-02-0813-1394/+0
|
* Have Skein call Threefish, rather than duplicating the code.lloyd2014-02-085-184/+149
|
* Compile fixeslloyd2014-02-082-1/+2
|
* Add std::chrono clock polllloyd2014-02-021-11/+30
|
* Avoid Windows macro damage. Github issue 13.lloyd2014-02-021-0/+2
|
* Add the CMAC constants for 256 and 512 bit block cipherslloyd2014-02-021-6/+28
| | | | | Also add test vectors for Threefish-512 CMAC and EAX, both generated by the library.
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-12 01:21:23 +0000