aboutsummaryrefslogtreecommitdiffstats
path: root/src/scripts/tls_suite_info.py
Commit message (Collapse)AuthorAgeFilesLines
* Save the IETF ciphersute name directly in TLS::CiphersuiteJack Lloyd2016-06-091-14/+28
| | | | | | instead of trying (badly) to reconstruct it in to_string Save all strings in Ciphersuite as const char*
* Update OCB ciphersuites to follow new nonce scheme from -04 draftJack Lloyd2016-04-041-14/+14
|
* Add IETF standard ChaCha20Poly1305 ciphersuites to TLSJack Lloyd2016-03-231-35/+14
|
* Precompile the list of TLS ciphersuitesJack Lloyd2016-01-061-3/+21
| | | | | | | | | | This avoids a scan over the entire 0 - 0xFFFF space which is mostly empty, by instead keeping a second list in tls_suite_info which is exactly the keys for which the switch statement has values. This scan is only ever done once (when first needed) but removing it is sufficient to increase AFL's throuhput by 4x since it goes through a full startup on each test.
* Add TLS_PSK testsJack Lloyd2015-11-131-20/+13
| | | | | | | | | | | Fix a bug which rejected any short server key exchanges. These can occur with a plain PSK with short or empty identity hints. Disable SHA-224 by default. Remove some vestigal RC4 cruft. Push more on the TLS corruption tests.
* Remove RC4 (and all support for stream ciphers) from TLSlloyd2015-05-151-4/+4
|
* Add new IETF ChaCha suiteslloyd2015-04-041-7/+29
|
* Add a runtime map of string->func() which when called returnlloyd2015-01-281-2/+2
| | | | | | | | | | | | | | | | | Transforms and BlockCiphers. Registration for all types is done at startup but is very cheap as just a std::function and a std::map entry are created, no actual objects are created until needed. This is a huge improvement over Algorithm_Factory which used T::clone() as the function and thus kept a prototype object of each type in memory. Replace existing lookup mechanisms for ciphers, AEADs, and compression to use the transform lookup. The existing Engine framework remains in place for BlockCipher, but the engines now just call to the registry instead of having hardcoded lookups. s/Transformation/Transform/ with typedefs for compatability. Remove lib/selftest code (for runtime selftesting): not the right approach.
* Update TLS OCB ciphersuites to match draft-zauner-tls-aes-ocb-00lloyd2015-01-211-17/+24
| | | | | and enable them in the default build, though still not enabled in the runtime policy.
* Save to file by defaultlloyd2015-01-211-5/+6
|
* Ensure all files have copyright and license info.lloyd2015-01-101-1/+1
| | | | | Update license header line to specify the terms and refer to the file, neither of which it included before.
* Add ChaCha20Poly1305 TLS ciphersuites compatible with Google's implementationlloyd2014-12-311-21/+14
|
* Cleanup handling of TLS AEAD nonce sizes, push all knowledge of whatlloyd2014-11-031-3/+4
| | | | the nonce sizes should be down to the ciphersuite generating script.
* Add flag to enable ChaCha suites (draft-mavrogiannopoulos-chacha-tls-01)lloyd2014-02-081-5/+29
|
* Website tweaks. Rename TLS suite script options.lloyd2014-01-111-16/+14
|
* Add option processing to tls_suite_info scriptlloyd2014-01-071-22/+52
|
* Shuffle things around. Add NIST X.509 test to build.lloyd2014-01-011-0/+273