Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add checks that keyed algorithms are actually keyed before use | Jack Lloyd | 2017-10-26 | 4 | -3/+115 |
| | | | | | Previously calling update or encrypt without calling set_key first would result in invalid outputs or else crashing. | ||||
* | Add more SipHash tests | Jack Lloyd | 2017-10-26 | 1 | -0/+187 |
| | | | | Generated by ref implementation | ||||
* | Fix botan-test --help | Jack Lloyd | 2017-10-24 | 3 | -36/+48 |
| | | | | [ci skip] | ||||
* | Inline Test::run_test into only caller | Jack Lloyd | 2017-10-24 | 3 | -45/+21 |
| | |||||
* | Merge GH #1273 Refactor test and cli runner code | Jack Lloyd | 2017-10-24 | 3 | -411/+403 |
|\ | |||||
| * | Refactor option parsing in cli and test code | Jack Lloyd | 2017-10-24 | 3 | -411/+403 |
| | | | | | | | | Allows cleaning up header includes, also somewhat smaller binaries. | ||||
* | | Avoid "using namespace" in test code | Jack Lloyd | 2017-10-24 | 3 | -64/+51 |
|/ | |||||
* | Merge GH #1263 Support FFDHE negotiation in TLS | Jack Lloyd | 2017-10-22 | 5 | -8/+19 |
|\ | |||||
| * | Add supported groups TLS extension (RFC 7919) | René Korthaus | 2017-10-17 | 5 | -8/+19 |
| | | |||||
* | | Merge GH #1270 Support verification of PSS X.509 objects | Jack Lloyd | 2017-10-22 | 233 | -0/+8971 |
|\ \ | |||||
| * | | review changes | Daniel Neus | 2017-10-21 | 1 | -225/+225 |
| | | | |||||
| * | | X.509 RSA-PSS verification | Daniel Neus | 2017-10-20 | 233 | -0/+8971 |
| | | | |||||
* | | | Allow setting CTR width via string | Jack Lloyd | 2017-10-20 | 1 | -0/+18 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Prohibit very small counter widths (under 4 bytes), since they lead to trivial keystream reuse. Add tests. Fix clone which always returned an object with a block-wide counter. | ||||
* | | | Add GHASH using SSSE3 | Jack Lloyd | 2017-10-20 | 1 | -1/+1 |
|/ / | | | | | | | About 30% faster than scalar on Skylake | ||||
* / | GMAC test fixes | Jack Lloyd | 2017-10-18 | 2 | -2/+2 |
|/ | | | | [ci skip] | ||||
* | Additional final annotations | Jack Lloyd | 2017-10-15 | 2 | -2/+2 |
| | |||||
* | Optimize GCM | Jack Lloyd | 2017-10-13 | 1 | -0/+2 |
| | | | | | | | | | | By allowing multiple blocks for clmul, slight speedup there though still far behind optimum. Precompute a table of multiples of H, 3-4x faster on systems without clmul (and still no secret indexes). Refactor GMAC to not derive from GHASH | ||||
* | Add compile-time rotation functions | Jack Lloyd | 2017-10-12 | 1 | -17/+15 |
| | | | | | | | | | | | | | | | | | The problem with asm rol/ror is the compiler can't schedule effectively. But we only need asm in the case when the rotation is variable, so distinguish the two cases. If a compile time constant, then static_assert that the rotation is in the correct range and do the straightforward expression knowing the compiler will probably do the right thing. Otherwise do a tricky expression that both GCC and Clang happen to have recognize. Avoid the reduction case; instead require that the rotation be in range (this reverts 2b37c13dcf). Remove the asm rotations (making this branch illnamed), because now both Clang and GCC will create a roll without any extra help. Remove the reduction/mask by the word size for the variable case. The compiler can't optimize that it out well, but it's easy to ensure it is valid in the callers, especially now that the variable input cases are easy to grep for. | ||||
* | Avoid <thread> | Jack Lloyd | 2017-10-11 | 1 | -2/+6 |
| | | | | Not needed here | ||||
* | Update test for new error return | Jack Lloyd | 2017-10-11 | 1 | -1/+1 |
| | |||||
* | Restart state in Text_Based_Test after test is over | Jack Lloyd | 2017-10-06 | 1 | -0/+2 |
| | | | | This allows --test-runs= to work as expected | ||||
* | Correct the SHA-3 PKCSv1.5 IDs | Jack Lloyd | 2017-10-05 | 1 | -0/+94 |
| | | | | | | | Thanks to @noloader for pointing me at draft-jivsov-openpgp-sha3-01 which has the correct values. Adds a test so this can't happen again. | ||||
* | Avoid empty methods, use =default or add a comment | Jack Lloyd | 2017-10-03 | 1 | -1/+0 |
| | | | | Sonar | ||||
* | Remove various unused variables | Jack Lloyd | 2017-10-02 | 5 | -9/+7 |
| | | | | Sonar finds | ||||
* | Remove protected data from Fixed_Output_RNG in test code | Jack Lloyd | 2017-10-02 | 1 | -31/+15 |
| | |||||
* | Avoid protected data member in TLS tests | Jack Lloyd | 2017-10-02 | 1 | -4/+5 |
| | |||||
* | Remove redundant "virtual override" declarations. | Jack Lloyd | 2017-10-02 | 1 | -2/+2 |
| | |||||
* | Remove another expensive keygen test | Jack Lloyd | 2017-10-01 | 1 | -1/+1 |
| | | | | [ci skip] | ||||
* | Fix some cast warnings from Sonar | Jack Lloyd | 2017-10-01 | 2 | -9/+12 |
| | |||||
* | Use explicit :: or std:: to refer to functions in namespaces | Jack Lloyd | 2017-10-01 | 1 | -1/+1 |
| | |||||
* | Remove 2048-bit keygen tests | Jack Lloyd | 2017-10-01 | 2 | -2/+2 |
| | | | | Slow, and doesn't buy us much vs just the 1024 bit test. | ||||
* | Address some MSVC warnings | Jack Lloyd | 2017-09-30 | 1 | -1/+1 |
| | |||||
* | Windows!!!!!!! | Jack Lloyd | 2017-09-29 | 1 | -1/+1 |
| | |||||
* | Work around some MSVC 2013 sillyness | Jack Lloyd | 2017-09-29 | 1 | -1/+3 |
| | |||||
* | Ensure files are closed before trying to remove it | Jack Lloyd | 2017-09-29 | 1 | -0/+4 |
| | | | | Windows ... | ||||
* | Avoid using std::rand in test code | Jack Lloyd | 2017-09-29 | 1 | -2/+4 |
| | | | | It makes static analyzers mad | ||||
* | Check return value of std::remove in test | Jack Lloyd | 2017-09-29 | 1 | -2/+5 |
| | | | | Coverity find | ||||
* | Fix test error if mceies disabled | Jack Lloyd | 2017-09-29 | 1 | -3/+5 |
| | | | | [ci skip] | ||||
* | Avoid crash in DLIES tests if AEADs disabled | Jack Lloyd | 2017-09-29 | 1 | -0/+6 |
| | |||||
* | Unused variable | Jack Lloyd | 2017-09-29 | 1 | -1/+1 |
| | | | | [ci skip] | ||||
* | In TLS CBC padding check, only need to verify last 256 bytes | Jack Lloyd | 2017-09-29 | 1 | -2/+26 |
| | | | | | No reason to scan the entire record since it's assured at most 256 bytes of padding are used. Inspired by GH #1227 | ||||
* | Add a test of TLS CBC padding verification | Jack Lloyd | 2017-09-29 | 2 | -0/+76 |
| | | | | See also GH #1227 | ||||
* | Further header cleanups | Jack Lloyd | 2017-09-28 | 11 | -13/+35 |
| | |||||
* | Make poly_dbl.h a submodule of utils | Jack Lloyd | 2017-09-27 | 1 | -1/+8 |
| | | | | | Only required by a few modules and if none of them are in use then the whole thing can just be skipped from the build. | ||||
* | Merge GH #1226 Add HKDF-Expand-Label | Jack Lloyd | 2017-09-27 | 2 | -0/+62 |
|\ | |||||
| * | Add HKDF-Expand-Label | Jack Lloyd | 2017-09-27 | 2 | -0/+62 |
| | | | | | | | | Step 1/n of TLS 1.3 | ||||
* | | Remove OutputLen parameter from KDF test data | Jack Lloyd | 2017-09-27 | 12 | -1405/+3 |
|/ | | | | | We already know how long the output should be, it should match the test vector :) | ||||
* | Add a GCD test | Jack Lloyd | 2017-09-25 | 3 | -0/+34 |
| | |||||
* | Improve test coverage slightly and correct macro | Jack Lloyd | 2017-09-25 | 1 | -8/+3 |
| | |||||
* | Fix for threadless builds | Jack Lloyd | 2017-09-25 | 1 | -0/+5 |
| | | | | [ci skip] |