Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Support long outputs from Argon2 | Jack Lloyd | 2019-08-23 | 1 | -0/+2234 |
| | | | | Closes #2078 | ||||
* | In threaded mode tests, disable mlock pool unless requested | Jack Lloyd | 2019-08-21 | 1 | -0/+11 |
| | |||||
* | Serialize the PKCS11 tests | Jack Lloyd | 2019-08-20 | 1 | -1/+10 |
| | | | | See #2072 | ||||
* | Default to running the tests in threaded mode | Jack Lloyd | 2019-08-17 | 2 | -14/+7 |
| | |||||
* | Fix test - OCSP responder seems unhappy about our old ee cert | Jack Lloyd | 2019-08-10 | 1 | -4/+3 |
| | |||||
* | Remove unnecessary functions | Jack Lloyd | 2019-08-04 | 1 | -0/+2 |
| | |||||
* | Reduce usage of oids.h with the addition of some helpers on OID | Jack Lloyd | 2019-08-04 | 10 | -25/+13 |
| | |||||
* | Avoid using deprecated public fields of AlgorithmIdentifier | Jack Lloyd | 2019-08-04 | 1 | -8/+8 |
| | |||||
* | Deprecate and replace OIDS::lookup | Jack Lloyd | 2019-08-04 | 9 | -32/+34 |
| | |||||
* | Merge GH #2055 Updates for GOST 2012 support | Jack Lloyd | 2019-08-02 | 4 | -11/+121 |
|\ | |||||
| * | Add gost_512A param | Jack Lloyd | 2019-08-01 | 1 | -11/+14 |
| | | |||||
| * | Fix test when GOST or Streebog is disabled | Jack Lloyd | 2019-08-01 | 1 | -0/+2 |
| | | |||||
| * | Updates for GOST 2012 support | Jack Lloyd | 2019-08-01 | 3 | -0/+105 |
| | | | | | | | | | | | | | | GOST uses IEEE style formatting for signatures rather than DER struct. Confirmed using 2012 test certs from CryptoPro GH #1860 #1897 | ||||
* | | Add Jacobi fn tests | Jack Lloyd | 2019-08-01 | 2 | -0/+49 |
|/ | |||||
* | Fix "OSCP" typo in OCSP code. | Jack Lloyd | 2019-07-23 | 1 | -2/+2 |
| | | | | GH #2048 | ||||
* | Remove duplicated test, add XChaCha20Poly1305 test from i-d | Jack Lloyd | 2019-07-20 | 1 | -6/+8 |
| | |||||
* | Support disable thread_local but not threads | Jack Lloyd | 2019-07-19 | 1 | -1/+1 |
| | | | | Needed for old iOS and maybe other things GH #2045 | ||||
* | Add test case for DTLS reconnection from same client port | Jack Lloyd | 2019-07-13 | 1 | -0/+235 |
| | |||||
* | Remove tab chars | Jack Lloyd | 2019-07-10 | 3 | -13/+13 |
| | | | | Death to \t | ||||
* | Remove BearSSL provider | Jack Lloyd | 2019-07-05 | 1 | -1/+1 |
| | | | | | | BearSSL is much slower than Botan's builtins, and it is not commonly included in distributions so doesn't even have the advantage of ubiquity. | ||||
* | Boost 1.70 compatibility in asio_stream unit test | Hannes Rantzsch | 2019-06-27 | 1 | -2/+18 |
| | |||||
* | Change XMSS OIDs and feature macro name | Jack Lloyd | 2019-06-23 | 1 | -2/+2 |
| | | | | Since draft6 and final RFC are not compatible ... | ||||
* | Add support for RFC 8032 Ed25519ph | Jack Lloyd | 2019-06-20 | 2 | -7/+17 |
| | | | | GH #1699 | ||||
* | Add support for HelloVerifyRequest on server side | Jack Lloyd | 2019-06-18 | 1 | -0/+5 |
| | | | | Closes GH #1833 | ||||
* | Fix allocation. Add more tests. | Jack Lloyd | 2019-06-15 | 1 | -0/+63 |
| | |||||
* | Add a compatability shim for libsodium | Jack Lloyd | 2019-06-15 | 1 | -0/+609 |
| | | | | | Not complete, just trying to hit the most commonly used APIs plus the ones that are easy to do. | ||||
* | Merge GH #1995 Allow setting max OCSP response age during verification | Jack Lloyd | 2019-06-14 | 1 | -0/+181 |
|\ | |||||
| * | add option to specify ocsp max age | Patrick Schmidt | 2019-06-14 | 1 | -0/+181 |
| | | |||||
* | | Merge GH #1992 Allow overriding cert verify in TLS::Stream | Jack Lloyd | 2019-06-14 | 1 | -28/+34 |
|\ \ | |/ |/| | |||||
| * | TLS::Context holds references rather than pointers | Hannes Rantzsch | 2019-06-13 | 1 | -37/+34 |
| | | | | | | | | | | | | | | | | Parameters passed from TLS::Context to TLS::Client for initialization are now held as references in the context. Ownership of these members is thereby explicitly left with the user. Co-authored-by: Tim Oesterreich <[email protected]> | ||||
| * | allow setting a verify_callback in TLS::Context | Hannes Rantzsch | 2019-06-03 | 1 | -24/+33 |
| | | | | | | | | | | This will allow customizing the tls_verify_cert_chain callback for TLS::Stream. TLS::Context is now a class and its members are protected. | ||||
* | | Officially deprecate headers | Jack Lloyd | 2019-06-07 | 1 | -6/+0 |
| | | | | | | | | | | | | | | | | | | | | Create BOTAN_DEPRECATED_HEADER so we can warn about this consistently. Shuffle around the filter headers so all of the concrete filters are defined in filters.h instead of being spread across many headers. Document which headers are deprecated as well as a list of headers which will be made internal-only in a future major release. | ||||
* | | Add a test that Theaad_Pool is tolerant of exceptions during tasks | Jack Lloyd | 2019-06-05 | 1 | -3/+21 |
| | | |||||
* | | Merge GH #1979 Fix PKCS11 buffer output sizing | Jack Lloyd | 2019-06-05 | 1 | -3/+0 |
|\ \ | |/ |/| | |||||
| * | Fix PKCS#11 C_Decrypt buffer output size. | Daniel Wyatt | 2019-05-26 | 1 | -3/+0 |
| | | | | | | | | | | | | | | | | | | | | | | | | Section 5.2 of the spec states that there are two ways to call functions that return a variable-length buffer: 1. When the output buffer is NULL, an estimated size is returned (which may be larger than required). 2. When the output buffer is not NULL, the exact size must be returned. So only after the second call to C_Decrypt has the final output size been determined, and we must resize the output buffer. | ||||
* | | Add Bcrypt-PBKDF | Jack Lloyd | 2019-05-31 | 2 | -2/+232 |
| | | |||||
* | | Remove redundant OutputLen param in PBKDF tests | Jack Lloyd | 2019-05-31 | 3 | -21/+2 |
| | | |||||
* | | Fix tests when Argon2 (or Scrypt) are disabled | Jack Lloyd | 2019-05-30 | 1 | -1/+1 |
| | | |||||
* | | Improve test coverage. Fix Argon2 default params | Jack Lloyd | 2019-05-29 | 1 | -13/+21 |
| | | |||||
* | | Argon2: PasswordHash, documentation, hash formatting | Jack Lloyd | 2019-05-29 | 2 | -0/+91 |
| | | |||||
* | | Merge GH #1974 Add ability to set max allowed age for an OCSP response | Jack Lloyd | 2019-05-28 | 5 | -11/+258 |
|\ \ | |||||
| * | | test all combinations of next_update and max_age similarly | Patrick Schmidt | 2019-05-28 | 1 | -16/+101 |
| | | | |||||
| * | | OCSP timeout test uses response w/o 'next_update' | René Meusel | 2019-05-28 | 5 | -14/+144 |
| | | | |||||
| * | | add optional max_age for ocsp checks | Patrick Schmidt | 2019-05-27 | 1 | -0/+32 |
| | | | |||||
* | | | Fix problem in TLS message parsing tests | Jack Lloyd | 2019-05-27 | 1 | -2/+2 |
| | | | | | | | | | | | | | | | | | | | | | This started failing due to use of store_be in Buffered_Computation::update_be in this PR. The hello request cookie generation depended on the size of size_t, however the lib code and test had the same bug so it was missed. Force the lengths to be 64 bit. | ||||
* | | | Add Argon2 | Jack Lloyd | 2019-05-27 | 2 | -0/+413 |
| |/ |/| | | | | | Closes GH #459 | ||||
* | | Merge GH #1858 Update XMSS to conform to RFC 8391 | Jack Lloyd | 2019-05-24 | 4 | -440/+2343 |
|\ \ | |||||
| * | | Fix param names to match RFC | Jack Lloyd | 2019-05-13 | 1 | -1/+1 |
| | | | |||||
| * | | Fix param names | Jack Lloyd | 2019-05-10 | 1 | -1/+1 |
| | | | |||||
| * | | Serialize XMSS leaf index as four bytes | Matthias Gierlings | 2019-05-06 | 3 | -1072/+1072 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Internally XMSS uses a 64 Bit type for the leaf index. This patch removes the four leading zero bytes from the XMSS leaf index and serializes it as a four byte value as described in RFC 8391. Test cases are adjusted accordingly. The 64 Bit type is kept internally which potentially allows for code reuse when implementing XMSS^MT on top of the current XMSS code. |