aboutsummaryrefslogtreecommitdiffstats
path: root/src/tests
Commit message (Collapse)AuthorAgeFilesLines
* Fix feature macro checks.Jack Lloyd2019-04-266-11/+10
| | | | Add a checker script.
* Fix some build/test problems with minimized buildsJack Lloyd2019-04-262-8/+14
|
* Correct test result nameJack Lloyd2019-04-261-1/+1
|
* Add a wrapper class that wraps macOS or Linux certificate stores.Jack Lloyd2019-04-131-62/+61
|
* Merge GH #1892 Be more careful about avoiding undefined behavior in testsJack Lloyd2019-04-125-41/+24
|\
| * Using preprocessor for the testsDavid Carlier2019-04-125-41/+24
| |
* | FIX: build with x509 module disabledRene Meusel2019-04-122-5/+12
| |
* | FIX: type deduction on 32bit systemsRene Meusel2019-04-121-4/+4
| |
* | TEST: rejection of user certs by flatfile cert storeRene Meusel2019-04-122-0/+95
| |
* | TESt: flatfile cert store uses internal test fileRene Meusel2019-04-122-9/+93
| |
* | extract test_certstor_utilsPatrick Schmidt2019-04-122-47/+76
| |
* | rename test_certstor_linux to test_certstor_flatfilePatrick Schmidt2019-04-121-9/+9
| |
* | consolidate into Flatfile_Certificate_StorePatrick Schmidt2019-04-121-10/+10
| |
* | add Certstore for linuxPatrick Schmidt2019-04-123-53/+322
|/
* Support verifying from a v1 rootJack Lloyd2019-04-114-1/+152
| | | | | | Discovered in #1885, the "Verisign Class 3 Public Primary Certification Authority - G3" is a v1 certificate and is still included in distro trust stores.
* Remove tab charactersJack Lloyd2019-04-105-239/+229
|
* Fixes memory leak in FFI testsMatthias Gierlings2019-04-081-0/+1
|
* Using available cores rather than total for the pools.David Carlier2019-04-071-0/+13
| | | | | | Issue with the C++ api it might not reflect the reality of the H/W, and on Android, in battery saving mode for example, might be more reasonable to use what the system really offers.
* Replace upper_bound with lower_bound in pgp_s2kEvgeny Pokhilko2019-03-111-0/+3
| | | | | | | | Fix: RFC4880_encode_count doesn't return consistent results when processing exact iterations. It returns RFC4880 code + 1. Update PGP_S2K_Iter test to verify PGP formula Add test to verify that encoded values match the PGP formula
* Fix MSVC and avoid deprecated function callJack Lloyd2019-03-011-1/+1
|
* s/as_string/to_string/Jack Lloyd2019-03-013-7/+7
| | | | | A few older APIs use as_string where everywhere else uses to_string. Add to_string's where missing, and deprecate X::as_string.
* Add long Blowfish ECB testJack Lloyd2019-02-281-0/+4
| | | | We were not testing 4-wide encryption
* Fix testJack Lloyd2019-02-241-1/+1
| | | | Closes #1843
* s/Blake2b/BLAKE2b/Jack Lloyd2019-02-221-4/+4
| | | | As that is the proper name of the hash. Add a typedef for compat.
* Unroll SHA-3Jack Lloyd2019-02-212-2/+2
| | | | Improves performance by about 10-12%
* Merge GH #1830 Add MacOS certificate storeJack Lloyd2019-02-191-0/+331
|\
| * add an adaptor for certificate keychain access on macOSRené Meusel2019-02-181-0/+331
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | FIX: build on non-macOS platforms FIX: move constructor of scoped_CFType implement Certificate_Store_MacOS::all_subjects() Refactor: factor out X509 policy creation FIX: cosmetics FIX: code cosmetics * Refactor: use a unique_ptr rather than free() * Refactor: use a unique_ptr rather than free() * use std::shared_ptr<> for Pimpl * double-check opening of cert stores * add some documentation * copyright notice dates shush clang compiler warning -Wcast-qual See here for details: https://bugs.webkit.org/show_bug.cgi?id=177893 shush -Wmissing-braces on Travis CI (hopefully) FIX: crash when no certificate matches FIX: 'normalize' DNs according to Apple's needs FIX: take early review comments into account FIX: compiler warning regarding variable shadowing add timers to the cerstore tests FIX: catch invalid SHA-1 parameter FIX: handle ambiguous match in .find_cert_by_pubkey_sha1() according to the super-class's documentation FIX: API documentation FIX: cosmetics make Certificate_Store_MacOS::find_crl_for() return {} FIX: low-hanging review comments FIX: more review comments FIX: compiler warnings
* | Fixes for minimized buildsJack Lloyd2019-02-167-8/+45
| | | | | | | | Various configurations would fail build or test, fix that.
* | Support arbitrary key lengths in SHAKE-128 cipherJack Lloyd2019-02-131-0/+56
| | | | | | | | | | We need this for Kyber, which uses 34 byte inputs to XOF when computing the public matrix.
* | Remove redundant call to start_timerJack Lloyd2019-02-131-2/+0
|/
* Clean up test registration a bitJack Lloyd2019-02-052-24/+31
|
* Merge GH #1819 Add Thread_Pool and use it for running testsJack Lloyd2019-01-317-68/+237
|\
| * Add a simple Thread_Pool testJack Lloyd2019-01-312-0/+88
| | | | | | | | And allow registering one-off functions as tests
| * Run the test suite in multiple threadsJack Lloyd2019-01-316-68/+149
| | | | | | | | Refactor areas where data was being shared
* | Add a couple more ChaCha testsJack Lloyd2019-01-311-0/+9
|/
* Refactor CPUID to make it thread safeJack Lloyd2019-01-301-0/+6
| | | | | | | | | | Needed for #1819 and unfortunately Windows does not allow thread local data to be stored as a member of a DLL exported class. So hide it behind an accessor function instead. This slows down CPUID test somewhat and I would like to address that but it seems hard without breaking the CPUID API, which is for better or worse public.
* Avoid invoking the mlock allocator before main startsJack Lloyd2019-01-284-98/+94
| | | | Simplify the PKCS11 tests slightly, no real reason for PKCS11_Test here
* Add BMI2 variants for SHA-512 and SHA-3Jack Lloyd2019-01-182-0/+4
| | | | Both about 33% faster on Skylake
* Fix some warnings from PVS-StudioJack Lloyd2019-01-171-8/+14
| | | | No real bugs, but pointed out some odd constructs and duplicated logic
* Remove trailing whitespaceJack Lloyd2019-01-134-9/+8
|
* Make cpu cycle test a little more laxJack Lloyd2019-01-041-5/+10
| | | | | It occasionally fails on AppVeyor, probably due to QueryPerformanceCounter using something other than the hardware cycle counter because <reasons>.
* Fix bogus macro check that disabled a testJack Lloyd2019-01-031-1/+1
|
* Merge GH #1803 XLC fixesJack Lloyd2019-01-013-4/+26
|\
| * Add ability to skip a few named testsJack Lloyd2018-12-313-4/+26
| | | | | | | | This is sometimes useful when debugging
* | Use Test::data_file in these testsJack Lloyd2018-12-311-2/+2
|/
* Add a test of highly imbalanced RSA keyJack Lloyd2018-12-271-0/+15
|
* Rename OS::get_processor_timestamp to OS::get_cpu_cycle_counterJack Lloyd2018-12-231-7/+7
| | | | | Using phrase "timestamp" makes it sound like it has some relation to wall clock which it does not.
* Make significant_words const time alsoJack Lloyd2018-12-231-0/+50
| | | | | | Only used in one place, where const time doesn't matter, but can't hurt. Remove low_bit, can be replaced by ctz.
* Merge GH #1794 Improve const time logic in PKCS1v15 and OAEP decodingJack Lloyd2018-12-212-49/+49
|\
| * Use consistent logic for OAEP and PKCS1v15 decodingJack Lloyd2018-12-212-49/+49
| | | | | | | | | | | | | | | | | | | | | | | | The decoding leaked some information about the delimiter index due to copying only exactly input_len - delim_idx bytes. I can't articulate a specific attack that would work here, but it is easy enough to fix this to run in const time instead, where all bytes are accessed regardless of the length of the padding. CT::copy_out is O(n^2) and thus terrible, but in practice it is only used with RSA decryption, and multiplication is also O(n^2) with the modulus size, so a few extra cycles here doesn't matter much.