| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
Add a checker script.
|
| |
|
| |
|
| |
|
|\ |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
|/ |
|
|
|
|
|
|
| |
Discovered in #1885, the "Verisign Class 3 Public Primary
Certification Authority - G3" is a v1 certificate and is still
included in distro trust stores.
|
| |
|
| |
|
|
|
|
|
|
| |
Issue with the C++ api it might not reflect the reality of the H/W,
and on Android, in battery saving mode for example, might be more
reasonable to use what the system really offers.
|
|
|
|
|
|
|
|
| |
Fix: RFC4880_encode_count doesn't return consistent results when
processing exact iterations. It returns RFC4880 code + 1.
Update PGP_S2K_Iter test to verify PGP formula
Add test to verify that encoded values match the PGP formula
|
| |
|
|
|
|
|
| |
A few older APIs use as_string where everywhere else uses to_string.
Add to_string's where missing, and deprecate X::as_string.
|
|
|
|
| |
We were not testing 4-wide encryption
|
|
|
|
| |
Closes #1843
|
|
|
|
| |
As that is the proper name of the hash. Add a typedef for compat.
|
|
|
|
| |
Improves performance by about 10-12%
|
|\ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
FIX: build on non-macOS platforms
FIX: move constructor of scoped_CFType
implement Certificate_Store_MacOS::all_subjects()
Refactor: factor out X509 policy creation
FIX: cosmetics
FIX: code cosmetics
* Refactor: use a unique_ptr rather than free()
* Refactor: use a unique_ptr rather than free()
* use std::shared_ptr<> for Pimpl
* double-check opening of cert stores
* add some documentation
* copyright notice dates
shush clang compiler warning -Wcast-qual
See here for details: https://bugs.webkit.org/show_bug.cgi?id=177893
shush -Wmissing-braces on Travis CI (hopefully)
FIX: crash when no certificate matches
FIX: 'normalize' DNs according to Apple's needs
FIX: take early review comments into account
FIX: compiler warning regarding variable shadowing
add timers to the cerstore tests
FIX: catch invalid SHA-1 parameter
FIX: handle ambiguous match in .find_cert_by_pubkey_sha1() according to the super-class's documentation
FIX: API documentation
FIX: cosmetics
make Certificate_Store_MacOS::find_crl_for() return {}
FIX: low-hanging review comments
FIX: more review comments
FIX: compiler warnings
|
| |
| |
| |
| | |
Various configurations would fail build or test, fix that.
|
| |
| |
| |
| |
| | |
We need this for Kyber, which uses 34 byte inputs to XOF when
computing the public matrix.
|
|/ |
|
| |
|
|\ |
|
| |
| |
| |
| | |
And allow registering one-off functions as tests
|
| |
| |
| |
| | |
Refactor areas where data was being shared
|
|/ |
|
|
|
|
|
|
|
|
|
|
| |
Needed for #1819 and unfortunately Windows does not allow thread local
data to be stored as a member of a DLL exported class. So hide it
behind an accessor function instead.
This slows down CPUID test somewhat and I would like to address that
but it seems hard without breaking the CPUID API, which is for better
or worse public.
|
|
|
|
| |
Simplify the PKCS11 tests slightly, no real reason for PKCS11_Test here
|
|
|
|
| |
Both about 33% faster on Skylake
|
|
|
|
| |
No real bugs, but pointed out some odd constructs and duplicated logic
|
| |
|
|
|
|
|
| |
It occasionally fails on AppVeyor, probably due to QueryPerformanceCounter
using something other than the hardware cycle counter because <reasons>.
|
| |
|
|\ |
|
| |
| |
| |
| | |
This is sometimes useful when debugging
|
|/ |
|
| |
|
|
|
|
|
| |
Using phrase "timestamp" makes it sound like it has some relation
to wall clock which it does not.
|
|
|
|
|
|
| |
Only used in one place, where const time doesn't matter, but can't hurt.
Remove low_bit, can be replaced by ctz.
|
|\ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
The decoding leaked some information about the delimiter index
due to copying only exactly input_len - delim_idx bytes. I can't
articulate a specific attack that would work here, but it is easy
enough to fix this to run in const time instead, where all bytes
are accessed regardless of the length of the padding.
CT::copy_out is O(n^2) and thus terrible, but in practice it is only
used with RSA decryption, and multiplication is also O(n^2) with the
modulus size, so a few extra cycles here doesn't matter much.
|