aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* Replace C interfaces in cli apps with C++ interfacesSimon Warta2015-12-0830-234/+237
|
* Remove LibraryInitializer from cliSimon Warta2015-12-081-3/+0
|
* Fix indent in test_passhashSimon Warta2015-12-081-1/+1
|
* Merge pull request #311 from mouse07410/masterJack Lloyd2015-12-081-8/+18
|\ | | | | Improve output formating in python example
| * Merge pull request #7 from randombit/masterMouse2015-10-2780-483/+3774
| |\ | | | | | | Update to match current Botan
| * \ Merge pull request #6 from randombit/masterMouse2015-10-258-121/+109
| |\ \ | | | | | | | | Bring up to date with random bit/botan
| * \ \ Merge pull request #5 from randombit/masterMouse2015-10-232-0/+10
| |\ \ \ | | | | | | | | | | Sync up with random bit
| * | | | Added comments explaining when .decode() is needed on mce_decryptUri Blumenthal2015-10-231-2/+7
| | | | |
| * | | | Fix minor output problem.Mouse2015-10-231-8/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added MCEIES plaintext and decrypted output. Added output length where it was missing. Changed "Public key bits" output to Base64 to match cert.toString()
* | | | | Add OS utility headerJack Lloyd2015-12-057-102/+197
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Provide abstractions for the locking allocator (allocate and free locked pages) to decouple it from the platform dependent code. Should make it easy to write a Windows version using VirtualAlloc+VirtualLock. Exposes max mlock limit as a build.h toggle
* | | | | Make portable GCM multiply operation run in constant time.Jack Lloyd2015-12-041-9/+16
| | | | | | | | | | | | | | | | | | | | Checked with ctgrind
* | | | | Merge pull request #321 from matejk/fix_algo_registry_locking_windowsJack Lloyd2015-12-041-6/+54
|\ \ \ \ \ | | | | | | | | | | | | Algo_Registry: Use CRITICAL_SECTION on Windows to prevent hang during initialization
| * | | | | Added myself to credits/copyright.Matej Kenda2015-11-201-0/+1
| | | | | |
| * | | | | Merged two sections of Botan namespace as suggested by randombit. ↵Matej Kenda2015-11-191-5/+4
| | | | | | | | | | | | | | | | | | | | | | | | Preprocessing sections are now split in two.
| * | | | | Merge branch 'master' of github.com:randombit/botan into ↵Matej Kenda2015-11-19112-21869/+9231
| |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | fix_algo_registry_locking_windows
| * | | | | | Fixed default ctor for WinCS_MutexMatej Kenda2015-11-041-1/+1
| | | | | | |
| * | | | | | #321: changed implementation of CriticalSection locking in algo registry.Matej Kenda2015-11-041-34/+38
| | | | | | |
| * | | | | | Algo_Registry: Use CRITICAL_SECTION instead of std::mutex to prevent hang in ↵Matej Kenda2015-11-031-5/+49
| | | | | | | | | | | | | | | | | | | | | | | | | | | | DllMain when initialising global constants.
* | | | | | | Missing test update for ECC group removal.Jack Lloyd2015-12-021-4/+0
| | | | | | |
* | | | | | | Remove support for broken 112 and 128 bit SECP ECC groups.Jack Lloyd2015-12-023-54/+2
| | | | | | |
* | | | | | | Add update overload taking std::string to PK_Verifier and PK_SignerJack Lloyd2015-12-021-1/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Because convenient
* | | | | | | Avoid ever returning 0 from CPUID::cache_line_sizeJack Lloyd2015-12-022-1/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Take the value from build.h if we have no way of getting it dynamically. Fixes an infinite loop in AES on non-x86 introduced in ebf2164a, as otherwise it does for(size_t i = 0; i != ...; i += 0) {} while iterating over the TE tables.
* | | | | | | Add more workfactor estimate helpers.Jack Lloyd2015-11-296-32/+53
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Specifically a named one for integer factorization (despite using same formula as DL calc) which incorporates the k value from RFC 3766. Also adds dl_exponent_size which returns the exponent size, this one ignores k thus using a ~10 bit larger exponent than strictly necessary. Adding in k downgrades 1024 bit RSA to exactly 80 bits, which is probably about right.
* | | | | | | Improve side channel attack resistance of table based AES implJack Lloyd2015-11-292-416/+164
| | | | | | |
* | | | | | | Fix compile error when compression is disabledJack Lloyd2015-11-291-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Missed because Travis uses zlib and company even in the min build. GH #337
* | | | | | | Guard these test calls with the same feature macro guarding their definition.Jack Lloyd2015-11-281-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | GH #337
* | | | | | | Add differential compression test.Jack Lloyd2015-11-282-42/+88
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change getrusage output to static system data since it is sparse and changes rarely, and so actually does trigger the differential test.
* | | | | | | Convert const char* arguments on Test:: to std::stringsJack Lloyd2015-11-288-72/+57
| | | | | | | | | | | | | | | | | | | | | | | | | | | | unless they are actually optional
* | | | | | | Push the hardcoded entropy estimates up to build.hJack Lloyd2015-11-2811-70/+81
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Defaults should be fine for everyone but it makes the values more transparent
* | | | | | | Merge pull request #320 from matejk/fix_crash_in_comp_filterSimon Warta2015-11-261-0/+7
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | Fixed crash in compression filter when transform argument is null.
| * | | | | | | Compression filter: Reorganised verification order of transform.Matej Kenda2015-11-261-4/+6
| | | | | | | |
| * | | | | | | Fixed crash in compression filter when transform argument is null.Matej Kenda2015-11-031-1/+6
| |/ / / / / /
* | | | | | | New reseed_with_sources call on RNGsJack Lloyd2015-11-2446-156/+459
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Provides an easier way for an application to configure a list of entropy sources they'd like to use, or add a custom entropy source to their seeding. Exposes some toggles for the global/default entropy sources to build.h Adds basic entropy tests which runs the polls and does sanity checking on the results, including compression tests if available. These are less useful for the CSPRNG outputs but a good check for the ones producing plain ASCII like the /proc reader.
* | | | | | | Disable some problem areas of TLS corruption test pending rewriteJack Lloyd2015-11-241-5/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Should resolve the random CI breaks
* | | | | | | Fix sanitizer build in travis ciRené Korthaus2015-11-241-1/+1
| | | | | | | | | | | | | | | | | | | | | The parameter is actually --with-sanitizers.
* | | | | | | Remove bogus code from generic mp_madd header, noticed on PPC build.Jack Lloyd2015-11-232-5/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Also fix a few cast and zero-as-nullptr warnings in the AltiVec header
* | | | | | | Enhance tests main readabilitySimon Warta2015-11-231-10/+15
| |/ / / / / |/| | | | |
* | | | | | Remove mul128.h header from public viewJack Lloyd2015-11-163-19/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The only reason mul128.h was included in mp_types.h was for the definition of dword. But dword is only needed by the generic version of mp_madd, which is an internal header. So move both the inclusion of the header and the dword definition to there. Previously mul128.h was very public (mp_types.h to bigint.h to rsa.h, for example) and use of __int128 causes problems in pedantic mode. So additionally, prefer using the TI attribute version since GCC does not complain about that. Clang's -Wpedantic does not seem to care about it either way. GH #330
* | | | | | Add helper for test output files. Remove last uses of hardcoded data dir macrosJack Lloyd2015-11-165-60/+88
| | | | | |
* | | | | | Avoid multiplication by zero here as get_affine will reject itJack Lloyd2015-11-131-1/+1
| | | | | |
* | | | | | Fix bug causing TLS client to sometimes reject DHE server kexJack Lloyd2015-11-132-35/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Re-encoding the server key exchange meant that any leading zeros in the values for DHE (or SRP) would be stripped out. This would cause the signature check to fail.
* | | | | | Add remove_all to TLS session manager interfaceJack Lloyd2015-11-138-48/+67
| | | | | | | | | | | | | | | | | | | | | | | | DB::spin now returns the number of rows affected
* | | | | | Remove call to abort on a zero point in PointGFp::get_affine_{x,y}Jack Lloyd2015-11-131-4/+0
| | | | | |
* | | | | | Drop the DH group check to a weaker version of the checksJack Lloyd2015-11-131-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | since the primality tests are expensive in CPU time.
* | | | | | Include the version string in the test outputJack Lloyd2015-11-131-0/+2
| | | | | |
* | | | | | The TLS test for corrupted data was too strict in requiring thatJack Lloyd2015-11-131-30/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the first block satisfy the request, since it was possible another record header appeared in some appended corrupted data.
* | | | | | Add TLS_PSK testsJack Lloyd2015-11-136-88/+210
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix a bug which rejected any short server key exchanges. These can occur with a plain PSK with short or empty identity hints. Disable SHA-224 by default. Remove some vestigal RC4 cruft. Push more on the TLS corruption tests.
* | | | | | Avoid calling get_files_recursive on a possible non-directory.Jack Lloyd2015-11-112-9/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The Boost directory iterator throws an exception in that case. Interestingly the current VC version does not seem to. In the interests of portability just avoid this operation rather than trying to hack around it in the Boost fs version. GH #328
* | | | | | Test all providers for PK operationsJack Lloyd2015-11-111-24/+103
| | | | | |
* | | | | | Add missing overridesJack Lloyd2015-11-112-2/+2
| | | | | |