Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add SM3 hash function | Daniel Wyatt | 2017-04-03 | 5 | -0/+224 |
| | |||||
* | Merge GH #961 Add some more BigInt functions to C API | Jack Lloyd | 2017-04-02 | 3 | -47/+187 |
|\ | |||||
| * | Add some more useful bigint functions to C interface | Jack Lloyd | 2017-03-31 | 3 | -47/+187 |
| | | |||||
* | | Merge GH #960 Check name of test suite. | Jack Lloyd | 2017-04-02 | 1 | -0/+11 |
|\ \ | |||||
| * | | Check name of test suite. | Alexander Bluhm | 2017-03-31 | 1 | -0/+11 |
| | | | | | | | | | | | | | | | If botan-test is invoked with an invalid test name, fail with a usage error. This is more obvious than not running the test. | ||||
* | | | Print test name before running test. | Alexander Bluhm | 2017-03-31 | 1 | -0/+1 |
|/ / | | | | | | | | | | | To make it easy to repeat classes of tests, print the name of the test suite before starting it. This name can be used on the botan-test command line. If a test hangs, it is also obvious which. | ||||
* | | Fix Doxygen comment errors | Jack Lloyd | 2017-03-31 | 1 | -1/+3 |
| | | | | | | | | [ci skip] | ||||
* | | Merge GH #956 Add link to API docs in website table of contents | Jack Lloyd | 2017-03-31 | 1 | -1/+3 |
|\ \ | |||||
| * | | Add TOC link to users manual and API ref for website | René Korthaus | 2017-03-31 | 1 | -1/+3 |
| |/ | |||||
* / | Re-add index to PDF users manual | René Korthaus | 2017-03-31 | 1 | -1/+1 |
|/ | | | | | Run pdflatex twice to have LaTex generate an index for the PDF users manual. This somehow broke in GH #937. | ||||
* | Merge GH #954 Always poll 256 bytes from getentropy syscall | Jack Lloyd | 2017-03-30 | 1 | -3/+4 |
|\ | |||||
| * | Always poll 256 bytes from Getentropy. | Alexander Bluhm | 2017-03-30 | 1 | -3/+4 |
| | | | | | | | | | | | | The OpenBSD system limit for getentropy(2) is 256 bytes. It does not make sense to use the BOTAN_SYSTEM_RNG_POLL_REQUEST define here. As it is only used in one place, another define would be overkill. | ||||
* | | Use arc4random(3) as system rng on OpenBSD. | Alexander Bluhm | 2017-03-30 | 2 | -0/+16 |
|/ | | | | | | | | | OpenBSD provides the arc4random(3) function in libc for user land programs that need good random data. Use this to implement the Botan system random number generator. It has the advantage over /dev/urandom that it works without file descriptors and in chroot(2) environment. Internally libc is currently using a ChaCha20 cipher as PRNG and getentropy(2) to reseed itself automatically. | ||||
* | Disable entropy proc_walk on OpenBSD. | Alexander Bluhm | 2017-03-30 | 1 | -1/+0 |
| | | | | | The /proc file system was disabled for years. With OpenBSD 5.7 the implementation has been removed from the kernel sources. | ||||
* | Merge GH #949 Add --entropy flag to rng cmd | Jack Lloyd | 2017-03-29 | 1 | -1/+11 |
|\ | |||||
| * | Use entropy source for cli rng. | Alexander Bluhm | 2017-03-29 | 1 | -1/+11 |
| | | | | | | | | | | With "botan rng --entropy" the global entropy sources are used to seed the auto seeded random number generator. | ||||
* | | Build fix | Jack Lloyd | 2017-03-29 | 1 | -1/+1 |
| | | |||||
* | | Fix RSA blinding test | Jack Lloyd | 2017-03-29 | 1 | -5/+7 |
|/ | | | | | | Failed if OpenSSL was used since OpenSSL does (whatever it does). GH #879 | ||||
* | Fix final RSA blinding test | Jack Lloyd | 2017-03-29 | 1 | -4/+5 |
| | | | | See GH #879 | ||||
* | Add missing override annotation | Jack Lloyd | 2017-03-29 | 1 | -1/+1 |
| | |||||
* | Add --test-runs option to test binary | Jack Lloyd | 2017-03-29 | 1 | -5/+9 |
| | | | | Just runs the specified test several times, or until first failure. | ||||
* | Merge GH #879 Fix rsa_blinding tests and add one more test | Jack Lloyd | 2017-03-29 | 1 | -3/+46 |
|\ | |||||
| * | Fix rsa_blinding tests if emsa_raw is missing and add tests for rsa_blinding ↵ | Daniel Neus | 2017-02-16 | 1 | -3/+46 |
| | | | | | | | | while encrypting/decrypting | ||||
* | | Merge GH #899 Add ability to specify iterations when encrypting a private key | Jack Lloyd | 2017-03-29 | 7 | -38/+390 |
|\ \ | |||||
| * | | Add ability to specify iterations when encrypting a private key | Jack Lloyd | 2017-02-26 | 7 | -38/+390 |
| | | | | | | | | | | | | GH #896 | ||||
* | | | Merge GH #946 Expose multiple precision integers in C interface | Jack Lloyd | 2017-03-29 | 5 | -27/+731 |
|\ \ \ | |||||
| * | | | Expose BigInt API subset to C API | Jack Lloyd | 2017-03-28 | 5 | -27/+731 |
| | | | | | | | | | | | | | | | | Also adds RSA key constructors using BN | ||||
* | | | | Merge GH #947 Add support for getentropy syscall | Jack Lloyd | 2017-03-29 | 5 | -1/+79 |
|\ \ \ \ | |||||
| * | | | | Use getentropy(2) as random source. | Alexander Bluhm | 2017-03-29 | 5 | -1/+79 |
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Gather entropy from system call getentropy(2). This is available since in OpenBSD 5.6 and Solaris 11.3. It can provide up to 256 bytes entropy from the kernel without blocking. As a system call it does not need a file descriptor and works in chroot(2) environments without device nodes. | ||||
* / / / | Remove old timing test suite | Jack Lloyd | 2017-03-28 | 19 | -610/+5 |
|/ / / | | | | | | | | | | Replaced by version in cli added in #894 | ||||
* | | | Merge GH #944 Add check_key to C API | Jack Lloyd | 2017-03-28 | 3 | -1/+24 |
|\ \ \ | |||||
| * | | | Expose PK::check_key functions in C interface | Jack Lloyd | 2017-03-27 | 3 | -1/+24 |
| | | | | |||||
* | | | | Merge GH #942 Avoid passing IP as hostname in tls_client command line util | Jack Lloyd | 2017-03-28 | 1 | -1/+11 |
|\ \ \ \ | |||||
| * | | | | tls_client must not pass an IP address as server information | Alexander Bluhm | 2017-03-25 | 1 | -1/+11 |
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | RFC 6066 section 3 says: Literal IPv4 and IPv6 addresses are not permitted in "HostName". But if a user passes an IP address to botan tls_client as connect address, this is also used for SNI. Some TLS server like libtls from the LibreSSL project check that a provided hostname is a DNS name. The TLS connection attempt from botan is rejected with a fatal alert. | ||||
* | | | | Merge GH #938 Fix incorrect bcrypt truncation | Jack Lloyd | 2017-03-28 | 3 | -11/+305 |
|\ \ \ \ | |||||
| * | | | | Avoid long tests for each bcrypt password | Jack Lloyd | 2017-03-24 | 1 | -2/+22 |
| | | | | | |||||
| * | | | | Fix incorrect password truncation in bcrypt password hashing. | Jack Lloyd | 2017-03-24 | 3 | -10/+284 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The 56 char bound is bogus; Blowfish itself allows at most 448 bits in the key schedule, but Bcrypt's modification allows up to 72 chars for the password. Bug pointed out by Solar Designer. Also reject work factors 0...3 since all other extant bcrypt implementations require at least work factor 4. Adds more bcrypt tests generated by crypt_bcrypt and OpenBSD's version. | ||||
* | | | | | Use JSON to store build config | Simon Warta | 2017-03-25 | 1 | -1/+3 |
| |/ / / |/| | | | | | | | | | | | to improve debuggability | ||||
* | | | | shellcheck fix in website.sh | Jack Lloyd | 2017-03-24 | 1 | -5/+3 |
|/ / / | | | | | | | | | | [ci skip] | ||||
* | | | Use a hardcoded URL for the PDF download | René Korthaus | 2017-03-23 | 1 | -10/+8 |
| | | | |||||
* | | | Fix some compiler warnings. | Jack Lloyd | 2017-03-22 | 3 | -3/+3 |
| | | | |||||
* | | | Remove duplicate include GH #928 | Jack Lloyd | 2017-03-22 | 1 | -1/+0 |
| | | | |||||
* | | | Merge GH #929 Add ppc64le target [ci skip] | Jack Lloyd | 2017-03-22 | 1 | -0/+22 |
|\ \ \ | |||||
| * | | | Add ppc64le (POWER8 little endian) as supported cpu | Gustavo Serra Scalet | 2017-03-20 | 1 | -0/+22 |
| | | | | |||||
* | | | | Merge GH #897 Add generic memory type BER decoder | Jack Lloyd | 2017-03-22 | 1 | -0/+32 |
|\ \ \ \ | |||||
| * | | | | Add generic memory type value BER decoder | Nuno Goncalves | 2017-03-07 | 1 | -0/+32 |
| | | | | | | | | | | | | | | | | | | | | Signed-off-by: Nuno Goncalves <[email protected]> | ||||
* | | | | | Merge GH #923 Build PDF handbook | Jack Lloyd | 2017-03-22 | 1 | -0/+10 |
|\ \ \ \ \ | |||||
| * | | | | | Provide the handbook as a PDF download | René Korthaus | 2017-03-16 | 1 | -0/+10 |
| | |/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Extends the website script to include a link to the manual as a PDF file for download. Also includes links to search and index only for html, as it does not work for latex. | ||||
* | | | | | Merge GH #931 Add support for reaching IPv6 hosts in the tls_client CLI | Jack Lloyd | 2017-03-22 | 1 | -20/+26 |
|\ \ \ \ \ | |||||
| * | | | | | Add support for reaching IPv6 hosts in the tls_client CLI | René Korthaus | 2017-03-21 | 1 | -20/+26 |
| | | | | | |