aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* Implement RFC 6979 determinstic signatures for DSA and ECDSA.lloyd2014-12-1027-909/+322
| | | | | Drop the GNU MP engine. Its implementations were potentially faster in some scenarios but not well protected against side channels.
* Switch to using Montgomery ladder for EC point multiplication.lloyd2014-12-102-103/+79
| | | | | The test function create_random_point did not actually create a point on the curve - fix.
* Implement a strength estimator for McEliece keys based on HyMES versionlloyd2014-12-096-15/+125
|
* Figure out which decompressor to use based on the input file extension.lloyd2014-12-098-72/+123
| | | | | | | | Rename Bzip to Bzip2, and split Zlib and Deflate compressors into two completely distinct types rather than using a bool flag to the Zlib constructor. Ignore null pointers to our free implementation (LZMA does this).
* Cleanup for pbe name parsing in PKCS #8 encoderlloyd2014-12-082-16/+26
|
* Add a basic speed test for McEliecelloyd2014-12-082-0/+81
|
* Remove the Overbeck conversion at Dr. Strenzke's request.lloyd2014-12-064-328/+25
| | | | | | | | While a CCA2 proof of this scheme exists, it is written in German and for various reasons publishing a translation would be a complicated affair. Without a (well studied) English proof it is harder to understand the security of the overall scheme. Thus only KEM, which seems much easier to prove, will be offered.
* Add KEM scheme for McEliecefstrenzke2014-12-064-21/+179
|
* Nullptr cleanuplloyd2014-12-061-1/+1
|
* Untested support for using CryptGenRandom in System_RNGlloyd2014-12-061-0/+32
|
* Combine release notes into single text file on installlloyd2014-12-062-12/+38
|
* Add an easy way to directly use the system PRNG.lloyd2014-12-024-0/+125
|
* Handle repeated installs into the same dir.lloyd2014-12-021-0/+32
| | | | Format and install the license text.
* GCC 4.9 fixeslloyd2014-12-022-1/+3
|
* Add OIDs for Twofish, Serpent, and McEliecelloyd2014-11-291-0/+4
|
* Move all PK workfactor esstimators to workfactors.*lloyd2014-11-295-5/+33
|
* Fix Windows build. Github issue 32lloyd2014-11-263-7/+4
|
* Add an implementation of McEliece encryption based on HyMESfstrenzke2014-11-2626-13/+3634
| | | | | | | (https://www.rocq.inria.fr/secret/CBCrypto/index.php?pg=hymes). The original version is LGPL but cryptsource GmbH has secured permission to release it under a BSD license. Also includes the Overbeck CCA2 message encoding scheme.
* On Windows fs::path::native() is a u16 stringlloyd2014-11-221-1/+1
|
* Cleanup PBES2 and add GCM supportlloyd2014-11-1912-468/+267
|
* Remove use of filters/pipelloyd2014-11-192-25/+13
|
* Add gzip compression transform and compress command line prog.lloyd2014-11-199-76/+256
|
* Remove unused includeslloyd2014-11-187-7/+0
|
* Convert compression filters to in-place transforms and refactorlloyd2014-11-1826-1193/+1061
| | | | | to minimize the amount of logic needed in the files specific to each library.
* Fix warnings in Altivec header and add AltiVec detection for POWER8lloyd2014-11-162-40/+39
|
* Not helpfullloyd2014-11-161-1/+0
|
* Use the OCB test specified in RFC 7253 instead of the -03 draft versionlloyd2014-11-161-72/+50
|
* Add some util functions for timing attack countermeasures from Falkolloyd2014-11-153-0/+103
|
* A TLS Server can now process either TLS or DTLS but not either,lloyd2014-11-1511-76/+183
| | | | | with the setting set in the constructor. This prevents various surprising things from happening to applications and simplifies record processing.
* Add specialized reduction for P-521 along with 9x9 Comba routines.lloyd2014-11-1513-26/+479
| | | | | Roughly 35-50% faster on my laptop (depending on if mlock is enabled, the overhead in that allocator is becoming much more of a hotspot).
* Add missing filelloyd2014-11-121-0/+50
|
* Add a new Python install script and clean up the makefile templateslloyd2014-11-126-59/+188
|
* Command line prog cleanuplloyd2014-11-1231-522/+478
|
* RAII and m_ namespace cleanupslloyd2014-11-072-54/+46
|
* OCB cleanup and additional testslloyd2014-11-074-53/+152
|
* RAII cleanupslloyd2014-11-073-65/+57
|
* Replace Transformatio::nstart with start_raw so we can do a full setlloyd2014-11-0526-51/+71
| | | | of overloads in the base class with the same name.
* These should be template specializationslloyd2014-11-051-5/+7
|
* Add the script used to generate mp_comba.cpplloyd2014-11-041-0/+116
|
* Let TLS policy disable putting the timestamp in the hello random fieldslloyd2014-11-046-11/+25
|
* Use noexcept on swaplloyd2014-11-041-1/+1
|
* Remove pubkey filters, broken for a long time and not usefullloyd2014-11-043-214/+0
|
* Typolloyd2014-11-041-1/+1
|
* Avoid crashing if user types before handshake completeslloyd2014-11-031-8/+9
|
* Cleanup handling of TLS AEAD nonce sizes, push all knowledge of whatlloyd2014-11-037-189/+197
| | | | the nonce sizes should be down to the ciphersuite generating script.
* Various small fixes and cleanups, new is_prime utillloyd2014-11-0318-36/+107
|
* Windows/VC build fixeslloyd2014-10-311-1/+1
|
* Fix various warnings from VC++ 2014 and add missing includelloyd2014-10-3112-37/+39
|
* No need to pass version by referencelloyd2014-10-313-3/+4
|
* Add TLS fallback signalling (draft-ietf-tls-downgrade-scsv-00)lloyd2014-10-3110-31/+71
|