aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* Add parenthesis to make the order of evaluation in an expression more obviouslloyd2006-09-091-1/+1
|
* Add a couple of static_casts to make it clear where a type conversion islloyd2006-09-084-13/+15
| | | | | | | | | being performed. Undefined the prototype creating macro in x509stat.cpp after use. Avoid a possible type conversion in bigint_divop by storing high's top bit in a word instead of a bool.
* Return the correct type from Basic_Constraints::get_path_limit (was coercinglloyd2006-09-081-1/+1
| | | | the path limit integer to a boolean)
* Rename instances of X509_PublicKey and PKCS8_PrivateKeylloyd2006-09-069-34/+34
|
* Split PK_Key into Public_Key and Private_Key; these new classes merge inlloyd2006-09-0610-81/+53
| | | | the interfaces previously included in X509_PublicKey and PKCS8_PrivateKey.
* Implement codec objects for private keys as well.lloyd2006-09-065-125/+155
|
* Remove some old commented out test code.lloyd2006-09-061-54/+0
|
* First step in a major rewrite of the high level public key code. Thelloyd2006-09-063-65/+205
| | | | | | X509_PublicKey object now offers interfaces that return encoder and decoder objects. Eventually these changes will make it much easier to support alternate key formats like OpenPGP.
* Merge a formerly duplicate function (one in an anonymous namespace inlloyd2006-09-062-28/+19
| | | | x509self.cpp, the other a block of code in X509_CA's constructor).
* Move the declaration of AlgorithmIdentifier into its own header file.lloyd2006-09-061-1/+1
|
* PK_Verifier no longer keeps a reference to the key being used; it onlylloyd2006-09-061-7/+15
| | | | | ever needed it to pull a few pieces of information from the key, which it now gets by calling pure virtual functions implemented by its children.
* Change Engine to not rely on the existence of an Algorithm base class forlloyd2006-09-061-123/+83
| | | | the various types it wants to cache.
* Add a new version of the StreamCipher_Filter constructor that takes a keylloyd2006-08-231-0/+11
| | | | as well as the cipher name
* Put the definitions of Pipe::LAST_MESSAGE and Pipe::DEFAULT_MESSAGE intolloyd2006-08-231-0/+6
| | | | | pipe.cpp; apparently GCC was eliding them completely from the shared library otherwise, meaning Boost.Python couldn't reference them.
* Fix a bug that caused subject alternative name information to be savedlloyd2006-08-231-2/+5
| | | | as issuer names.
* X509_Certificate::ex_constraints and ::policies now return (if possible)lloyd2006-08-221-2/+22
| | | | | | string representations of the OIDs; anything for which a human-readable version does not exist in the OID table is returned in the normal dotted decimal representation.
* Have OIDS::lookup do the right thing when given an OID that isn'tlloyd2006-08-221-2/+8
| | | | | registered in the name database, or asked to lookup an OID with a bare OID string representation.
* Add "OrgUnit" as an additional synonym for X520.OrganizationalUnit,lloyd2006-08-221-1/+2
| | | | though it's clear that this whole naming system is very broken.
* Let SHA_160::W be resized dynamically; potentially the asm version couldlloyd2006-08-211-0/+8
| | | | use a little extra workspace, this makes that simpler to do.
* Remove an oddly placed newlinelloyd2006-08-211-1/+0
|
* Move bigint_simple_mul into mp_mul.cpp, since that is the only place itlloyd2006-08-193-15/+26
| | | | | | was used. Make a variant of bigint_simple_mul, bigint_simple_sqr, for mp_sqr.cpp
* Move Montgomery reduction algorithm into mp_asm.cpplloyd2006-08-195-65/+66
| | | | | | | | | | Move the inner-most loop of Montgomery into bigint_mul_add_words, in mp_muladd.cpp Use bigint_mul_add_words for the inner loop of bigint_simple_multiply Move the compare/subtract at the end of the Montomgery algorithm into bigint_monty_redc
* Don't test Skipjack at startup - it's really not that important, andlloyd2006-08-191-8/+0
| | | | | running the test means the algorithm prototype is loaded into memory when it will probably never be used later.
* Remove trailing whitespacelloyd2006-08-192-2/+2
|
* Simplify the implementation of bigint_divoplloyd2006-08-181-6/+8
|
* Move montgomery_reduce to after choose_window_bits for better consistencylloyd2006-08-171-18/+18
| | | | between the Montgomery and fixed-window exponentiators.
* Create a slightly higher level wrapper around bigint_monty_redc, save alloyd2006-08-171-18/+13
| | | | few lines.
* Remove whitespacelloyd2006-08-171-3/+0
|
* Inline the call to word_add in bigint_monty_redc - the carry in waslloyd2006-08-171-3/+3
| | | | | | always zero, so this is both a bit more efficient and more readable. It won't be able to take advantage of asm implementations of word_add, but the benefit from that with a single call per loop is small anyway.
* Move bigint_monty_redc to its own file; profiling indicates that thislloyd2006-08-172-33/+49
| | | | | single function is using 30+% of the runtime during RSA operations, making it a strong candidate for implementation in assembly.
* Split Montgomery reduction into two functions, the core algorithm linkedlloyd2006-08-162-4/+13
| | | | | | as C (for replacing by asm later), and another that performs a subtract if needed (inside powm_mnt.cpp). That way an asm version of the Montgomery algorithm won't have to deal with calling other functions.
* Remove some variables we didn't really need in the key schedulelloyd2006-08-151-6/+4
|
* Replace Serpent's key_xor function with a macro, so the header can belloyd2006-08-151-6/+5
| | | | shared between the C++ and assembly versions.
* Clear the W buffer inside the SHA_160::clear() functionslloyd2006-08-131-0/+1
|
* Merge the AES TD and TE arrays, so assembly versions can used indexedlloyd2006-08-132-188/+189
| | | | | addressing rather than having to keep all four pointers around. Unfortunately GCC does not seem to be taking advantage of this.
* Throw Invalid_Key_Length rather than Invalid_Argument in AES constructorlloyd2006-08-131-2/+1
| | | | if a bad key value is selected.
* Fix compile problem when no timer modules are compiled inlloyd2006-08-121-0/+1
|
* Make the ByteReader class in CAST_128::key_schedule only manipulatelloyd2006-08-101-2/+2
| | | | const pointers, as it doesn't actually need write access to anything.
* If an exception is thrown anywhere inside Init::initialize, catch itlloyd2006-08-091-34/+39
| | | | | and force a deinitialization before throwing it further up the call stack.
* Remove memory leak - the configuration object was not being deleted.lloyd2006-08-091-0/+1
|
* Alter how buffering is performed in MDx_HashFunction:add_data; ratherlloyd2006-08-051-11/+19
| | | | | | | than always placing the first block into the temp buffer, we only copy the data into there if we have to (ie, if we have an incomplete block). So calling add_data with a block that is a multiple of the hash function's internal block size is entirely zero-copy.
* Make it possible to insert Engines into the front of the queue;lloyd2006-08-051-3/+7
| | | | | | otherwise any Engines added after startup (eg, application-specific ones) would only be used for new algorithm - it wouldn't be possible for them to override existing implementations.
* The use_engines flag was not being respected; specifically, if therelloyd2006-08-051-4/+8
| | | | were any engines built into the library, they were used no matter what.
* Move include of x509_ext.h to x509_ca.h, instead of using forwardlloyd2006-07-311-13/+8
| | | | | | | | declaration. Remove not_before and not_after variables, as they were only used once. Use the computed Key_Constraints value when signing a new certificate.
* Fix definition of OID 2.5.4.8; was accidentally changed by search-replacelloyd2006-07-311-1/+1
| | | | during cleanups of the initialization code.
* Remove FIPS140::good_edc; it has never been used and probably will notlloyd2006-07-291-18/+0
| | | | be in the forseeable future.
* Change Builtin_Module constructor to take an InitializerOptionslloyd2006-07-282-17/+31
| | | | | | | | instead of just a boolean, so it can (if desired) examine any arguments it likes. Only run the startup self tests if the selftest or fips140 option is toggled on.
* Add a "selftest" option that allows the user to disable startup selftestslloyd2006-07-281-0/+8
|
* Remove unneccessary includeslloyd2006-07-281-2/+0
|
* Add two more constructors to AlgorithmIdentifier, which take alloyd2006-07-221-4/+36
| | | | | | Encoding_Option enum that can specify various options. Right now the only one supported/available is USE_NULL_PARAM, to set the parameters to a DER-encoded NULL object