Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Clean up root dir, remove some unneeded dependencies | lloyd | 2015-02-05 | 71 | -106/+6 |
| | |||||
* | Fix build problem with recent LZMA library. | lloyd | 2015-02-05 | 3 | -10/+11 |
| | | | | | | Fix retreival of LZMA and bzip2 compressors from make_compressor. Allow setting compression level from command line. | ||||
* | Add missing file | lloyd | 2015-02-05 | 1 | -0/+5 |
| | |||||
* | Enable OpenSSL for providing ciphers and hashes again. | lloyd | 2015-02-05 | 15 | -511/+414 |
| | |||||
* | Add missing file | lloyd | 2015-02-04 | 1 | -0/+42 |
| | |||||
* | Remove algo factory, engines, global RNG, global state, etc. | lloyd | 2015-02-04 | 215 | -3349/+1200 |
| | | | | | | | | | | | | | | | Convert all uses of Algorithm_Factory and the engines to using Algo_Registry The shared pool of entropy sources remains but is moved to EntropySource. With that and few remaining initializations (default OIDs and aliases) moved elsewhere, the global state is empty and init and shutdown are no-ops. Remove almost all of the headers and code for handling the global state, except LibraryInitializer which remains as a compatability stub. Update seeding for blinding so only one hacky almost-global RNG instance needs to be setup instead of across all pubkey uses (it uses either the system RNG or an AutoSeeded_RNG if the system RNG is not available). | ||||
* | Convert PK operations to using Algo_Registry instead of Engine. | lloyd | 2015-02-03 | 51 | -1248/+879 |
| | | | | Remove global PRNG. | ||||
* | Add missing files. Remove cipher lookup from engine code. | lloyd | 2015-02-01 | 21 | -172/+284 |
| | |||||
* | Use registry also for KDF, EMSA, and EME | lloyd | 2015-01-31 | 27 | -178/+175 |
| | |||||
* | Use registry for streams and MACs. Start updating callers. | lloyd | 2015-01-31 | 38 | -253/+193 |
| | |||||
* | Use Algo_Registry also for hashes. | lloyd | 2015-01-28 | 36 | -338/+183 |
| | |||||
* | Add a runtime map of string->func() which when called return | lloyd | 2015-01-28 | 89 | -1310/+835 |
| | | | | | | | | | | | | | | | | | Transforms and BlockCiphers. Registration for all types is done at startup but is very cheap as just a std::function and a std::map entry are created, no actual objects are created until needed. This is a huge improvement over Algorithm_Factory which used T::clone() as the function and thus kept a prototype object of each type in memory. Replace existing lookup mechanisms for ciphers, AEADs, and compression to use the transform lookup. The existing Engine framework remains in place for BlockCipher, but the engines now just call to the registry instead of having hardcoded lookups. s/Transformation/Transform/ with typedefs for compatability. Remove lib/selftest code (for runtime selftesting): not the right approach. | ||||
* | Add typedefs for function signatures/types used in TLS for easier reading | lloyd | 2015-01-27 | 15 | -104/+134 |
| | |||||
* | Reference memset via std namespace | lloyd | 2015-01-27 | 1 | -1/+1 |
| | |||||
* | Don't define overloads if there is no native uint128_t. Github 47 | lloyd | 2015-01-27 | 1 | -0/+2 |
| | |||||
* | Reference the EC point add and double algorithms used | lloyd | 2015-01-24 | 1 | -0/+8 |
| | |||||
* | Handle repeated initializations of the library better and deal with | lloyd | 2015-01-24 | 5 | -77/+60 |
| | | | | initializations across multiple threads safely. | ||||
* | Allow reducing the size of the allocated mlock pool via env variable | lloyd | 2015-01-24 | 1 | -9/+27 |
| | | | | | | (BOTAN_MLOCK_POOL_SIZE, specified in decimal KB). Currently we read this even when setuid as the worst a user could do is disable mlock, which they can already do via ulimits. | ||||
* | Add Strict_Policy. Disable server initiated renegotiation by default. | lloyd | 2015-01-23 | 2 | -13/+43 |
| | |||||
* | Add support for configuring a TLS::Policy by text file | lloyd | 2015-01-23 | 5 | -109/+202 |
| | |||||
* | Avoid needless buffering when handling padding bytes | lloyd | 2015-01-23 | 1 | -4/+4 |
| | |||||
* | Fix Clang compile | lloyd | 2015-01-23 | 1 | -1/+1 |
| | |||||
* | Centralize where string.h/cstring is included to mem_ops.h | lloyd | 2015-01-23 | 18 | -44/+32 |
| | | | | See github 42 for background | ||||
* | Amalgamation fixes | lloyd | 2015-01-23 | 5 | -32/+16 |
| | |||||
* | Remove memset_s, not implemented on any machine I can test on and | lloyd | 2015-01-23 | 2 | -7/+11 |
| | | | | | | | | problematic for requiring a special define before the first include of string.h. Instead optionally call memset via a volatile function pointer as a faster alternative to byte at a time writes. Github 42, 45 | ||||
* | Update TLS OCB ciphersuites to match draft-zauner-tls-aes-ocb-00 | lloyd | 2015-01-21 | 4 | -20/+71 |
| | | | | | and enable them in the default build, though still not enabled in the runtime policy. | ||||
* | Save to file by default | lloyd | 2015-01-21 | 1 | -5/+6 |
| | |||||
* | Fixes for Windows paths. Based on Github pull 41 from cdesjardins | git | 2015-01-11 | 3 | -4/+4 |
| | | | | with some modifications by randombit. | ||||
* | Fix | lloyd | 2015-01-11 | 1 | -2/+1 |
| | |||||
* | Better to have a RNG state per connection and avoid lock contention | lloyd | 2015-01-11 | 1 | -18/+5 |
| | |||||
* | Proxy tweaks | lloyd | 2015-01-11 | 1 | -3/+16 |
| | |||||
* | Add SipHash | lloyd | 2015-01-11 | 7 | -6/+225 |
| | |||||
* | Remove DES startup selftests | lloyd | 2015-01-11 | 1 | -19/+0 |
| | |||||
* | Remove SSLv3 and handling of SSLv2 client hellos. | lloyd | 2015-01-11 | 29 | -752/+38 |
| | |||||
* | Clean up base64 handling. Github pull 40 from webmaster128 | lloyd | 2015-01-11 | 1 | -11/+10 |
| | |||||
* | Have TLS server take certificate and key from command line | lloyd | 2015-01-11 | 4 | -395/+119 |
| | |||||
* | Support any key length for TLS session encryption by hashing with HMAC | lloyd | 2015-01-10 | 1 | -4/+16 |
| | |||||
* | Create a combined news page for the website | lloyd | 2015-01-10 | 1 | -0/+1 |
| | |||||
* | Convert the asio server from a weird example server to a generic proxy server. | lloyd | 2015-01-10 | 2 | -326/+592 |
| | |||||
* | Dead code | lloyd | 2015-01-10 | 1 | -14/+0 |
| | |||||
* | Move license text to a plain text file without ReST market | lloyd | 2015-01-10 | 2 | -5/+5 |
| | |||||
* | Ensure all files have copyright and license info. | lloyd | 2015-01-10 | 766 | -746/+1064 |
| | | | | | Update license header line to specify the terms and refer to the file, neither of which it included before. | ||||
* | Add MCEIES, an integrated encryption system using McEliece and AES-256/OCB | lloyd | 2015-01-08 | 4 | -47/+263 |
| | |||||
* | This assumed other headers it did not include | lloyd | 2015-01-08 | 1 | -1/+2 |
| | |||||
* | No need to reseed RNG in DSA sign as RNG is no longer used | lloyd | 2015-01-08 | 1 | -4/+2 |
| | |||||
* | Side channel commentary | lloyd | 2015-01-08 | 2 | -0/+26 |
| | |||||
* | Dist script now defaults to tgz only | lloyd | 2015-01-08 | 1 | -1/+1 |
| | |||||
* | Inline BigInt::get_bit and byte_at | lloyd | 2015-01-08 | 2 | -23/+9 |
| | |||||
* | Change TLS session encryption to use AES-256/GCM instead of CBC+HMAC | lloyd | 2015-01-08 | 5 | -202/+26 |
| | |||||
* | Cleanup | lloyd | 2015-01-08 | 1 | -7/+5 |
| |