Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fix off by one in PKCS #1 v1.5 decryption decoding | Jack Lloyd | 2016-12-08 | 8 | -20/+156 |
| | | | | | | | | | | | | When the code was changed in b8966d0f89e, the offset was not changed, so it would reject ciphertexts with exactly 8 bytes of random padding (the required minimum). Found by pkcs1 fuzzer which also had problems due to not having been updated at the same time. Add a test suite for decoding of PK decryption padding to cover the problem cases. | ||||
* | Avoid crash in PKCS1v1.5 unpadding if input len <= 2 | Jack Lloyd | 2016-12-08 | 1 | -0/+6 |
| | | | | Don't think this can't happen outside of a fuzzer test | ||||
* | Merge GH #760 Fix docs build | Jack Lloyd | 2016-12-07 | 1 | -1/+1 |
|\ | |||||
| * | adjust package name for Travis CI | Never | 2016-12-07 | 1 | -1/+1 |
| | | |||||
* | | Add missing netinet includes for sockaddr_in | louiz’ | 2016-12-08 | 1 | -0/+1 |
|/ | |||||
* | Another try at fixing docs | Jack Lloyd | 2016-12-06 | 1 | -2/+2 |
| | |||||
* | Another try at fixing Sphinx build on CI | Jack Lloyd | 2016-12-05 | 1 | -3/+4 |
| | |||||
* | Merge GH #757 Fix X509 and PKCS8 formatting functions for PK keys | Jack Lloyd | 2016-12-05 | 37 | -83/+104 |
|\ | |||||
| * | Fix TPM private_key_bits() exception message | René Korthaus | 2016-12-05 | 1 | -1/+1 |
| | | |||||
| * | Add Private_Key::private_key_info() | René Korthaus | 2016-12-05 | 28 | -43/+54 |
| | | | | | | | | | | | | | | Adds new Private_Key::private_key_info() that returns a PKCS#8 PrivateKeyInfo structure. Renames the current Private_Key::pkcs8_private_key() to private_key_bits(). BER_encode() just invokes private_key_info(). | ||||
| * | Add Public_Key::subject_public_key() | René Korthaus | 2016-12-05 | 25 | -39/+49 |
| | | | | | | | | | | | | | | Adds new Public_Key::subject_public_key() that returns a X.509 SubjectPublicKey structure. Renames the current Public_Key::x509_subject_public_key() to public_key_bits(). BER_encode() just invokes subject_public_key(). | ||||
* | | Merge GH #756 Remove ECB Cipher_Mode class | Jack Lloyd | 2016-12-05 | 11 | -688/+132 |
|\ \ | |||||
| * | | Remove ECB test vector file | Jack Lloyd | 2016-12-04 | 1 | -418/+0 |
| | | | | | | | | | | | | | | | | | | Two part commit with d44c00a as otherwise git assumes that ecb.vec was renamed xtea.vec, because the imported vectors swamped the ones that were previously being used in the bare block cipher tests. | ||||
| * | | Remove ECB mode | Jack Lloyd | 2016-12-04 | 10 | -270/+132 |
| | | | | | | | | | | | | | | | | | | | | | Not a good thing to offer at this level. If you know what you are doing for the strange special case where it is necessary, the raw BlockCipher interface is available and probably more convenient. | ||||
* | | | Attempted fix for docs build | Jack Lloyd | 2016-12-05 | 1 | -2/+5 |
| | | | |||||
* | | | Fix bad deref when ciphersuite value is larger than largest known id | Jack Lloyd | 2016-12-05 | 2 | -1/+26 |
| | | | | | | | | | | | | Reported by @neverhub in GH #758 found by libFuzzer | ||||
* | | | Skip OpenSSL on OS X Travis builds. | Jack Lloyd | 2016-12-05 | 1 | -2/+3 |
| |/ |/| | | | | | | | | | OpenSSL library suddenly became unavailable on Travis OS X images causing build fauilres. Not clear if we should install it via homebrew instead, or what. For now disabling it to get CI green. | ||||
* | | Fix CircleCI build | Jack Lloyd | 2016-12-04 | 1 | -1/+1 |
| | | |||||
* | | Skip trying to install Python2 on OS X Travis images | Jack Lloyd | 2016-12-04 | 1 | -1/+1 |
| | | |||||
* | | Merge GH #745 Make --via-amalgamation an error. Improve quoting in Travis ↵ | Jack Lloyd | 2016-12-04 | 1 | -20/+22 |
|\ \ | |/ |/| | | | build script | ||||
| * | travis/build.sh: Convert TEST_FLAGS to Bash array | Simon Warta | 2016-12-03 | 1 | -3/+3 |
| | | |||||
| * | Make shellcheck happy with travis/build.sh | Simon Warta | 2016-12-02 | 1 | -17/+19 |
| | | | | | | | | | | | | This fixes some SC2086 (Double quote to prevent globbing and word splitting.) cases. See also https://github.com/koalaman/shellcheck/wiki/SC2086 | ||||
| * | Use new --amalgamation flag for Travis | Simon Warta | 2016-12-02 | 1 | -1/+1 |
| | | |||||
* | | Expose pk_ops.h as public interface again | Jack Lloyd | 2016-12-04 | 16 | -16/+26 |
|/ | | | | | | | | | | | | I was initially thinking of Botan as somewhat closed system, but @cordney has a legit use case of wanting to expose a TPM sign operation, but using their internal TPM library and TPM key type. This requires the API be exposed so the derivation can occur. Add a comment in the header explaining that the header is not for normal application use and directing them to pubkey.h This basically reverts 2747e8e23aec43162 | ||||
* | Merge GH #749 Prohibit SHAKE in BSI mode. Avoid XMSS test fails if SHAKE ↵ | Jack Lloyd | 2016-12-01 | 2 | -2/+12 |
|\ | | | | | | | disabled. | ||||
| * | Updates module policy, fixes test suite errors | Matthias Gierlings | 2016-12-01 | 2 | -2/+12 |
| | | | | | | | | | | | | | | - Moves SHAKE to prohibited algorithms - Catches an error during XMSS private key generation when SHAKE is disabled. This should not be reported as error by the test bench since [SHAKE is optional in XMSS](https://tools.ietf.org/html/draft-irtf-cfrg-xmss-hash-based-signatures-07#section-5) | ||||
* | | system_rng: workaround read only urandom | Alon Bar-Lev | 2016-12-01 | 1 | -1/+4 |
|/ | | | | | | | | botan_rng_reseed: System_RNG write failed error 9 FFI ran 252 tests 1 FAILED Failure 1: FFI botan_rng_reseed unexpectedly failed with error code -1 Signed-off-by: Alon Bar-Lev <[email protected]> | ||||
* | Fix missing include in kdf.cpp | Jack Lloyd | 2016-11-29 | 1 | -0/+1 |
| | | | | | | Showed up when compiling kdf.cpp with no KDFs enabled in build. [ci skip] | ||||
* | Add note on rfc6979 signatures to manual [ci skip] | René Korthaus | 2016-11-28 | 1 | -3/+3 |
| | |||||
* | Fix BER decoder integer overflow | Jack Lloyd | 2016-11-28 | 3 | -2/+45 |
|\ | |||||
| * | Check for overflow in BER decoder EOC scanning | Jack Lloyd | 2016-11-27 | 3 | -2/+45 |
| | | |||||
* | | Document TLS::Policy::require_cert_revocation_info | Jack Lloyd | 2016-11-28 | 1 | -1/+2 |
| | | |||||
* | | Add TLS::Policy::require_cert_revocation_info | Jack Lloyd | 2016-11-28 | 3 | -1/+14 |
| | | |||||
* | | Merge GH #738 Add OCSP stapling to TLS client | Jack Lloyd | 2016-11-28 | 17 | -63/+347 |
|\ \ | |||||
| * | | Add OCSP stapling support to TLS client | Jack Lloyd | 2016-11-26 | 17 | -63/+347 |
| | | | |||||
* | | | define NOMINMAX 1 before every include of windows.h | Baruch Burstein | 2016-11-28 | 6 | -4/+6 |
| |/ |/| | |||||
* | | Compile fix | Jack Lloyd | 2016-11-27 | 1 | -2/+2 |
| | | |||||
* | | Tweak lcov script [ci skip] | Jack Lloyd | 2016-11-27 | 1 | -1/+2 |
| | | |||||
* | | Avoid unused variable warning if compression disabled | Jack Lloyd | 2016-11-27 | 1 | -2/+2 |
| | | | | | | | | [ci skip] | ||||
* | | Add BOTAN_UNUSED when relevant OS support is missing | Jack Lloyd | 2016-11-27 | 2 | -0/+2 |
| | | |||||
* | | Fix amalgamation for IncludeOS - avoid having <thread> pulled in | Jack Lloyd | 2016-11-27 | 1 | -1/+1 |
| | | |||||
* | | Merge GH #590 Initial Cilk/OpenMP support | Jack Lloyd | 2016-11-27 | 17 | -391/+425 |
|\ \ | |||||
| * | | Fix amalgamation | Jack Lloyd | 2016-11-27 | 1 | -2/+2 |
| | | | |||||
| * | | Add compiler.h macro header extracted from build.h | Jack Lloyd | 2016-11-26 | 4 | -186/+216 |
| | | | | | | | | | | | | | | | | | | | | | | | | All this is just standard C that the user should not touch, so it doesn't really make sense to have it in the build.h template file. Remove BOTAN_TARGET_CPU_HAS_KNOWN_ENDIANESS - only used twice (in loadstor.h) and that code is clearer without it. | ||||
| * | | Add Cilk/OpenMP support | Jack Lloyd | 2016-11-26 | 14 | -251/+255 |
| |/ | |||||
* | | No reason to deprecate this (only internally called) constructor | Jack Lloyd | 2016-11-26 | 1 | -1/+2 |
| | | |||||
* | | Correct output_length bug in SIV and ChaCha20Poly1305 also | Jack Lloyd | 2016-11-26 | 2 | -2/+2 |
| | | |||||
* | | Add tests for TLS policy values | Jack Lloyd | 2016-11-26 | 5 | -5/+159 |
| | | |||||
* | | Add TLS::Policy::to_string | Jack Lloyd | 2016-11-26 | 2 | -0/+13 |
| | | |||||
* | | Simple tests for AutoSeeded_RNG | Jack Lloyd | 2016-11-26 | 3 | -1/+97 |
|/ |