aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* Fix off by one in PKCS #1 v1.5 decryption decodingJack Lloyd2016-12-088-20/+156
| | | | | | | | | | | | When the code was changed in b8966d0f89e, the offset was not changed, so it would reject ciphertexts with exactly 8 bytes of random padding (the required minimum). Found by pkcs1 fuzzer which also had problems due to not having been updated at the same time. Add a test suite for decoding of PK decryption padding to cover the problem cases.
* Avoid crash in PKCS1v1.5 unpadding if input len <= 2Jack Lloyd2016-12-081-0/+6
| | | | Don't think this can't happen outside of a fuzzer test
* Merge GH #760 Fix docs buildJack Lloyd2016-12-071-1/+1
|\
| * adjust package name for Travis CINever2016-12-071-1/+1
| |
* | Add missing netinet includes for sockaddr_inlouiz’2016-12-081-0/+1
|/
* Another try at fixing docsJack Lloyd2016-12-061-2/+2
|
* Another try at fixing Sphinx build on CIJack Lloyd2016-12-051-3/+4
|
* Merge GH #757 Fix X509 and PKCS8 formatting functions for PK keysJack Lloyd2016-12-0537-83/+104
|\
| * Fix TPM private_key_bits() exception messageRené Korthaus2016-12-051-1/+1
| |
| * Add Private_Key::private_key_info()René Korthaus2016-12-0528-43/+54
| | | | | | | | | | | | | | Adds new Private_Key::private_key_info() that returns a PKCS#8 PrivateKeyInfo structure. Renames the current Private_Key::pkcs8_private_key() to private_key_bits(). BER_encode() just invokes private_key_info().
| * Add Public_Key::subject_public_key()René Korthaus2016-12-0525-39/+49
| | | | | | | | | | | | | | Adds new Public_Key::subject_public_key() that returns a X.509 SubjectPublicKey structure. Renames the current Public_Key::x509_subject_public_key() to public_key_bits(). BER_encode() just invokes subject_public_key().
* | Merge GH #756 Remove ECB Cipher_Mode classJack Lloyd2016-12-0511-688/+132
|\ \
| * | Remove ECB test vector fileJack Lloyd2016-12-041-418/+0
| | | | | | | | | | | | | | | | | | Two part commit with d44c00a as otherwise git assumes that ecb.vec was renamed xtea.vec, because the imported vectors swamped the ones that were previously being used in the bare block cipher tests.
| * | Remove ECB modeJack Lloyd2016-12-0410-270/+132
| | | | | | | | | | | | | | | | | | | | | Not a good thing to offer at this level. If you know what you are doing for the strange special case where it is necessary, the raw BlockCipher interface is available and probably more convenient.
* | | Attempted fix for docs buildJack Lloyd2016-12-051-2/+5
| | |
* | | Fix bad deref when ciphersuite value is larger than largest known idJack Lloyd2016-12-052-1/+26
| | | | | | | | | | | | Reported by @neverhub in GH #758 found by libFuzzer
* | | Skip OpenSSL on OS X Travis builds.Jack Lloyd2016-12-051-2/+3
| |/ |/| | | | | | | | | OpenSSL library suddenly became unavailable on Travis OS X images causing build fauilres. Not clear if we should install it via homebrew instead, or what. For now disabling it to get CI green.
* | Fix CircleCI buildJack Lloyd2016-12-041-1/+1
| |
* | Skip trying to install Python2 on OS X Travis imagesJack Lloyd2016-12-041-1/+1
| |
* | Merge GH #745 Make --via-amalgamation an error. Improve quoting in Travis ↵Jack Lloyd2016-12-041-20/+22
|\ \ | |/ |/| | | build script
| * travis/build.sh: Convert TEST_FLAGS to Bash arraySimon Warta2016-12-031-3/+3
| |
| * Make shellcheck happy with travis/build.shSimon Warta2016-12-021-17/+19
| | | | | | | | | | | | This fixes some SC2086 (Double quote to prevent globbing and word splitting.) cases. See also https://github.com/koalaman/shellcheck/wiki/SC2086
| * Use new --amalgamation flag for TravisSimon Warta2016-12-021-1/+1
| |
* | Expose pk_ops.h as public interface againJack Lloyd2016-12-0416-16/+26
|/ | | | | | | | | | | | I was initially thinking of Botan as somewhat closed system, but @cordney has a legit use case of wanting to expose a TPM sign operation, but using their internal TPM library and TPM key type. This requires the API be exposed so the derivation can occur. Add a comment in the header explaining that the header is not for normal application use and directing them to pubkey.h This basically reverts 2747e8e23aec43162
* Merge GH #749 Prohibit SHAKE in BSI mode. Avoid XMSS test fails if SHAKE ↵Jack Lloyd2016-12-012-2/+12
|\ | | | | | | disabled.
| * Updates module policy, fixes test suite errorsMatthias Gierlings2016-12-012-2/+12
| | | | | | | | | | | | | | - Moves SHAKE to prohibited algorithms - Catches an error during XMSS private key generation when SHAKE is disabled. This should not be reported as error by the test bench since [SHAKE is optional in XMSS](https://tools.ietf.org/html/draft-irtf-cfrg-xmss-hash-based-signatures-07#section-5)
* | system_rng: workaround read only urandomAlon Bar-Lev2016-12-011-1/+4
|/ | | | | | | | botan_rng_reseed: System_RNG write failed error 9 FFI ran 252 tests 1 FAILED Failure 1: FFI botan_rng_reseed unexpectedly failed with error code -1 Signed-off-by: Alon Bar-Lev <[email protected]>
* Fix missing include in kdf.cppJack Lloyd2016-11-291-0/+1
| | | | | | Showed up when compiling kdf.cpp with no KDFs enabled in build. [ci skip]
* Add note on rfc6979 signatures to manual [ci skip]René Korthaus2016-11-281-3/+3
|
* Fix BER decoder integer overflowJack Lloyd2016-11-283-2/+45
|\
| * Check for overflow in BER decoder EOC scanningJack Lloyd2016-11-273-2/+45
| |
* | Document TLS::Policy::require_cert_revocation_infoJack Lloyd2016-11-281-1/+2
| |
* | Add TLS::Policy::require_cert_revocation_infoJack Lloyd2016-11-283-1/+14
| |
* | Merge GH #738 Add OCSP stapling to TLS clientJack Lloyd2016-11-2817-63/+347
|\ \
| * | Add OCSP stapling support to TLS clientJack Lloyd2016-11-2617-63/+347
| | |
* | | define NOMINMAX 1 before every include of windows.hBaruch Burstein2016-11-286-4/+6
| |/ |/|
* | Compile fixJack Lloyd2016-11-271-2/+2
| |
* | Tweak lcov script [ci skip]Jack Lloyd2016-11-271-1/+2
| |
* | Avoid unused variable warning if compression disabledJack Lloyd2016-11-271-2/+2
| | | | | | | | [ci skip]
* | Add BOTAN_UNUSED when relevant OS support is missingJack Lloyd2016-11-272-0/+2
| |
* | Fix amalgamation for IncludeOS - avoid having <thread> pulled inJack Lloyd2016-11-271-1/+1
| |
* | Merge GH #590 Initial Cilk/OpenMP supportJack Lloyd2016-11-2717-391/+425
|\ \
| * | Fix amalgamationJack Lloyd2016-11-271-2/+2
| | |
| * | Add compiler.h macro header extracted from build.hJack Lloyd2016-11-264-186/+216
| | | | | | | | | | | | | | | | | | | | | | | | All this is just standard C that the user should not touch, so it doesn't really make sense to have it in the build.h template file. Remove BOTAN_TARGET_CPU_HAS_KNOWN_ENDIANESS - only used twice (in loadstor.h) and that code is clearer without it.
| * | Add Cilk/OpenMP supportJack Lloyd2016-11-2614-251/+255
| |/
* | No reason to deprecate this (only internally called) constructorJack Lloyd2016-11-261-1/+2
| |
* | Correct output_length bug in SIV and ChaCha20Poly1305 alsoJack Lloyd2016-11-262-2/+2
| |
* | Add tests for TLS policy valuesJack Lloyd2016-11-265-5/+159
| |
* | Add TLS::Policy::to_stringJack Lloyd2016-11-262-0/+13
| |
* | Simple tests for AutoSeeded_RNGJack Lloyd2016-11-263-1/+97
|/