aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* Add a test of TLS-SRPJack Lloyd2019-11-231-1/+92
|
* Merge GH #2200 Add S390x build to TravisJack Lloyd2019-11-163-12/+12
|\
| * Add S390x buildJack Lloyd2019-11-153-12/+12
| | | | | | | | | | | | Drop the MIPS build since main purpose of that is to test a big-endian build with no special support (SIMD, etc), but s390x is better for this, since it allows running the full test suite.
* | Fix cli ldflags outputJack Lloyd2019-11-152-3/+3
|/ | | | GH #2199 #2109
* Merge GH #2196 Add AVX2 impl of SHACAL2Jack Lloyd2019-11-157-142/+351
|\
| * Add SHACAL2 AVX2Jack Lloyd2019-11-147-142/+351
| | | | | | | | About 2x faster on Skylake
* | Merge GH #2195 Update BSI policyJack Lloyd2019-11-152-9/+7
|\ \
| * | Prefer CCM over CBC ciphersuitesRené Korthaus2019-11-152-2/+2
| | |
| * | Remove non-ephemeral PSK ciphersuites from BSI TLS policyRené Korthaus2019-11-142-2/+2
| | |
| * | Add SHA-512 to BSI TLS policy's allowed sigatures hashesRené Korthaus2019-11-142-2/+2
| | |
| * | Add AES-128/CCM and AES-256/CCM ciphersuites to BSI TLS policyRené Korthaus2019-11-142-2/+2
| | | | | | | | | | | | | | | BSI TR-02102-1 version 2019-01 added CCM ciphersuites as recommended, so we add them to the BSI TLS policy.
| * | Remove some FFDHE groups from BSI TLS policyRené Korthaus2019-11-142-3/+1
| |/ | | | | | | | | | | | | BSI TR-02102-2 version 2019-01 explicitly lists the FFDHE groups recommended now. ffdhe6144 and ffdhe8192 are not listed, so we remove them from the BSI TLS policy.
* | Merge GH #2194 Add MinGW build to AppVeyor CIJack Lloyd2019-11-153-13/+32
|\ \
| * | Add MinGW on Windows build to AppVeyor CIJack Lloyd2019-11-133-13/+32
| |/
* / Re-enable TLS-CBC in BSI policyJack Lloyd2019-11-151-1/+0
|/ | | | See discussion in #2188
* Fix TLS-PRF KDF tests when MD5 is disabledJack Lloyd2019-11-133-3/+13
|
* Fix TLS PRF and module policyJack Lloyd2019-11-133-2/+4
| | | | We can firmly disable MD5 now, but not SHA1 since X.509 needs it
* Disable stack protector on MinGWJack Lloyd2019-11-131-0/+3
| | | | | Some versions of MinGW have a bug which causes any app built with stack protector to silently crash (!).
* cli: pubkey: fingerprint: read from stdinNuno Goncalves2019-11-112-2/+17
| | | | Signed-off-by: Nuno Goncalves <[email protected]>
* format codeNuno Goncalves2019-11-101-15/+15
| | | | Signed-off-by: Nuno Goncalves <[email protected]>
* Avoid creating secure_vector each time during OAEP fuzzerJack Lloyd2019-11-101-1/+1
|
* Merge GH #2190 ECC fuzzer enhancementsJack Lloyd2019-11-101-0/+37
|\
| * Enhance ECC fuzzers to also test variable point scalar multJack Lloyd2019-11-101-0/+37
| |
* | Merge GH #2188 Allow disabling TLS v1.0/v1.1 at build timeJack Lloyd2019-11-108-24/+52
|\ \
| * | Allow disabling TLS 1.0/1.1 and DTLS 1.0 at build timeJack Lloyd2019-11-108-24/+52
| |/
* | Merge GH #2191 Avoid unused variable warning when block ciphers are disabledJack Lloyd2019-11-101-0/+1
|\ \
| * | variable is unused if BOTAN_HAS_BLOCK_CIPHER not definedNuno Goncalves2019-11-101-0/+1
| |/ | | | | | | Signed-off-by: Nuno Goncalves <[email protected]>
* | Merge GH #2189 CLI encryption doesn't need AES if ChaCha20 is avilableJack Lloyd2019-11-101-1/+1
|\ \
| * | CLI encryption can exist without AES if with AEAD_CHACHA20_POLY1305Nuno Goncalves2019-11-101-1/+1
| |/ | | | | | | Signed-off-by: Nuno Goncalves <[email protected]>
* / Install lzma+bzip2 on ppc64leJack Lloyd2019-11-101-1/+1
|/ | | | They were installed before but looks like there is a new image out
* Remove shift optimization for small word BigInt operator*=Jack Lloyd2019-10-301-16/+1
| | | | | Turns out to be a pessimization - removing improves ECDSA verify by up to 5% on Skylake.
* Micro optimizations of HMAC_DRBGJack Lloyd2019-10-301-6/+14
| | | | | | | Avoid 2 memory allocations/deallocations in update by creating a temporary variable to hold the HMAC output. Avoid calling output_length twice within a function.
* Deprecate DER_Encoder::get_contents_unlockedJack Lloyd2019-10-289-93/+71
| | | | | | | It's better to use the version taking the vector in the constructor as otherwise we store to locked memory then copy out at the end. Convert all library uses.
* Sadly we can't test with most recent BoGo in CIJack Lloyd2019-10-251-1/+1
| | | | Ubuntu Golang is too old, so stick with what works
* Update Bogo test shimJack Lloyd2019-10-252-0/+5
|
* Merge GH #2181 Run fuzzer build on aarch64Jack Lloyd2019-10-252-1/+2
|\
| * Install missing packages on Travis aarch64 imageJack Lloyd2019-10-251-1/+1
| |
| * Run fuzzer/ASan build on aarch64Jack Lloyd2019-10-251-0/+1
| |
* | Merge GH #2180 Fix some Doxygen warningsJack Lloyd2019-10-259-33/+36
|\ \
| * | Try to appease MSVCJack Lloyd2019-10-251-4/+3
| | |
| * | Fix various Doxygen warningsJack Lloyd2019-10-259-33/+37
| |/ | | | | | | Some due to missing comments, others due to various misparsing of the code.
* | Upgrade sccacheJack Lloyd2019-10-251-5/+2
| | | | | | | | | | Also skip agressive compression on the AppVeyor cache because sccache already compresses the cache...
* | Rename var holding tests used in qemuJack Lloyd2019-10-251-8/+8
| | | | | | | | | | Some of these tests are quite slow, actually it represents the most critical tests that we want to be sure of and run everywhere we can.
* | Use raw strings for install dirsJack Lloyd2019-10-251-2/+2
|/ | | | Otherwise MSVC warns about strings like "\lib" having unknown escapes.
* Merge GH #2172 Add support for XMSS X.509 certsJack Lloyd2019-10-2514-40/+286
|\
| * Add guards for XMSS path validation testsRené Korthaus2019-10-251-1/+9
| |
| * Update XMSS CLI testsRené Korthaus2019-10-241-5/+5
| |
| * Add missing certificatesRené Korthaus2019-10-234-0/+137
| |
| * Add support for XMSS X.509 certificatesRené Korthaus2019-10-2111-34/+135
| |
* | Merge GH #2177 Migrate most Travis builds to Ubuntu 18.04Jack Lloyd2019-10-243-7/+22
|\ \