| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
| |
So it can be easily enabled if someone wants it.
|
| |
|
|
|
|
| |
Not enabled due to inability to test
|
|
|
|
| |
Remove NEON support, replace macros with inlines
|
| |
|
| |
|
| |
|
|
|
|
| |
Broken in c3ae43c04c
|
|
|
|
| |
From draft-ietf-tls-ecdhe-psk-aead-05, now with official codepoints.
|
|
|
|
| |
[ci skip]
|
|
|
|
| |
GH #1077
|
|
|
|
| |
All of these can just forward to botan_privkey_create
|
| |
|
|\ |
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| | |
Previously, passhash9 tests would fail if for example blowfish was not part
of the build. Adds guards for the different MAC and hash algorithms
used in passhash9 for calls to generate_passhash9(). For check_passhash9(),
there is no way to know that an algorithm is not supported, but at least
we improve the situation a bit here.
|
|/
|
|
| |
Formatting, use size_t instead of int, etc
|
|
|
|
|
| |
The underlying function already takes void* and it makes sense
to pass non-byte buffers to this function.
|
|
|
|
|
|
| |
Using _mm_set_epi32 caused 2 distinct (adjacent) loads followed
by an unpack to combine the registers. Have not tested on hardware
to see if this actually improves performance.
|
|
|
|
|
|
| |
Combine several shuffle operations into one. Thanks to jww for the hint.
Probably not noticably faster on any system.
|
| |
|
|
|
|
|
|
| |
This confirms the message is exactly the size of the expected hash,
and also causes RFC 6979 nonces to be generated using the specified
hash. See also https://github.com/riboseinc/rnp/issues/367
|
|
|
|
|
|
|
| |
Also fix botan_ffi_supports_api to return true for any supported
version (2.0, 2.1/2.2, and 2.3). Really 2.2 should have had its
own FFI version code since there were already many FFI API additions
in that release.
|
| |
|
|\ |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| | |
It complains it cannot pass the __m128i without loss of alignment.
(Why, I have no idea.)
|
| |
| |
| |
| | |
Bit over 2x faster on my desktop
|
| |
| |
| |
| | |
256 bit ARX block cipher with hardware support, what's not to love.
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Now does 64-bits at a time instead of 8 bits, and avoids conditional
timing channel on the XOR carry. Confirmed that at least GCC 7 and
Clang 4 on x86-64 compile the functions without conditional jumps.
Also removes CMAC as a dependency of OCB, which only needed it in
order to call CMAC::poly_double
|
|/ |
|
|
|
|
|
|
|
|
|
|
|
|
| |
For whatever reason GCC 7 on i386 miscompiles this loop under -O3. I was
not able to reduce the bug to a small testcase - extracting the problem
section of the code to its own file, it behaves correctly.
Also oddly, I was never able to repro this using Arch's gcc-multilib
i386 compiler. But when compiled with the 'native' i386 compiler in
a chroot it immediately fails.
See GH #1148 and GH #882
|
|\ |
|
| |
| |
| |
| |
| |
| | |
If compiled with OpenSSL, clang emitted the warning "using the
result of an assignment as a condition without parentheses". Putting
parentheses around the assignment fixes this.
|
|/
|
|
|
|
|
| |
The Test::data_file() method adds the current data dir prefix to
the test data path so that it can be overwritten with the --data-dir
option. This was missing in the ffi test and could result in a
botan_x509_cert_load_file exception.
|
|
|
|
|
|
| |
http_util is required by the x509 module to perform
online OCSP checks, which should be defaulted to ON.
Without being part of the policy, it would be disabled.
|
|\ |
|
| |
| |
| |
| |
| | |
The tests were generated by Botan but I was able to verify the
resulting signatures using Golang's ecdsa module.
|
|/ |
|
|\ |
|
| |
| |
| |
| |
| | |
Eg previously ./botan keygen --algo=GOST-34.10 would create a GOST-34.10
curve over P-256, probably not useful in most cases.
|
| |
| |
| |
| | |
Also add hooks for keygen, etc
|
| |
| |
| |
| | |
This is a contribution from Ribose Inc (@riboseinc)
|
|\ \ |
|
| | |
| | |
| | |
| | |
| | |
| | | |
- only / file systems supported
- only absolute prefixes are supported
- result must not escape DESTDIR
|
| | | |
|
| | |
| | |
| | |
| | |
| | | |
The path tests can only work on UNIX-like OSs because Python's path
joining is required to use / as the path separator
|