aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* X25519 key exchange for TLSJack Lloyd2016-10-217-42/+112
| | | | | Client interops with google.com, server not tested against an independent client yet.
* Allow setting the validation time during PKIX path validationJack Lloyd2016-10-213-19/+34
| | | | | | | Previously validation asked the system clock which is not always the correct thing (for example when using Roughtime protocol). Had been on the todo list forever, forced into it by some of the test certs expiring today.
* Add create_private_key, expose key loading functions in pk_algs.hJack Lloyd2016-10-209-153/+236
|
* Tighten up TLS server handshake logic.Jack Lloyd2016-10-201-20/+15
| | | | | | | | | Previously client was allowed to omit the Certificate message, a leftover from supporting SSLv3. In all versions of TLS, an empty message must be sent if the client does not want to use a cert. No known security impact, but nothing we need to allow anymore. Clean up the handshake switch a bit by using return statements.
* cli: Add dl_group_info cmdletJack Lloyd2016-10-201-0/+24
|
* Merge GH #669 Add SHA-3, SHAKE-128, and BoringSSL-mode NewHopeJack Lloyd2016-10-2020-215/+5161
|\
| * Update policy files for SHA-3Jack Lloyd2016-10-192-1/+3
| | | | | | | | BSI drops Keccak in favor of SHA-3. Modern adds SHA-3 and SHAKE-128.
| * Add SHAKE-128 as stream cipherJack Lloyd2016-10-199-106/+3619
| | | | | | | | | | Updates NewHope to use that instead of the hard-coded SHAKE-128, and adds toggle for BoringSSL compat mode using AES-128/CTR + SHA-256.
| * Add proper SHA-3Jack Lloyd2016-10-1912-120/+1551
| | | | | | | | | | | | | | | | | | | | Kind of a copy and paste of Keccak, but only a single copy of the permutation at least. Keccak depends on SHA-3 instead of the reverse, so that SHA-3 can be enabled without also bringing in an unapproved hash function. Updates newhope code and removes API function newhope_hash which was an unofficial SHA-3-256.
* | Merge GH #671 Allow eme_raw in BSI modeJack Lloyd2016-10-201-1/+0
|\ \
| * | we do the padding ourself so eme_raw is fineDaniel Neus2016-10-201-1/+0
| |/ | | | | | | So it shouldn't be prohibited in the module policy
* | Reorganize anon namespace code to fix last doxygen warn [ci skip]René Korthaus2016-10-201-8/+8
| |
* | Predefine some variables for doxygen [ci skip]René Korthaus2016-10-201-1/+8
| |
* | Remove obsolete doxygen tag [ci skip]René Korthaus2016-10-191-1/+0
| |
* | Fix doxygen warnings [ci skip]René Korthaus2016-10-1939-58/+101
| |
* | Minor doxygen fixes [ci skip]René Korthaus2016-10-1910-10/+10
| |
* | Improve pubkey doxygen [ci skip]René Korthaus2016-10-1915-17/+251
| |
* | Improve tls doxygen [ci skip]René Korthaus2016-10-199-0/+99
| |
* | Improve stream doxygen [ci skip]René Korthaus2016-10-194-7/+26
| |
* | Improve rng doxygen [ci skip]René Korthaus2016-10-196-11/+82
| |
* | Improve pkcs11 doxygen [ci skip]René Korthaus2016-10-193-13/+49
| |
* | Improve pk_pad doxygen [ci skip]René Korthaus2016-10-196-5/+13
| |
* | Improve pbkdf doxygen [ci skip]René Korthaus2016-10-191-4/+54
| |
* | Improve modes doxygen [ci skip]René Korthaus2016-10-199-8/+104
| |
* | Improve misc doxygen [ci skip]René Korthaus2016-10-192-0/+18
| |
* | Improve mac doxygen [ci skip]René Korthaus2016-10-191-4/+6
| |
* | Improve kdf doxygen [ci skip]René Korthaus2016-10-198-8/+54
| |
* | Improve hash doxygen [ci skip]René Korthaus2016-10-192-4/+13
| |
* | Improve block doxygen [ci skip]René Korthaus2016-10-191-3/+6
|/
* Fix pubkey tests when EMEs are disabled.Jack Lloyd2016-10-181-30/+14
| | | | | Test assumed EME was always there and would fail. This caused failures with BSI policy which disables PKCS1v1.5
* Add BSI specific Travis buildJack Lloyd2016-10-181-2/+4
| | | | | | Unfortunately something that is enabled in BSI but not 'modern' policy takes ages to run under qemu and causes Travis timeouts, so revert back to the old policy for the ARM builds. GH #667
* Maintainer mode fixesJack Lloyd2016-10-174-15/+12
|
* In TLS::Session_Keys return values by referenceJack Lloyd2016-10-171-6/+6
|
* Update SRP6 versionJack Lloyd2016-10-171-1/+1
| | | | API changed in 227d59d88 but did not bump the version.
* Indent include so amalgamation works correctlyJack Lloyd2016-10-171-2/+1
| | | | | Otherwise <future> is thrown into the top of botan_all.h which causes problems on IncludeOS
* Merge GH #665 Add IncludeOS target, make filesystem/threads optionalJack Lloyd2016-10-1782-89/+332
|\
| * Add ISA annotations to functions using SIMD, AES, etcJack Lloyd2016-10-1410-1/+52
| | | | | | | | | | | | | | | | Also emit `#pragma GCC target` in the ISA specific amalgamation files. This allows compiling without any special compiler flags, at least with GCC 6.2 and Clang 3.8. The ISA annotations are ignored in MSVC, which just emits whatever instruction the intrinsic requires.
| * More no-filesystem fixesJack Lloyd2016-10-125-0/+12
| |
| * Fix mutex in oids.cppJack Lloyd2016-10-123-9/+7
| | | | | | | | Remove bogus includes for TLS tests
| * Abstract out mutex type. Make threads optional.Jack Lloyd2016-10-1230-62/+162
| |
| * configure - Better handling of filesystem feature bitJack Lloyd2016-10-1219-1/+39
| |
| * Add IncludeOS target. Make filesystem support optional.Jack Lloyd2016-10-1018-18/+62
| |
* | AppVeyor: Implement 8 job build matrixSimon Warta2016-10-171-21/+57
| |
* | AppVeyor: Whitelist branches to avoid testing feature branches twiceSimon Warta2016-10-161-0/+5
| | | | | | | | | | | | (as branch and as pull request). This is only relevant for Jack's PRs since he is the only one creating feature branches in the randombit/botan repository.
* | Remove constexpr use introduced in 20f7e4ecJack Lloyd2016-10-162-7/+7
| | | | | | | | Turns out MSVC 2013 doesn't have constexpr at all (!!)
* | Build for ARM using BSI policy. GH #667Jack Lloyd2016-10-161-2/+2
| |
* | Increase slop size in FFI testJack Lloyd2016-10-141-2/+3
| | | | | | | | | | This is lame but I still cannot repro and random CI failures suck. Eventually I will fix the API.
* | util: Some simple constexpr usesJack Lloyd2016-10-133-31/+9
| | | | | | | | Remove unused and empty get_byte.h
* | Change Certificate_Store_in_SQL to take RNG as argument.Jack Lloyd2016-10-135-15/+20
| | | | | | | | | | Previously it created a new AutoSeeded_RNG in each function, sometimes without even using it.
* | ffi: Avoid deprecated PK constructors.Jack Lloyd2016-10-131-4/+4
| | | | | | | | The system rng is already a hard requirement for FFI anyway.
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-25 17:31:30 +0000