aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* Avoid using uninitialized RNG object in tests if construction failsJack Lloyd2017-01-061-4/+11
| | | | Found by Coverity scanner
* Merge GH #802 Update version to 2.0.0, change lib and include dir namesJack Lloyd2017-01-0617-16/+33
|\
| * Update shared object naming for new versioning scheme.Jack Lloyd2017-01-0617-16/+33
| | | | | | | | | | | | | | | | | | | | | | | | Cleans up so object naming since most of the time (across Unix) we follow the exact same naming scheme; just make it the default if only the so suffix is specified in the file. Also updates include header dir to be botan-${major} Changes behavior when shared lib not supported; instead of making the user explicitly try again with --disable-shared, just assume it and continue running.
* | Merge GH #816 Remove unused entries from BOTAN_ENTROPY_DEFAULT_SOURCESJack Lloyd2017-01-061-4/+4
|\ \
| * | remove "timestamp" and "proc_info" from BOTAN_ENTROPY_DEFAULT_SOURCESDaniel Neus2017-01-061-4/+4
| | | | | | | | | | | | these don't exist anymore
* | | Add tests for Stream_Cipher_ModeJack Lloyd2017-01-061-0/+14
| | | | | | | | | | | | GH #713
* | | Update lcov version to 1.13Jack Lloyd2017-01-061-3/+3
|/ / | | | | | | | | It seems the lcov source tarball for 1.12 has been removed from all Debian mirrors. Hopefully 1.13 is a trouble free upgrade.
* | Fix duplicate entry in XMSS speed paramsJack Lloyd2017-01-061-1/+1
| |
* | Merge GH #815 Add NIST build policyJack Lloyd2017-01-062-0/+155
|\ \
| * | Add basic NIST policyJack Lloyd2017-01-052-0/+155
| |/ | | | | | | Just my best reckoning of what is NIST approved, may have errors.
* | Merge GH #814 Avoid negotiating CECPQ1 if x25519 ECC is disabledJack Lloyd2017-01-061-0/+10
|\ \
| * | Avoid negotiating CECPQ1 if x25519 ECC is disabledJack Lloyd2017-01-051-0/+10
| | |
* | | Merge GH #813 Remove obsolete entropy source infoJack Lloyd2017-01-061-18/+0
|\ \ \
| * | | removed two more obsolete entropy source referencesDaniel Neus2017-01-061-14/+0
| | | |
| * | | Remove obsolete hres_timer includeDaniel Neus2017-01-061-4/+0
| | |/ | |/| | | | | | | module doesn't exist anymore
* | | Merge GH #812 Fix missing return in error case in iOS entropy sourceJack Lloyd2017-01-061-0/+2
|\ \ \
| * | | Return 0 bits in Darwin_SecRandom::poll on SecRandomCopyBytes failureDaniel Neus2017-01-061-0/+2
| |/ /
* / / Add iso9796 (required) and cecpq1 (prohibited) to BSI policy/bsi.txtDaniel Neus2017-01-061-0/+2
|/ /
* | Merge GH #806 Add tests for TLS certificate static messageJack Lloyd2017-01-054-13/+62
|\ \
| * | Add tests for certificate status messageJack Lloyd2017-01-044-13/+62
| |/ | | | | | | | | | | | | Currently untested by TLS crosstalk tests because it is not supported on the server side. Exposes the rest of TLS message types to application.
* | Merge GH #803 Add botan_ffi_supports_version funcJack Lloyd2017-01-053-0/+18
|\ \
| * | Add botan_ffi_supports_api functionJack Lloyd2017-01-043-0/+18
| |/ | | | | | | | | | | | | | | | | | | | | | | This lets us upgrade the FFI version over time and still allow applications to reliably detect if the current library binary supports their version. As an example, it would be useful to be able to add features to FFI sometime in 2.x. In that case, we would increase the value of the FFI API version, even though anything calling the old API would still work perfectly. Applications can verify at runtime the API they want to use is supported using this new call.
* | Merge GH #804 Move Data_Store type to x509 moduleJack Lloyd2017-01-055-4/+4
|\ \
| * | Move Data_Store from utils to x509Jack Lloyd2017-01-045-4/+4
| |/ | | | | | | | | It is not a general purpose util or something we want applications to use. It is only used by x509 and hopefully will be removed from there soon enough.
* / Avoid construct in test that causes compilation problem on XCode 6Jack Lloyd2017-01-041-2/+15
|/ | | | GH #798
* Merge GH #793 Add iOS targetJack Lloyd2017-01-035-2/+34
|\
| * Use Botan::X509_CA constructor that takes rng in testsSimon Warta2017-01-031-1/+1
| | | | | | | | because there there is no system_rng on ios
| * travis script: split os and cpu flags for consistencySimon Warta2017-01-031-1/+2
| |
| * Add os iosSimon Warta2017-01-034-0/+31
| |
* | Fix comment typo [ci skip]Jack Lloyd2017-01-031-1/+1
| |
* | Avoid using target function attribute in Clang before 3.8Jack Lloyd2017-01-031-1/+1
|/ | | | | | | | | | We support 3.5 or higher generally, but only Clang 3.8 has the function attributes. This doesn't affect the build with older Clang because the makefile still sets file-wide ISA flags. GCC supports this attribute in all versions we support. Fixes GH #797
* Add some final annotations in the PK testsJack Lloyd2017-01-021-7/+7
|
* Convert DH invalid key test to read from fileJack Lloyd2017-01-023-42/+62
|
* Merge GH #790 Add DH tests from NIST CAVPJack Lloyd2017-01-024-3/+315
|\
| * Add test vectors for public key checks from NIST CAVPRené Korthaus2017-01-021-0/+39
| |
| * Load q for DH public key in testsRené Korthaus2017-01-021-1/+11
| |
| * Add positive DH test vectors from NIST CAVPRené Korthaus2017-01-024-2/+265
| |
* | Merge GH #792 Fix BigInt::random_integer testJack Lloyd2017-01-021-9/+8
|\ \
| * | Increase value of ITERATIONS_PER_POSSIBLE_VALUE to 750Simon Warta2017-01-021-1/+2
| | | | | | | | | | | | to avoid test failures
| * | Simplify loop to foreach in test_random_integer()Simon Warta2017-01-021-2/+2
| | |
| * | Fix math in test_random_integer()Simon Warta2017-01-021-5/+3
| | | | | | | | | | | | | | | Removes complicated extra variable "dev", which was calculated incorrectly: if ratio = 0.0 then dev = 0.0, resulting in a test success.
| * | Rename ITERATIONS -> ITERATIONS_PER_POSSIBLE_VALUESimon Warta2017-01-021-3/+3
| |/
* / Don't use deprecated PK_Signer ctor in testsRené Korthaus2017-01-011-1/+1
|/
* Run python in coverage modeJack Lloyd2016-12-311-1/+1
|
* Add test for TPMJack Lloyd2016-12-311-0/+83
| | | | | | | Compiles, but basically untested as my machine with a working TPM suffered a fatal logic board failure some time ago. If TPM is compiled in but creating the TPM context fails, test assumes no hardware is available and returns.
* Fix for minimized buildJack Lloyd2016-12-311-1/+7
|
* Fix for EME-Raw being disabled as in BSI policyJack Lloyd2016-12-311-1/+8
|
* Remove SRP6 file supportJack Lloyd2016-12-312-133/+0
| | | | | | | | | | | | | It turns out SRP6 files use a different base64 alphabet than standard, and additionally Botan's decoding of the group id seems wrong though I haven't verified this second was a bug. In any case this code couldn't parse anything it was supposed to and never could. I had already planned on adding a database backed SRP store and removing this code but the fact that it's actually not functional for purpose suggests it's best to remove this now rather than let someone chance upon it and be endlessly frustrated that it doesn't seem to work because all the verifiers are garbled.
* Add a simple test of the all or nothing transformJack Lloyd2016-12-312-2/+58
|
* Add test that triggers Blinder to reinitialize stateJack Lloyd2016-12-311-0/+36
|