aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* Added missing include.Frank Schoenmann2017-10-251-0/+1
|
* Perform OIDS lookup before to prevent a guaranteed exception in EC_Group.Frank Schoenmann2017-10-251-1/+1
|
* Skip ARM32 specific byteswap code, enable MSVC byteswap intrinsicsJack Lloyd2017-10-242-34/+15
| | | | | | | | | | While older versions of GCC did very badly with __builtin_bswap on ARM, I checked GCC 4.8 and it behaves correctly, emitting either rev or else the same optimal sequence as was used in the inline asm (depending on if ARMv7 is enabled or not.) Enable MSVC byteswap intrinsics, which (hopefully) work on all platforms. Drop the x86-32 specific asm for byteswap.
* Fix botan-test --helpJack Lloyd2017-10-243-36/+48
| | | | [ci skip]
* Convert http:// links to https:// where possibleJack Lloyd2017-10-2417-21/+21
|
* Add header for std::minJack Lloyd2017-10-241-0/+1
|
* Tweak help output a bitJack Lloyd2017-10-244-35/+53
|
* Inline Test::run_test into only callerJack Lloyd2017-10-243-45/+21
|
* Merge GH #1273 Refactor test and cli runner codeJack Lloyd2017-10-2418-973/+1156
|\
| * Avoid using namespace, other cleanupsJack Lloyd2017-10-241-27/+24
| |
| * Refactor option parsing in cli and test codeJack Lloyd2017-10-2418-947/+1133
| | | | | | | | Allows cleaning up header includes, also somewhat smaller binaries.
* | In cipher tests count IV setup as part of the message costJack Lloyd2017-10-241-10/+2
| | | | | | | | Splitting this out gives a misleading perf measurement.
* | Avoid "using namespace" in test codeJack Lloyd2017-10-243-64/+51
|/
* Merge GH #1263 Support FFDHE negotiation in TLSJack Lloyd2017-10-2215-36/+371
|\
| * Remove check for negotiated DH group in TLS clientRené Korthaus2017-10-201-29/+0
| | | | | | | | | | | | | | The server may not support the supported groups extension and choose an arbitrary group. RFC 7919 permits clients to continue if the group is acceptable under local policy, which we do now.
| * Fall back to default group if client does not send any DH groupsRené Korthaus2017-10-202-2/+19
| |
| * Add allowed values for allowed groupsRené Korthaus2017-10-181-3/+13
| |
| * Add supported groups TLS extension (RFC 7919)René Korthaus2017-10-1716-35/+372
| |
* | Merge GH #1271 Deprecate some exception typesJack Lloyd2017-10-221-3/+3
|\ \
| * | deprecate exceptionsDaniel Neus2017-10-211-3/+3
| | |
* | | Merge GH #1270 Support verification of PSS X.509 objectsJack Lloyd2017-10-22239-11/+9131
|\ \ \ | |/ / |/| |
| * | review changesDaniel Neus2017-10-214-235/+235
| | |
| * | X.509 RSA-PSS verificationDaniel Neus2017-10-20239-10/+9130
| | |
* | | Fix for 32-bit WindowsJack Lloyd2017-10-201-4/+4
| | | | | | | | | | | | The buffer is not aligned :/
* | | Add ability to print fingerprint in cert_info cliJack Lloyd2017-10-201-1/+4
| | | | | | | | | | | | [ci skip]
* | | Allow setting CTR width via stringJack Lloyd2017-10-204-6/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | | Prohibit very small counter widths (under 4 bytes), since they lead to trivial keystream reuse. Add tests. Fix clone which always returned an object with a block-wide counter.
* | | Remove redundant checkJack Lloyd2017-10-201-3/+0
| | | | | | | | | | | | | | | | | | CBC mode already has this same size check. [ci skip]
* | | Add GHASH using SSSE3Jack Lloyd2017-10-205-3/+106
| | | | | | | | | | | | About 30% faster than scalar on Skylake
* | | Use base CBC modes to implement TLS CBC ciphersuitesJack Lloyd2017-10-193-49/+36
| | | | | | | | | | | | | | | This reduces code and also lets TLS make use of parallel decryption which it was not doing before.
* | | Remove unused variableJack Lloyd2017-10-191-1/+1
| | |
* | | In speed flush the output stream after each resultJack Lloyd2017-10-191-1/+1
| | |
* | | Undeprecate these exceptionsJack Lloyd2017-10-192-5/+7
| | | | | | | | | | | | Cannot figure out how to get MSVC to shut up
* | | Another attempt at silencing MSVC warningJack Lloyd2017-10-192-6/+2
| | |
* | | Appease SonarJack Lloyd2017-10-191-1/+1
| | |
* | | Add a destructor to Policy_ViolationJack Lloyd2017-10-191-3/+4
| | | | | | | | | | | | | | | MSVC produces a deranged warning that the compiler generated destructor is deprecated, try to shut it up.
* | | Ignore BOTAN_DEPRECATED in Doxygen configJack Lloyd2017-10-191-0/+1
|/ / | | | | | | Fixes #1266
* | Merge GH #1262 GCM and CTR optimizationsJack Lloyd2017-10-1913-436/+789
|\ \
| * | PMULL optimizationsJack Lloyd2017-10-183-61/+192
| | |
| * | Further optimizations, and split out GHASH reduction codeJack Lloyd2017-10-183-87/+57
| | |
| * | GCM and CTR optimizationsJack Lloyd2017-10-1811-372/+624
| |/ | | | | | | | | | | | | | | | | | | | | In CTR, special case for counter widths of special interest. In GHASH, uses a 4x reduction technique suggested by Intel. Split out GHASH to its own source file and header. With these changes GCM is over twice as fast on Skylake and about 50% faster on Westmere.
* | Use conditional include in demaphore.hSimon Warta2017-10-191-1/+1
| |
* | Allow trailing comments for include matchersSimon Warta2017-10-191-0/+10
| |
* | Rename method to AmalgamationHelper.is_unconditional_std_include and testSimon Warta2017-10-191-0/+34
| |
* | GMAC test fixesJack Lloyd2017-10-182-2/+2
|/ | | | [ci skip]
* Simplify speed cmdlet, make summary optional, add JSON outputJack Lloyd2017-10-161-501/+455
|
* Correct usage of std::aligned_storageJack Lloyd2017-10-151-6/+6
| | | | This ended up allocating 256 KiB!
* Additional final annotationsJack Lloyd2017-10-1527-44/+44
|
* GMAC optimizationJack Lloyd2017-10-152-21/+32
| | | | | Avoid copying inputs needlessly, on Skylake doubles performance (from 1 GB/s -> 2 GB/s)
* Merge GH #1257 Use std::aligned_storage for AES T-tableJack Lloyd2017-10-151-32/+56
|\
| * Use overaligned storage for AES T-TableJack Lloyd2017-10-141-32/+56
| | | | | | | | | | This improves performance by ~ .5 cycle/byte. Also it ensures that our cache reading countermeasure works as expected.