aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* Merge GH #706 Remove ability to add OIDs at runtime. Remove OID lockJack Lloyd2016-11-0315-567/+722
|\
| * Remove ability to add OIDS at runtime. Remove global OID lock.Jack Lloyd2016-11-0315-567/+722
| | | | | | | | | | | | | | | | | | | | | | OID map is now generated from an input file on an as needed basis. Just uses a sequence of ifs - simple, fast, and small code size. Merges oid_lookup sub-module which was already required by asn1 anyway, so completely non-optional. Removes @neusdan's nice OID tests since without any runtime adds the tests are moot.
* | Merge GH #705 Simplify EMSA1 validation with message recoveryJack Lloyd2016-11-031-14/+12
|\ \
| * | Simplify EMSA1 message recovery codeJack Lloyd2016-11-021-14/+12
| | |
* | | Update PKCS11 code, no RNG requiredJack Lloyd2016-11-031-14/+1
| | |
* | | Add create_key self testJack Lloyd2016-11-031-0/+2
| | |
* | | Remove automatic self-testing of public and private keysJack Lloyd2016-11-0318-139/+39
| |/ |/| | | | | | | | | | | | | | | | | | | | | | | Rarely expected and often causes performance problems, especially for private keys. Instead applications should call check_key explicitly to validate keys when necessary. Note this removal doesn't apply to tests like ECDH on-the-curve tests, where a check on the public key is required for security of our own key. Updates most APIs to remove RNG calls, where they are no longer required. Exception is PKCS8 interface, pending further work there (see GH #685) it just ignores the RNG argument now.
* | Add new configure argument --optimize-for-sizeJack Lloyd2016-11-034-0/+4
| | | | | | | | | | | | | | | | | | | | | | Uses -Os for GCC/Clang/ICC, /O1 for MSVC. Might be used in the future to control compile time features also (eg using a large precomputed table, vs not). Does not have any influence on module selection, just informs the build that a smaller binary is preferable. [ci skip]
* | Compile fixJack Lloyd2016-11-031-1/+1
| |
* | Remove blowfish table source file.Jack Lloyd2016-11-031-190/+0
| | | | | | | | | | Split commit with 4c777878 because, no git, I did not rename blfs_tab.cpp -> blowfish.cpp
* | Inline Blowfish tables to blowfish.cppJack Lloyd2016-11-032-3/+182
| | | | | | | | Only needed there.
* | Rename zero_mem to secure_scrub_memoryJack Lloyd2016-11-036-24/+45
| |
* | Move cert/x509 to top level and pem and pbes2 to pubkey.Jack Lloyd2016-11-0343-0/+0
| | | | | | | | | | | | | | | | | | The `cert` dir was just an artifact of having previously supported CVC (smartcard cert format), removed a long time ago. The pem and pbes2 code is directly related to the pubkey code, in fact the only caller of pbes2 (likely anywhere, not just in the library) is in pkcs8.cpp
* | Move ISA optimized versions under the main algo dirJack Lloyd2016-11-0314-12/+0
| | | | | | | | | | | | | | | | Previously it made sense for them to be in distinct dirs because they were standalone. However with #580 that is no longer the case, so move them to subdirs. Configure knows that anything underneath a directory has a dependency on the parent dir, so update info.txt files accordingly to remove explicit dependencies where set.
* | Deprecate LibraryInitializerJack Lloyd2016-11-032-28/+4
| | | | | | | | | | Now that #668 is landed I'm comfortable that we will not need any type of global init.
* | Remove stray non-ASCII chars which broke compilation on non UTF-8 code pages.Jack Lloyd2016-11-021-2/+2
| | | | | | | | GH #707
* | Remove lock and alias map from SCAN_NameJack Lloyd2016-11-021-4/+0
|/ | | | Not used anymore.
* Change TLS default policy to disable DSA, CCM-8, and static RSAJack Lloyd2016-11-022-11/+32
| | | | | | | | | | | | | | | Disables static RSA by default. The advantage here is twofold: enforcing forward security and protecting TLS servers from oracle attacks since by default they will never negotiate a suite which forces them to act as a decryption oracle. Some applications/users may be forced to enable RSA in order to speak with old or misconfigured peers, but these can be the exception not the default. Disable DSA and CCM-8 by default: if you need to enable these things, you know it. Adds TLS policy hooks to enforce DSA key sizes, default 2048 bits. Remove an incorrect warning about DTLS in the manual; the sequence number window check prevents this scenario from occuring.
* Fix ECKCDSA verification problemNever2016-11-011-1/+1
|
* Merge GH #700 Faster ECKCDSA verificationJack Lloyd2016-10-311-10/+8
|\
| * ECKCDSA improved verification (Shamirs Trick for speed and calculate length ↵Never2016-10-311-10/+8
| | | | | | | | of r)
* | Test PK key creation via create_private_key APIJack Lloyd2016-10-3112-174/+106
|/
* Avoid possibility of mismatched brackets.Jack Lloyd2016-10-311-2/+6
| | | | Found by cppcheck
* Merge GH #699 Add socket-based HTTP clientJack Lloyd2016-10-312-32/+101
|\
| * HTTP for plain socketsJack Lloyd2016-10-302-32/+101
| |
* | Move license and news to top level directoryJack Lloyd2016-10-312-3/+4
| | | | | | | | | | These files are important so make them easy to find for someone unpacking the tarball for the first time.
* | More fixes for the fuzzer setupJack Lloyd2016-10-312-14/+14
| | | | | | | | [ci skip]
* | Compile fixJack Lloyd2016-10-311-2/+2
| |
* | Import fuzzer driversJack Lloyd2016-10-3029-0/+1095
|/ | | | | | | | | | | Originally from https://github.com/randombit/botan-fuzzers but merging to the main tree (without the corpus files, since I suspect the corpus files in that repo are not useful anymore) Adds --unsafe-fuzzer-mode which can be used to selectively disable cryptographic checks which get in the way of fuzzer testing. This setting is reflected in build.h and in the version string. Right now it doesn't actually disable anything.
* Add P-521 ECDSA testJack Lloyd2016-10-301-0/+9
| | | | GH #681
* Merge GH #696 Add ECKCDSA and ECGDSA speed testsJack Lloyd2016-10-301-0/+62
|\
| * Add speedtests for ECKCDSA and ECGDSANever2016-10-301-0/+62
| |
* | Fix crash when default IV is empty. GH #697Jack Lloyd2016-10-301-1/+2
| |
* | Salsa20 accepts empty IVsJack Lloyd2016-10-302-4/+9
| | | | | | | | Treats it as an all-zero 64-bit IV. GH #697
* | Remove openpgp moduleJack Lloyd2016-10-303-266/+0
| | | | | | | | | | | | | | Just handled base64 encoding/decoding with a CRC and that's it. This would be better off being rewritten as part of a larger effort to support a meaningful subset of OpenPGP, and does not seem useful on its own.
* | Remove use of deprecated constructors in PKCS11 testsJack Lloyd2016-10-301-6/+6
|/
* Merge GH #692 Remove deprecated RNGs and entropy sourcesJack Lloyd2016-10-3026-2980/+38
|\
| * Remove HMAC_RNG, X9.31-RNG, BeOS stats, EGD reader, Unix process runnerJack Lloyd2016-10-2826-2980/+38
| | | | | | | | | | Change AutoSeeded_RNG to use SHA-384, SHA-256, SHA-3(256), or SHA-1, whichever is available (in that order).
* | More filter testsJack Lloyd2016-10-292-17/+117
|/ | | | Simplify algo_filt.cpp using create_or_throw
* Merge GH #691/#488 Add GMAC. Add MessageAuthenticationCode::start_msgJack Lloyd2016-10-289-9/+389
|\
| * Add MAC::start_msg, update GMACJack Lloyd2016-10-284-47/+59
| | | | | | | | | | | | | | | | GMAC needs a per-message nonce specified with `start`, and other MACs are capable of using nonces (Skein-MAC, for instance) so move this API up to MAC class. Change GMAC::clone to clone the owned cipher.
| * Implements GMAC with GHASH.Matthias Gierlings2016-10-287-98/+192
| | | | | | | | | | Adds support for Galois Message Authentication Code calculation based on GHASH, rather than GCM_Mode.
| * Added implementation for GMACMatthias Gierlings2016-10-279-58/+332
| | | | | | | | | | | | - Added GMAC class - Integrated GMAC into MAC-Class test bench. Run GMAC tests using ./botan-test mac
* | Add TLS callbacks for debug and error logging.Jack Lloyd2016-10-281-2/+28
| | | | | | | | | | Not currently called but leaves us the opening to use them in the future without breaking ABI.
* | HMAC_DRBG - Fix constructor init order. Use create_or_throw to simplify.Jack Lloyd2016-10-281-6/+3
| |
* | Update modern policy: Add NewHope, SQL, ChaCha20 SSE2. Prohibit TLS-CBCJack Lloyd2016-10-281-1/+8
| |
* | Remove bogus filter dependency in TSSJack Lloyd2016-10-282-2/+0
| | | | | | | | [ci skip]
* | Merge GH #687 Avoid unused return value warning under GCCJack Lloyd2016-10-281-2/+3
|\ \
| * | Fixes randombit/botan#677Matthias Gierlings2016-10-271-2/+3
| |/
* | make max_number_of_bytes_per_request configurableDaniel Neus2016-10-283-28/+139
| |
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-03 12:44:10 +0000