Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Disable this version of the SSL code by default | lloyd | 2012-02-01 | 1 | -2/+6 |
| | |||||
* | Remove debug printfs, stdio includes | lloyd | 2012-01-30 | 3 | -11/+0 |
| | |||||
* | Pointer writing seems cleaner | lloyd | 2012-01-30 | 2 | -102/+102 |
| | |||||
* | Partially de-unroll the loop to make changes easier | lloyd | 2012-01-30 | 1 | -86/+41 |
| | |||||
* | Add a slow but functional implementation of Camellia | lloyd | 2012-01-28 | 5 | -1/+406 |
| | |||||
* | Fix lib suffix | lloyd | 2012-01-25 | 2 | -3/+9 |
| | |||||
* | Fix -Wreorder warning | lloyd | 2012-01-25 | 1 | -1/+1 |
| | |||||
* | Use initializer list, make destructor virtual | lloyd | 2012-01-06 | 1 | -2/+2 |
| | |||||
* | Remove the autheticator generation from the SRP code as it's not used | lloyd | 2011-12-31 | 4 | -52/+143 |
| | | | | | by TLS (relies on the finished message check). Add a class for reading files created by GnuTLS's srptool. | ||||
* | A bad decrypt on a TLS 1.0/1.1 message would cause a mostly infinite | lloyd | 2011-12-31 | 1 | -1/+6 |
| | | | | | loop (size_t overflow), likely causing a segfault. Not exploitable as far as I can tell, beyond the obvious crashing. | ||||
* | Add code point for the SRP identifier extension and add a check for it | lloyd | 2011-12-17 | 3 | -0/+13 |
| | | | | | in the Client_Hello parser. Works, tested with GnuTLS command line client. | ||||
* | Initial run at an SRP-6a implementation. Not entirely sure about the | lloyd | 2011-12-17 | 4 | -0/+288 |
| | | | | | interface but it's a plausible start. Will probably have more insights after adding TLS hooks. | ||||
* | Add the 2048 bit SRP group from RFC 5054 | lloyd | 2011-12-17 | 1 | -0/+15 |
| | |||||
* | Make this exception somewhat more understandable. I think. | lloyd | 2011-12-17 | 1 | -1/+1 |
| | |||||
* | Use LoadLibraryA instead of bare LoadLibrary so things work if used in | lloyd | 2011-12-13 | 1 | -1/+1 |
| | | | | an amalgamation and the app is compiled in Unicode mode. | ||||
* | Fix PR 166 | lloyd | 2011-12-08 | 1 | -5/+9 |
| | |||||
* | Add basic NaCl target | lloyd | 2011-12-08 | 1 | -0/+4 |
| | |||||
* | LoadLibrary apparently works on MinGW | lloyd | 2011-12-02 | 1 | -0/+1 |
| | |||||
* | GCC doesn't like casting a function pointer to void* without an | lloyd | 2011-12-02 | 1 | -1/+2 |
| | | | | explicit cast. | ||||
* | Add AltiVec detection on OpenBSD, contributed by Brad Smith in PR 162 | lloyd | 2011-11-28 | 1 | -1/+15 |
| | |||||
* | Call cpuid via inline asm on x86-64, so we can use it with Clang (no | lloyd | 2011-11-18 | 1 | -2/+16 |
| | | | | cpuid intrinsic) and older GCC (no cpuid.h before 4.3) | ||||
* | Add model name for Sandy Bridge. Use -march=corei7 with GCC and Clang | lloyd | 2011-11-18 | 3 | -12/+16 |
| | | | | as they seem to understand it as of GCC 4.6 and Clang 2.9. | ||||
* | Fix declaration | lloyd | 2011-11-18 | 1 | -2/+1 |
| | |||||
* | Manually rename registers instead of rotating. Performance is about | lloyd | 2011-11-18 | 1 | -638/+638 |
| | | | | | the same, so clearly GCC 4.6 and/or the Core i7 are very good about renames, but might help on less capable systems. | ||||
* | Poll clock_gettime in High_Resolution_Timestamp::poll with whatever | lloyd | 2011-11-11 | 2 | -1/+39 |
| | | | | clock types we know about that have macros defined for them. | ||||
* | Add AltiVec detection for POWER7 processors | lloyd | 2011-11-02 | 1 | -0/+2 |
| | |||||
* | Don't set the soname on OpenBSD (PR 158) | lloyd | 2011-10-11 | 1 | -0/+3 |
| | |||||
* | Name the params for DER_Encoder in header | lloyd | 2011-10-06 | 1 | -24/+47 |
| | |||||
* | Avoid using -march=i386 if an i386 is 'detected', instead use | lloyd | 2011-08-15 | 1 | -2/+5 |
| | | | | | | | | -mtune=generic as with i486. Python's platform reports an i386 when running on a Core Duo on MacOS X 10.6, then using -march=i368 causes a link failure due to missing atomic adds in libstdc++. PR 152 Also use generic for i586. | ||||
* | Add a new, somewhat more functional dist script | lloyd | 2011-07-11 | 1 | -0/+168 |
| | |||||
* | The Algorithm_Factory has this logic on looking for an object: | lloyd | 2011-07-05 | 4 | -8/+31 |
| | | | | | | | | | | | | | | | | | | | | - Check the cache; if found, return value - Populate cache, if the value is already there, delete the old object and save the new one. - Recheck the cache value Raja <[email protected]> pointed out on the list that this could race if multiple threads called a lookup function in close succession while the cache was cold. All of them would fail the lookup, then each of them would add it, but the values returned would be deleted by other threads. Instead, declare that first write wins. Then, the cache stays consistent even if there is a race, the only issue is an extra search and delete. Modify GOST and Skein, as their name() function did not roundtrip properly which caused failures otherwise. | ||||
* | Tick to 1.10.1 unreleased. | lloyd | 2011-06-30 | 2 | -0/+3 |
| | | | | | Try to detect the mtn revision (by shelling out to mtn automate), and including it in build.h as BOTAN_VERSION_VC_REVISION. | ||||
* | Make CMAC::poly_double at least theoretically constant time, though | lloyd | 2011-06-23 | 1 | -3/+2 |
| | | | | most compilers will probably compile this into a conditional anyway. | ||||
* | Fix -Wshadow warning | lloyd | 2011-06-22 | 1 | -2/+2 |
| | |||||
* | Invert the meaning of the Miller-Rabin test; passes_test meant 'is not | lloyd | 2011-06-16 | 1 | -9/+17 |
| | | | | | | | | | | a witness'. Instead call it 'is_witness', returning true if a is a witness for n's compositness, or otherwise false. Also, the previous version would not check that the final value of y was n-1; if it isn't, then n is not prime. This would mean the false negative rate was higher than it should have been, though I'm not sure by how much exactly. | ||||
* | Detect (though not using) the CPUID bit for the RDRAND instruction | lloyd | 2011-06-16 | 1 | -1/+8 |
| | |||||
* | Add std::swap specialization for memory containers | lloyd | 2011-06-13 | 1 | -0/+10 |
| | |||||
* | Write zeros in 4K blocks | lloyd | 2011-06-07 | 1 | -7/+9 |
| | |||||
* | Simplify Montgomery setup here a bit | lloyd | 2011-06-07 | 1 | -6/+4 |
| | |||||
* | Rename some dirs for shorter object files where configure will | lloyd | 2011-06-03 | 13 | -2/+2 |
| | | | | coalesce the dir and file name if identical. | ||||
* | Ignore \r as whitespace in base64 decoder - caused test failures on | lloyd | 2011-06-03 | 1 | -1/+3 |
| | | | | Windows :( | ||||
* | Fix building with --via-amalgamation; it wouldn't generate the | lloyd | 2011-06-03 | 5 | -432/+449 |
| | | | | | | | | amalgamation properly, but would happen to work if a previously written amalgamation was around. Also make changes allowing using the SIMD optimized versions of SHA-1 and Serpent to be used in the amalgamation. | ||||
* | Remove BOTAN_DLL from internal headers, add it to Unexpected_Message | lloyd | 2011-06-02 | 4 | -14/+14 |
| | | | | exception. | ||||
* | Change order of arguments to bigint_monty_redc (internal interface, | lloyd | 2011-06-02 | 3 | -46/+43 |
| | | | | | | not exposed to callers) Switch back redc to using the inlined version (accidental change) | ||||
* | Add monty sqr and multiply routines (they just call karatsuba and then | lloyd | 2011-06-02 | 4 | -43/+77 |
| | | | | redc, currently) | ||||
* | Reduce number of temporaries needed in point addition | lloyd | 2011-06-01 | 1 | -22/+14 |
| | |||||
* | Multi-expoentiation, using the single bit variation. Using a 2 or 3 | lloyd | 2011-06-01 | 4 | -2/+49 |
| | | | | | | bit window may well improve things further. Currently seeing 20-25% improvement in ECDSA signature verification and 25 to 40% in GOST-34.10 verifications. | ||||
* | Remove amalg on distclean | lloyd | 2011-06-01 | 2 | -0/+2 |
| | |||||
* | PointGFp::get_affine_{x,y} doesn't return a reference | lloyd | 2011-05-31 | 1 | -2/+2 |
| | |||||
* | MinGW install commands are the default, so don't specify explicitly. | lloyd | 2011-05-26 | 2 | -5/+2 |
| | | | | | On Solaris, use /usr/ucb/install, as /usr/sbin/install uses some kind of other strange syntax. |