Paul Bakker
|
c0dcf0ceb1
|
Merged blinding additions for EC, RSA and DHM into development
|
2013-09-10 14:44:27 +02:00 |
|
Paul Bakker
|
36b7e1efe7
|
Merged GCM refactoring into development
GCM is now independent of AES and can be used as a mode for any
cipher-layer supported 128-bit based block cipher
|
2013-09-10 14:41:05 +02:00 |
|
Manuel Pégourié-Gonnard
|
ea53a55c0f
|
Refactor to prepare for RSA blinding optimisation
|
2013-09-10 13:55:35 +02:00 |
|
Paul Bakker
|
7db0109436
|
Made POLARSSL_MD_MAX_SIZE dependent on POLARSSL_SHA512_C
|
2013-09-10 11:10:57 +02:00 |
|
Paul Bakker
|
43aff2aec4
|
Moved GCM to use cipher layer instead of AES directly
|
2013-09-09 00:10:27 +02:00 |
|
Paul Bakker
|
f46b6955e3
|
Added cipher_info_from_values() to cipher layer (Search by ID+keylen+mode)
|
2013-09-09 00:08:26 +02:00 |
|
Paul Bakker
|
5e0efa7ef5
|
Added POLARSSL_MODE_ECB to the cipher layer
|
2013-09-08 23:04:04 +02:00 |
|
Manuel Pégourié-Gonnard
|
032c34e206
|
Don't use DH blinding for ephemeral DH
|
2013-09-07 13:06:27 +02:00 |
|
Manuel Pégourié-Gonnard
|
337b29c334
|
Test and document EC blinding overhead
|
2013-09-07 11:52:27 +02:00 |
|
Manuel Pégourié-Gonnard
|
7da0a38d43
|
Rm some includes that are now useless
|
2013-09-05 17:06:11 +02:00 |
|
Manuel Pégourié-Gonnard
|
b8bd593741
|
Restrict cipher_update() for GCM
|
2013-09-05 17:06:10 +02:00 |
|
Manuel Pégourié-Gonnard
|
226d5da1fc
|
GCM ciphersuites partially using cipher layer
|
2013-09-05 17:06:10 +02:00 |
|
Manuel Pégourié-Gonnard
|
143b5028a5
|
Implement DH blinding
|
2013-09-04 16:29:59 +02:00 |
|
Paul Bakker
|
c049955b32
|
Merged new cipher layer enhancements
|
2013-09-04 16:12:55 +02:00 |
|
Manuel Pégourié-Gonnard
|
2d627649bf
|
Change dhm_calc_secret() prototype
|
2013-09-04 14:22:07 +02:00 |
|
Manuel Pégourié-Gonnard
|
ce4112538c
|
Fix RC4 key length in cipher
|
2013-09-04 12:29:26 +02:00 |
|
Manuel Pégourié-Gonnard
|
83f3fc0d77
|
Add AES-192-GCM
|
2013-09-04 12:14:13 +02:00 |
|
Manuel Pégourié-Gonnard
|
43a4780b03
|
Ommit AEAD functions if GCM not defined
|
2013-09-03 19:28:35 +02:00 |
|
Manuel Pégourié-Gonnard
|
aa9ffc5e98
|
Split tag handling out of cipher_finish()
|
2013-09-03 19:20:55 +02:00 |
|
Manuel Pégourié-Gonnard
|
2adc40c346
|
Split cipher_update_ad() out or cipher_reset()
|
2013-09-03 19:20:55 +02:00 |
|
Manuel Pégourié-Gonnard
|
a235b5b5bd
|
Fix iv_len interface.
cipher_info->iv_size == 0 is no longer ambiguous, and
cipher_get_iv_size() always returns something useful to generate an IV.
|
2013-09-03 13:25:52 +02:00 |
|
Manuel Pégourié-Gonnard
|
9c853b910c
|
Split cipher_set_iv() out of cipher_reset()
|
2013-09-03 13:04:44 +02:00 |
|
Manuel Pégourié-Gonnard
|
e09d2f8261
|
Change ecp_mul() prototype to allow randomization
(Also improve an error code while at it.)
|
2013-09-02 14:29:09 +02:00 |
|
Paul Bakker
|
eb851f6cd5
|
Merged current cipher enhancements for ARC4 and AES-GCM
|
2013-09-01 15:49:38 +02:00 |
|
Manuel Pégourié-Gonnard
|
9241be7ac5
|
Change cipher prototypes for GCM
|
2013-08-31 18:07:42 +02:00 |
|
Paul Bakker
|
da02a7f45e
|
AES_CBC ciphersuites now run purely via cipher layer
|
2013-08-31 17:25:14 +02:00 |
|
Manuel Pégourié-Gonnard
|
b5e85885de
|
Handle NULL as a stream cipher for more uniformity
|
2013-08-30 17:11:28 +02:00 |
|
Manuel Pégourié-Gonnard
|
37e230c022
|
Add arc4 support in the cipher layer
|
2013-08-30 17:11:28 +02:00 |
|
Paul Bakker
|
f451bac000
|
Blinding RSA only active when f_rng is provided
|
2013-08-30 15:48:53 +02:00 |
|
Paul Bakker
|
48377d9834
|
Configuration option to enable/disable POLARSSL_PKCS1_V15 operations
|
2013-08-30 13:41:14 +02:00 |
|
Paul Bakker
|
548957dd49
|
Refactored RSA to have random generator in every RSA operation
Primarily so that rsa_private() receives an RNG for blinding purposes.
|
2013-08-30 10:30:02 +02:00 |
|
Paul Bakker
|
ca174fef80
|
Merged refactored x509write module into development
|
2013-08-28 16:32:51 +02:00 |
|
Manuel Pégourié-Gonnard
|
c852a68b96
|
More robust selection of ctx_enc size
|
2013-08-28 13:13:30 +02:00 |
|
Paul Bakker
|
577e006c2f
|
Merged ECDSA-based key-exchange and ciphersuites into development
Conflicts:
include/polarssl/config.h
library/ssl_cli.c
library/ssl_srv.c
library/ssl_tls.c
|
2013-08-28 11:58:40 +02:00 |
|
Manuel Pégourié-Gonnard
|
acc7505a35
|
Temporary fix for size of cipher contexts
|
2013-08-27 22:21:21 +02:00 |
|
Manuel Pégourié-Gonnard
|
db77175e99
|
Make ecdsa_verify() return value more explicit
|
2013-08-27 22:21:21 +02:00 |
|
Manuel Pégourié-Gonnard
|
2fb15f694c
|
Un-rename ssl_set_own_cert_alt()
|
2013-08-27 22:21:21 +02:00 |
|
Manuel Pégourié-Gonnard
|
c6b6803dcf
|
Add forgotten "inline" keyword
|
2013-08-27 22:21:21 +02:00 |
|
Manuel Pégourié-Gonnard
|
e511ffca50
|
Allow compiling without RSA or DH
Only library and programs now, need to check test suites later.
|
2013-08-27 22:21:21 +02:00 |
|
Manuel Pégourié-Gonnard
|
bfe32efb9b
|
pk_{sign,verify}() now accept hash_len = 0
|
2013-08-27 22:21:21 +02:00 |
|
Manuel Pégourié-Gonnard
|
a20c58c6f1
|
Use convert functions for SSL_SIG_* and SSL_HASH_*
|
2013-08-27 22:21:20 +02:00 |
|
Manuel Pégourié-Gonnard
|
51be559c53
|
Fix PKCS#11 deps: now goes through PK
|
2013-08-27 22:21:20 +02:00 |
|
Manuel Pégourié-Gonnard
|
c40b4c3708
|
Add configuration item for the PK module
|
2013-08-27 22:21:20 +02:00 |
|
Manuel Pégourié-Gonnard
|
0d42049440
|
Merge code for RSA and ECDSA in SSL
|
2013-08-27 22:21:20 +02:00 |
|
Manuel Pégourié-Gonnard
|
070cc7fd21
|
Use the new PK RSA-alt interface
|
2013-08-27 22:21:20 +02:00 |
|
Manuel Pégourié-Gonnard
|
12c1ff0ecb
|
Add RSA-alt to the PK layer
|
2013-08-27 22:21:20 +02:00 |
|
Manuel Pégourié-Gonnard
|
a2d3f22007
|
Add and use pk_encrypt(), pk_decrypt()
|
2013-08-27 22:21:20 +02:00 |
|
Manuel Pégourié-Gonnard
|
8df2769178
|
Introduce pk_sign() and use it in ssl
|
2013-08-27 22:21:20 +02:00 |
|
Manuel Pégourié-Gonnard
|
ac75523593
|
Adapt ssl_set_own_cert() to generic keys
|
2013-08-27 22:21:20 +02:00 |
|
Manuel Pégourié-Gonnard
|
09edda888e
|
Check key type against selected key exchange
|
2013-08-27 22:21:19 +02:00 |
|