Manuel Pégourié-Gonnard
|
8df68632e8
|
Fix bug in DHE-PSK PMS computation
|
2014-06-25 11:26:14 +02:00 |
|
Manuel Pégourié-Gonnard
|
5c1f032653
|
Abort handshake if no point format in common
|
2014-06-25 11:26:14 +02:00 |
|
Manuel Pégourié-Gonnard
|
fd35af1579
|
Fix off-by-one error in point format parsing
|
2014-06-25 11:26:14 +02:00 |
|
Manuel Pégourié-Gonnard
|
87a8ffeaba
|
Padlock asm using \n\t too
|
2014-06-25 11:26:14 +02:00 |
|
Manuel Pégourié-Gonnard
|
0534fd4c1a
|
Change asm format to \n\t in aesni.c too
|
2014-06-25 11:26:13 +02:00 |
|
Manuel Pégourié-Gonnard
|
03576887c2
|
Remove misplaced debugging message
|
2014-06-25 11:26:13 +02:00 |
|
Manuel Pégourié-Gonnard
|
42b5374523
|
Switch CCM and GCM in default suite order
The upcoming BCP document recommends GCM as the default.
|
2014-06-25 11:26:13 +02:00 |
|
Manuel Pégourié-Gonnard
|
d249b7ab9a
|
Restore ability to trust non-CA selfsigned EE cert
|
2014-06-25 11:26:13 +02:00 |
|
Manuel Pégourié-Gonnard
|
c4eff16516
|
Restore ability to use v1 CA if trusted locally
|
2014-06-25 11:26:12 +02:00 |
|
Manuel Pégourié-Gonnard
|
eaa76f7e20
|
Fix computation of minlen for encrypted packets
|
2014-06-25 11:26:12 +02:00 |
|
Manuel Pégourié-Gonnard
|
e800cd81d7
|
Re-arrange some code in ssl_derive_keys()
|
2014-06-25 11:26:11 +02:00 |
|
Manuel Pégourié-Gonnard
|
b46e6adb9c
|
Check input lengths in GCM
|
2014-06-25 11:26:11 +02:00 |
|
Manuel Pégourié-Gonnard
|
0bcc4e1df7
|
Fix length checking for AEAD ciphersuites
|
2014-06-25 11:26:10 +02:00 |
|
Paul Bakker
|
1c98ff96b5
|
Merge more test improvements and tests
Conflicts:
tests/suites/test_suite_cipher.blowfish.data
|
2014-06-24 11:12:00 +02:00 |
|
Paul Bakker
|
91c301abbe
|
Zeroize values in PKCS#12 operations
|
2014-06-24 11:09:39 +02:00 |
|
Manuel Pégourié-Gonnard
|
398c57b0b3
|
Blowfish accepts variable key len in cipher layer
|
2014-06-24 11:01:33 +02:00 |
|
Manuel Pégourié-Gonnard
|
f3b47243df
|
Split x509_csr_parse_der() out of x509_csr_parse()
|
2014-06-23 11:54:57 +02:00 |
|
Manuel Pégourié-Gonnard
|
4d2a8eb6ff
|
SSL modules now using x509_crt_parse_der()
Avoid uselessly trying to decode PEM.
|
2014-06-23 11:54:57 +02:00 |
|
Manuel Pégourié-Gonnard
|
b912616081
|
Rm unused functions in cipher_wrap
You can't initialise a context with DES_CFB or DES_CTR.
|
2014-06-23 11:54:57 +02:00 |
|
Manuel Pégourié-Gonnard
|
1c082f34f3
|
Update description and references for X.509 files
|
2014-06-23 11:52:59 +02:00 |
|
Manuel Pégourié-Gonnard
|
edc3ab20e2
|
Small cleanup: less side-effects
pkcs5_parse_pbkdf2_params() used to modify params.p, which does not look
clean, even if the function is static and params.p isn't use afterwards.
|
2014-06-23 11:52:59 +02:00 |
|
Manuel Pégourié-Gonnard
|
90dac90f53
|
Small code simplification in pkcs5_pbes2()
|
2014-06-23 11:52:59 +02:00 |
|
Manuel Pégourié-Gonnard
|
66aca931bc
|
Add tests for pkcs5_pbes2
|
2014-06-23 11:52:59 +02:00 |
|
Manuel Pégourié-Gonnard
|
2a8afa98e2
|
pkcs5_self_test depends on SHA1
|
2014-06-23 11:52:59 +02:00 |
|
Manuel Pégourié-Gonnard
|
f3e5c22f4d
|
Refactor x509_string_to_names(): data in a table
|
2014-06-23 11:52:58 +02:00 |
|
Manuel Pégourié-Gonnard
|
81754a0c35
|
Create a 'flags' field in cipher_info
|
2014-06-23 11:33:18 +02:00 |
|
Paul Bakker
|
66d5d076f7
|
Fix formatting in various code to match spacing from coding style
|
2014-06-17 17:06:47 +02:00 |
|
Paul Bakker
|
db20c10423
|
Add #endif comments for #endif more than 10 lines from #if / #else
|
2014-06-17 14:34:44 +02:00 |
|
Paul Bakker
|
d8bb82665e
|
Fix code styling for return statements
|
2014-06-17 14:06:49 +02:00 |
|
Paul Bakker
|
3461772559
|
Introduce polarssl_zeroize() instead of memset() for zeroization
|
2014-06-14 16:46:03 +02:00 |
|
Paul Bakker
|
14877e6250
|
Remove unused 'ret' variable
|
2014-06-12 23:01:18 +02:00 |
|
Paul Bakker
|
c2ff2083ee
|
Merge parsing and verification of RSASSA-PSS in X.509 modules
|
2014-06-12 22:02:47 +02:00 |
|
Paul Bakker
|
508e573231
|
Merge tests for asn1write, XTEA and Entropy modules
|
2014-06-12 21:26:33 +02:00 |
|
Manuel Pégourié-Gonnard
|
3ac6a2b9a7
|
Same as previous commit with Camellia
|
2014-06-12 21:16:02 +02:00 |
|
Manuel Pégourié-Gonnard
|
afd5a08e33
|
Minor tune-up in aes code
un-duplicate a check, and remove useless default case, mainly so that these
lines don't appear as uncovered
|
2014-06-12 21:15:55 +02:00 |
|
Manuel Pégourié-Gonnard
|
e1ac0f8c5d
|
Add back timing selftest with new hardclock test
|
2014-06-12 21:15:50 +02:00 |
|
Manuel Pégourié-Gonnard
|
7792198a46
|
Normalize some error messages
|
2014-06-12 21:15:44 +02:00 |
|
Manuel Pégourié-Gonnard
|
4dd73925ab
|
Add entropy_self_test()
|
2014-06-10 15:38:43 +02:00 |
|
Paul Bakker
|
d6917f0eb3
|
Add LINK_WITH_PTHREAD to CMakeList for explicitly adding pthread linking
|
2014-06-09 23:46:41 +02:00 |
|
Manuel Pégourié-Gonnard
|
d1539b1e88
|
Rename RSASSA_PSS_CERTIFICATES to X509_RSASSA_PSS_SUPPORT
|
2014-06-06 16:42:37 +02:00 |
|
Manuel Pégourié-Gonnard
|
88aa6e0b58
|
Fix potential memory leak in RSASSA-PSS verify
|
2014-06-06 16:32:22 +02:00 |
|
Manuel Pégourié-Gonnard
|
0eaa8beb36
|
Fix signedness warning
|
2014-06-06 16:32:22 +02:00 |
|
Manuel Pégourié-Gonnard
|
53882023e7
|
Also verify CRLs signed with RSASSA-PSS
|
2014-06-05 17:59:55 +02:00 |
|
Manuel Pégourié-Gonnard
|
46db4b070c
|
Use pk_verify_ext() in x509_crt.c
|
2014-06-05 17:08:46 +02:00 |
|
Manuel Pégourié-Gonnard
|
bf696d030b
|
Make sig_opts non-optional in X509 structures
This simplifies the code.
|
2014-06-05 17:08:46 +02:00 |
|
Manuel Pégourié-Gonnard
|
dddbb1d1eb
|
Rm sig_params from various X509 structures
|
2014-06-05 17:08:46 +02:00 |
|
Manuel Pégourié-Gonnard
|
9113603b6b
|
Use sig_opts in x509_sig_alg_gets()
|
2014-06-05 15:41:39 +02:00 |
|
Manuel Pégourié-Gonnard
|
f75f2f7c46
|
Add sig_opts member to X509 structures
|
2014-06-05 15:14:59 +02:00 |
|
Manuel Pégourié-Gonnard
|
20422e9a3a
|
Add pk_verify_ext()
|
2014-06-05 14:02:05 +02:00 |
|
Manuel Pégourié-Gonnard
|
5ec628a2b9
|
Add rsa_rsassa_pss_verify_ext()
|
2014-06-05 14:02:05 +02:00 |
|