Manuel Pégourié-Gonnard
|
d5e0fbe1a3
|
Remove now useless function
|
2013-12-02 17:20:39 +01:00 |
|
Manuel Pégourié-Gonnard
|
3ee90003c9
|
Make internal functions static again + cosmetics
|
2013-12-02 17:14:48 +01:00 |
|
Manuel Pégourié-Gonnard
|
9854fe986b
|
Convert curve constants to binary
Makes source longer but resulting binary smaller
|
2013-12-02 17:07:30 +01:00 |
|
Manuel Pégourié-Gonnard
|
32b04c1237
|
Split ecp.c
|
2013-12-02 16:36:11 +01:00 |
|
Manuel Pégourié-Gonnard
|
43863eeffc
|
Declare internal variables static in ecp.c
|
2013-12-02 16:34:24 +01:00 |
|
Manuel Pégourié-Gonnard
|
d35e191434
|
Drop useless include in ecp.c
|
2013-12-02 16:34:24 +01:00 |
|
Paul Bakker
|
9dc53a9967
|
Merged client ciphersuite order preference option
|
2013-12-02 14:56:27 +01:00 |
|
Paul Bakker
|
014f143c2a
|
Merged EC key generation support
|
2013-12-02 14:55:09 +01:00 |
|
Paul Bakker
|
4040d7e95c
|
Merged more constant-time checking in RSA
|
2013-12-02 14:53:23 +01:00 |
|
Manuel Pégourié-Gonnard
|
1a9f2c7245
|
Add option to respect client ciphersuite order
|
2013-11-30 18:30:06 +01:00 |
|
Manuel Pégourié-Gonnard
|
011a8db2e7
|
Complete refactoring of ciphersuite choosing
|
2013-11-30 18:11:07 +01:00 |
|
Manuel Pégourié-Gonnard
|
3252560e68
|
Move some functions up
|
2013-11-30 17:50:32 +01:00 |
|
Manuel Pégourié-Gonnard
|
59b81d73b4
|
Refactor ciphersuite selection for version > 2
|
2013-11-30 17:46:04 +01:00 |
|
Manuel Pégourié-Gonnard
|
0267e3dc9b
|
Add ecp_curve_info_from_name()
|
2013-11-30 15:10:14 +01:00 |
|
Manuel Pégourié-Gonnard
|
104ee1d1f6
|
Add ecp_genkey(), prettier wrapper
|
2013-11-30 14:35:07 +01:00 |
|
Manuel Pégourié-Gonnard
|
27290daf3b
|
Check PKCS 1.5 padding in a more constant-time way
(Avoid branches that depend on secret data.)
|
2013-11-30 13:36:53 +01:00 |
|
Manuel Pégourié-Gonnard
|
ab44d7ecc3
|
Check OAEP padding in a more constant-time way
|
2013-11-30 13:13:05 +01:00 |
|
Manuel Pégourié-Gonnard
|
a5cfc35db2
|
RSA-OAEP decrypt: reorganise code
|
2013-11-29 11:58:13 +01:00 |
|
Manuel Pégourié-Gonnard
|
5ad68e42e5
|
Mutex x509_crt_parse_path() when pthreads is used
|
2013-11-28 18:07:39 +01:00 |
|
Manuel Pégourié-Gonnard
|
964bf9b92f
|
Quit using readdir_r()
Prone to buffer overflows on some platforms.
|
2013-11-28 18:07:39 +01:00 |
|
Paul Bakker
|
76f03118c4
|
Only compile with -Wmissing-declarations and -Wmissing-prototypes in
library, not tests and programs
|
2013-11-28 17:20:04 +01:00 |
|
Paul Bakker
|
88cd22646c
|
Merged ciphersuite version improvements
|
2013-11-26 15:22:19 +01:00 |
|
Manuel Pégourié-Gonnard
|
da1ff38715
|
Don't accept CertificateRequest with PSK suites
|
2013-11-26 15:19:57 +01:00 |
|
Manuel Pégourié-Gonnard
|
dc953e8c41
|
Add missing defines/cases for RSA_PSK key exchange
|
2013-11-26 15:19:57 +01:00 |
|
Manuel Pégourié-Gonnard
|
c57b654a3e
|
Use t_uint rather than uintXX_t when appropriate
|
2013-11-26 15:19:56 +01:00 |
|
Paul Bakker
|
3209ce3692
|
Merged ECP improvements
|
2013-11-26 15:19:17 +01:00 |
|
Manuel Pégourié-Gonnard
|
20b9af7998
|
Fix min_version (TLS 1.0) for ECDHE-PSK suites
|
2013-11-26 14:31:44 +01:00 |
|
Manuel Pégourié-Gonnard
|
a5bdfcde53
|
Relax some SHA2 ciphersuite's version requirements
Changed:
- PSK ciphersuites (RFC 5487, section 3)
- ECDHE-PSK ciphersuites (RFC 5489, section 3)
- Additional Camellia ciphersuites (RFC 6367, sec 3.3)
Unchanged:
- all GCM ciphersuites
- Camellia ciphersuites from RFC 5932 (sec. 3.3.2)
- ECC-SHA2 ciphersuites from RFC 5289 (unclear)
- SHA2 from RFC 5246 (TLS 1.2, no precision)
|
2013-11-26 13:59:43 +01:00 |
|
Manuel Pégourié-Gonnard
|
96c7a92b08
|
Change mpi_safe_cond_assign() for more const-ness
|
2013-11-25 18:28:53 +01:00 |
|
Paul Bakker
|
e4c71f0e11
|
Merged Prime generation improvements
|
2013-11-25 14:27:28 +01:00 |
|
Paul Bakker
|
45f457d872
|
Reverted API change for mpi_is_prime()
|
2013-11-25 14:26:52 +01:00 |
|
Paul Bakker
|
8fc30b178c
|
Various const fixes
|
2013-11-25 13:29:43 +01:00 |
|
Manuel Pégourié-Gonnard
|
ddf7615d49
|
gen_prime: check small primes early (3x speed-up)
|
2013-11-22 19:58:22 +01:00 |
|
Manuel Pégourié-Gonnard
|
378fb4b70a
|
Split mpi_is_prime() and make its first arg const
|
2013-11-22 19:40:32 +01:00 |
|
Manuel Pégourié-Gonnard
|
0160eacc82
|
gen_prime: ensure X = 2 mod 3 -> 2.5x speedup
|
2013-11-22 17:54:59 +01:00 |
|
Manuel Pégourié-Gonnard
|
711507a726
|
gen_prime: ensure X = 3 mod 4 always (2x speed-up)
|
2013-11-22 17:35:28 +01:00 |
|
Manuel Pégourié-Gonnard
|
3e3d2b818c
|
Fix bug in mpi_safe_cond_assign()
|
2013-11-21 21:56:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
918148193d
|
Enhance ecp_selftest
|
2013-11-21 21:56:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
d728350cee
|
Make memory access pattern constant
|
2013-11-21 21:56:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
aade42fd88
|
Change method for making M odd in ecp_mul()
- faster
- avoids M >= N (if m = N-1 or N-2)
|
2013-11-21 21:56:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
36daa13d76
|
Misc details
|
2013-11-21 21:56:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
469a209334
|
Rm subtraction from ecp_add_mixed()
|
2013-11-21 21:56:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
01fca5e882
|
Do point inversion without leaking information
|
2013-11-21 21:56:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
71c2c21601
|
Add mpi_safe_cond_assign()
|
2013-11-21 21:56:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
44aab79022
|
Update bibliographic references
|
2013-11-21 21:56:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
7f762319ad
|
Use mpi_shrink() in ecp_precompute()
|
2013-11-21 21:56:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
5868163e07
|
Add mpi_shrink()
|
2013-11-21 21:56:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
e282012219
|
Spare some memory
|
2013-11-21 21:56:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
edc1a1f482
|
Small code cleanups
|
2013-11-21 21:56:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
ff27b7c968
|
Tighten ecp_mul() validity checks
|
2013-11-21 21:56:38 +01:00 |
|