mbedtls/library
Antonio Quartulli 12ccef2761
pkcs5v2: add support for additional hmacSHA algorithms
Currently only SHA1 is supported as PRF algorithm for PBKDF2
(PKCS#5 v2.0).
This means that keys encrypted and authenticated using
another algorithm of the SHA family cannot be decrypted.

This deficiency has become particularly incumbent now that
PKIs created with OpenSSL1.1 are encrypting keys using
hmacSHA256 by default (OpenSSL1.0 used PKCS#5 v1.0 by default
and even if v2 was forced, it would still use hmacSHA1).

Enable support for all the digest algorithms of the SHA
family for PKCS#5 v2.0.

Signed-off-by: Antonio Quartulli <antonio@openvpn.net>
2018-02-08 17:18:15 +08:00
..
.gitignore
aes.c Merge remote-tracking branch 'upstream-public/pr/964' into development 2018-01-02 16:24:29 +01:00
aesni.c
arc4.c
asn1parse.c
asn1write.c
base64.c
bignum.c Zeroize stack before returning from mpi_fill_random 2017-10-18 12:41:30 +01:00
blowfish.c
camellia.c
ccm.c
certs.c
cipher_wrap.c
cipher.c fix bug in get_one_and_zeros_padding() 2017-12-23 23:40:08 +01:00
cmac.c Merge remote-tracking branch 'upstream-public/pr/866' into development 2018-01-02 15:55:55 +01:00
CMakeLists.txt Update version to 2.7.0 2018-02-02 18:09:45 +00:00
ctr_drbg.c Merge branch 'development' into development-restricted 2018-01-26 12:48:04 +00:00
debug.c
des.c
dhm.c Merge remote-tracking branch 'upstream-restricted/pr/410' into development-restricted 2018-01-26 18:43:04 +00:00
ecdh.c Address PR cpomments reviews 2017-10-10 19:04:27 +03:00
ecdsa.c Merge remote-tracking branch 'upstream-public/pr/1027' into development 2018-01-09 10:42:03 +00:00
ecjpake.c Add support for alternative ECJPAKE implementation 2018-01-24 10:36:22 +00:00
ecp_curves.c
ecp.c Fix information leak in ecp_gen_keypair_base 2017-10-17 15:19:38 +01:00
entropy_poll.c
entropy.c Merge branch 'development' into development-restricted 2018-01-25 17:28:31 +00:00
error.c Merge branch 'development' into development-restricted 2018-01-30 17:04:47 +00:00
gcm.c Merge remote-tracking branch 'upstream-public/pr/964' into development 2018-01-02 16:24:29 +01:00
havege.c
hmac_drbg.c
Makefile Update version to 2.7.0 2018-02-02 18:09:45 +00:00
md2.c New MD API: rename functions from _ext to _ret 2018-01-22 11:54:42 +01:00
md4.c New MD API: rename functions from _ext to _ret 2018-01-22 11:54:42 +01:00
md5.c New MD API: rename functions from _ext to _ret 2018-01-22 11:54:42 +01:00
md_wrap.c New MD API: rename functions from _ext to _ret 2018-01-22 11:54:42 +01:00
md.c Merge branch 'development' into development-restricted 2018-01-25 17:28:31 +00:00
memory_buffer_alloc.c
net_sockets.c Merge remote-tracking branch 'upstream-public/pr/895' into development 2017-11-29 20:49:21 +01:00
oid.c pkcs5v2: add support for additional hmacSHA algorithms 2018-02-08 17:18:15 +08:00
padlock.c
pem.c Merge branch 'development' into development-restricted 2018-01-25 17:28:31 +00:00
pk_wrap.c Merge branch 'development' into iotssl-1619 2017-12-22 10:24:32 +00:00
pk.c
pkcs5.c pkcs5v2: add support for additional hmacSHA algorithms 2018-02-08 17:18:15 +08:00
pkcs11.c
pkcs12.c
pkparse.c Merge branch 'development' into development-restricted 2018-01-09 13:16:37 +00:00
pkwrite.c
platform.c Fix undefined function in platform.c 2017-12-20 12:52:49 +01:00
ripemd160.c Fix proprocessor directives for MBEDTLS_RIPEMD160_ALT 2018-01-23 18:21:21 +01:00
rsa_internal.c Add explicit type cast to avoid truncation warning 2018-01-03 09:27:40 +00:00
rsa.c Merge branch 'development' into development-restricted 2018-01-25 17:28:31 +00:00
sha1.c New MD API: rename functions from _ext to _ret 2018-01-22 11:54:42 +01:00
sha256.c New MD API: rename functions from _ext to _ret 2018-01-22 11:54:42 +01:00
sha512.c New MD API: rename functions from _ext to _ret 2018-01-22 11:54:42 +01:00
ssl_cache.c Address PR review comments 2017-10-29 17:53:52 +02:00
ssl_ciphersuites.c
ssl_cli.c Merge branch 'development' into iotssl-1251-2.7 2018-01-19 11:25:10 +01:00
ssl_cookie.c
ssl_srv.c Merge remote-tracking branch 'upstream-restricted/pr/410' into development-restricted 2018-01-26 18:43:04 +00:00
ssl_ticket.c
ssl_tls.c Merge remote-tracking branch 'upstream-restricted/pr/410' into development-restricted 2018-01-26 18:43:04 +00:00
threading.c
timing.c Fix alarm(0) failure on mingw32 2018-01-29 10:24:50 +01:00
version_features.c Add support for alternative ECJPAKE implementation 2018-01-24 10:36:22 +00:00
version.c
x509_create.c
x509_crl.c
x509_crt.c
x509_csr.c
x509.c Correctly handle leap year in x509_date_is_valid() 2017-10-12 23:21:37 +01:00
x509write_crt.c New MD API: rename functions from _ext to _ret 2018-01-22 11:54:42 +01:00
x509write_csr.c
xtea.c