Commit graph

  • 286bf3c501 Split up largest test suite data files into smaller chunks Paul Bakker 2013-04-08 18:09:51 +0200
  • 370e90c2f0 Enable PBKDF2 by default Paul Bakker 2013-04-08 15:19:43 +0200
  • abfdfbfd46 Removed duplicate value from compat.sh ciphersuite list Paul Bakker 2013-04-08 14:07:43 +0200
  • a280d0f2b9 Fixed compiler warning for possible uninitialized ret Paul Bakker 2013-04-08 13:40:17 +0200
  • 27714b1aa1 Added Camellia ECDHE-based CBC ciphersuites Paul Bakker 2013-04-07 23:07:12 +0200
  • bfe671f2d5 Blowfish has default of 128-bit keysize in cipher layer Paul Bakker 2013-04-07 22:35:44 +0200
  • d5c2b542cc Indication of x509_get_numeric_string() deprecation Paul Bakker 2013-04-07 22:34:26 +0200
  • c70b982056 OID functionality moved to a separate module. Paul Bakker 2013-04-07 22:00:46 +0200
  • 37de6bec16 Const correctness added for asn1write functions Paul Bakker 2013-04-07 13:11:31 +0200
  • c295b834a2 Minor checks to prevent NULL-pointer exceptions Paul Bakker 2013-04-02 11:13:39 +0200
  • 3b6a07b745 Prevented compiler warning on uninitialized end Paul Bakker 2013-03-21 11:56:50 +0100
  • d3edc86720 Moved writing of client extensions to separate functions in ssl_cli.c Paul Bakker 2013-03-20 16:07:17 +0100
  • a54e493bc0 Added ECDHE-based SHA256 and SHA384 ciphersuites Paul Bakker 2013-03-20 15:31:54 +0100
  • b7149bcc90 Corrected behaviour for CBC-based suites using the SHA384 MAC and PRF Paul Bakker 2013-03-20 15:30:09 +0100
  • a0234377fc Made change to error.c for dummy error_strerror() permanent Paul Bakker 2013-03-20 14:42:21 +0100
  • 41c83d3f67 Added Ephemeral Elliptic Curve Diffie Hellman ciphersuites to SSL/TLS Paul Bakker 2013-03-20 14:39:14 +0100
  • 00c1f43743 Merge branch 'ecc-devel-mpg' into development Paul Bakker 2013-03-13 16:31:01 +0100
  • d589a0ddb6 Modified Makefiles to include new files and and config.h to PolarSSL standard Paul Bakker 2013-03-13 16:30:17 +0100
  • 68884e3c09 Moved to advanced ciphersuite representation and more dynamic SSL code Paul Bakker 2013-01-07 18:20:04 +0100
  • 9b5798dc75 Modified ChangeLog to include explanations of last SSL module changes Paul Bakker 2013-03-13 13:53:00 +0100
  • c9118b433b Renamed hash structures to ctx Paul Bakker 2013-03-13 11:48:39 +0100
  • 09d67258a2 Modified to work in-place Paul Bakker 2013-01-04 16:38:25 +0100
  • 92be97b8e6 Align data with future location based on IV size Paul Bakker 2013-01-02 17:30:03 +0100
  • 07eb38ba31 Update ssl_hw_record_init() to receive keylen, ivlen and maclen as well Added ssl_hw_record_activate() Paul Bakker 2012-12-19 14:42:06 +0100
  • c7878113cb Do not set done in case of a fall-through Paul Bakker 2012-12-19 14:41:14 +0100
  • 5bd422937a Reverted commit 186751d9dd and made out_hdr and out_msg back-to-back again Paul Bakker 2012-12-19 14:40:42 +0100
  • fae35f0601 Functions in cipher_wrap.c marked static Paul Bakker 2013-03-13 10:33:51 +0100
  • d1df02a8a3 Functions inside md_wrap.c now marked static Paul Bakker 2013-03-13 10:31:31 +0100
  • ac0fba5389 Added missing header for MD2 and made code compile with missing header files Paul Bakker 2013-03-13 10:28:40 +0100
  • 1bd3ae826c Added md_process() to MD layer for generic internal access to hash process functions Paul Bakker 2013-03-13 10:26:44 +0100
  • d3cd5c1129 Prepared for PolarSSL 1.1.6 release polarssl-1.1.6 Paul Bakker 2013-03-11 17:02:58 +0100
  • f8e407a690 Inserted bump_version.sh in git repository (cherry picked from commit 34558735d2) Paul Bakker 2013-03-11 16:56:36 +0100
  • b5f272778e Fixed net_bind() for specified IP addresses on little endian systems (cherry picked from commit 37286a573b) Paul Bakker 2013-03-11 16:53:25 +0100
  • e73a77f656 Removed timing differences due to bad padding from RSA decrypt for PKCS#1 v1.5 operations (cherry picked from commit 8804f69d46) Paul Bakker 2013-03-11 16:51:05 +0100
  • 0a971b5dc8 Removed further timing differences during SSL message decryption in ssl_decrypt_buf() Paul Bakker 2013-03-11 16:08:06 +0100
  • f6bff2a300 Made x509parse.c also work with missing hash header files (cherry picked from commit 2ca8ad10a1) Paul Bakker 2013-03-11 16:05:32 +0100
  • 332166eeda Added comments to indicate dependency from PEM on AES, DES and MD5 (cherry picked from commit 6deb37e03e) Paul Bakker 2013-03-11 16:04:49 +0100
  • 6c04475bfc Fixed typo in base64.h (cherry picked from commit fbb5cf9f59) Paul Bakker 2013-03-11 16:04:04 +0100
  • 9fa6ea7cdf Fixed comment (cherry picked from commit 86f04f400b) Paul Bakker 2013-03-11 16:03:35 +0100
  • 48b7cb8ea2 Disable debug messages that can introduce a timing side channel. Paul Bakker 2013-03-11 15:59:03 +0100
  • 6a229c1f8c Fixed timing difference resulting from badly formatted padding. (cherry picked from commit 4582999be6) Paul Bakker 2013-03-11 15:56:17 +0100
  • cb60e7c065 Allow enabling of dummy error_strerror() to support some use-cases Paul Bakker 2013-03-11 15:50:35 +0100
  • 90f042d4cb Prepared for PolarSSL 1.2.6 release polarssl-1.2.6 Paul Bakker 2013-03-11 11:38:44 +0100
  • fb1cbd3cea Fixed assembly code for ARM (Thumb and regular) for some compilers Paul Bakker 2013-03-06 18:14:52 +0100
  • e81beda60f The SSL session cache module (ssl_cache) now also retains peer_cert information (not the entire chain) Paul Bakker 2013-03-06 17:40:46 +0100
  • a35aa54967 Fixed whitespaces in ChangeLog Paul Bakker 2013-03-06 17:06:21 +0100
  • 78a8c71993 Re-added support for parsing and handling SSLv2 Client Hello messages Paul Bakker 2013-03-06 17:01:52 +0100
  • 37286a573b Fixed net_bind() for specified IP addresses on little endian systems Paul Bakker 2013-03-06 16:55:11 +0100
  • 926c8e49fe Fixed possible NULL pointer exception in ssl_get_ciphersuite() Paul Bakker 2013-03-06 10:23:34 +0100
  • 8804f69d46 Removed timing differences due to bad padding from RSA decrypt for PKCS#1 v1.5 operations Paul Bakker 2013-02-28 18:06:26 +0100
  • a43231c5a5 Added support for custom labels when using rsa_rsaes_oaep_encrypt() or rsa_rsaes_oaep_decrypt() Paul Bakker 2013-02-28 17:33:49 +0100
  • b386913f8b Split up the RSA PKCS#1 encrypt, decrypt, sign and verify functions Paul Bakker 2013-02-28 17:21:01 +0100
  • e3e4a59622 Added bugfix line for previous fixes for MS Visual Studio Paul Bakker 2013-02-28 10:20:53 +0100
  • 8ea31ff3b5 Added missing typedef for INT64 Paul Bakker 2013-02-27 15:02:50 +0100
  • 9f2018ea28 Fixed typo in _MSC_VER (double underscore at the start) Paul Bakker 2013-02-27 15:01:34 +0100
  • 8ddb645ad3 Added conversion to int for a t_uint value to prevent compiler warnings Paul Bakker 2013-02-27 14:56:33 +0100
  • 3d2dc0f8e5 Corrected GCM counter incrementation to use only 32-bits instead of 128-bits Paul Bakker 2013-02-27 14:52:37 +0100
  • e47b34bdc8 Removed further timing differences during SSL message decryption in ssl_decrypt_buf() Paul Bakker 2013-02-27 14:48:00 +0100
  • 2ca8ad10a1 Made x509parse.c also work with missing hash header files Paul Bakker 2013-02-19 13:17:38 +0100
  • 6deb37e03e Added comments to indicate dependency from PEM on AES, DES and MD5 Paul Bakker 2013-02-19 13:17:08 +0100
  • fbb5cf9f59 Fixed typo in base64.h Paul Bakker 2013-02-14 11:56:58 +0100
  • 86f04f400b Fixed comment Paul Bakker 2013-02-14 11:20:09 +0100
  • c0463502ff Fixed memory leak in ssl_free() and ssl_reset() for active session Paul Bakker 2013-02-14 11:19:38 +0100
  • f35b739dff Add a few check for context validity. Manuel Pégourié-Gonnard 2013-02-11 22:12:39 +0100
  • 424fda5d7b Add ecdh_calc_secret() Manuel Pégourié-Gonnard 2013-02-11 22:05:42 +0100
  • 5cceb41d2c Add ecdh_{make,read}_public() Manuel Pégourié-Gonnard 2013-02-11 21:51:45 +0100
  • 854fbd7ba2 Add ecdh_read_params(). Manuel Pégourié-Gonnard 2013-02-11 20:28:55 +0100
  • 13724765b2 Add ecdh_make_server_params (untested yet) Manuel Pégourié-Gonnard 2013-02-10 15:01:54 +0100
  • 63533e44c2 Create ecdh_context structure Manuel Pégourié-Gonnard 2013-02-10 14:21:04 +0100
  • 98f51815d6 Fix ecp_tls_read_point's signature Manuel Pégourié-Gonnard 2013-02-10 13:38:29 +0100
  • 7c145c6418 Fix ecp_tls_read_group's signature Manuel Pégourié-Gonnard 2013-02-10 13:20:52 +0100
  • 8c16f96259 Add a few tests for ecp_tls_read_point Manuel Pégourié-Gonnard 2013-02-10 13:00:20 +0100
  • 46106a9d75 Add tests for (and fix bug in) ecp_tls_write_group Manuel Pégourié-Gonnard 2013-02-10 12:51:17 +0100
  • 420f1eb675 Fix ecp_tls_write_point's signature Manuel Pégourié-Gonnard 2013-02-10 12:22:46 +0100
  • b325887fad Add ecp_tls_write_group() Manuel Pégourié-Gonnard 2013-02-10 12:06:19 +0100
  • 6282acaec2 Add basic tests for ecp_tls_*_point Manuel Pégourié-Gonnard 2013-02-10 11:15:11 +0100
  • 7e86025f32 Rename ecp_*_binary to ecp_point_*_binary Manuel Pégourié-Gonnard 2013-02-10 10:58:48 +0100
  • d84895dc22 Supress 'format' argument to ecp_read_binary. Manuel Pégourié-Gonnard 2013-02-10 10:53:04 +0100
  • 0079405918 Add functions for read/write ECPoint records Manuel Pégourié-Gonnard 2013-02-09 19:00:07 +0100
  • 1a96728964 Add function parsing a TLS ECParameters record Manuel Pégourié-Gonnard 2013-02-09 17:03:58 +0100
  • c7a2da437e Updated for PolarSSL 1.2.5 polarssl-1.2.5 Paul Bakker 2013-02-02 19:23:57 +0100
  • 40865c8e5d Added sending of alert messages in case of decryption failures as per RFC Paul Bakker 2013-01-31 17:13:13 +0100
  • d66f070d49 Disable debug messages that can introduce a timing side channel. Paul Bakker 2013-01-31 16:57:45 +0100
  • 4582999be6 Fixed timing difference resulting from badly formatted padding. Paul Bakker 2013-01-03 14:52:21 +0100
  • 8fe40dcd7d Allow enabling of dummy error_strerror() to support some use-cases Paul Bakker 2013-02-02 12:43:08 +0100
  • cf4a70c8ed Adjust names of ECDSA tests. Manuel Pégourié-Gonnard 2013-01-27 09:10:53 +0100
  • 450a163c81 Fix valgrind warning in ECDSA test suite. Manuel Pégourié-Gonnard 2013-01-27 09:08:18 +0100
  • 007b7177ef ECDH : add test vectors from RFC 5903. Manuel Pégourié-Gonnard 2013-01-27 08:56:21 +0100
  • 602a8973d7 ECDSA : test vectors from RFC 4754 Manuel Pégourié-Gonnard 2013-01-27 08:10:28 +0100
  • d1c7150bf5 Basic tests for ECDSA. Manuel Pégourié-Gonnard 2013-01-26 19:09:07 +0100
  • 3aeb5a7192 Add ECDSA signature primitive. Manuel Pégourié-Gonnard 2013-01-26 18:05:50 +0100
  • b309ab2936 Add ECDSA sign primitive Manuel Pégourié-Gonnard 2013-01-26 17:24:59 +0100
  • 2aea1416f9 Add skeleton ecdsa.[ch] Manuel Pégourié-Gonnard 2013-01-26 16:33:44 +0100
  • 61ce13b728 Basic tests for ECDH primitive Manuel Pégourié-Gonnard 2013-01-26 16:20:32 +0100
  • 6545ca7bed Add ECDH primitives Manuel Pégourié-Gonnard 2013-01-26 16:05:22 +0100
  • 0bad5c2381 Add skeleton ecdh.[ch] Manuel Pégourié-Gonnard 2013-01-26 15:30:46 +0100
  • 45a035a9ac Add ecp_gen_keypair() Manuel Pégourié-Gonnard 2013-01-26 14:42:45 +0100
  • 14c56a3378 Updated for PolarSSL 1.2.4 polarssl-1.2.4 Paul Bakker 2013-01-25 17:11:37 +0100
  • 9d2bb658fc Added PolarSSL 1.1.5 ChangeLog from 1.1 branch Paul Bakker 2013-01-25 16:07:49 +0100
  • 1961b709d8 Added ssl_handshake_step() to allow single stepping the handshake process Paul Bakker 2013-01-25 14:49:24 +0100