summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* tests: converted compile-time checks for FIPS140 mode to run-timetmp-use-thread-local-rngNikos Mavrogiannopoulos2017-03-0715-61/+81
* .gitlab-ci.yml: include coverage statistics of FIPS140-2 codeNikos Mavrogiannopoulos2017-03-071-1/+2
* .gitlab-ci.yml: include FIPS140-2 code into static analyzer runsNikos Mavrogiannopoulos2017-03-071-2/+2
* doc updateNikos Mavrogiannopoulos2017-03-071-0/+4
* nettle/rnd-fips: combined the FIPS-compliant generators to twoNikos Mavrogiannopoulos2017-03-061-15/+5
* nettle/rnd: use two random generators instead of 3Nikos Mavrogiannopoulos2017-03-061-19/+26
* doc: updated the PRNG documentation to utilize two PRNG instancesNikos Mavrogiannopoulos2017-03-062-102/+120
* doc: document the state of PRNG in GnuTLS 3.6.0Nikos Mavrogiannopoulos2017-03-063-0/+114
* nettle/pk: corrected call to gnutls_rnd() for rnd_nonce_funcNikos Mavrogiannopoulos2017-03-061-1/+1
* tests: decoupled the random generator operational tests from the forking onesNikos Mavrogiannopoulos2017-03-066-32/+225
* nettle/rnd: specify different limits for rekey in PRNGsNikos Mavrogiannopoulos2017-03-061-6/+14
* nettle/pk: use the GNUTLS_RND_RANDOM level for DH/DSA paramsNikos Mavrogiannopoulos2017-03-061-2/+2
* tests: added check to verify that including crypto.h is sufficientNikos Mavrogiannopoulos2017-03-062-2/+19
* crypto.h: include gnutls.h to obtain required typesNikos Mavrogiannopoulos2017-03-061-0/+2
* rnd: reduce calls to _rnd_get_system_entropyNikos Mavrogiannopoulos2017-03-061-7/+7
* rnd: when reseeding the generators use the next best generatorNikos Mavrogiannopoulos2017-03-061-23/+24
* tests: verify whether crypto operations failNikos Mavrogiannopoulos2017-03-062-1/+200
* Added _gnutls_lib_force_operationalNikos Mavrogiannopoulos2017-03-063-0/+7
* pk: always use _gnutls_switch_lib_stateNikos Mavrogiannopoulos2017-03-062-24/+34
* rnd: switched to 3 chacha-based PRNGs for all security levelsNikos Mavrogiannopoulos2017-03-067-282/+67
* rnd: aligned type of data counter with input data type (size_t)Nikos Mavrogiannopoulos2017-03-061-2/+2
* random: keep global list of initialized contextsNikos Mavrogiannopoulos2017-03-061-4/+50
* rnd: removed call of _rnd_system_entropy_deinit on deinitNikos Mavrogiannopoulos2017-03-061-1/+0
* Removed locks from internal rngNikos Mavrogiannopoulos2017-03-062-84/+59
* Use a thread local random generator.Nikos Mavrogiannopoulos2017-03-063-33/+12
* Makefile.am: added missing fileNikos Mavrogiannopoulos2017-03-061-1/+1
* .gitlab-ci.yml: execute initialization stage unconditionally [ci skip]Nikos Mavrogiannopoulos2017-03-061-6/+4
* datum.h: documented behavior of datum functionsNikos Mavrogiannopoulos2017-03-051-0/+5
* _gnutls_set_strdatum: always return an allocated string on successNikos Mavrogiannopoulos2017-03-051-2/+4
* Enforce the max packet length for OpenPGP subpackets as wellAlex Gaynor2017-03-053-3/+9
* doc: corrected typo [ci skip]Nikos Mavrogiannopoulos2017-03-051-2/+2
* doc updatetmp-extensions-updateNikos Mavrogiannopoulos2017-03-031-3/+9
* tests: do not generate certificates with serial being zeroNikos Mavrogiannopoulos2017-03-031-1/+1
* tests: check whether a certificate with illegal version is rejectedNikos Mavrogiannopoulos2017-03-033-24/+40
* gnutls_x509_crt_set_version: do not allow writing illegal versionsNikos Mavrogiannopoulos2017-03-031-1/+1
* x509: reject illegal certificate versionsNikos Mavrogiannopoulos2017-03-031-1/+1
* gnutls_x509_crt_set_serial: refuse to write all-zero serial numberNikos Mavrogiannopoulos2017-03-031-0/+16
* gnutls_x509_crt_set_serial: document the 20-byte limit for serial sizesNikos Mavrogiannopoulos2017-03-031-0/+4
* doc updateNikos Mavrogiannopoulos2017-03-021-0/+7
* tests: chainverify: incorporated the tests for unknown critical extensionsNikos Mavrogiannopoulos2017-03-021-0/+235
* x509.h: introduced flag GNUTLS_VERIFY_IGNORE_UNKNOWN_CRIT_EXTENSIONSNikos Mavrogiannopoulos2017-03-022-5/+12
* tests: verify that critical extensions can be storedNikos Mavrogiannopoulos2017-03-024-1/+67
* tests: added verification for unknown critical extensionsNikos Mavrogiannopoulos2017-03-025-2/+289
* x509/verify: refuse to verify certificates with unknown critical extensionsNikos Mavrogiannopoulos2017-03-026-2/+106
* .gitlab-ci.yml: run tests under a FIPS140 mode simulationNikos Mavrogiannopoulos2017-03-021-2/+4
* crypto-self-tests: modified exported functions to work under fips140-2 modeNikos Mavrogiannopoulos2017-03-021-4/+18
* tests: skip tests which cannot be run in FIPS140-2 modeNikos Mavrogiannopoulos2017-03-024-4/+22
* _gnutls_pk_params_copy: copy the provable algorithm usedNikos Mavrogiannopoulos2017-03-021-0/+1
* gnutls_session_ticket_key_generate: fixed operation under FIPS140-2 modeNikos Mavrogiannopoulos2017-03-011-1/+21
* tests: priorities: enhanced for test to work under FIPS140-2 modeNikos Mavrogiannopoulos2017-03-011-13/+27