summaryrefslogtreecommitdiff
path: root/lib/fips.c
Commit message (Expand)AuthorAgeFilesLines
* _gnutls_fips_mode_enabled: treat selftest failure as FIPS disabledtmp-fips-enabledDaiki Ueno2020-08-121-1/+10
* Merge branch 'tmp-fileio' into 'master'Daiki Ueno2020-05-301-1/+1
|\
| * lib: avoid file descriptor leak when application forksDaiki Ueno2020-05-301-1/+1
* | fips: make FIPS140-2 mode enablement logic simplerDaiki Ueno2020-05-201-3/+2
|/
* fips: check library soname during configuretmp-check-sonameDaiki Ueno2020-04-241-4/+6
* fips: run selftests over overridden AES-CBC algorithmtmp-aes-cbc-selftestDaiki Ueno2019-06-121-0/+6
* crypto: add private API to retrieve internal IVDaiki Ueno2019-05-031-0/+6
* Vendor in XTS functionality from NettleSimo Sorce2019-03-291-0/+6
* fips140: Perform SHA-3 self testsAnderson Toshiyuki Sasaki2019-03-261-0/+25
* Use https:// for www.gnu.org and www.example.comTim Rühsen2019-03-131-1/+1
* fips140: Ignore newlines read at the end of HMAC fileAnderson Toshiyuki Sasaki2019-03-041-0/+7
* fips140: Fix the names of files used in integrity checksAnderson Toshiyuki Sasaki2019-03-041-3/+3
* fips140: added function for applications to switch the FIPS140-2 modeNikos Mavrogiannopoulos2018-02-191-25/+114
* Added _gnutls_lib_force_operationalNikos Mavrogiannopoulos2017-03-061-0/+5
* doc: explicitly state that rng self_test mustn't require rng initializationNikos Mavrogiannopoulos2016-11-041-1/+2
* several spacing fixes to keep syntax-check happyNikos Mavrogiannopoulos2016-09-111-1/+1
* gnutls_fips140_mode_enabled: changed return type to unsignedNikos Mavrogiannopoulos2016-08-051-1/+1
* env: use secure_getenv when reading environment variablesNikos Mavrogiannopoulos2016-05-271-2/+2
* fips140: set the key via a configure argumentNikos Mavrogiannopoulos2015-09-221-3/+1
* Removed the 'gnutls_' prefix from files to simplify file namingNikos Mavrogiannopoulos2015-08-231-2/+2
* fips140: corrected hex decodingNikos Mavrogiannopoulos2015-07-311-2/+2
* fips: use gnutls_hex_decode for MAC decodingNikos Mavrogiannopoulos2015-07-211-2/+3
* fips140: better debug messages when verifying MACNikos Mavrogiannopoulos2015-06-081-2/+1
* fips140: when GNUTLS_SKIP_FIPS_INTEGRITY_CHECKS is setup do not perform integ...Nikos Mavrogiannopoulos2015-06-041-19/+27
* use a FIPS key that agree's with fedora's fipshmacNikos Mavrogiannopoulos2015-01-151-1/+1
* properly reset the zombie mode in FIPS modeNikos Mavrogiannopoulos2014-11-161-3/+9
* the FIPS140-2 testing mode is disabled after self-checksNikos Mavrogiannopoulos2014-11-131-13/+17
* fips140: check the integrity of GMPNikos Mavrogiannopoulos2014-09-031-5/+27
* perform the FIPS140-2 self tests in two roundsNikos Mavrogiannopoulos2014-09-021-2/+29
* The environment variable GNUTLS_FORCE_FIPS_MODE can be used to force the FIPS...Nikos Mavrogiannopoulos2014-08-141-1/+13
* fips140-2: do not check the libtasn1's integrityNikos Mavrogiannopoulos2014-07-221-7/+0
* FIPS140-2 tests: no need for MD5 checkNikos Mavrogiannopoulos2014-07-081-6/+0
* FIPS140-2 tests: removed redundant checksNikos Mavrogiannopoulos2014-07-081-25/+1
* Include the correct header for the self tests functionsNikos Mavrogiannopoulos2014-04-281-0/+1
* Test for the existance of the /etc/system-fips fileKurt Roeckx2014-04-271-1/+1
* Add _gnutls_fips_mode_enabled() return values.Kurt Roeckx2014-04-271-0/+5
* corrected uninitialized valueNikos Mavrogiannopoulos2014-04-171-1/+1
* Changes to account for the reduced included gnulibNikos Mavrogiannopoulos2014-03-041-1/+2
* Correctly detect the FIPS140-2 HMAC file.Nikos Mavrogiannopoulos2013-12-111-2/+16
* FIPS140 mode is detected on run-time.Nikos Mavrogiannopoulos2013-12-091-3/+10
* removed zombie mode, and no longer use fips140.hNikos Mavrogiannopoulos2013-12-041-2/+0
* simplified funcNikos Mavrogiannopoulos2013-12-041-3/+1
* constructor and destructors were moved outside the FIPS140 mode.Nikos Mavrogiannopoulos2013-11-301-15/+0
* fips140_simulate_error -> lib_simulate_errorNikos Mavrogiannopoulos2013-11-301-1/+1
* The library state is used even when not in FIPS mode.Nikos Mavrogiannopoulos2013-11-301-11/+8
* Merged the FIPS140-2 support code.Nikos Mavrogiannopoulos2013-11-301-1/+1
* Added destructor and moved both *structors to fips.cNikos Mavrogiannopoulos2013-11-281-0/+15
* Added known answer test for Diffie-Hellman key exchange.Nikos Mavrogiannopoulos2013-11-281-0/+6
* Perform an integrity check on all supporting librariesNikos Mavrogiannopoulos2013-11-271-16/+74
* separate zombie mode from operational fips modeNikos Mavrogiannopoulos2013-11-271-2/+5