summaryrefslogtreecommitdiff
path: root/lib/fips.c
Commit message (Expand)AuthorAgeFilesLines
* build: re-indent codeDaiki Ueno2023-04-241-62/+67
* Indent codeZoltan Fridrich2023-01-271-77/+86
* Use soname instead of file name in fipshmac sectionsZoltan Fridrich2022-12-071-83/+144
* fips: rename .gnutls.hmac back to .libgnutls.so.*.hmacDaiki Ueno2022-11-301-11/+14
* Remove library path checking from FIPS integrity checkZoltan Fridrich2022-11-151-5/+0
* fips: disable GNUTLS_CIPHER_3DES_CBC self-testAlexander Sosedkin2022-08-091-5/+0
* Add self-test code inside a FIPS contextRichard Costa2022-07-091-0/+19
* fips: make service indicator logging louderDaiki Ueno2022-06-291-32/+58
* fips: provide function to manually run FIPS self-testsDaiki Ueno2022-06-091-68/+71
* lib/fips.c: suppress -Wdiscarded-qualifiers warningDaiki Ueno2022-05-041-1/+1
* fips: simplify library integrity checkingDaiki Ueno2022-03-311-89/+52
* Consolidate FIPS .hmac filesZoltan Fridrich2022-03-301-90/+240
* fips: use GNUTLS_FIPS140_STRICT instead of magic number.Tobias Heider2022-03-091-1/+1
* fips: add functions to inspect thread-local FIPS operation stateDaiki Ueno2022-01-071-0/+182
* fips: run CMAC self-testsDaiki Ueno2020-10-081-0/+6
* fips: add self-tests for TLS-PRFDaiki Ueno2020-10-081-0/+7
* fips: add self-tests for PBKDF2Daiki Ueno2020-10-061-0/+7
* fips: add self-tests for HKDFDaiki Ueno2020-10-061-0/+7
* _gnutls_fips_mode_enabled: treat selftest failure as FIPS disabledtmp-fips-enabledDaiki Ueno2020-08-121-1/+10
* Merge branch 'tmp-fileio' into 'master'Daiki Ueno2020-05-301-1/+1
|\
| * lib: avoid file descriptor leak when application forksDaiki Ueno2020-05-301-1/+1
* | fips: make FIPS140-2 mode enablement logic simplerDaiki Ueno2020-05-201-3/+2
|/
* fips: check library soname during configuretmp-check-sonameDaiki Ueno2020-04-241-4/+6
* fips: run selftests over overridden AES-CBC algorithmtmp-aes-cbc-selftestDaiki Ueno2019-06-121-0/+6
* crypto: add private API to retrieve internal IVDaiki Ueno2019-05-031-0/+6
* Vendor in XTS functionality from NettleSimo Sorce2019-03-291-0/+6
* fips140: Perform SHA-3 self testsAnderson Toshiyuki Sasaki2019-03-261-0/+25
* Use https:// for www.gnu.org and www.example.comTim Rühsen2019-03-131-1/+1
* fips140: Ignore newlines read at the end of HMAC fileAnderson Toshiyuki Sasaki2019-03-041-0/+7
* fips140: Fix the names of files used in integrity checksAnderson Toshiyuki Sasaki2019-03-041-3/+3
* fips140: added function for applications to switch the FIPS140-2 modeNikos Mavrogiannopoulos2018-02-191-25/+114
* Added _gnutls_lib_force_operationalNikos Mavrogiannopoulos2017-03-061-0/+5
* doc: explicitly state that rng self_test mustn't require rng initializationNikos Mavrogiannopoulos2016-11-041-1/+2
* several spacing fixes to keep syntax-check happyNikos Mavrogiannopoulos2016-09-111-1/+1
* gnutls_fips140_mode_enabled: changed return type to unsignedNikos Mavrogiannopoulos2016-08-051-1/+1
* env: use secure_getenv when reading environment variablesNikos Mavrogiannopoulos2016-05-271-2/+2
* fips140: set the key via a configure argumentNikos Mavrogiannopoulos2015-09-221-3/+1
* Removed the 'gnutls_' prefix from files to simplify file namingNikos Mavrogiannopoulos2015-08-231-2/+2
* fips140: corrected hex decodingNikos Mavrogiannopoulos2015-07-311-2/+2
* fips: use gnutls_hex_decode for MAC decodingNikos Mavrogiannopoulos2015-07-211-2/+3
* fips140: better debug messages when verifying MACNikos Mavrogiannopoulos2015-06-081-2/+1
* fips140: when GNUTLS_SKIP_FIPS_INTEGRITY_CHECKS is setup do not perform integ...Nikos Mavrogiannopoulos2015-06-041-19/+27
* use a FIPS key that agree's with fedora's fipshmacNikos Mavrogiannopoulos2015-01-151-1/+1
* properly reset the zombie mode in FIPS modeNikos Mavrogiannopoulos2014-11-161-3/+9
* the FIPS140-2 testing mode is disabled after self-checksNikos Mavrogiannopoulos2014-11-131-13/+17
* fips140: check the integrity of GMPNikos Mavrogiannopoulos2014-09-031-5/+27
* perform the FIPS140-2 self tests in two roundsNikos Mavrogiannopoulos2014-09-021-2/+29
* The environment variable GNUTLS_FORCE_FIPS_MODE can be used to force the FIPS...Nikos Mavrogiannopoulos2014-08-141-1/+13
* fips140-2: do not check the libtasn1's integrityNikos Mavrogiannopoulos2014-07-221-7/+0
* FIPS140-2 tests: no need for MD5 checkNikos Mavrogiannopoulos2014-07-081-6/+0