summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* hmac-sha384 and sha256 ciphersuites were removed from defaultsAnderson Toshiyuki Sasaki2018-06-211-8/+0
* cbc_mac_verify: require minimum padding under SSL3.0Anderson Toshiyuki Sasaki2018-06-211-1/+6
* dummy_wait: always hash the same amount of blocks that would have been on min...Anderson Toshiyuki Sasaki2018-06-211-30/+33
* dummy_wait: correctly account the length field in SHA384 HMACAnderson Toshiyuki Sasaki2018-06-212-8/+11
* retrieve_pin: refuse to retrieve PIN from URI more than one timeNikos Mavrogiannopoulos2018-04-251-0/+10
* cryptodev: added missing macro [ci skip]Nikos Mavrogiannopoulos2018-03-131-0/+4
* cryptodev: fix prototype of cryptodev_mac_fast [ci skip]Nikos Mavrogiannopoulos2018-03-131-0/+4
* accelerated: make explicit key size check to all accelerated ciphersNikos Mavrogiannopoulos2018-02-0911-6/+24
* accelerated: check keysize in SSSE3 cipher setkeyVitezslav Cizek2018-02-091-0/+3
* nettle: use the nettle_get_secp API when availableNikos Mavrogiannopoulos2018-02-071-5/+15
* accelerated: fix use of SSSE3 vpaes_encrypttmp-gnutls_3_3_x-aesni-fixNikos Mavrogiannopoulos2018-02-061-1/+7
* accelerated: fix use of aesni_ecb_encrypt()Nikos Mavrogiannopoulos2018-02-051-1/+1
* priority_options.gperf: modified for gperf 3.1tmp-3-3-x-gperf-updateNikos Mavrogiannopoulos2018-02-052-2/+1
* x509: use libtasn1's strict DER decoding rules in privkey, certificate reques...Nikos Mavrogiannopoulos2018-02-043-12/+12
* x509: use libtasn1's strict DER decoding rules in certificates and OCSPNikos Mavrogiannopoulos2018-02-048-31/+42
* libtasn1: updated to latest libtasn1 master branchtmp-gnutls_3_3_x-libtasn1-updateNikos Mavrogiannopoulos2018-01-095-48/+105
* load_dir_certs: use readdir() in all platformsgnutls_3_3_x_backportsNikos Mavrogiannopoulos2017-12-101-9/+1
* handshake: check SCSVs prior to resuming a sessionNikos Mavrogiannopoulos2017-12-103-4/+16
* parse_handshake_header: allow 1-byte sized fragmentsNikos Mavrogiannopoulos2017-09-201-2/+3
* _gnutls_recv_server_certificate_status: use the same type in subtracted valuesNikos Mavrogiannopoulos2017-08-151-2/+2
* _gnutls_proc_srp_client_kx: use same type in subtracted valuesNikos Mavrogiannopoulos2017-08-151-1/+1
* parse_pem_cert_mem: fixed issue resulting to accessing past the input dataNikos Mavrogiannopoulos2017-07-171-1/+3
* pkcs11: add interface for C_GenerateKeyJan Vcelak2017-06-232-0/+19
* pkcs11: implement correct DSA key pair generatingJan Vcelak2017-06-231-4/+59
* urandom: use st_ino and st_rdev to determine device uniquenessNikos Mavrogiannopoulos2017-06-191-4/+7
* pkcs11: simplified pkcs11_login()Nikos Mavrogiannopoulos2017-06-193-24/+29
* pkcs11: the GNUTLS_PKCS11_OBJ_FLAG_LOGIN will force a loginNikos Mavrogiannopoulos2017-06-193-25/+38
* pkcs11: login prior to the operation not the initializationNikos Mavrogiannopoulos2017-06-191-24/+24
* Handle specially safenet HSMs which request explicit authenticationNikos Mavrogiannopoulos2017-06-172-6/+19
* ocsp: added sanity check in returned lengthNikos Mavrogiannopoulos2017-06-151-1/+4
* pkcs11: do not set leading zeros when writing integersNikos Mavrogiannopoulos2017-06-121-2/+30
* gnutls_ocsp_status_request_enable_client: documented requirements for parametersNikos Mavrogiannopoulos2017-05-241-3/+9
* ext/status_request: Removed the parsing of responder IDs from client extensionNikos Mavrogiannopoulos2017-05-241-51/+16
* ext/status_request: ensure response IDs are properly deinitializedNikos Mavrogiannopoulos2017-05-241-6/+11
* rsa-psk: Use the correct username datumNicolas Dufresne2017-05-141-2/+2
* Added explicit check for the bounds of the generated 'd'.Nikos Mavrogiannopoulos2017-04-251-0/+6
* fips140-2: enhanced check of generated parametersNikos Mavrogiannopoulos2017-04-251-4/+12
* handshake: reset cert request state on handshake initNikos Mavrogiannopoulos2017-03-215-15/+12
* Enforce the max packet length for OpenPGP subpackets as wellAlex Gaynor2017-03-051-2/+7
* opencdk: do not parse any secret keys in packet when reading a certificateNikos Mavrogiannopoulos2017-03-018-17/+28
* Use p11_kit_uri_get_pin_value() if available in p11-kitNikos Mavrogiannopoulos2017-02-221-0/+20
* nettle/pk: added error checking in _rsa_params_to_pubkeyNikos Mavrogiannopoulos2017-02-221-1/+3
* nettle/pk: corrected memcpy of Q in DSA paramsNikos Mavrogiannopoulos2017-02-211-2/+2
* opencdk/read-packet.c: corrected typo in type castNikos Mavrogiannopoulos2017-02-211-1/+1
* cdk_pkt_read: enforce packet limitsNikos Mavrogiannopoulos2017-02-211-0/+9
* gnutls_pkcs11_obj_list_import_url2: Always return an initialized pointerNikos Mavrogiannopoulos2017-02-031-0/+1
* opencdk: improved error code checking in the stream reading functionsNikos Mavrogiannopoulos2017-01-181-2/+3
* opencdk: added error checking in the stream reading functionsNikos Mavrogiannopoulos2017-01-091-5/+35
* opencdk: cdk_pk_get_keyid: fix stack overflowNikos Mavrogiannopoulos2017-01-091-1/+7
* opencdk: read_attribute: added more precise checks when reading streamNikos Mavrogiannopoulos2017-01-091-11/+29
View Lorry Controller Status