summaryrefslogtreecommitdiff
path: root/src/crypto
Commit message (Expand)AuthorAgeFilesLines
* [rng] Allow for entropy sources that fail during startup testsMichael Brown2023-02-201-122/+227
* [rng] Allow entropy source to be selected at runtimeMichael Brown2023-02-172-229/+94
* [tls] Add GCM cipher suitesMichael Brown2022-11-104-8/+128
* [crypto] Support in-place decryption for GCM ciphersMichael Brown2022-11-101-34/+32
* [crypto] Ensure relevant GCM cipher state is cleared by cipher_setiv()Michael Brown2022-11-091-7/+13
* [tls] Allow handshake digest algorithm to be specified by cipher suiteMichael Brown2022-11-092-0/+9
* [tls] Add MAC length as a cipher suite parameterMichael Brown2022-11-082-0/+8
* [crypto] Add concept of cipher alignment sizeMichael Brown2022-11-073-0/+3
* [tls] Formalise notions of fixed and record initialisation vectorsMichael Brown2022-11-072-0/+16
* [crypto] Add block cipher Galois/Counter mode of operationMichael Brown2022-10-252-0/+536
* [crypto] Add concept of authentication tag to cipher algorithmsMichael Brown2022-10-253-0/+10
* [crypto] Allow initialisation vector length to vary from cipher blocksizeMichael Brown2022-10-251-1/+2
* [crypto] Expose null crypto algorithm methods for reuseMichael Brown2022-10-253-51/+31
* [tls] Add support for DHE variants of the existing cipher suitesMichael Brown2022-10-112-4/+52
* [tls] Add key exchange mechanism to definition of cipher suiteMichael Brown2022-10-112-0/+4
* [crypto] Add Ephemeral Diffie-Hellman key exchange algorithmMichael Brown2022-10-111-0/+133
* [crypto] Simplify internal HMAC APIMichael Brown2022-10-104-93/+54
* [x509] Use case-insensitive comparison for certificate namesMichael Brown2021-05-181-1/+2
* [x509] Clarify debug message for an untrusted X.509 issuerJosh McSavaney2020-12-281-1/+1
* [crypto] Allow private key to be specified as a TLS connection parameterMichael Brown2020-12-152-11/+28
* [x509] Make root of trust a reference-counted structureMichael Brown2020-12-092-11/+46
* [x509] Record root of trust used when validating a certificateMichael Brown2020-12-082-7/+22
* [ocsp] Remove dummy OCSP certificate rootMichael Brown2020-12-081-14/+2
* [asn1] Rename ASN1_OID_CURSOR to ASN1_CURSORMichael Brown2020-12-0819-27/+27
* [deflate] Fix typo in comment describing length codesDaniel Johnson2020-07-211-1/+1
* [ocsp] Accept SHA1 certID responses even if SHA1 is not enabledMichael Brown2020-06-251-15/+25
* [crypto] Allow algorithms to be included without being OID-identifiableMichael Brown2020-06-1620-110/+371
* [crypto] Profile the various stages of modular multiplicationMichael Brown2019-08-171-0/+29
* [crypto] Drag in configured digestInfo prefixes for any use of RSAMichael Brown2019-08-171-0/+6
* [ocsp] Accept response certID with missing hashAlgorithm parametersMichael Brown2019-03-101-12/+30
* [init] Show startup and shutdown function names in debug messagesMichael Brown2019-01-252-0/+2
* [rng] Use fixed-point calculations for min-entropy quantitiesMichael Brown2018-03-201-2/+3
* [ocsp] Centralise test for whether or not an OCSP check is requiredMichael Brown2018-03-181-2/+2
* [ntlm] Add support for NTLM authentication mechanismMichael Brown2017-11-121-0/+334
* [crypto] Add MD4 message digest algorithmMichael Brown2017-11-121-0/+280
* [crypto] Eliminate repetitions in MD5 round constant tableMichael Brown2017-11-121-7/+10
* [crypto] Fix endianness typo in commentMichael Brown2017-11-111-1/+1
* [crypto] Expose asn1_grow()Michael Brown2017-06-201-1/+1
* [crypto] Expose RSA_CTX_SIZE constantMichael Brown2017-06-201-1/+1
* [crypto] Mark permanent certificates as permanentMichael Brown2016-08-311-0/+1
* [crypto] Add certstat() to display basic certificate informationMichael Brown2016-08-311-2/+2
* [crypto] Allow certificates to be marked as having been added explicitlyMichael Brown2016-08-311-4/+19
* [crypto] Expose certstore_del() to explicitly remove stored certificatesMichael Brown2016-08-311-4/+15
* [crypto] Generalise X.509 "valid" field to a "flags" fieldMichael Brown2016-08-252-5/+5
* [crypto] Add image_x509() to extract X.509 certificates from imageMichael Brown2016-08-251-0/+42
* [crypto] Enable both DER and PEM formats by defaultMichael Brown2016-07-291-0/+42
* [crypto] Allow for parsing of partial ASN.1 cursorsMichael Brown2016-07-281-6/+7
* [arm] Avoid instruction references to symbols defined via ".equ"Michael Brown2016-05-081-2/+8
* [crypto] Allow trusted certificates to be stored in non-volatile optionsMichael Brown2016-03-201-3/+7
* [build] Allow assembler section type character to vary by architectureMichael Brown2016-03-132-2/+2