Thomas Pornin
|
af9c79a071
|
Added seeder API. Also overhauled compile-time detection of features.
|
2017-08-28 16:37:30 +02:00 |
|
Thomas Pornin
|
5b980fb625
|
Switch C compiler to the generic 'cc' (to use the default compiler, not necessarily GCC -- this is for systems that offer both GCC and Clang, and use Clang as default).
|
2017-08-28 16:26:33 +02:00 |
|
Thomas Pornin
|
9dc6211237
|
Extra Makefile hack for compatibility with OpenBSD 'make'.
|
2017-08-28 16:25:20 +02:00 |
|
Thomas Pornin
|
a52cff8309
|
Some more extra casts to avoid alignment warnings with Clang and -Wcast-align on 32-bit systems with 64-bit alignment requirements (e.g. ARMv7).
|
2017-08-20 23:19:51 +02:00 |
|
Thomas Pornin
|
8e86598b33
|
Added intermediate casts to void* to prevent spurious warnings (with Clang and -Wcast-align).
|
2017-08-19 15:50:45 +02:00 |
|
Thomas Pornin
|
8cd3f8fecb
|
Some more renaming to avoid shadowing.
|
2017-08-14 19:55:34 +02:00 |
|
Thomas Pornin
|
79eec9d9e3
|
Some renaming to avoid spurious warnings on some old GCC versions.
|
2017-08-14 14:15:13 +02:00 |
|
Thomas Pornin
|
ceb6ded7b9
|
Fixed documentation (new include file for AEAD).
v0.5
|
2017-07-30 23:26:06 +02:00 |
|
Thomas Pornin
|
93681c2830
|
Added Twrch support.
|
2017-07-30 23:11:26 +02:00 |
|
Thomas Pornin
|
ce1c57909a
|
Fixed br_ssl_session_cache_lru_forget().
|
2017-07-30 14:11:45 -04:00 |
|
Thomas Pornin
|
0cc2e23690
|
Added name for new ChaCha20 implementation.
|
2017-07-26 16:03:32 +02:00 |
|
Thomas Pornin
|
24c6f09bf8
|
Added ChaCha20 implementation with SSE2 opcodes.
|
2017-07-26 15:58:01 +02:00 |
|
Thomas Pornin
|
5414fd525e
|
Added function to forget saved session parameters (for tests).
|
2017-07-26 15:52:38 +02:00 |
|
Thomas Pornin
|
127fb4a31d
|
Added general-purpose API for AEAD algorithms, and GCM implementation.
|
2017-07-17 17:22:46 +02:00 |
|
Thomas Pornin
|
4aac1cd5c6
|
Fixed behaviour in case of rejected renegotiation.
|
2017-07-15 06:14:55 +02:00 |
|
Thomas Pornin
|
57b2175020
|
Fixed selection of ECDHE_RSA suites for pre-1.2 TLS versions.
|
2017-07-07 00:49:58 +02:00 |
|
Thomas Pornin
|
ea95d8264c
|
Added implementation of keying material export (RFC 5705) (API for PRF implementations changed, to handle chunked seeds).
|
2017-07-04 20:43:39 +02:00 |
|
Thomas Pornin
|
2b738493bd
|
Fixed modular reduction bug in the special field for P-256 (in some rare cases, value would end up being negative, which would corrupt subsequent operations).
|
2017-06-24 00:31:09 +02:00 |
|
Thomas Pornin
|
d8641065c9
|
Fixed mishandling of tree structure in the cache for session parameters.
|
2017-06-24 00:29:41 +02:00 |
|
Thomas Pornin
|
3c6823cad7
|
Added an explicit initialisation to a stack buffer to prevent an (harmless) uninitialised read reported by valgrind.
|
2017-06-22 23:15:17 +02:00 |
|
Thomas Pornin
|
eaa0d38fa8
|
Fixed IV processing for CBC decryption with AES (x86ni implementation) when data length is not multiple of 64 bytes (the bug was breaking TLS 1.0 AES/CBC on recent x86 systems).
|
2017-06-22 21:13:15 +02:00 |
|
Thomas Pornin
|
7f343eedfc
|
Added encoded OID for hash functions (for use with PKCS#1 v1.5 signatures) into the public API.
|
2017-06-21 15:19:32 +02:00 |
|
Thomas Pornin
|
81437e1175
|
Fixed proper handling of clients with no "secure renegotiation" support.
|
2017-06-18 23:53:17 +02:00 |
|
Thomas Pornin
|
968da0f646
|
Fixed handling of incoming application data after sending a close_notify (data shall be discarded silently, not trigger an error). Also fixed a couple of bugs in the command-line test tool.
|
2017-06-15 16:57:37 +02:00 |
|
Thomas Pornin
|
2f7a003698
|
Added minimal support of Certificate Policies extension (ability to ignore its contents even if marked critical, in situations where it's safe to do that).
|
2017-06-11 03:49:02 +02:00 |
|
Thomas Pornin
|
52cc1a1a18
|
Small fix on sample server code (displaying of IPv6 addresses).
|
2017-06-08 00:51:55 +02:00 |
|
Thomas Pornin
|
d021b7eb7f
|
Workaround for compiler bug (GCC 4.8 and 4.9 when targetting 32-bit x86).
|
2017-04-17 13:36:06 +00:00 |
|
Thomas Pornin
|
ad6a51bde3
|
When using Clang, use it also for linking (compatibility with core FreeBSD systems).
|
2017-04-14 22:32:29 +02:00 |
|
Thomas Pornin
|
042986b989
|
Made headers compatible with C++.
|
2017-04-06 01:03:54 +02:00 |
|
Thomas Pornin
|
ee15f235c9
|
Documentation fixes.
v0.4
|
2017-04-03 21:38:47 +02:00 |
|
Thomas Pornin
|
927ecfc68d
|
Small patch to allow compilation on old systems that predate the IPV6_V6ONLY option (Debian 2.2 "potato").
|
2017-04-01 20:17:09 +02:00 |
|
Thomas Pornin
|
c1d1306e27
|
Small improvement to tolerate PEM files missing the terminating newline in the brssl command-line tool.
|
2017-03-19 20:46:16 +01:00 |
|
Thomas Pornin
|
5281cd0f58
|
Fixed typo in C preprocessor expression.
|
2017-03-19 20:08:29 +01:00 |
|
Thomas Pornin
|
8b2fe3add6
|
New "i62" code for big integers with 64x64->128 opcodes; also improved "i31" modular exponentiation.
|
2017-03-19 14:55:11 -04:00 |
|
Thomas Pornin
|
90bc9406c3
|
Optimised code for encoding/decoding integers when the underlying architecture has the right endianness and allows unaligned accesses.
|
2017-03-18 18:07:36 +01:00 |
|
Thomas Pornin
|
5db2d48b12
|
Added "ctmulq" implementation of Poly1305 (using 64->128 multiplications when available).
|
2017-03-18 16:46:00 +01:00 |
|
Thomas Pornin
|
2f88a67304
|
Fixed compilation for GCC 4.4 to 4.8 (AES-NI opcodes; intrinsics headers require target options to be set).
|
2017-03-09 20:13:23 +00:00 |
|
Thomas Pornin
|
98432a0a30
|
Improved GHASH pclmul implementation (parallel processing of four blocks, +70% speed).
|
2017-02-15 21:49:28 +01:00 |
|
Thomas Pornin
|
db8f1b6645
|
New AES and GHASH implementations using POWER8 crypto opcodes.
|
2017-02-15 14:08:37 +00:00 |
|
Thomas Pornin
|
f0c0046601
|
Cosmetic fixes in comments.
|
2017-01-30 00:32:21 +01:00 |
|
Thomas Pornin
|
5f045c7599
|
Added AES+GHASH implementation using AES-NI opcodes; also ARM-Thumb assembly for faster Montgomery multiplication on Cortex-M0+. Added selection functions for "default" implementations.
|
2017-01-29 21:46:33 +01:00 |
|
Thomas Pornin
|
556e525d62
|
Improved modular exponentiation (automatic window optimisation if there is enough room).
|
2017-01-24 19:35:04 +01:00 |
|
Thomas Pornin
|
a7e6409c37
|
Slight speed improvement for Curve25519 (m15 implementation on Cortex-M0+).
|
2017-01-23 19:54:16 +01:00 |
|
Thomas Pornin
|
3f00688b9d
|
New Makefile structure; added compatibility with Windows + Visual C + nmake.
|
2017-01-22 20:00:29 +01:00 |
|
Thomas Pornin
|
2f454aad57
|
Some cleanups (removed unused files, split i15 code into per-function files).
|
2017-01-16 20:19:11 +01:00 |
|
Thomas Pornin
|
bd3036844b
|
Added optimised implementation of P-256 that uses 32->64 multiplications (MUL31).
|
2017-01-16 18:04:40 +01:00 |
|
Thomas Pornin
|
89ea3b1876
|
Two new Curve25519 implementations (generic "i31" code, and optimised code with MUL31).
|
2017-01-15 23:16:18 +01:00 |
|
Thomas Pornin
|
3655193439
|
Activated Curve25519 support for ECDHE cipher suites.
|
2017-01-15 20:40:24 +01:00 |
|
Thomas Pornin
|
693d2a0085
|
New implementation of Curve25519 (using multiplications of words of 15 bits or so, should be much faster on Cortex M0).
|
2017-01-15 16:49:58 +01:00 |
|
Thomas Pornin
|
2f9c953af4
|
New basic implementation of Curve25519 (generic i15 code, experimental).
|
2017-01-15 03:32:13 +01:00 |
|