Tobias Brunner
1b67166921
Unify format of HSR copyright statements
2018-05-23 16:32:53 +02:00
Tobias Brunner
791cfe82a1
ikev2: AES-CMAC-PRF-128 only uses the first 64 bits of each nonce
...
References #2377 .
2017-07-27 13:09:26 +02:00
Thomas Egerer
267c1f7083
keymat: Allow keymat to modify signature scheme(s)
...
Signed-off-by: Thomas Egerer <[email protected]
2017-02-08 10:32:17 +01:00
Tobias Brunner
4f373c7f20
ikev2: Send derived IKE_SA keys to bus
2016-10-04 10:01:50 +02:00
Andreas Steffen
b12c53ce77
Use standard unsigned integer types
2016-03-24 18:52:48 +01:00
Tobias Brunner
0af13d2849
ikev2: Fix size of key material for CAMELLIA-CTR
...
Like AES in CTR mode it includes a 4 byte nonce.
2015-10-30 11:04:42 +01:00
Martin Willi
6ffaa8626e
ikev2: Derive additional 4 byte CHILD_SA nonce keymat for ChaCha20-Poly1305
2015-06-29 17:32:13 +02:00
Martin Willi
bbcb76e260
ikev2: Use four byte salt for ChaCha20-Poly1305 AEAD
2015-06-29 17:32:13 +02:00
Martin Willi
3c81cb6fc3
aead: Create AEAD using traditional transforms with an explicit IV generator
...
Real AEADs directly provide a suitable IV generator, but traditional crypters
do not. For some (stream) ciphers, we should use sequential IVs, for which
we pass an appropriate generator to the AEAD wrapper.
2015-04-13 15:06:15 +02:00
Martin Willi
bace1d6479
diffie-hellman: Use bool instead of status_t as get_shared_secret() return value
...
While such a change is not unproblematic, keeping status_t makes the API
inconsistent once we introduce return values for the public value operations.
2015-03-23 17:54:02 +01:00
Tobias Brunner
f9e0caab6d
keymat: Use hash algorithm set
2015-03-04 13:54:11 +01:00
Tobias Brunner
828e71bd43
keymat: Add facility to store supported hash algorithms
2015-03-04 13:54:08 +01:00
Martin Willi
e5d73b0dfa
aead: Support custom AEAD salt sizes
...
The salt, or often called implicit nonce, varies between AEAD algorithms and
their use in protocols. For IKE and ESP, GCM uses 4 bytes, while CCM uses
3 bytes. With TLS, however, AEAD mode uses 4 bytes for both GCM and CCM.
Our GCM backends currently support 4 bytes and CCM 3 bytes only. This is fine
until we go for CCM mode support in TLS, which requires 4 byte nonces.
2014-03-31 15:56:12 +02:00
Tobias Brunner
72ffb20318
ikev2: Wipe (optional) shared secret during CHILD_SA key derivation
2014-01-23 09:54:18 +01:00
Tobias Brunner
7c7148b038
ike: Log SK_p consistently on level 4
2013-11-28 19:04:47 +01:00
Tobias Brunner
c49c3f3208
ikev2: Properly free DH secret in case of errors during IKE key derivation
...
Fixes #437 .
2013-11-06 10:24:19 +01:00
Martin Willi
4decfae6c2
Clean up error handling in keymat_v2_t
2012-07-16 14:55:07 +02:00
Martin Willi
ce73fc19db
Add a return value to crypter_t.set_key()
2012-07-16 14:53:38 +02:00
Martin Willi
f3ca96b2bf
Add a return value to prf_t.set_key()
2012-07-16 14:53:34 +02:00
Martin Willi
ecc080b393
Add a return value to prf_t.allocate_bytes()
2012-07-16 14:53:34 +02:00
Martin Willi
bb1e0c59e1
Add a return value to keymat_v2_t.get_auth_octets()
2012-07-16 14:53:34 +02:00
Martin Willi
2baae8e3ea
Add a return value to keymat_v2_t.get_psk_sig()
2012-07-16 14:53:34 +02:00
Martin Willi
edd54734c8
prf_plus_create() can return NULL on failure
2012-07-16 14:53:33 +02:00
Martin Willi
5d79e6c6b4
Add a return value to prf_plus_t.allocate_bytes()
2012-07-16 14:53:33 +02:00
Martin Willi
2d56575d52
Add a return value to signer_t.set_key()
2012-07-16 14:53:33 +02:00
Martin Willi
ad08730a4b
Add a return value to aead_t.set_key()
2012-07-16 14:53:32 +02:00
Adrian-Ken Rueegsegger
5338fe5e79
Add create_nonce_gen function to keymat interface
...
This function returns a nonce generator object.
2012-05-18 08:15:41 +02:00
Martin Willi
3bacc1f429
Added a keymat_t version to cast it safely
2012-03-20 17:31:30 +01:00
Martin Willi
15a682f4c2
Separated libcharon/sa directory with ikev1 and ikev2 subfolders
2012-03-20 17:31:26 +01:00
Tobias Brunner