Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 930381228b memory: Add helper function to conditionally copy data in constant time Tobias Brunner 2024-10-29 18:33:00 +01:00
• 3b7c49bc31 mgf1: Support of RSA PSS with SHA3 hash Andreas Steffen 2023-01-05 15:10:32 +01:00
• 1265d78cac ntru: Remove legacy NTRU key exchange method Andreas Steffen 2020-11-18 10:39:28 +01:00
• 8e3a373e18 newhope: Remove legacy Newhope key exchange method Andreas Steffen 2020-11-17 19:27:20 +01:00
• 4833f29b15 bliss: Remove legacy BLISS signatures Andreas Steffen 2020-11-16 20:22:21 +01:00
• ec982171d9 openssl: Add ML-KEM support with AWS-LC Gerardo Ravago 2024-10-04 10:26:16 -04:00
• d14bb3881b botan: Add support for ML-KEM Tobias Brunner 2024-10-08 11:51:42 +02:00
• 974f9c37df Use Botan 3.6.1 for tests Tobias Brunner 2024-10-23 16:48:36 +02:00
• ebdaab6861 botan: Add support for AES in ECB mode to support DRBG_CTR_AES Tobias Brunner 2024-10-23 17:14:56 +02:00
• 0a3889086d botan: Fix include issue that prevented parsing public keys Tobias Brunner 2024-10-23 16:45:32 +02:00
• 1bb6f1dd73 wolfssl: Add support for ML-KEM Tobias Brunner 2024-10-04 11:24:49 +02:00
• 307dea6b5f Use wolfSSL 5.7.4 for tests Tobias Brunner 2024-10-28 10:34:08 +01:00
• cc53a04c7a test-vectors: Add ML-KEM test vectors Tobias Brunner 2024-10-03 13:50:21 +02:00
• ee19c3e7dd scripts: Add script formatting NIST KEM KAT records into ke_test vectors Andreas Steffen 2019-11-05 12:16:49 +01:00
• f58fdcddad dh-speed: Use method call order compatible with KEMs Tobias Brunner 2024-10-08 16:36:47 +02:00
• 09636199e6 key-exchange: Document how the interface is used with KEMs Tobias Brunner 2024-10-07 11:56:40 +02:00
• 40676786aa key-exchange: Joint ke_test_vector format for DH and KEM Andreas Steffen 2019-11-04 22:22:47 +01:00
• 47de9ef9a1 key-exchange: Add identifiers for ML-KEM algorithms Tobias Brunner 2024-10-03 09:31:40 +02:00
• 8ea6997482 swanctl: Document soft lifetime defaults if hard lifetimes are configured Tobias Brunner 2024-10-30 12:07:04 +01:00
• d4a0dd9f93 mem-pool: Fix issue with make-before-break reauth and multiple IKE_SAs Tobias Brunner 2024-09-30 12:26:05 +02:00
• f09b8203d3 file-logger: Take options as a struct and combine ms/us suffix options Tobias Brunner 2024-10-09 17:53:39 +02:00
• 768fec23bc file-logger: Add support to log timestamp in microseconds Tobias Brunner 2024-10-09 17:40:55 +02:00
• a2fba6db4a file-logger: Add option to log messages as JSON objects Tobias Brunner 2024-04-25 17:09:48 +02:00
• c87aae300a socket-default: Always open IPv4 sockets before IPv6 sockets Tobias Brunner 2024-10-18 09:14:27 +02:00
• 3d0f6958a9 openssl: Add support for new API to squeeze data from XOFs Tobias Brunner 2023-11-23 15:36:45 +01:00
• bee06c9ec5 leak-detective: Whitelist OpenSSL 3.2 function Tobias Brunner 2024-03-20 14:52:16 +01:00
• 0be6fd7735 certificate_printer: Fix spacing for additional CRL/OCSP URIs Andreas Steffen 2024-10-17 10:46:27 +02:00
• 5019e3ece0 nm: Update build files and switch from intltool to gettext Tobias Brunner 2024-10-15 16:59:10 +02:00
• faf40b8d74 Revert "conf: Add support for escaping dots in section/option names" Tobias Brunner 2024-10-15 12:44:02 +02:00
• 60336ceecb wolfssl: Don't undef PARSE_ERROR as headers included later might refer to it Tobias Brunner 2024-10-04 11:23:28 +02:00
• 8e020bc9e3 vici-config: Same order for default ESP proposals if unset or set to "default" Tobias Brunner 2024-10-02 10:33:05 +02:00
• 089977b69d generator: Make debug log for payload substructure rules more clear Tobias Brunner 2024-10-02 10:06:41 +02:00
• 2ec6d50a3c parser: Make debug log for payload substructure rules more clear Tobias Brunner 2024-10-02 09:57:14 +02:00
• be0af46d89 Merge branch 'tun-device-ipv6' Tobias Brunner 2024-09-25 16:12:49 +02:00
• bf165afb78 kernel-pfroute: Route via interface if we don't have a next hop Tobias Brunner 2021-09-28 10:10:04 +02:00
• fccc76449d tun-device: Fix handling of IPv6 addresses Tobias Brunner 2021-08-27 18:18:09 +02:00
• 74208e2cc3 Merge branch 'tkm-multi-ke' Tobias Brunner 2024-09-19 15:20:31 +02:00
• 2b1885b892 testing: Add TKM scenarios with multiple key exchanges Tobias Brunner 2021-11-17 14:43:38 +01:00
• 5a8f0767b8 charon-tkm: Add tests with multiple key exchanges Tobias Brunner 2021-11-24 15:53:19 +01:00
• 7975a0cfa4 charon-tkm: Adapt to interface changes to support multiple key exchanges Stefan BerghoferandTobias Brunner 2021-07-29 14:25:15 +00:00
• 301abbeaff Merge branch 'vici-reload-tasks' Tobias Brunner 2024-09-19 10:11:49 +02:00
• a4a3dcf6c2 vici-config: Consider queued tasks when terminating IKE/CHILD_SAs Tobias Brunner 2024-09-03 16:15:02 +02:00
• 961763b84d quick-mode: Allow "aborting" task if it's currently active Tobias Brunner 2024-09-03 16:09:54 +02:00
• e81cf3bd36 child-create: Allow "aborting" task if it's currently active Tobias Brunner 2024-09-03 16:05:44 +02:00
• cf3c90dba6 quick-mode: Add getter for child config Tobias Brunner 2024-09-03 14:51:28 +02:00
• 04c9316db5 child-create: Add getter for child config Tobias Brunner 2024-09-03 14:51:46 +02:00
• 9d4c7bebfc checksum: Avoid compiler warning/error when building monolithic Tobias Brunner 2024-09-06 10:16:10 +02:00
• decccd4f63 github: Update AWS-LC to 1.35.0 for tests Tobias Brunner 2024-09-18 08:49:52 +02:00
• cf7fb47788 array: Don't use realloc() with zero size in array_compress() Thomas Egerer 2024-09-06 13:29:40 +02:00
• 957aae8f64 cert-enroll: Fixed typo Andreas Steffen 2024-09-07 17:13:00 +02:00
• 55a660d9f7 github: Use more verbose output for apt-get calls Tobias Brunner 2024-09-05 10:46:39 +02:00
• 6928709886 ike-cfg: Only consider port information if the IP matches Tobias Brunner 2024-09-04 15:08:47 +02:00
• 12d2b6e2b4 key-exchange: Pass prefix array directly, not a pointer to it Tobias Brunner 2024-08-08 11:19:16 +02:00
• 8e2fde6230 child-create: Remove redundant variable assignment Tobias Brunner 2024-08-08 11:18:24 +02:00
• 3a850ae191 Merge branch 'multi-ke' Tobias Brunner 2024-08-07 16:20:42 +02:00
• f3c7e5227c testing: Add ikev2/rw-cert-multi-ke scenario Tobias Brunner 2024-06-06 17:48:38 +02:00
• ddb9b274c2 unit-tests: Ensure listeners can track SAs via ike/child_updown/rekey() Tobias Brunner 2022-09-09 18:34:29 +02:00
• d2b2e1b3fa ikev2: Make CHILD_SAs properly trackable during rekey collisions Tobias Brunner 2022-08-22 15:43:16 +02:00
• 7ad610a140 ike-init: Indicate support for IKE_INTERMEDIATE Tobias Brunner 2019-11-05 16:42:58 +01:00
• 012d99ecf4 proposal: Prevent selection of duplicate key exchange methods Tobias Brunner 2021-07-16 13:52:19 +02:00
• 1d5e921911 proposal: Add helper to check if additional key exchanges are contained Tobias Brunner 2019-11-05 17:03:42 +01:00
• 882ff93bfd proposal: Accept NONE for additional key exchanges also for IKE proposals Tobias Brunner 2020-10-22 13:13:00 +02:00
• 33e421320a unit-tests: Add tests for CHILD_SA rekeying with multiple key exchanges Tobias Brunner 2020-06-29 14:13:53 +02:00
• 37eeafa37f unit-tests: Add tests for CHILD_SA creation with multiple key exchanges Tobias Brunner 2020-06-26 14:12:47 +02:00
• 329a7b331d unit-tests: Add tests for IKE_SA rekeying with multiple key exchanges Tobias Brunner 2019-11-04 16:17:30 +01:00
• 37c56affa1 unit-tests: Support multiple proposals in exchange tests Tobias Brunner 2020-06-17 18:39:44 +02:00
• d4fb07911f vici: Increase maximum proposal length Andreas Steffen 2021-07-06 12:11:51 +02:00
• 355f917532 vici: List additional key exchanges Andreas SteffenandTobias Brunner 2019-11-19 20:44:39 +01:00
• c5a6938b9e proposal: Add prefix for additional key exchanges when logging proposals Tobias Brunner 2020-10-22 14:15:31 +02:00
• e05d86b27a key-exchange: Add dynamic parser for additional key exchange methods Tobias Brunner 2019-11-04 17:27:20 +01:00
• 95275d2fe5 child-rekey: Support CHILD_SA rekeying with multiple key exchanges Tobias Brunner 2020-06-29 14:12:05 +02:00
• c200bd1668 unit-tests: Fix CHILD_SA rekey tests after INVALID_KE_PAYLOAD handling changed Tobias Brunner 2018-07-20 14:12:48 +02:00
• d7760416d6 child-create: Add support for multiple key exchanges Tobias Brunner 2020-06-25 10:26:38 +02:00
• ca3e6d2d14 ike-rekey: Support IKE_SA rekeying with multiple key exchanges Tobias Brunner 2020-04-06 17:41:15 +02:00
• 0d49ddec2e ike-init: Add support for multiple key exchanges Tobias Brunner 2019-10-31 17:16:44 +01:00
• eff0c43a17 bus: Support multiple key exchanges in ike/child_keys() events Tobias Brunner 2020-04-09 11:53:45 +02:00
• c14e4ab2a8 keymat_v2: Support key derivation with multiple key exchanges Tobias Brunner 2020-04-09 11:37:52 +02:00
• c36eaf42da key-exchange: Add helper to concatenate shared secrets of several key exchanges Tobias Brunner 2020-04-09 11:36:30 +02:00
• ec0ec55070 keymat_v2: Proper cleanup if derive_ike_keys() is called multiple times Tobias Brunner 2018-06-28 15:33:35 +02:00
• f6b2e6a21f ike-auth: Calculate and collect IntAuth for IKE_INTERMEDIATE exchanges Tobias Brunner 2019-08-20 17:07:55 +02:00
• 1212780b32 pubkey-authenticator: Handle IntAuth data Tobias Brunner 2019-08-20 16:38:01 +02:00
• c4dac17d8c psk-authenticator: Handle IntAuth data Tobias Brunner 2019-08-20 16:36:13 +02:00
• 5c69262ce6 eap-authenticator: Handle IntAuth data Tobias Brunner 2019-08-20 16:32:17 +02:00
• e5828d26ea keymat_v2: Include optional IntAuth in signed octets Tobias Brunner 2019-08-20 16:18:05 +02:00
• 91f09b8d25 authenticator: Add optional method to set IntAuth data Tobias Brunner 2019-08-20 16:13:11 +02:00
• 515b9303de message: Store original encrypted payload when generating fragments Tobias Brunner 2021-07-19 17:12:09 +02:00
• b9c69f9080 message: Add method to generate data to authenticate IKE_INTERMEDIATE exchanges Tobias Brunner 2019-08-20 14:57:30 +02:00
• 5c439bb8a3 generator: Make pointer to length field optional Tobias Brunner 2019-08-20 14:53:16 +02:00
• a24993213e keymat_v2: Add method to calculate IntAuth for IKE_INTERMEDIATE exchanges Tobias Brunner 2019-07-02 15:01:26 +02:00
• b8358936aa message: Add rules for IKE_FOLLOWUP_KE exchanges Tobias Brunner 2020-04-03 15:10:40 +02:00
• 414db6cab1 ike-header: Add IKE_FOLLOWUP_KE exchange type Tobias Brunner 2020-04-03 15:01:17 +02:00
• 041358976b notify-payload: Add notify types for multiple key exchanges Tobias Brunner 2019-10-25 14:27:47 +02:00
• aedf73f7cf ikev2: Reject IKE_INTERMEDIATE requests after IKE_AUTH Tobias Brunner 2022-02-08 14:23:37 +01:00
• 25f2cdfc56 message: Add rules for IKE_INTERMEDIATE exchanges Tobias Brunner 2019-10-25 14:40:35 +02:00
• a45d454e94 ike-header: Add IKE_INTERMEDIATE exchange type Tobias Brunner 2019-10-25 14:39:54 +02:00
• cc9ab450d6 notify-payload: Add notify type for IKE_INTERMEDIATE exchange Tobias Brunner 2019-12-18 18:42:59 +01:00
• 3e0495745c proposal-substructure: Encode additional key exchange methods Tobias Brunner 2019-10-25 14:55:05 +02:00
• 9cc5f4a511 proposal: Make all key exchange transforms optional in ESP/AH proposals Tobias Brunner 2019-11-05 10:22:36 +01:00
• fb6b8c833b proposal: Skip all KE transforms if PROPOSAL_SKIP_KE given Tobias Brunner 2019-10-29 11:50:00 +01:00
• 2e059e0c27 transform: Add helper to check if transform type negotiates key exchange Tobias Brunner 2019-10-29 11:46:22 +01:00