Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• d511a71daa Include stdint.h for UINTxx_MAX defines Tobias Brunner 2012-07-27 11:36:59 +02:00
• df0f88a4b3 measure all kernel modules and optimize firefox and thunderbird measurements Andreas Steffen 2012-07-27 11:47:09 +02:00
• 9e99d2c378 with --relative --file do not insert absolute filenames into database Andreas Steffen 2012-07-27 11:45:56 +02:00
• 777bcdc0d5 Don't include acquiring packet traffic selectors in IKEv1 Martin Willi 2012-07-26 15:45:49 +02:00
• 8b560a4565 Implement late peer config switching after XAuth authentication Martin Willi 2012-07-26 15:02:37 +02:00
• 40ca05cff8 Check if XAuth round complies to configured authentication round Martin Willi 2012-07-26 12:40:27 +02:00
• 6a8786b55f Show which group would be required when failing in constraint check Martin Willi 2012-07-26 12:39:53 +02:00
• 874f7c7e2c Don't add ANY identity constraint to auth config, as XAuth rounds don't use one Martin Willi 2012-07-26 12:38:34 +02:00
• 9191946a63 Merge auth config items added from XAuth backends to IKE_SA Martin Willi 2012-07-26 12:07:48 +02:00
• 46df61dff7 Add an ipsec.conf leftgroups2 parameter for the second authentication round Martin Willi 2012-07-26 11:49:46 +02:00
• 15f78beb0f IMA SHA1 file measurement is not needed any more Andreas Steffen 2012-07-23 22:19:20 +02:00
• 327dcf96db fixed typo Andreas Steffen 2012-07-23 22:17:53 +02:00
• 81419807f5 Release leaking child config after uninstalling shunt policy Martin Willi 2012-07-23 17:13:20 +02:00
• e6b01ce42d moved PA-TNC message logging to level 1 Andreas Steffen 2012-07-23 13:04:28 +02:00
• ab957aacce transport IMA file info via PTS Component Evidence Policy URI Andreas Steffen 2012-07-23 12:51:37 +02:00
• 838f683cde ipsec attest now deletes file hashes Andreas Steffen 2012-07-22 09:29:39 +02:00
• 2c9a833b7a buffer PA-TNC attributes until Generate Attestation Evidence attribute is received Andreas Steffen 2012-07-21 16:43:24 +02:00
• 6f46681a48 allow --rel as an abbreviation for --relative Andreas Steffen 2012-07-21 15:58:08 +02:00
• 4c02086241 moved all shadow PCR stuff to the pts_pcr class Andreas Steffen 2012-07-21 15:56:39 +02:00
• 3b7468b245 Support Unity split-include/exclude options in attr plugin Martin Willi 2012-07-20 16:14:29 +02:00
• 73514b3217 Don't print hexdumps on loglevel 1 if hash verification fails Martin Willi 2012-07-19 14:48:37 +02:00
• 5a6c18853e created a pts_pcr class for PCR computations Andreas Steffen 2012-07-20 14:57:28 +02:00
• cfa69fce13 renamed build_database.sh to build-database.sh Andreas Steffen 2012-07-20 14:04:16 +02:00
• f524725474 why the hell do firefox, thunderbird and acroread their own Linux libraries? Andreas Steffen 2012-07-19 18:27:08 +02:00
• eb1b380a1c Add a libstrongswan-dev debian package with development headers Martin Willi 2012-07-19 08:28:07 +02:00
• 328447acd5 Pass CC/CFLAGS to ./configure, not to make, adding -include config.h Martin Willi 2012-07-19 08:44:55 +02:00
• 5084c13f6d Upgraded our Debian package to 5.0 Martin Willi 2012-07-03 10:59:05 +02:00
• 0ffd766c0a added some multiply defined libraries Andreas Steffen 2012-07-19 13:49:20 +02:00
• 214097e804 queries with relative filenames might return multiple results Andreas Steffen 2012-07-19 13:48:32 +02:00
• 96e8ba0f78 updated build_database.sh Andreas Steffen 2012-07-18 22:00:58 +02:00
• 2f341c540d added index to files table Andreas Steffen 2012-07-18 22:00:35 +02:00
• 14e14d913b updated build_database.sh Andreas Steffen 2012-07-18 13:55:08 +02:00
• 09e3717525 Fix EAP-MSCHAPv2 master key derivation, broken with 87dd205b Martin Willi 2012-07-18 16:46:05 +02:00
• e7600ca696 Remove debugging leftovers Martin Willi 2012-07-18 15:35:40 +02:00
• 5d2698dd62 Add a SHA1 test vector forcing padding over block boundary Martin Willi 2012-07-18 12:28:16 +02:00
• 9c48a31975 builds an Ubuntu 12.04 LTS measurement database Andreas Steffen 2012-07-18 11:33:39 +02:00
• 4d4a09ab09 minor fixes in attest Andreas Steffen 2012-07-18 11:32:24 +02:00
• 8217c099ce Add a tool to burn hashers Martin Willi 2012-07-17 17:11:01 +02:00
• c63fb853e8 Use centralized hasher names in pki utility Martin Willi 2012-07-17 17:31:02 +02:00
• 6719889e0a Use centralized hasher names in coupling plugin Martin Willi 2012-07-17 17:30:47 +02:00
• 610f90a8b9 Use centralized hasher names in openssl plugin Martin Willi 2012-07-17 17:30:23 +02:00
• 4b96000833 Add short names for hasher algorithms Martin Willi 2012-07-17 15:35:02 +02:00
• 20ec024a94 various PTS fixes Andreas Steffen 2012-07-17 16:38:55 +02:00
• 68b1a559cc parcel IMA file measurements into batches Andreas Steffen 2012-07-17 13:44:02 +02:00
• 65cbe29cbc register _check_file_measurement() method Andreas Steffen 2012-07-17 13:42:58 +02:00
• 2df12b4c57 Fix tls_prf bug introduced with bc474883 Martin Willi 2012-07-17 11:32:13 +02:00
• 964de0abde check IMA file measurements against database reference Andreas Steffen 2012-07-17 11:16:11 +02:00
• 082b0d7249 Support void return values in OpenSSL 0.9.8 HMAC functions Martin Willi 2012-07-17 10:58:53 +02:00
• 931da8202b handled return values in tnc-pdp Andreas Steffen 2012-07-16 22:54:38 +02:00
• c8ff69402b fixed potential hasher problem in IMA template hash Andreas Steffen 2012-07-16 22:44:45 +02:00
• 915bceb4c7 fixed potential hasher problems Andreas Steffen 2012-07-16 22:39:34 +02:00
• e51c527e68 use a nonce for a PA-TNC message identifier Andreas Steffen 2012-07-16 18:08:49 +02:00
• 358dbe4835 ipsec attest supports ima template hashes Andreas Steffen 2012-07-16 17:14:27 +02:00
• ff9e46772f Handle PRF failures in eap-aka-3gpp2 Martin Willi 2012-07-10 15:11:25 +02:00
• a564e4ca77 Refactored error handling in keymat_v1_t Martin Willi 2012-07-10 14:51:17 +02:00
• 4decfae6c2 Clean up error handling in keymat_v2_t Martin Willi 2012-07-10 14:28:08 +02:00
• 511f0b18b9 Cleaned up memory management and return values for encryption payload Martin Willi 2012-07-10 14:24:46 +02:00
• 0d6183f0a9 Fix memory management in SIM/AKA crypto functions Martin Willi 2012-07-10 13:37:59 +02:00
• 44fc169579 Test reset() of hasher in crypto tester Martin Willi 2012-07-10 13:19:36 +02:00
• 67ea663d7c Refactored error handling in crypto tester Martin Willi 2012-07-10 09:49:38 +02:00
• 73264a81b8 Set a key before benching PRFs Martin Willi 2012-07-10 09:07:13 +02:00
• 3aca89c8e6 Resetting OpenSSL HMAC with NULL key reuses existing key Martin Willi 2012-07-10 09:06:15 +02:00
• 9138f49e6a Make sure HMAC_Init is called before HMAC_Update, fixes crash Martin Willi 2012-07-10 09:03:38 +02:00
• ae4411547a Check and forward syscall errors in AF_ALG Martin Willi 2012-07-09 17:55:52 +02:00
• e3b2e900e6 Add a return value to hasher_t.reset() Martin Willi 2012-07-09 17:26:14 +02:00
• 87dd205b61 Add a return value to hasher_t.allocate_hash() Martin Willi 2012-07-09 17:15:52 +02:00
• e185612dd8 Add a return value to keymat_v1_t.{get,update,confirm}_iv Martin Willi 2012-07-09 16:27:09 +02:00
• 8bd6a30af1 Add a return value to hasher_t.get_hash() Martin Willi 2012-07-09 15:33:41 +02:00
• ce73fc19db Add a return value to crypter_t.set_key() Martin Willi 2012-07-06 16:57:17 +02:00
• 3b96189a2a Add a return value to crypter_t.decrypt() Martin Willi 2012-07-06 16:11:15 +02:00
• e35abbe588 Add a return value to crypter_t.encrypt Martin Willi 2012-07-06 15:54:03 +02:00
• c3858662d2 Identation fixes, warn about unused nonce_gen return values Martin Willi 2012-07-06 14:45:17 +02:00
• 6ac8d861d9 Add a return value to mac_t.set_key() Martin Willi 2012-07-06 14:40:04 +02:00
• 27e1eabbb5 Add a return value to mac_t.get_bytes() Martin Willi 2012-07-06 14:34:11 +02:00
• 76a98ee2a1 Check rng return value when generating libfast session COOKIEs Martin Willi 2012-07-06 14:17:01 +02:00
• 71c41410fc Initialize conftest with the same plugins as charon Martin Willi 2012-07-06 14:05:49 +02:00
• a6733d8e85 Remove unused replay variable in conftests seq number reset hook Martin Willi 2012-07-06 14:05:14 +02:00
• 172fdf8bd1 Update conftest to use splitted listener/logger interfaces Martin Willi 2012-07-06 14:00:01 +02:00
• bb5eb15ccc Check rng return value when generating TLS session identifiers Martin Willi 2012-07-06 13:55:42 +02:00
• 6a3e4ed916 Check rng return value when generating SIM/AKA message IVs Martin Willi 2012-07-06 13:52:57 +02:00
• 3629740c7f Check rng return value when generating radius message authenticator Martin Willi 2012-07-06 13:52:30 +02:00
• 126eb2af59 Check rng return value when generating secrets and IVs in libtls Tobias Brunner 2012-06-25 16:04:40 +02:00
• e59f983160 Check rng return value when generating identity in eap-simaka-reauth plugin Tobias Brunner 2012-07-06 10:18:00 +02:00
• e37f9ac2c9 Check rng return value when generating pseudonym in eap-simaka-pseudonym plugin Tobias Brunner 2012-07-06 10:11:21 +02:00
• 8beeb8e116 Check rng return value when generating nonces in eap-aka plugin Tobias Brunner 2012-07-06 10:09:25 +02:00
• 18ce1bb721 Check rng return value when generating nonces in eap-sim plugin Tobias Brunner 2012-07-06 10:02:41 +02:00
• cfd824ccde Check rng return value when generating nonces in libpts Tobias Brunner 2012-06-25 16:08:11 +02:00
• 10b6ca5fb2 Check rng return value when generating RAND in eap-aka-3gpp2 plugin Tobias Brunner 2012-06-25 15:58:50 +02:00
• 162f489a27 Check rng return value when generating challenges in eap-md5 and mschapv2 plugins Tobias Brunner 2012-06-25 15:57:13 +02:00
• 7ae2671036 Check rng return value when generating Transaction IDs in DHCP plugin Tobias Brunner 2012-06-25 15:56:31 +02:00
• 0159a54047 Check rng return value when generating SPIs in kernel-klips plugin Tobias Brunner 2012-06-25 16:02:13 +02:00
• 99dc3d2c15 Check rng return value when seeding OpenSSL RNG Tobias Brunner 2012-06-25 16:07:12 +02:00
• 1f5291b1ce Check rng return value when generating DH secret in gcrypt plugin Tobias Brunner 2012-06-25 16:10:46 +02:00
• 5025135f70 Check rng return value when generating DH secrets and primes in gmp plugin Tobias Brunner 2012-06-25 16:09:00 +02:00
• e93bb353d5 Check rng return value when generating serial numbers in pki utility Tobias Brunner 2012-06-25 16:03:53 +02:00
• 5668a99a12 Wrapper functions added to generate non-zero random bytes Tobias Brunner 2012-06-25 14:34:14 +02:00
• 392a9b1109 Check rng return value when generating SCEP sender nonce Tobias Brunner 2012-07-06 10:49:46 +02:00
• ae56e1eb97 Check rng return value when generating OCSP nonces Tobias Brunner 2012-06-25 16:06:59 +02:00
• 3c73911174 Check rng return value when generating key and IV in PKCS#7 wrapper Tobias Brunner 2012-06-25 16:13:49 +02:00
• f1c78cfee7 Check rng return value when generating ME CONNECT_ID and KEY Tobias Brunner 2012-06-25 16:01:51 +02:00