Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• 743b486118 unit-tests: Hand out an actual shared secret and pubkey in mock KE implementation Tobias Brunner 2022-03-15 11:59:53 +01:00
• 56afc6e298 wolfssl: Implement HMAC-based IKEv2 PRFs via wolfSSL's HKDF implementation Tobias Brunner 2022-03-15 09:41:11 +01:00
• 7498769aba botan: Implement HMAC-based IKEv2 PRFs via Botan's HKDF implementation Tobias Brunner 2022-03-15 09:34:10 +01:00
• e0fc786ecd openssl: Implement HMAC-based IKEv2 PRFs via OpenSSL's HKDF implementation Tobias Brunner 2022-03-14 18:17:11 +01:00
• 0339ce34f6 kdf: Implement wrapper for IKEv2 PRFs Tobias Brunner 2022-03-14 17:16:17 +01:00
• ad0e94b6ed test-vectors: Add vectors for HMAC-based IKEv2 PRFs Tobias Brunner 2022-03-14 17:08:39 +01:00
• 37dbc87960 crypto: Add new KDF type for IKEv2 PRFs Tobias Brunner 2022-03-14 16:56:32 +01:00
• 7bde56a9bc crypto: Adapt kdf_t interface to support KDFs with fixed output length Tobias Brunner 2022-03-14 16:54:13 +01:00
• 96c7692661 wolfssl: Implement prf+ via wolfSSL's HKDF implementation Tobias Brunner 2022-02-16 16:42:55 +01:00
• cb8f924051 botan: Implement prf+ via Botan's HKDF implementation Tobias Brunner 2022-02-16 16:23:38 +01:00
• f535f1ed53 crypto: Remove unused prf_plus_t Tobias Brunner 2022-02-15 14:20:07 +01:00
• f0957d1250 kdf: Implement prf+ directly without relying on prf_plus_t Tobias Brunner 2022-02-15 14:18:14 +01:00
• 9cb3c10418 keymat_v1: Derive CHILD_SA keys without using prf_plus_t Tobias Brunner 2022-02-15 10:13:53 +01:00
• be07b9dc01 unit-tests: Use plugin-provided prf+ in unit test Tobias Brunner 2022-02-15 13:43:58 +01:00
• df16d7902a tls-hkdf: Use plugin-provided prf+ Tobias Brunner 2022-02-14 17:09:15 +01:00
• 7161c87617 keymat_v2: Use plugin-provided prf+ to derive keys Tobias Brunner 2022-02-14 16:19:42 +01:00
• 08e31138bd appveyor: Enable kdf plugin on old images with OpenSSL 1.0.2/1.1.0 Tobias Brunner 2022-02-17 10:15:22 +01:00
• 5cc47c11f2 android: Build and load kdf plugin for prf+ Tobias Brunner 2022-02-15 14:29:36 +01:00
• 3a52fc83f8 testing: Load kdf plugin in all scenarios that require it Tobias Brunner 2022-02-14 16:25:32 +01:00
• 742134c112 keymat_v2: Refactor CHILD_SA key derivation so it only needs one prf+ call Tobias Brunner 2022-02-14 15:48:17 +01:00
• 00cfc05467 keymat_v2: Refactor IKE key derivation so it only needs one prf+ call Tobias Brunner 2022-02-14 15:19:20 +01:00
• 2b9b579af9 openssl: Add a prf+ implementation based on OpenSSL's HKDF implementation Tobias Brunner 2022-02-11 16:38:34 +01:00
• 9e228de60a kdf: Add plugin that provides a default prf+ implementation Tobias Brunner 2022-02-11 14:49:49 +01:00
• ce431366e6 test-vectors: Add test vectors for prf+ Tobias Brunner 2022-02-11 13:58:12 +01:00
• 71ba969884 plugin-feature: Add plugin feature for KDFs Tobias Brunner 2022-02-11 11:57:34 +01:00
• 961cb781b9 plugin-feature: Remove 'default' case in plugin_feature_un|load() Tobias Brunner 2022-02-11 11:55:36 +01:00
• 86d526876d test-vectors: Add support for KDF test vectors Tobias Brunner 2022-02-11 12:03:38 +01:00
• 02f7d63e52 crypto-factory: Use actual plugin name when testing during construction Tobias Brunner 2022-02-16 17:24:17 +01:00
• 0c6baa8997 crypto-tester: Add facility to test KDFs Tobias Brunner 2022-02-10 18:30:50 +01:00
• ec17fa2fef vici: Report registered KDFs Tobias Brunner 2022-02-09 16:20:00 +01:00
• 07bf428ad1 stroke: List registered KDFs Tobias Brunner 2022-02-09 16:18:30 +01:00
• fbb0bdebe7 crypto-factory: Add constructor and methods to create KDFs Tobias Brunner 2022-02-09 16:16:20 +01:00
• 35ad267fce pkcs5: Rename kdf_t to avoid conflict Tobias Brunner 2022-02-09 16:08:30 +01:00
• e93882c6a0 transform: Add private transform for KDFs Tobias Brunner 2022-02-09 15:54:47 +01:00
• 40a09613d2 crypto: Add interface for key derivation functions Tobias Brunner 2022-02-09 11:54:28 +01:00
• 8b8a2ee43a Merge branch 'labeled-ipsec' Tobias Brunner 2022-04-14 18:43:16 +02:00
• 6910347d1a testing: Add DSCP scenario that uses simple labels Tobias Brunner 2022-04-14 14:13:07 +02:00
• 955b526be8 swanctl: Add options to filter CHILD_SAs in --list-sas Tobias Brunner 2021-06-02 14:46:03 +02:00
• b1c7fac768 vici: Add options to only return specific CHILD_SAs in list-sas() Tobias Brunner 2021-06-02 14:37:39 +02:00
• 994d9d37d4 testing: Copy comments to test log Tobias Brunner 2021-06-02 14:29:55 +02:00
• b67f7fb861 swanctl: Report labels in --list-* commands Tobias Brunner 2021-12-21 12:18:21 +01:00
• 2994347d18 vici: Report security label on CHILD_SA, policies and configs Tobias Brunner 2021-12-21 12:10:34 +01:00
• 7cf6f29ac5 vici: Make security labels and mode configurable Tobias Brunner 2021-12-21 11:56:32 +01:00
• f52e565ad3 kernel-netlink: Forward labels from acquires Tobias Brunner 2021-12-21 11:33:06 +01:00
• 0a673794d8 trap-manager: Add support to handle acquires with security labels Tobias Brunner 2021-12-21 11:26:50 +01:00
• 81c362829e kernel-handler: Log security label received with acquire Tobias Brunner 2021-12-21 11:26:12 +01:00
• 52a05d7f6c kernel-interface: Optionally pass security label with an acquire Tobias Brunner 2021-12-21 11:22:36 +01:00
• 3f3838d1f9 ike-sa: Accept optional security label when initiating CHILD_SAs Tobias Brunner 2021-12-20 16:16:00 +01:00
• 92f54e55e9 child-rekey: Maintain security label during rekeying Tobias Brunner 2021-12-20 16:10:19 +01:00
• b00a4e778f selinux: Add plugin to install trap policies with generic labels Tobias Brunner 2022-02-02 15:51:06 +01:00
• 065685dde7 ike-sa: Add helper to determine an IKE_SA's dynamic hosts Tobias Brunner 2022-02-02 15:45:57 +01:00
• 3c65cf6456 trap-manager: Add facility to install externally managed trap policies Tobias Brunner 2022-02-01 20:17:50 +01:00
• 8f4cfe9669 child-sa: Allocate a new reqid if dynamic traffic selectors are updated Tobias Brunner 2022-02-03 17:10:46 +01:00
• 96ecc39cd0 kernel-netlink: Allow reqid updates for policies again Tobias Brunner 2022-02-04 09:37:37 +01:00
• 1b3af3e37d kernel-interface: Add support to change the reqid in update_sa() Tobias Brunner 2022-02-03 17:10:12 +01:00
• 1f060357f4 kernel-wfp: Use new UDP ports in update_sa() Tobias Brunner 2022-02-03 17:08:58 +01:00
• 9619b1e757 child-sa: Support dynamically updating trap policies Tobias Brunner 2022-02-03 14:46:59 +01:00
• f9b895b49f child-create: Add support to handle security labels Tobias Brunner 2022-02-02 10:40:16 +01:00
• 7a8d110863 child-create: Consider security label when comparing CHILD_SAs Tobias Brunner 2021-12-20 15:58:46 +01:00
• 139d655817 child-sa: Add support for security labels Tobias Brunner 2021-12-20 15:28:07 +01:00
• 6cb83c305e kernel-interface: Optionally consider security label when allocating reqids Tobias Brunner 2021-12-20 15:11:37 +01:00
• 03729958db peer-cfg: Consider security labels when selecting child configs Tobias Brunner 2022-01-10 18:31:34 +01:00
• 63d4bd071f child-cfg: Add method to select a security label Tobias Brunner 2022-01-11 10:15:53 +01:00
• ef72ac88c3 child-cfg: Add optional security label and mode Tobias Brunner 2021-12-20 13:49:56 +01:00
• bf0542c4e1 kernel-netlink: Add support for optional security label on SAs and policies Tobias Brunner 2021-12-20 15:02:42 +01:00
• c4e2b7617f encoding: Remove unused TS_TYPE and ADDRESS encodings Tobias Brunner 2022-01-13 14:26:06 +01:00
• f4c0ec0b71 ts-payload: Add support for TS of type TS_SECLABEL Tobias Brunner 2022-01-10 17:39:56 +01:00
• a44de0b957 traffic-selector-substructure: Add support for TS_SECLABEL Tobias Brunner 2022-01-10 17:34:22 +01:00
• d71d181d28 traffic-selector: Add TS_SECLABEL type Tobias Brunner 2022-01-10 16:35:38 +01:00
• ebb99484e3 leak-detective: Whitelist selinux_check_access() Tobias Brunner 2022-02-04 08:17:54 +01:00
• 2dd60e4946 sec-label: Add enum for security label mode Tobias Brunner 2022-01-27 14:49:39 +01:00
• decfe44433 sec-label: Add class to represent security labels Tobias Brunner 2021-12-20 11:23:37 +01:00
• fe5f27336d configure: Add option to link against libselinux Tobias Brunner 2021-12-17 17:13:27 +01:00
• c00c5e5a35 vici: Make combination of 'trap' and 'start' configurable Tobias Brunner 2021-12-16 16:51:04 +01:00
• 7137fd96c2 enum: Add helper to parse enum flags from strings Tobias Brunner 2021-12-17 15:19:02 +01:00
• 4f4d4021b4 ike: Treat action_t as flags so 'start' and 'trap' can be combined Tobias Brunner 2021-12-16 16:34:37 +01:00
• 927103ece4 enum: Allow specifying the name used when none of the flags are set Tobias Brunner 2021-12-17 14:25:44 +01:00
• a5430e1601 child-create: Abort initiating a duplicate CHILD_SA Tobias Brunner 2021-05-20 18:11:58 +02:00
• 511033b3da child-create: Just abort CREATE_CHILD_SA request if nonce creation fails Tobias Brunner 2021-05-20 17:55:54 +02:00
• 3b699c720f kernel-listener: Use a struct to pass data from acquires Tobias Brunner 2021-12-16 13:50:38 +01:00
• 9983326b20 kernel-netlink: Read protocol of acquire not from template Tobias Brunner 2021-05-28 13:36:04 +02:00
• 7f30e1aea2 ike-sa: Use a struct to pass optional arguments when initiating CHILD_SAs Tobias Brunner 2021-05-19 14:16:20 +02:00
• 366ac36a1f ike: Don't reset optional CHILD_SA properties when migrating child-creating tasks Tobias Brunner 2021-05-20 11:43:39 +02:00
• 93d8177674 cirrus: Use FreeBSD 12.3 Tobias Brunner 2022-04-14 18:38:43 +02:00
• b866ee88bf ike: Track unprocessed initial IKE messages like half-open IKE_SAs Tobias Brunner 2021-06-04 18:11:46 +02:00
• d8104b7c69 receiver: Add per-IP cookie threshold Tobias Brunner 2022-03-18 15:13:06 +01:00
• 902fbd16e8 receiver: Use a time based limit to switch COOKIE secrets Tobias Brunner 2021-06-04 13:41:31 +02:00
• 63260a11ca lgtm: Fix query for chunk_from_chars() Tobias Brunner 2022-04-14 15:16:38 +02:00
• 3c028686de traffic-selector: Avoid out-of-bound array access when calculating range Tobias Brunner 2022-03-16 11:45:49 +01:00
• 8100f2f255 Merge branch 'pfkey-exclude-routes' Tobias Brunner 2022-03-15 14:04:19 +01:00
• 8a76c5af8a kernel-pfkey: Don't install exclude routes for locally connected peers Tobias Brunner 2022-02-16 14:47:40 +01:00
• 5de6ab82a6 kernel-pfkey: Only install exclude route if not routing via outbound interface Tobias Brunner 2022-02-11 17:23:15 +01:00
• 012e4cd902 kernel-netlink: Remove unimplemented XFRM_OFFLOAD_IPV6 flag Leon Romanovsky 2022-02-21 15:35:30 +02:00
• b2cf5af192 README: Added link to docs.strongswan.org Andreas Steffen 2022-03-02 21:55:43 +01:00
• c8045f86a3 testing: Increase memory on winnetou even more Tobias Brunner 2022-03-01 10:10:37 +01:00
• 2ade4311bc tls-server: Use correct error alerts if client doesn't send a certificate Tobias Brunner 2022-03-01 10:05:26 +01:00
• 3eecd40cec openssl: Don't unload providers Tobias Brunner 2022-02-23 17:29:02 +01:00
• e69438450f Use wolfSSL 5.2.0 for tests Tobias Brunner 2022-02-22 09:35:01 +01:00
• 9e3978259e mgf1: Fix Doxygen group for XOF implementation Tobias Brunner 2022-02-11 14:19:35 +01:00
• 963adc7637 xof: Fix typo in documentation for set_seed() Tobias Brunner 2022-02-09 11:36:43 +01:00