Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• b6bb32e658 Implemented full BLISS support for IKEv2 public key authentication and the pki tool Andreas Steffen 2014-11-28 13:13:47 +01:00
• 43d9247599 Created ikev2/rw-ntru-bliss scenario Andreas Steffen 2014-11-28 13:11:58 +01:00
• 0d8a3f5d01 Applied bit packing to BLISS public key Andreas Steffen 2014-11-27 11:55:54 +01:00
• bf749fa1fb Wipe BLISS private key memory Andreas Steffen 2014-11-27 09:42:36 +01:00
• b352ee4266 Created bliss_bitpacker class to encode BLISS signatures Andreas Steffen 2014-11-27 08:52:24 +01:00
• 7143667bdd Skip the unused bits field of the ASN.1 BIT STRING encoding Andreas Steffen 2014-11-27 08:48:45 +01:00
• 5a50e364e6 Store NTT A of BLISS public key a Andreas Steffen 2014-11-24 23:02:23 +01:00
• 3e1f6edc5a unit-tests: created bliss_sign test suite Andreas Steffen 2014-11-24 22:02:49 +01:00
• e71813e56d Finished BLISS signature generation Andreas Steffen 2014-11-18 07:51:53 +01:00
• edd72b6bb9 Implemented Gaussian rejection sampler Andreas Steffen 2014-11-11 14:21:00 +01:00
• 72bb7eec9c Implemented get_byte() method for mgf1_bitspender class Andreas Steffen 2014-11-10 07:56:28 +01:00
• 5f7a9ea9c3 Added support for BLISS-III Andreas Steffen 2014-11-10 07:55:32 +01:00
• f673966b9f Started implementing BLISS signature generation Andreas Steffen 2014-11-09 14:38:55 +01:00
• 56009f2001 Store and parse BLISS private and public keys in DER and PEM format Andreas Steffen 2014-11-04 20:51:33 +01:00
• 37bfe44358 unit-tests: Created separate mgf1 test suite Andreas Steffen 2014-11-02 17:35:16 +01:00
• 8614d1214d Use mgf1_bitspender in ntru_poly_create_from_seed Andreas Steffen 2014-11-01 13:11:43 +01:00
• 64a5cacde5 Use mgf1_bitspender to generate random secret key Andreas Steffen 2014-11-01 11:29:03 +01:00
• 988d477145 Implemented bitspender based on the MGF1 mask generator function Andreas Steffen 2014-11-01 10:16:54 +01:00
• c3664d8ee1 unit-tests: Added bliss_fft test suite Andreas Steffen 2014-10-30 14:31:26 +01:00
• 1d3e080877 Moved mgf1 class to libstrongswan/crypto/mgf1 Andreas Steffen 2014-10-30 08:00:41 +01:00
• 73a327404d Defined BLISS I and IV parameter sets Andreas Steffen 2014-10-29 22:35:13 +01:00
• 6d31c7ef74 Added BLISS OIDs in ITA-HSR OID tree Andreas Steffen 2014-10-29 22:34:36 +01:00
• 8c751b6119 Implemented Number Theoretic Transform using the FFT algorithm Andreas Steffen 2014-10-25 19:09:41 +02:00
• 9d5b91d198 Created framework for BLISS post-quantum signature algorithm Andreas Steffen 2014-10-22 00:19:49 +02:00
• 4ef819a379 libtls: Catch POLLHUP/NVAL in TLS socket splicing Martin Willi 2014-11-28 15:50:58 +01:00
• 015fb3134d watcher: Proper handle poll() POLLHUP/NVAL signaling Martin Willi 2014-11-28 12:36:10 +01:00
• 02fd29acc1 windows: Properly set errno for read/write functions using Winsock Martin Willi 2014-11-27 18:15:45 +01:00
• f1773fee43 ikev2: Fix ike_rekey switch statement broken with last commit Martin Willi 2014-11-24 10:03:26 +01:00
• 8891ed5478 ikev2: Prevent IKE_SA rekeying if we are currently retrying a CHILD_SA rekey Martin Willi 2014-11-21 12:10:16 +01:00
• c39b0c883d controller: Keep following initiate() if the first DH guess was wrong Martin Willi 2014-11-03 09:39:16 +01:00
• 013857ad79 child-sa: Introduce a CHILD_RETRYING state to detect DH group retries Martin Willi 2014-11-03 09:38:27 +01:00
• f6f3b0db11 Merge branch 'poll' Martin Willi 2014-11-21 12:49:07 +01:00
• 89f19ef876 windows: Move the compatibility header to the compat subfolder Martin Willi 2014-11-06 14:31:28 +01:00
• aec3d5fb7f apple: Wrap accept() and recvfrom() with poll(2) instead of select Martin Willi 2014-11-06 14:40:52 +01:00
• f65779dd0f apple: Introduce a central compatibility header with all __APPLE__ quirks Martin Willi 2014-11-06 14:27:07 +01:00
• 6e1d3f3615 watcher: Use Windows read/write(2) wrappers instead of compile-conditions Martin Willi 2014-11-06 14:20:28 +01:00
• a301a9c939 windows: Provide a write(2) wrapper that uses send(2) on sockets Martin Willi 2014-11-06 14:18:22 +01:00
• 09624c6cec windows: Provide a read(2) wrapper that uses recv(2) on sockets Martin Willi 2014-11-06 14:15:09 +01:00
• f518b52c2d unit-tests: Test cancellability of some cancellation points we rely on Martin Willi 2014-11-06 11:19:51 +01:00
• 78725e68c1 thread: Test for pending cancellation requests before poll()ing on OS X Martin Willi 2014-11-05 19:30:45 +01:00
• eeaa6f9b1a kernel-libipsec: Use poll(2) instead of select Martin Willi 2014-11-05 17:44:30 +01:00
• 03bccc240c watcher: Use poll(2) instead of select Martin Willi 2014-11-05 17:31:17 +01:00
• 10743ac9d6 libtls: Use poll(2) instead of select() in tls_socket Martin Willi 2014-11-05 17:09:56 +01:00
• ed247660e8 socket-default: Use round-robin selection of sockets to read from Martin Willi 2014-11-21 11:43:20 +01:00
• ce13ba62cc socket-default: Use poll(2) instead of select Martin Willi 2014-11-05 16:59:39 +01:00
• 946cf367d4 tun-device: Read from tun to buffer on stack to avoid over-allocation of packets Martin Willi 2014-11-21 11:23:08 +01:00
• eaca7f2143 tun-device: Remove the superfluous use of select() before read() Martin Willi 2014-11-05 16:43:01 +01:00
• 1abaff6a3c libradius: Use poll(2) to wait for RADIUS responses Martin Willi 2014-11-05 16:28:42 +01:00
• fc829ec9fb windows: Provide a poll(2) wrapper calling WSAPoll() Martin Willi 2014-11-06 12:11:25 +01:00
• e796b88e86 Merge branch 'netlink-extensions' Martin Willi 2014-11-21 11:01:39 +01:00
• 50bb81425e kernel-netlink: Optionally ignore errors resulting from response message loss Martin Willi 2014-08-14 11:33:12 +02:00
• 8925abbec4 kernel-netlink: Add an option to enforce using XFRM_MSG_UPDPOLICY Martin Willi 2014-07-29 16:38:45 +02:00
• 3065081c3e kernel-netlink: Fallback to UDP if detecting socket protocol fails Martin Willi 2014-09-29 17:11:53 +02:00
• 87888f9926 kernel-netlink: Alternatively support global port based IKE bypass policies Martin Willi 2014-07-16 16:31:52 +02:00
• 6f9df556ba conf: Document kernel-netlink retransmission and parallelization options Martin Willi 2014-07-16 13:22:21 +02:00
• 6c58fabe29 kernel-netlink: Add options to enable parallel Netlink queries explicitly Martin Willi 2014-07-16 12:38:30 +02:00
• 9b43dddff4 kernel-netlink: Release lock while doing Netlink NEW/DELADDR operations Martin Willi 2014-07-16 11:59:59 +02:00
• 4b41ea956c kernel-netlink: Add non-dumping variants of echo and stress tests Martin Willi 2014-07-15 15:58:11 +02:00
• adb930ed4f kernel-netlink: Add test cases for successful and timing out retransmissions Martin Willi 2014-07-15 15:47:03 +02:00
• 553be051b7 kernel-netlink: Add a compile-time hook to simulate request message loss Martin Willi 2014-07-15 15:11:14 +02:00
• 15dc61757c kernel-netlink: Implement configurable Netlink request retransmission Martin Willi 2014-07-14 17:17:38 +02:00
• aa762bed7b kernel-netlink: Add a stress test with several threads doing Netlink exchanges Martin Willi 2014-07-14 16:56:30 +02:00
• 84f6853c42 kernel-netlink: Retry netlink query while kernel returns EBUSY Martin Willi 2014-07-14 16:50:07 +02:00
• 3c7193f114 kernel-netlink: Support parallel Netlink queries Martin Willi 2014-07-10 16:28:44 +02:00
• 02794456a9 kernel-netlink: Add a simple send message test querying available links Martin Willi 2014-07-09 15:26:30 +02:00
• f572b38816 kernel-netlink: Add a stub for a test-runner Martin Willi 2014-07-09 15:08:28 +02:00
• 8ab1b29da4 mem-pool: Fix potential memory leak and lost leases when reassigning leases Tobias Brunner 2014-11-11 18:50:26 +01:00
• fc02a9d4b9 android: New release based on 5.2.1 and after adding EAP-TLS Tobias Brunner 2014-11-06 17:16:27 +01:00
• baa4e774c1 android: Build binaries for MIPS Tobias Brunner 2014-11-06 17:11:55 +01:00
• bdc4cea316 android: Increase fragment size Tobias Brunner 2014-11-06 17:05:47 +01:00
• 6fddf2af73 android: Enable IKEv2 fragmentation Tobias Brunner 2014-11-06 16:56:54 +01:00
• 2d19ff462a Merge branch 'android-eap-tls' Tobias Brunner 2014-11-06 16:33:01 +01:00
• 0e44999867 android: Use %any as AAA identity, but disable EAP-only authentication Tobias Brunner 2014-10-21 18:28:24 +02:00
• 4b39a4117a android: Add support for signature schemes used by EAP-TLS Tobias Brunner 2014-10-21 18:03:49 +02:00
• 0ef74bec98 android: Allow enumeration of untrusted certificates Tobias Brunner 2014-09-10 16:54:12 +02:00
• 34ca3795c8 android: Handle EAP-TLS in Android service Tobias Brunner 2014-09-10 11:35:04 +02:00
• 93923149e4 android: Enable EAP-TLS plugin in the app Tobias Brunner 2014-09-10 11:33:39 +02:00
• a1700c9903 android: Add EAP-TLS VPN type to the GUI Tobias Brunner 2014-09-10 11:28:48 +02:00
• a64089738d android: Change how features of VPN types are stored and checked Tobias Brunner 2014-09-10 11:25:03 +02:00
• 0de4ba58ce testing: Update tkm/multiple-clients/evaltest.dat Reto Buerki 2014-10-30 17:43:01 +01:00
• 1ec7ee65c5 charon-tkm: Properly reset CC context in listener Reto Buerki 2014-10-30 16:16:40 +01:00
• a62d03d36b charon-tkm: Add missing comma to enum Reto Buerki 2014-10-30 15:39:43 +01:00
• b1ef481ce1 proposal: Add default PRF for HMAC-MD5-128 and HMAC-SHA1-160 integrity algorithms Tobias Brunner 2014-10-31 10:09:54 +01:00
• 406f3af1ed Merge branch 'mem-pool-range' Tobias Brunner 2014-10-30 15:04:31 +01:00
• cd67cd70c8 host: Ignore spaces around - when parsing ranges Tobias Brunner 2014-10-30 12:32:16 +01:00
• e0cd3bad3d ike-cfg: Use host_create_from_range() helper Tobias Brunner 2014-10-28 18:23:10 +01:00
• 5e92534313 vici: Add support for address range definitions of pools Tobias Brunner 2014-10-27 15:50:25 +01:00
• c355e2b2c7 stroke: Add support for address range definitions of in-memory pools Tobias Brunner 2014-10-27 15:31:46 +01:00
• 82be444eb9 host: Add function to create two hosts from a range definition Tobias Brunner 2014-10-28 18:14:29 +01:00
• bbe3070aa2 mem-pool: Add basic unit tests Tobias Brunner 2014-10-24 16:48:34 +02:00
• 385d4486ba libhydra: Add test runner Tobias Brunner 2014-10-24 16:47:26 +02:00
• 9d2a3554e5 mem-pool: Correctly ignore first and last addresses of subnets and adjust size Tobias Brunner 2014-10-24 15:40:09 +02:00
• 1201ddcbc5 ikev1: Don't inherit children if INITITAL_CONTACT was seen Thomas Egerer 2014-10-09 11:15:07 +02:00
• 11b42933bf ikev1: Send INITIAL_CONTACT notify in Main Mode Thomas Egerer 2014-10-09 11:13:43 +02:00
• 8131d180a8 Merge branch 'policy-constraints' Martin Willi 2014-10-30 11:42:04 +01:00
• b9d38c9fa2 pki: Print and document the name constraint type for DNS or email constraints Martin Willi 2014-10-15 12:33:17 +02:00
• a6c8647eca constraints: Add permitted/excludedNameConstraints check Martin Willi 2014-10-14 16:29:28 +02:00
• 7e80995c59 constraints: Use a more specific FQDN/email name constraint matching Martin Willi 2014-10-15 12:10:54 +02:00
• 6733109d0e constraints: Add requireExplicitPolicy tests Martin Willi 2014-10-14 15:25:24 +02:00
• 3b25be0e57 constraints: Add inhibitAnyPolicy tests Martin Willi 2014-10-14 15:00:22 +02:00