Martin Willi 37794878cc aesni: Avoid loading AES/GHASH round keys into local variables ...

The performance impact is not measurable, as the compiler loads these variables
in xmm registers in unrolled loops anyway.

However, we avoid loading these sensitive keys onto the stack. This happens for
larger key schedules, where the register count is insufficient. If that key
material is not on the stack, we can avoid to wipe it explicitly after
crypto operations.

2015-04-15 13:44:40 +02:00

..

acert

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

aes

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

aesni

aesni: Avoid loading AES/GHASH round keys into local variables

2015-04-15 13:44:40 +02:00

af_alg

utils: Use memeq_const() for all cryptographic purposes

2015-04-14 11:53:31 +02:00

agent

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

bliss

bliss: Add generated Huffman codes to the repository

2015-03-02 12:05:07 +01:00

blowfish

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

ccm

utils: Use memeq_const() for all cryptographic purposes

2015-04-14 11:53:31 +02:00

cmac

cmac: Reset state before doing set_key()

2015-03-27 16:07:53 +01:00

constraints

constraints: Use a more specific FQDN/email name constraint matching

2014-10-30 11:40:47 +01:00

ctr

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

curl

curl: For SSL features, depend on thread-safety provided by our crypto plugins

2014-09-24 17:35:16 +02:00

des

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

dnskey

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

files

files: Add simple plugin to load files from file:// URIs

2015-03-09 16:08:52 +01:00

fips_prf

fips-prf: Remove superfluous <arpa/inet.h> include

2015-04-13 09:31:28 +02:00

gcm

utils: Use memeq_const() for all cryptographic purposes

2015-04-14 11:53:31 +02:00

gcrypt

diffie-hellman: Verify public DH values in backends

2015-03-23 17:54:03 +01:00

gmp

utils: Use memeq_const() for all cryptographic purposes

2015-04-14 11:53:31 +02:00

hmac

hmac: Reset the underlying hasher before doing set_key() with longer keys

2015-03-27 15:53:50 +01:00

keychain

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

ldap

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

md4

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

md5

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

mysql

mysql: Add Windows support

2014-06-04 15:53:04 +02:00

nonce

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

ntru

diffie-hellman: Add a bool return value to set_other_public_value()

2015-03-23 17:54:03 +01:00

openssl

utils: Use chunk_equals_const() for all cryptographic purposes

2015-04-14 12:02:51 +02:00

padlock

padlock: Reuse common CPU feature detection to check for Padlock features

2015-04-13 15:31:58 +02:00

pem

pem: Handle BER indefinite length encoding as binary ASN.1

2014-12-12 13:11:29 +01:00

pgp

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

pkcs1

Store and parse BLISS private and public keys in DER and PEM format

2014-11-29 14:51:16 +01:00

pkcs7

utils: Use chunk_equals_const() for all cryptographic purposes

2015-04-14 12:02:51 +02:00

pkcs8

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

pkcs11

diffie-hellman: Verify public DH values in backends

2015-03-23 17:54:03 +01:00

pkcs12

utils: Use chunk_equals_const() for all cryptographic purposes

2015-04-14 12:02:51 +02:00

pubkey

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

random

charon: Set CLOEXEC flag on daemon PID file and /dev/(u)random source FDs

2014-06-24 15:26:38 +02:00

rc2

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

rdrand

rdrand: Reuse CPU feature detection to check for RDRAND instructions

2015-04-13 15:31:58 +02:00

revocation

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

sha1

sha1: Include <library.h> instead of directly including <arpa/inet.h>

2014-06-04 15:53:02 +02:00

sha2

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

soup

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

sqlite

sqlite: Use our locking mechanism also when sqlite3_threadsafe() returns 0

2015-04-13 15:31:58 +02:00

sshkey

sshkey: Fix loading of ECDSA keys from files

2014-06-18 09:16:24 +02:00

test_vectors

test-vectors: Add some self-made additional AES-GCM test vectors

2015-04-15 11:35:26 +02:00

unbound

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

winhttp

winhttp: Do not use countof() on pointer argument

2014-07-02 12:38:45 +02:00

x509

x509: Use subjectKeyIdentifier provided by issuer cert when checking CRL issuer

2015-03-06 16:49:12 +01:00

xcbc

xcbc: Reset XCBC state in set_key()

2015-03-27 15:53:52 +01:00

plugin_feature.c

crypto-tester: Use the plugin feature key size to benchmark crypters/aeads

2015-04-15 11:35:26 +02:00

plugin_feature.h

…

plugin_loader.c

plugin-loader: Increase log level for warning about plugin features that failed to load

2015-03-09 15:45:29 +01:00

plugin_loader.h

plugin-loader: Support a reload() callback for static features

2014-09-22 13:55:12 +02:00

plugin.h

…