Andreas Steffen a78e1c3b11 128 bit default security strength for IKE and ESP algorithms ...

The default ESP cipher suite is now
    AES_CBC-128/HMAC_SHA2_256_128
and requires SHA-2 HMAC support in the Linux kernel (correctly implemented
since 2.6.33).

The default IKE cipher suite is now
   AES_CBC-128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/ECP_256
if the openssl plugin is loaded or
   AES_CBC-128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_3072
if ECC is not available.

The use of the SHA-1 hash algorithm and the MODP_2048 DH group has been
deprecated and ENCR_CHACHA20_POLY1305 has been added to the default
IKE AEAD algorithms.

2015-12-17 17:49:48 +01:00

..

acert

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

aes

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

aesni

aesni: Fix doxygen groups

2015-04-15 17:29:56 +02:00

af_alg

utils: Use memeq_const() for all cryptographic purposes

2015-04-14 11:53:31 +02:00

agent

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

bliss

Explicitly mention SHA2 algorithm in BLISS OIDs and signature schemes

2015-11-06 14:55:31 +01:00

blowfish

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

ccm

utils: Use memeq_const() for all cryptographic purposes

2015-04-14 11:53:31 +02:00

chapoly

byteorder: Add 32-bit unaligned little-endian conversion functions

2015-12-04 10:29:09 +01:00

cmac

cmac: Reset state before doing set_key()

2015-03-27 16:07:53 +01:00

constraints

constraints: Use a more specific FQDN/email name constraint matching

2014-10-30 11:40:47 +01:00

ctr

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

curl

curl: Be less strict when considering status codes as errors

2015-11-12 14:40:37 +01:00

des

Fixed some typos, courtesy of codespell

2015-08-27 12:06:31 +02:00

dnskey

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

files

files: Add simple plugin to load files from file:// URIs

2015-03-09 16:08:52 +01:00

fips_prf

fips-prf: Remove superfluous <arpa/inet.h> include

2015-04-13 09:31:28 +02:00

gcm

utils: Use memeq_const() for all cryptographic purposes

2015-04-14 11:53:31 +02:00

gcrypt

128 bit default security strength requires 3072 bit prime DH group

2015-12-14 10:39:40 +01:00

gmp

128 bit default security strength requires 3072 bit prime DH group

2015-12-14 10:39:40 +01:00

hmac

hmac: Reset the underlying hasher before doing set_key() with longer keys

2015-03-27 15:53:50 +01:00

keychain

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

ldap

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

md4

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

md5

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

mysql

mysql: Add Windows support

2014-06-04 15:53:04 +02:00

nonce

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

ntru

diffie-hellman: Add a bool return value to set_other_public_value()

2015-03-23 17:54:03 +01:00

openssl

128 bit default security strength for IKE and ESP algorithms

2015-12-17 17:49:48 +01:00

padlock

Fix some Doxygen issues

2015-08-27 12:03:11 +02:00

pem

pem: Handle BER indefinite length encoding as binary ASN.1

2014-12-12 13:11:29 +01:00

pgp

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

pkcs1

Store and parse BLISS private and public keys in DER and PEM format

2014-11-29 14:51:16 +01:00

pkcs7

utils: Use chunk_equals_const() for all cryptographic purposes

2015-04-14 12:02:51 +02:00

pkcs8

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

pkcs11

pkcs11: Fix encoding of RSA keys if unnecessarily zero prefixed

2015-08-06 17:15:25 +02:00

pkcs12

utils: Use chunk_equals_const() for all cryptographic purposes

2015-04-14 12:02:51 +02:00

pubkey

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

random

random: Properly handle errors when reading from /dev/[u]random

2015-10-29 16:17:17 +01:00

rc2

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

rdrand

rdrand: Reuse CPU feature detection to check for RDRAND instructions

2015-04-13 15:31:58 +02:00

revocation

revocation: Allow CRLs to be encoded in PEM format

2015-11-12 14:40:44 +01:00

sha1

sha1: Include <library.h> instead of directly including <arpa/inet.h>

2014-06-04 15:53:02 +02:00

sha2

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

sha3

Use word-aligned XOR in sha3_absorb()

2015-11-03 21:35:09 +01:00

soup

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

sqlite

sqlite: Use our locking mechanism also when sqlite3_threadsafe() returns 0

2015-04-13 15:31:58 +02:00

sshkey

sshkey: Fix loading of ECDSA keys from files

2014-06-18 09:16:24 +02:00

test_vectors

Implemented SHA-3 hash algorithm including test vectors

2015-11-03 21:35:09 +01:00

unbound

plugins: Don't link with -rdynamic on Windows

2014-06-04 15:53:02 +02:00

winhttp

winhttp: Do not use countof() on pointer argument

2014-07-02 12:38:45 +02:00

x509

Allow msSmartcardLogon EKU to be built

2015-12-11 18:26:54 +01:00

xcbc

xcbc: Reset XCBC state in set_key()

2015-03-27 15:53:52 +01:00

plugin_feature.c

plugin-feature: Add vendor specific EAP method registration macros

2015-08-17 11:28:08 +02:00

plugin_feature.h

plugin-feature: Add vendor specific EAP method registration macros

2015-08-17 11:28:08 +02:00

plugin_loader.c

plugin-loader: Optionally use RTLD_NOW with dlopen()

2015-11-09 14:37:08 +01:00

plugin_loader.h

plugin-loader: Support a reload() callback for static features

2014-09-22 13:55:12 +02:00

plugin.h

…