Manuel Pégourié-Gonnard
|
f7dc378ead
|
Make CBC an option, step 1: ssl ciphersuites
|
2013-09-13 15:37:03 +02:00 |
|
Manuel Pégourié-Gonnard
|
4fe9200f47
|
Fix memory leak in GCM by adding gcm_free()
|
2013-09-13 13:45:58 +02:00 |
|
Paul Bakker
|
9013af76a3
|
Merged major refactoring of x509write module into development
This refactoring adds support for proper CSR writing and X509
certificate generation / signing
|
2013-09-12 11:58:04 +02:00 |
|
Manuel Pégourié-Gonnard
|
0237620a78
|
Fix some dependencies declaration
|
2013-09-12 11:57:02 +02:00 |
|
Manuel Pégourié-Gonnard
|
31e59400d2
|
Add missing f_rng/p_rng arguments to x509write_crt
|
2013-09-12 11:57:02 +02:00 |
|
Manuel Pégourié-Gonnard
|
53c642504e
|
Use PK internally for x509write_crt
|
2013-09-12 11:57:02 +02:00 |
|
Manuel Pégourié-Gonnard
|
f38e71afd5
|
Convert x509write_crt interface to PK
|
2013-09-12 11:57:02 +02:00 |
|
Manuel Pégourié-Gonnard
|
6de63e480d
|
Add EC support to x509write_key
|
2013-09-12 11:57:01 +02:00 |
|
Manuel Pégourié-Gonnard
|
edda9041fc
|
Adapt asn1_write_algorithm_identifier() to params
|
2013-09-12 11:57:01 +02:00 |
|
Manuel Pégourié-Gonnard
|
3837daec9e
|
Add EC support to x509write_pubkey
|
2013-09-12 11:57:01 +02:00 |
|
Manuel Pégourié-Gonnard
|
e1f821a6eb
|
Adapt x509write_pubkey interface to use PK
key_app_writer will be fixed later
|
2013-09-12 11:57:01 +02:00 |
|
Manuel Pégourié-Gonnard
|
ee73179b2f
|
Adapt x509write_csr prototypes for PK
|
2013-09-12 11:57:00 +02:00 |
|
Manuel Pégourié-Gonnard
|
8053da4057
|
x509write_csr() now fully using PK internally
|
2013-09-12 11:57:00 +02:00 |
|
Manuel Pégourié-Gonnard
|
5353a03eb9
|
x509write_csr using PK internally (WIP)
|
2013-09-12 11:57:00 +02:00 |
|
Paul Bakker
|
dcbfdcc177
|
Updated doxygen documentation in header files and HTML pages
|
2013-09-10 16:16:50 +02:00 |
|
Paul Bakker
|
c0dcf0ceb1
|
Merged blinding additions for EC, RSA and DHM into development
|
2013-09-10 14:44:27 +02:00 |
|
Paul Bakker
|
36b7e1efe7
|
Merged GCM refactoring into development
GCM is now independent of AES and can be used as a mode for any
cipher-layer supported 128-bit based block cipher
|
2013-09-10 14:41:05 +02:00 |
|
Manuel Pégourié-Gonnard
|
ea53a55c0f
|
Refactor to prepare for RSA blinding optimisation
|
2013-09-10 13:55:35 +02:00 |
|
Paul Bakker
|
1c3853b953
|
oid_get_oid_by_*() now give back oid length as well
|
2013-09-10 11:43:44 +02:00 |
|
Paul Bakker
|
7db0109436
|
Made POLARSSL_MD_MAX_SIZE dependent on POLARSSL_SHA512_C
|
2013-09-10 11:10:57 +02:00 |
|
Paul Bakker
|
eba3ccf785
|
Typo in config.h
|
2013-09-09 15:56:09 +02:00 |
|
Paul Bakker
|
f9f377e652
|
CSR Parsing (without attributes / extensions) implemented
|
2013-09-09 15:35:10 +02:00 |
|
Paul Bakker
|
cdda097507
|
Fixed doxygen documentation in asn1.h (added \brief)
|
2013-09-09 12:51:29 +02:00 |
|
Paul Bakker
|
52be08c299
|
Added support for writing Key Usage and NS Cert Type extensions
|
2013-09-09 12:38:45 +02:00 |
|
Paul Bakker
|
cd35803684
|
Changes x509_csr to x509write_csr
|
2013-09-09 12:38:45 +02:00 |
|
Paul Bakker
|
5f45e62afe
|
Migrated from x509_req_name to asn1_named_data structure
|
2013-09-09 12:02:36 +02:00 |
|
Paul Bakker
|
c547cc992e
|
Added generic asn1_free_named_data_list()
|
2013-09-09 12:01:23 +02:00 |
|
Paul Bakker
|
59ba59fa30
|
Generalized x509_set_extension() behaviour to asn1_store_named_data()
|
2013-09-09 11:34:44 +02:00 |
|
Paul Bakker
|
43aff2aec4
|
Moved GCM to use cipher layer instead of AES directly
|
2013-09-09 00:10:27 +02:00 |
|
Paul Bakker
|
f46b6955e3
|
Added cipher_info_from_values() to cipher layer (Search by ID+keylen+mode)
|
2013-09-09 00:08:26 +02:00 |
|
Paul Bakker
|
5e0efa7ef5
|
Added POLARSSL_MODE_ECB to the cipher layer
|
2013-09-08 23:04:04 +02:00 |
|
Manuel Pégourié-Gonnard
|
032c34e206
|
Don't use DH blinding for ephemeral DH
|
2013-09-07 13:06:27 +02:00 |
|
Manuel Pégourié-Gonnard
|
337b29c334
|
Test and document EC blinding overhead
|
2013-09-07 11:52:27 +02:00 |
|
Paul Bakker
|
15162a054a
|
Writing of X509v3 extensions supported
Standard extensions already in: basicConstraints, subjectKeyIdentifier
and authorityKeyIdentifier
|
2013-09-06 19:27:21 +02:00 |
|
Paul Bakker
|
329def30c5
|
Added asn1_write_bool()
|
2013-09-06 16:34:38 +02:00 |
|
Paul Bakker
|
9397dcb0e8
|
Base X509 certificate writing functinality
|
2013-09-06 10:36:28 +02:00 |
|
Manuel Pégourié-Gonnard
|
7da0a38d43
|
Rm some includes that are now useless
|
2013-09-05 17:06:11 +02:00 |
|
Manuel Pégourié-Gonnard
|
b8bd593741
|
Restrict cipher_update() for GCM
|
2013-09-05 17:06:10 +02:00 |
|
Manuel Pégourié-Gonnard
|
226d5da1fc
|
GCM ciphersuites partially using cipher layer
|
2013-09-05 17:06:10 +02:00 |
|
Manuel Pégourié-Gonnard
|
143b5028a5
|
Implement DH blinding
|
2013-09-04 16:29:59 +02:00 |
|
Paul Bakker
|
c049955b32
|
Merged new cipher layer enhancements
|
2013-09-04 16:12:55 +02:00 |
|
Manuel Pégourié-Gonnard
|
2d627649bf
|
Change dhm_calc_secret() prototype
|
2013-09-04 14:22:07 +02:00 |
|
Manuel Pégourié-Gonnard
|
ce4112538c
|
Fix RC4 key length in cipher
|
2013-09-04 12:29:26 +02:00 |
|
Manuel Pégourié-Gonnard
|
83f3fc0d77
|
Add AES-192-GCM
|
2013-09-04 12:14:13 +02:00 |
|
Manuel Pégourié-Gonnard
|
43a4780b03
|
Ommit AEAD functions if GCM not defined
|
2013-09-03 19:28:35 +02:00 |
|
Manuel Pégourié-Gonnard
|
aa9ffc5e98
|
Split tag handling out of cipher_finish()
|
2013-09-03 19:20:55 +02:00 |
|
Manuel Pégourié-Gonnard
|
2adc40c346
|
Split cipher_update_ad() out or cipher_reset()
|
2013-09-03 19:20:55 +02:00 |
|
Manuel Pégourié-Gonnard
|
a235b5b5bd
|
Fix iv_len interface.
cipher_info->iv_size == 0 is no longer ambiguous, and
cipher_get_iv_size() always returns something useful to generate an IV.
|
2013-09-03 13:25:52 +02:00 |
|
Manuel Pégourié-Gonnard
|
9c853b910c
|
Split cipher_set_iv() out of cipher_reset()
|
2013-09-03 13:04:44 +02:00 |
|
Manuel Pégourié-Gonnard
|
e09d2f8261
|
Change ecp_mul() prototype to allow randomization
(Also improve an error code while at it.)
|
2013-09-02 14:29:09 +02:00 |
|