summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2012-09-14Critical: fix various problems in the AES128-GCM methodMatthias Schiffer
There were several bugs in the code that were severely lowering the expected security and completely breaking compatiblity with alternative implementations. The fixed version is checked against the test vectors specified in [1], and should thus be correct. [1] http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/proposedmodes/gcm/gcm-revised-spec.pdf
2012-07-02Fix typo in --machine-readable help messageMatthias Schiffer
2012-07-02Remove unneeded includeMatthias Schiffer
2012-07-02Require whitespace after keywords and strings etc. in config filesMatthias Schiffer
2012-07-01Version incrementv0.5-rc2Matthias Schiffer
2012-07-01Add missing _GNU_SOURCE definitionMatthias Schiffer
2012-07-01Version incrementv0.5-rc1Matthias Schiffer
2012-07-01Add support for multiple crypto methods without reconfigurationMatthias Schiffer
2012-07-01Fix invalid print on handshake failure with an unknown code.Matthias Schiffer
2012-06-27Remove unneeded size bytes from GCM to suppress warningsMatthias Schiffer
2012-06-27Implement GCM with lookup tableMatthias Schiffer
2012-06-27Fix critical memory corruption bug in coreMatthias Schiffer
2012-06-27Optimized GCM implementationMatthias Schiffer
2012-06-27Primitive aes128-gcm implementationMatthias Schiffer
2012-06-24Release 0.4v0.4Matthias Schiffer
2012-06-19Don't re-resolve dynamic-floating peers on key refreshMatthias Schiffer
2012-06-15Version incrementv0.4-rc13Matthias Schiffer
2012-06-15Allow setting dynamic peers to flaotingMatthias Schiffer
2012-06-15Avoid using the same handshake key to establish more than one sessionMatthias Schiffer
This fix prevents a potential attack using intentional packet reordering to initialize more than one session with using the same handshake keys, leading to more that one session to be initialized with the same key data altogether, allowing to decrypt some packets in the worst case.
2012-06-07Limit handshake frequency where possibleMatthias Schiffer
2012-06-07Fix memory leakMatthias Schiffer
2012-06-06Limit resolve frequencyMatthias Schiffer
2012-06-06Improve some log levelsMatthias Schiffer
2012-06-05Increase reorder countMatthias Schiffer
2012-06-05Increment rc versionv0.4-rc12Matthias Schiffer
2012-06-05Fix possible duplicate session establishmentMatthias Schiffer
This is causing duplicate nonces in the worst case.
2012-06-05printf: add %p patternMatthias Schiffer
2012-06-05Add support for receiving reordered packetsMatthias Schiffer
2012-06-04Increment rc versionv0.4-rc11Matthias Schiffer
2012-06-04Make sure refresh handshakes aren't cleanedMatthias Schiffer
2012-06-04Fix key invalidation order on key refreshMatthias Schiffer
2012-06-04Add version string to handshakeMatthias Schiffer
2012-06-04Decreate keepalive intervalMatthias Schiffer
2012-06-04Add pidfile supportMatthias Schiffer
2012-06-04Improve handshake loggingMatthias Schiffer
2012-06-02Fix warning messageMatthias Schiffer
2012-06-01Fix a possible crash involving strange resolve returnsMatthias Schiffer
fastd has been seen crashing on some hosts under strange circumstances. As the bug seems to involve invalid address families, try to assure no unsupported address families are returned from resolver.
2012-05-24Increase rc versionv0.4-rc10Matthias Schiffer
2012-05-24Fix segfault on logging during configMatthias Schiffer
2012-05-18Uninline pr_logMatthias Schiffer
2012-05-18Increment rc versionv0.4-rc9Matthias Schiffer
2012-05-18Don't consider enable state on peer config change detectionMatthias Schiffer
2012-05-18New logging facilitiesMatthias Schiffer
2012-05-17Add daemon modeMatthias Schiffer
2012-05-17Close inherited file handlesv0.4-rc8Matthias Schiffer
2012-05-17Fix handling of unsuccessful resolveMatthias Schiffer
2012-05-04Free eth_addr list on exitMatthias Schiffer
2012-05-04Zero out resolve return to silence valgrind warningMatthias Schiffer
2012-05-03Use pipe to transmit resolved addresses to main threadv0.4-rc7Matthias Schiffer
2012-05-03Fix critical error introduced by copy-and-pasting, another possible NULL ↵Matthias Schiffer
dereference
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-01 16:27:19 +0100