fastd - Fast and Secure Tunnelling Daemon

Age	Commit message (Collapse)	Author
2013-11-29	Use <cpuid.h>	Matthias Schiffer
	fastd will segfault in valgrind otherwise (O_o)
2013-11-29	generic-gmac: use HKDF expansion instead of the stream cipher to generate H	Matthias Schiffer

2013-11-29	Reorder check: avoid undefined behaviour due to negative or to long shifts	Matthias Schiffer

2013-11-29	HKDF: add a forgotten const qualifier	Matthias Schiffer

2013-11-29	Compile with -std=c99 and restructure some code to ensure there is no ↵	Matthias Schiffer
	invalid aliasing (hopefully)
2013-11-28	ghash-pclmulqdq: fix one left usage of a __builtin pclmulqdq instead of the ↵	Matthias Schiffer
	_mm version
2013-11-28	ghash-pclmulqdq: rework implementation to allow both GCC and Clang to ↵	Matthias Schiffer
	generate fast code
2013-11-28	ghash-pclmulqdq: make byteswap a macro	Matthias Schiffer
	For some reason, this allows clang to optimize the code much better.
2013-11-28	ghash-pclmulqdq: speed up multiplication using the Karatsuba algorithm	Matthias Schiffer

2013-11-28	Add a pclmulqdq ghash implementation	Matthias Schiffer

2013-11-28	Add CPUID function	Matthias Schiffer

2013-11-27	Allow checking if a crypto algorithm is available at runtime	Matthias Schiffer

2013-11-27	Add OpenSSL-based aes128-ctr implementation	Matthias Schiffer

2013-11-27	Correctly initialize OpenSSL	Matthias Schiffer

2013-11-25	Move crypto algorithm information out of implementation	Matthias Schiffer

2013-11-25	Move cipher and mac structures to a new header	Matthias Schiffer

2013-11-25	Add a new generic-gmac method	Matthias Schiffer

2013-11-25	Rename generic-gmac method to composed-gmac	Matthias Schiffer

2013-11-21	Add salsa20/12 cipher	Matthias Schiffer

2013-11-21	Add salsa20 cipher	Matthias Schiffer

2013-11-20	Replace max_packet_size functions by a max_overhead field	Matthias Schiffer

2013-11-20	Slightly simplify method/cipher/MAC definitions	Matthias Schiffer

2013-11-20	Add generic-poly1305 method	Matthias Schiffer

2013-11-18	generic-gmac: some code simplifications	Matthias Schiffer

2013-11-18	Add cipher-test method to measure the raw performance of a cipher	Matthias Schiffer

2013-11-18	generic-gmac: don't access invalid pointer for the reorder check with null ↵	Matthias Schiffer
	cipher
2013-11-18	blowfish-ctr: formatting fixes	Matthias Schiffer

2013-11-18	Remove OpenSSL-based blowfish implementation	Matthias Schiffer
	It doesn't have any advantages over the builtin one.
2013-11-18	secure_memzero all cipher and MAC states	Matthias Schiffer

2013-11-18	Some work towards a composable GMAC method	Matthias Schiffer

2013-11-18	generic-gcm: the method state itself doesn't hold any keys anymore, so we ↵	Matthias Schiffer
	don't need to secure_memzero it
2013-11-18	generic-gcm: cipher_get returns a boolean	Matthias Schiffer

2013-11-17	Add null cipher	Matthias Schiffer

2013-11-17	Revert bytewise ghash implementation	Matthias Schiffer
	The performance gain is negligible, and OpenSSL avoids a bytewise implementation to mitigate timing attacks. This reverts commits d4916544299c28c4fb16da6d3306eea0a6d5d79f and 1b06460aa967e3afcfa6fc8d664874134ab6c739.
2013-11-16	ghash: builtin: use bytewise lookup table	Matthias Schiffer

2013-11-16	Add "tiny" copy of the builtin ghash implementation	Matthias Schiffer

2013-11-16	fastd_buffer_alloc: fix output of error message if posix_memalign fails	Matthias Schiffer

2013-11-16	aes128-ctr: allocate only one piece of memory for the key state	Matthias Schiffer

2013-11-16	generic-gcm: fix a GCC uninitialized-use warning	Matthias Schiffer

2013-11-16	blowfish-ctr: some optimizations to the builtin implementation	Matthias Schiffer

2013-11-15	Allow using blowfish from OpenSSL on systems where it's available anyways	Matthias Schiffer

2013-11-15	config: move check for no configured method	Matthias Schiffer
	First check all error conditions before getting to the warnings (this is important for --generate-key). Also, downgrade the exit_bug to exit_error if method `null' is not supported.
2013-11-15	methods/common: decrease nonce length to 6, add flags byte	Matthias Schiffer

2013-11-14	Ensure sessions are invalidated before the nonce wraps	Matthias Schiffer
	While it isn't realistic for the nonce to wrap in less than one hour, it's better to check for this.
2013-11-14	Move test for initiator in the session refresh check from protocol to method	Matthias Schiffer

2013-11-07	CMake: add LINK_LIBRARIES workaround for old CMake versions	Matthias Schiffer

2013-11-07	CMake: really avoid target_include_directories	Matthias Schiffer

2013-11-07	CMake: avoid target_include_directories command to stay compatible with ↵	Matthias Schiffer
	CMake 2.8.9
2013-11-06	blowfish-ctr: use the whole 56-byte key	Matthias Schiffer

2013-11-05	Generalize cipher/MAC key/IV lengths	Matthias Schiffer