summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2015-01-22ec25519-fhmqvc: use reduced-bitlength scalar multiplicationMatthias Schiffer
The values d and e will only use 128bits, so speed up the scalar multiplication by using the new reduced-bitlength scalar multiplication functions. This change requires the current development version of libuecc.
2015-01-21Downgrade "verification failed" message from verbose to debug2Matthias Schiffer
This message will be printed for every packet in severe reordering situtations, so better not print it by default. In the future, we'll need a rate limiting mechanism...
2015-01-21Fix handling of severe packet reorderingMatthias Schiffer
fastd would incorrectly mark wrong sequence numbers as seen when reordering by more than 64 sequence numbers had occured.
2015-01-21Always disable PMTU discoveryMatthias Schiffer
fastd currently can't fragment packets anyways, so it doesn't make any sense to perform PMTU discovery. This makes the config option `pmtu' a no-op.
2015-01-20handshake: delay method parsing until the sender key has been handledMatthias Schiffer
Otherwise fastd won't use the correct peer group's method list for handshakes incoming on generic sockets.
2015-01-20Another comment fixMatthias Schiffer
2015-01-20Implement new hash table to keep track of unknown peers handshakes have been ↵Matthias Schiffer
sent to This should significantly reduce the number of handshakes sent after restarting fastd with many active connections.
2015-01-17Never create sockets for an address family without matching bindsMatthias Schiffer
2015-01-16Comment typo fixesMatthias Schiffer
2015-01-14Refactor handling of platforms without user/group settings (Android)Matthias Schiffer
2015-01-14Update OpenWrt scriptsMatthias Schiffer
2015-01-14Update copyright yearsMatthias Schiffer
2015-01-14android_ctrl_sock: include and whitespace cleanupMatthias Schiffer
2015-01-14Add Android 4.1+ support. See doc/README-Android.md for build HOWTO.Rick Lei
* Update CMake files to work with android-cmake * Use unix domain socket for communicating with Android GUI * May also run standalone but requires rooted Android device
2015-01-14Reset all connections on SIGUSR2Matthias Schiffer
2015-01-14Allow to configure methods per peer groupMatthias Schiffer
2015-01-13doc: add example C code to read status socketMatthias Schiffer
2015-01-12doc: add information about a new paper on FHMQVMatthias Schiffer
2015-01-12README: add a hint to the Sphinx documentationMatthias Schiffer
2015-01-12Make MTU mismatches fatalMatthias Schiffer
As fastd calculates its receive buffer sizes based on the MTU, not matching MTUs is bound to cause issues anyways, so let's fail completely.
2015-01-11doc: move comments from generated source files to headersMatthias Schiffer
Unfortunately, Doxygen stopped interpreting the .c.in files as C source files a while ago. Move the comments to the header files to avoid the Doxygen warnings.
2015-01-11More doxygen fixesMatthias Schiffer
I keep forgetting this...
2015-01-11config: allow ipv4/ipv6 keywords before static addressesMatthias Schiffer
2015-01-10poll: more include cleanupMatthias Schiffer
2015-01-10poll:remove sys/signal.h includeMatthias Schiffer
This had been added accidentially.
2015-01-09Comment typo fixMatthias Schiffer
2015-01-09ec25519-fhmqvc: don't check group order of peers' public keysMatthias Schiffer
Skipping this check will significantly speed up startup with many peers. As we now do embedded group order verification, an attacker can't gain anything from small-subgroup attacks, so skipping the check isn't a security issue.
2015-01-09ec25519-fhmqvc: optimize handshake by using embedded group element verificationMatthias Schiffer
Using the embedded group element verification allows us to get away without explicit verification, thus needing one scalar multiplication less. This reduces the number of expensive operations needed for a handshake to three: one Galois field square root (for key unpacking) and two scalar multiplications. For this optimization to be secure, private keys must be divisible by 8. This is the case for all keys generated with all but extremely old versions of fastd (pre-0.4). If fastd finds that its secret is not divisible by 8, it will refuse to start now.
2015-01-09Move protocol-specific TLV specifications to main handshake record enumMatthias Schiffer
2015-01-09poll: define SYS_epoll_pwait if it isn't availableMatthias Schiffer
2015-01-09ec25519-fhmqvc: unpack peers' keys only onceMatthias Schiffer
2015-01-09poll: directly call epoll_pwait syscall instead of using the libc wrapperMatthias Schiffer
There are systems without the wrapper (e.g. older Android versions), and the wrapper is broken in some versions of uClibc.
2015-01-09More comment fixesMatthias Schiffer
2015-01-09Add support for a new big-endian handshake formatMatthias Schiffer
Because of strange dicisions in the past, fastd currently uses little endian type and length values in its handshake. As the common network byte order is big endian, changing the handshake format would be preferable. This commit adds support for a new big-endian handshake. For now, fastd will continue to send little-endian handshakes so ensure backwarts compatiblity, but if it receives a big-endian handshake, it will respond with a big-endian one.
2015-01-08ecc25519-fhmqvc: add doxygen comments to the key check functionsMatthias Schiffer
2015-01-06status socket: better error messages on bind errorsMatthias Schiffer
2015-01-06ec25519-fhmqvc: additional key checksMatthias Schiffer
Until now, it wasn't checked if a public key was the identity element. I don't think this mistake allows any actual attacks against the handshake though.
2015-01-06handshake: get rid of stpcpyMatthias Schiffer
stpcpy was added in POSIX.1-2008 and is not present on some systems like Android.
2014-11-15Development versionMatthias Schiffer
2014-11-15fastd v16v16Matthias Schiffer
2014-11-15fastd v16 release notesMatthias Schiffer
2014-11-15Use the peer key instead of the name as keys in the status socket outputMatthias Schiffer
This fixes the status socket segfault in a nicer way than the reverted commit "Use peer specifier from log instead of the peer name for the status output".
2014-11-15ec25519-fhmqvc: extend describe_peer to return the whole keyMatthias Schiffer
2014-11-15Revert "Use peer specifier from log instead of the peer name for the status ↵Matthias Schiffer
output" This reverts commit be929dbe2dffa82ca1f91538f56a1bb0490000bd.
2014-11-15Fix segfault when checking peer addressesMatthias Schiffer
This segfault would occur when a peer with a static IP address (e.i. not a hostname resolved via DNS) is read, and any other peer after that.
2014-11-12doc: add documentation for the status socket optionMatthias Schiffer
2014-11-12Use peer specifier from log instead of the peer name for the status outputMatthias Schiffer
This fixes a crash when status sockets are used with peers without names, but the JSON output format is changed: named peers will now use "<name>" as key instead of "name".
2014-11-11Development versionMatthias Schiffer
2014-11-11fastd v15v15Matthias Schiffer
2014-11-11ec25519-fhmqvc: add missing Doxygen commentMatthias Schiffer
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-15 20:41:42 +0100