fastd - Fast and Secure Tunnelling Daemon

Age	Commit message (Collapse)	Author
2014-03-14	Adjust copyright years	Matthias Schiffer

2013-11-30	Perform string-based lookup of method-related information only once	Matthias Schiffer

2013-10-30	Add fastd_handshake_add_zero function	Matthias Schiffer

2013-10-29	Handle methods as strings	Matthias Schiffer

2013-10-20	Don't print fastd version from handshake requests when secure handshakes are ↵	Matthias Schiffer
	set, instead print it on handshake finish
2013-10-20	Refactor handshake code, prevent downgrade attacks	Matthias Schiffer

2013-10-19	Rename RECORD_HANDSHAKE_MAC to RECORD_TLV_MAC	Matthias Schiffer

2013-10-19	Authenticate the TLV records only	Matthias Schiffer

2013-10-19	Use the rsv2 field in the handshake header as an optional length field to ↵	Matthias Schiffer
	facilitate future extensions
2013-10-19	Get rid of packet.h	Matthias Schiffer

2013-10-19	Add a HMAC to authenticate all handshake TLV	Matthias Schiffer

2013-08-17	Make handshake records const uint8_t* instead of void*	Matthias Schiffer
	This enforces explicit casting and thus avoids alignment problems.
2013-04-20	Greatly improve handling of hosts with multiple IP addresses	Matthias Schiffer

2013-02-23	Use fastd_peer_t instead of fastd_peer_config_t in handshake code	Matthias Schiffer
	Directly using the peers allows us to get rid of the inefficient get_peer() function and is necessary for adding support for unknown peers.
2013-01-05	Adjust copyright years	Matthias Schiffer

2012-12-18	Convert type names to _t convention	Matthias Schiffer

2012-11-01	Dynamically create and destroy sockets without fixed binds	Matthias Schiffer

2012-10-29	Add support for multiple binds	Matthias Schiffer

2012-07-01	Add support for multiple crypto methods without reconfiguration	Matthias Schiffer

2012-06-04	Add version string to handshake	Matthias Schiffer

2012-04-19	Don't regenerate session handshake keypair for every handshake so a global ↵	Matthias Schiffer
	state can be used; remove the concept of temporary peers These changes will fix the possibility of a TCP-SYN-Flood-like DoS attack, at the cost of another protocol change: as we can't count request IDs when we don't know have temporary peers, request IDs are removed completely.
2012-04-14	Separate handshake from encryption method	Matthias Schiffer

2012-04-02	Warn on MTU mismatchv0.1-rc3	Matthias Schiffer

2012-04-01	Use 2 bytes to encode handshake field types and lengths; breaks compatiblity ↵	Matthias Schiffer
	with v0.1-rc2 and earlier
2012-03-30	Make ecfxp protocol work with new handshake	Matthias Schiffer

2012-03-30	Rework handshake... again. ecfxp protocol broken, will be fixed with next ↵	Matthias Schiffer
	commit.
2012-03-28	Add license headers to Flex and Bison files; also remove Quicktun note as we ↵	Matthias Schiffer
	don't actually use any of is code
2012-03-27	New handshake format; don't respond to data packets from unknown peers with ↵	Matthias Schiffer
	handshakes, but request a re-handshake
2012-02-28	Make simple handshake work	Matthias Schiffer

2012-02-27	Use custom buffers instead of struct iovec	Matthias Schiffer

2012-02-26	Implement I/O for a fixed peer	Matthias Schiffer