fastd - Fast and Secure Tunnelling Daemon

Age	Commit message (Collapse)	Author
2013-11-18	blowfish-ctr: formatting fixes	Matthias Schiffer

2013-11-18	Remove OpenSSL-based blowfish implementation	Matthias Schiffer
	It doesn't have any advantages over the builtin one.
2013-11-18	secure_memzero all cipher and MAC states	Matthias Schiffer

2013-11-18	Some work towards a composable GMAC method	Matthias Schiffer

2013-11-18	generic-gcm: the method state itself doesn't hold any keys anymore, so we ↵	Matthias Schiffer
	don't need to secure_memzero it
2013-11-18	generic-gcm: cipher_get returns a boolean	Matthias Schiffer

2013-11-17	Add null cipher	Matthias Schiffer

2013-11-17	Revert bytewise ghash implementation	Matthias Schiffer
	The performance gain is negligible, and OpenSSL avoids a bytewise implementation to mitigate timing attacks. This reverts commits d4916544299c28c4fb16da6d3306eea0a6d5d79f and 1b06460aa967e3afcfa6fc8d664874134ab6c739.
2013-11-16	ghash: builtin: use bytewise lookup table	Matthias Schiffer

2013-11-16	Add "tiny" copy of the builtin ghash implementation	Matthias Schiffer

2013-11-16	fastd_buffer_alloc: fix output of error message if posix_memalign fails	Matthias Schiffer

2013-11-16	aes128-ctr: allocate only one piece of memory for the key state	Matthias Schiffer

2013-11-16	generic-gcm: fix a GCC uninitialized-use warning	Matthias Schiffer

2013-11-16	blowfish-ctr: some optimizations to the builtin implementation	Matthias Schiffer

2013-11-15	Allow using blowfish from OpenSSL on systems where it's available anyways	Matthias Schiffer

2013-11-15	config: move check for no configured method	Matthias Schiffer
	First check all error conditions before getting to the warnings (this is important for --generate-key). Also, downgrade the exit_bug to exit_error if method `null' is not supported.
2013-11-15	methods/common: decrease nonce length to 6, add flags byte	Matthias Schiffer

2013-11-14	Ensure sessions are invalidated before the nonce wraps	Matthias Schiffer
	While it isn't realistic for the nonce to wrap in less than one hour, it's better to check for this.
2013-11-14	Move test for initiator in the session refresh check from protocol to method	Matthias Schiffer

2013-11-07	CMake: add LINK_LIBRARIES workaround for old CMake versions	Matthias Schiffer

2013-11-07	CMake: avoid target_include_directories command to stay compatible with ↵	Matthias Schiffer
	CMake 2.8.9
2013-11-06	blowfish-ctr: use the whole 56-byte key	Matthias Schiffer

2013-11-05	Generalize cipher/MAC key/IV lengths	Matthias Schiffer

2013-11-04	Add simple blowfish-ctr cipher implementation	Matthias Schiffer

2013-11-03	Include protocol as a static library as well	Matthias Schiffer

2013-11-03	Allow building without NaCl again	Matthias Schiffer

2013-11-03	Fix disabling modules	Matthias Schiffer

2013-11-03	Improve build system for ciphers and MACs as well	Matthias Schiffer

2013-11-03	Even nicer method specification	Matthias Schiffer

2013-11-02	Make adding new methods a bit nicer	Matthias Schiffer

2013-11-02	More CMake cleanup and fixes	Matthias Schiffer

2013-11-02	Separate cmake files	Matthias Schiffer

2013-11-02	Move a few prototypes from fastd.h into a new config.h	Matthias Schiffer

2013-11-02	Move all generated headers to the src subdir	Matthias Schiffer

2013-11-02	Change error message for methods from `invalid' to `unsupported'	Matthias Schiffer

2013-11-02	Algorithms without implementation aren't available	Matthias Schiffer

2013-11-02	Convert ghash to the new crypto algorithm scheme	Matthias Schiffer

2013-11-02	Convert aes128-gcm into a generic gcm method	Matthias Schiffer

2013-11-02	Allow flexible specification of methods provided by an implementation	Matthias Schiffer

2013-11-02	Correctly handle ciphers without implementation	Matthias Schiffer

2013-11-02	Implement the first step towards a more flexible way to support crypto methods	Matthias Schiffer

2013-11-01	The attribute is called aligned, not align	Matthias Schiffer

2013-11-01	Use HKDF for handshake keys as well	Matthias Schiffer

2013-11-01	Use HKDF to derive the session keys	Matthias Schiffer

2013-11-01	Add missing const attribute to secret argument of the session init functions	Matthias Schiffer

2013-11-01	Implement new session init API	Matthias Schiffer

2013-10-31	Implement HKDF	Matthias Schiffer

2013-10-31	ec25519-fhmqvc: generate compat keys only when needed	Matthias Schiffer

2013-10-31	ec25519-fhmqvc: don't use separate keypairs as initiator and responder	Matthias Schiffer
	This reverts commit 81a329682b2035dc56f7c6c21815bac590f34b52. As many handshake parameters depend on the handshake direction, crossed handshakes will generate completely different keys anyways.
2013-10-31	Revert "ec25519-fhmqvc: make the new shared handshake key two hashes long ↵	Matthias Schiffer
	(only the first half is used for now)" This reverts commit cfc057a7e8ea858ee286d8f49a8899d4e826c779.