summaryrefslogtreecommitdiffstats
path: root/src
AgeCommit message (Collapse)Author
2013-11-15Allow using blowfish from OpenSSL on systems where it's available anywaysMatthias Schiffer
2013-11-15config: move check for no configured methodMatthias Schiffer
First check all error conditions before getting to the warnings (this is important for --generate-key). Also, downgrade the exit_bug to exit_error if method `null' is not supported.
2013-11-15methods/common: decrease nonce length to 6, add flags byteMatthias Schiffer
2013-11-14Ensure sessions are invalidated before the nonce wrapsMatthias Schiffer
While it isn't realistic for the nonce to wrap in less than one hour, it's better to check for this.
2013-11-14Move test for initiator in the session refresh check from protocol to methodMatthias Schiffer
2013-11-07CMake: add LINK_LIBRARIES workaround for old CMake versionsMatthias Schiffer
2013-11-07CMake: avoid target_include_directories command to stay compatible with ↵Matthias Schiffer
CMake 2.8.9
2013-11-06blowfish-ctr: use the whole 56-byte keyMatthias Schiffer
2013-11-05Generalize cipher/MAC key/IV lengthsMatthias Schiffer
2013-11-04Add simple blowfish-ctr cipher implementationMatthias Schiffer
2013-11-03Include protocol as a static library as wellMatthias Schiffer
2013-11-03Allow building without NaCl againMatthias Schiffer
2013-11-03Fix disabling modulesMatthias Schiffer
2013-11-03Improve build system for ciphers and MACs as wellMatthias Schiffer
2013-11-03Even nicer method specificationMatthias Schiffer
2013-11-02Make adding new methods a bit nicerMatthias Schiffer
2013-11-02More CMake cleanup and fixesMatthias Schiffer
2013-11-02Separate cmake filesMatthias Schiffer
2013-11-02Move a few prototypes from fastd.h into a new config.hMatthias Schiffer
2013-11-02Move all generated headers to the src subdirMatthias Schiffer
2013-11-02Change error message for methods from `invalid' to `unsupported'Matthias Schiffer
2013-11-02Algorithms without implementation aren't availableMatthias Schiffer
2013-11-02Convert ghash to the new crypto algorithm schemeMatthias Schiffer
2013-11-02Convert aes128-gcm into a generic gcm methodMatthias Schiffer
2013-11-02Allow flexible specification of methods provided by an implementationMatthias Schiffer
2013-11-02Correctly handle ciphers without implementationMatthias Schiffer
2013-11-02Implement the first step towards a more flexible way to support crypto methodsMatthias Schiffer
2013-11-01The attribute is called aligned, not alignMatthias Schiffer
2013-11-01Use HKDF for handshake keys as wellMatthias Schiffer
2013-11-01Use HKDF to derive the session keysMatthias Schiffer
2013-11-01Add missing const attribute to secret argument of the session init functionsMatthias Schiffer
2013-11-01Implement new session init APIMatthias Schiffer
2013-10-31Implement HKDFMatthias Schiffer
2013-10-31ec25519-fhmqvc: generate compat keys only when neededMatthias Schiffer
2013-10-31ec25519-fhmqvc: don't use separate keypairs as initiator and responderMatthias Schiffer
This reverts commit 81a329682b2035dc56f7c6c21815bac590f34b52. As many handshake parameters depend on the handshake direction, crossed handshakes will generate completely different keys anyways.
2013-10-31Revert "ec25519-fhmqvc: make the new shared handshake key two hashes long ↵Matthias Schiffer
(only the first half is used for now)" This reverts commit cfc057a7e8ea858ee286d8f49a8899d4e826c779.
2013-10-31ec25519-fhmqvc: make the new shared handshake key two hashes long (only the ↵Matthias Schiffer
first half is used for now)
2013-10-31ec25519-fhmqvc: add a new shared handshake key field (which is equivalent to ↵Matthias Schiffer
the compat one for now)
2013-10-31More compat renamingMatthias Schiffer
2013-10-31ec25519-fhmqvc: some more refactoringMatthias Schiffer
2013-10-31ec25519-fhmqvc: some more handshake refactoringMatthias Schiffer
2013-10-31Rename session_init to session_init_compat to prepare for the upcoming new ↵Matthias Schiffer
key derivation scheme
2013-10-31Change error subcode for unsupported method from method name to method listMatthias Schiffer
When two peers don't support a common method, fastd should notice this in the list stage, so the method list subcode is correct. The method name subcode was a legacy of the 0.4 compatiblity code.
2013-10-31Don't delay initial handshakes when no peer limit is setMatthias Schiffer
2013-10-30ec25519-fhmqvc: get rid of duplicate code in shared handshake key generationMatthias Schiffer
2013-10-30ec25519-fhmqvc: include either T or TLV_MAC in handshake finish, but not bothMatthias Schiffer
2013-10-30Add fastd_handshake_add_zero functionMatthias Schiffer
2013-10-30ec25519-fhmqvc: add secure_handshake helper functionMatthias Schiffer
2013-10-30Separate ec25519-fhmqvc into multiple source filesMatthias Schiffer
2013-10-29Correctly terminate method listMatthias Schiffer
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-18 15:05:18 +0200