summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Merge branch 'pk-transparent-hash'Miloslav Trmač2010-08-275-14/+318
|\ | | | | | | | | Conflicts: ncr-int.h
| * Add transparent hash signature examplesMiloslav Trmač2010-08-271-0/+245
| |
| * Allow sharing keys for "regular" and "transparent" algorithmsMiloslav Trmač2010-08-271-1/+3
| |
| * Implement PK signatures with transparent hashesMiloslav Trmač2010-08-273-13/+70
| |
* | Merge branch 'session_update-iv'Miloslav Trmač2010-08-272-0/+23
|\ \
| * | Add support for changing IVs in sessionsMiloslav Trmač2010-08-272-0/+23
| |/
* | Merge remote branch 'origin/newapi'Miloslav Trmač2010-08-277-61/+194
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: examples/ncr.c examples/pk.c ncr-key-wrap.c ncr-key.c ncr.h
| * | Unwrapping keys are restricted the same way as wrapping keys.Nikos Mavrogiannopoulos2010-08-262-3/+3
| | |
| * | enforce the key wrap version.Nikos Mavrogiannopoulos2010-08-251-2/+10
| | |
| * | Added ENCRYPT, UNWRAPPING and VERIFY key flagsNikos Mavrogiannopoulos2010-08-255-6/+10
| | |
| * | The RFC5649 wrapping algorithm now includes a DER encoding of the data to ↵Nikos Mavrogiannopoulos2010-08-253-27/+170
| | | | | | | | | | | | distinguish between keys of different types. This prevents keys being unwrapped in a wrong type.
| * | use the rfc3394 suffix.Nikos Mavrogiannopoulos2010-08-251-2/+2
| | |
* | | Merge branch 'bugfixes'Miloslav Trmač2010-08-252-4/+4
|\ \ \
| * | | Make some objects staticMiloslav Trmač2010-08-252-4/+4
| | | |
* | | | Merge branch 'clone-session'Miloslav Trmač2010-08-257-15/+357
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: cryptodev_int.h ncr-sessions.c
| * | | | Add hash cloning example.Miloslav Trmač2010-08-251-0/+218
| | | | |
| * | | | Implement cloning hash sessionsMiloslav Trmač2010-08-254-17/+134
| | | | |
| * | | | Remove a redundant argument of cryptodev_hash_initMiloslav Trmač2010-08-255-8/+8
| | | | |
| * | | | Define session cloning interfaceMiloslav Trmač2010-08-253-0/+7
| | | | |
* | | | | Merge branch 'cleanups'Miloslav Trmač2010-08-255-8/+8
|\ \ \ \ \
| * | | | | Remove a redundant argument of cryptodev_hash_initMiloslav Trmač2010-08-255-8/+8
| | | | | |
* | | | | | Merge branch 'ids-after-initialization'Miloslav Trmač2010-08-251-121/+193
|\ \ \ \ \ \ | |/ / / / / |/| / / / / | |/ / / / | | | | | Conflicts: ncr-sessions.c
| * | | | Document locking.Miloslav Trmač2010-08-251-16/+31
| | | | | | | | | | | | | | | | | | | | | | | | | Document how members of session_item_st are protected, and what assumptions are made by internal functions.
| * | | | Move session_item_st definition to ncr-sessions.cMiloslav Trmač2010-08-252-26/+26
| | | | | | | | | | | | | | | | | | | | It is not used anywhere else.
| * | | | Unpublish session ID at start of ncr_session_final.Miloslav Trmač2010-08-251-21/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This means that ncr_session_final() can't be called on one ID twice, ensuring that the ID is still unique throughout the runtime of ncr_session_final(). (Note that this is not guaranteed for ncr_session_update(): a concurrent thread can call ncr_session_final() on the ID and reuse it before ncr_session_update() finishes.)
| * | | | Rename ncr_sessions_item_get() to session_get_ref()Miloslav Trmač2010-08-251-4/+4
| | | | | | | | | | | | | | | | | | | | ... for consistency with the other session ID handlers.
| * | | | Simplify refcount handling in session_initMiloslav Trmač2010-08-251-5/+4
| | | | |
| * | | | Don't allocate session IDs for *_ONCE.Miloslav Trmač2010-08-251-19/+2
| | | | | | | | | | | | | | | | | | | | | | | | | Also skip locking the mutex - the session is private to the calling thread, nothing else can access it.
| * | | | Move ID handling out of _ncr_session_initMiloslav Trmač2010-08-251-22/+35
| | | | |
| * | | | Move session lookup and locking out of _ncr_session_finalMiloslav Trmač2010-08-251-28/+46
| | | | |
| * | | | Remove redundant deinitializations.Miloslav Trmač2010-08-251-7/+0
| | | | | | | | | | | | | | | | | | | | _ncr_sessions_item_put() clears this all on last put.
| * | | | Avoid duplicit lookup and locking in _try_session_updateMiloslav Trmač2010-08-251-31/+11
| | | | |
| * | | | Move session lookup and locking out of low-level functionsMiloslav Trmač2010-08-251-34/+49
| | | | | | | | | | | | | | | | | | | | While doing this, also lock mem_mutex during _ncr_session_update_key.
| * | | | Publish sessions only after initializationMiloslav Trmač2010-08-251-2/+2
| | | | |
| * | | | Separate session ID allocation from object creationMiloslav Trmač2010-08-251-15/+57
| | | | |
| * | | | Make some session functions staticMiloslav Trmač2010-08-252-6/+5
| | |_|/ | |/| |
* | | | Don't duplicate the list of example programsMiloslav Trmač2010-08-251-1/+1
| | | |
* | | | Move session_item_st definition to ncr-sessions.cMiloslav Trmač2010-08-252-26/+26
| | | | | | | | | | | | | | | | It is not used anywhere else.
* | | | Remove redundant deinitializations.Miloslav Trmač2010-08-251-7/+0
| | | | | | | | | | | | | | | | _ncr_sessions_item_put() clears this all on last put.
* | | | Make some session functions staticMiloslav Trmač2010-08-252-6/+5
| | | |
* | | | Simplify key flag updatesMiloslav Trmač2010-08-253-51/+36
|/ / /
* | | Fix wrapping test conversionsMiloslav Trmač2010-08-252-6/+11
| | |
* | | Merge branch 'bugfixes' into nlattrMiloslav Trmač2010-08-258-37/+93
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: cryptodev_main.c examples/ncr.c examples/pk.c ncr-int.h ncr-key-wrap.c ncr-key.c ncr.c ncr.h
| * | Make it possible to import private keysMiloslav Trmač2010-08-244-7/+19
| | |
| * | Base access decisions only on capable(), not euidMiloslav Trmač2010-08-242-2/+2
| | |
| * | Reject prohibited key flags immediatelyMiloslav Trmač2010-08-244-24/+50
| | | | | | | | | | | | Silently ignoring user's requests is unexpected.
| * | Provide file_operations::unlocked_ioctl.Miloslav Trmač2010-08-243-7/+6
| | | | | | | | | | | | | | | | | | file_operations::ioctl is no longer supported in recent kernels. compat_ioctl is not running under the BKL, so the code has to do its own locking anyway (although not everything currently does).
| * | Drop unnecessary "file *" argument to ncr_ioctl()Miloslav Trmač2010-08-243-5/+3
| |/
* | Renumber ioctlsMiloslav Trmač2010-08-251-18/+17
| | | | | | | | | | | | | | - The ranges in Documentation/ioctl/ioctl-number.txt are allocated in hexadecimal digits - The operation identifer must be <= 255 - Leave smaller spaces to give other drivers a chance
* | Fix ioctl directionMiloslav Trmač2010-08-251-1/+1
| |