summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Add some utilities to make examples nicerHEADmasterbugfixesMiloslav Trmač2010-09-074-1147/+517
|
* Examples directory renamed -> testsNikos Mavrogiannopoulos2010-09-078-2/+2
|
* Simplified makefileNikos Mavrogiannopoulos2010-09-071-0/+3
|
* Rename CONFIG_AS*YM*METRIC, push into headersMiloslav Trmač2010-09-068-64/+58
|
* Algorithm to OID discovery moved to a single place.Nikos Mavrogiannopoulos2010-09-0612-89/+96
|
* Run Lindent on libtom(*)Nikos Mavrogiannopoulos2010-09-06152-7864/+8090
|
* run scripts/Lindent.Nikos Mavrogiannopoulos2010-09-0623-3271/+3490
|
* Fix DH testMiloslav Trmač2010-09-061-1/+1
|
* Added config flag CONFIG_ASSYMETRIC, that will disable all assymetric ↵Nikos Mavrogiannopoulos2010-09-066-15/+83
| | | | algorithm support when building the module. As a side-effect (due to DER requirements) key wrapping is disabled as well.
* Use the ncr_algorithm_t as an identifier for storage data. This will allowNikos Mavrogiannopoulos2010-09-054-17/+14
| | | | | keys tied to RSA-transparent, to be used for RSA operations as well (once keys are made tied to an algorithm).
* Added flag: NCR_KEY_FLAG_ALLOW_TRANSPARENT_HASHNikos Mavrogiannopoulos2010-09-054-9/+20
|
* 3DES-ECB has also effective key length of 112.Nikos Mavrogiannopoulos2010-09-051-1/+1
|
* Run DH key exchange for 100 times for testing.Nikos Mavrogiannopoulos2010-09-051-200/+226
|
* DH key generation moved to a while loop... Just in case.Nikos Mavrogiannopoulos2010-09-051-12/+14
|
* Key wrapping is privileged.Nikos Mavrogiannopoulos2010-09-051-0/+28
|
* Added flag NCR_KEY_FLAG_HASHABLE and enforced it when reading a key for hashing.Nikos Mavrogiannopoulos2010-09-053-1/+8
|
* Rationalized the key wrapping format. It currently is:Nikos Mavrogiannopoulos2010-09-053-76/+198
| | | | | | | | | | | PackedData ::= SEQUENCE { version INTEGER { v1(0) } algorithm OBJECT IDENTIFIER, type INTEGER { secret_key(0), public(1), private(2) }, data OCTET STRING } Unfortunately there are not assigned OIDs for all algorithms we support.
* Optimizations for 32bit machines by using a 64bit word type and 32bit digit.Nikos Mavrogiannopoulos2010-09-034-7/+16
| | | | Unfortunately we cannot do the same for 64bit since we don't have an 128bit type in kernel.
* Added a FIXME on the used types.Nikos Mavrogiannopoulos2010-09-021-0/+4
|
* Use the linux kernel heapsort instead of including qsort.Nikos Mavrogiannopoulos2010-09-026-252/+6
|
* Removed unneeded code.Nikos Mavrogiannopoulos2010-09-0213-845/+5
|
* Drop a redundant prototype.Miloslav Trmač2010-09-021-2/+0
|
* Added an emulation of a userspace application that provides encryption service.Nikos Mavrogiannopoulos2010-09-014-0/+1623
|
* export ncr_key_clear(). And disallow key derivation from wrapping keys.Nikos Mavrogiannopoulos2010-08-311-0/+2
|
* Prevent usage of wrapping keys for anything else except wrapping.Nikos Mavrogiannopoulos2010-08-311-0/+8
|
* Merge branch 'pk-transparent-hash'Miloslav Trmač2010-08-275-14/+318
|\ | | | | | | | | Conflicts: ncr-int.h
| * Add transparent hash signature examplesMiloslav Trmač2010-08-271-0/+245
| |
| * Allow sharing keys for "regular" and "transparent" algorithmsMiloslav Trmač2010-08-271-1/+3
| |
| * Implement PK signatures with transparent hashesMiloslav Trmač2010-08-273-13/+70
| |
* | Merge branch 'session_update-iv'Miloslav Trmač2010-08-272-0/+23
|\ \
| * | Add support for changing IVs in sessionsMiloslav Trmač2010-08-272-0/+23
| |/
* | Merge remote branch 'origin/newapi'Miloslav Trmač2010-08-277-61/+194
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: examples/ncr.c examples/pk.c ncr-key-wrap.c ncr-key.c ncr.h
| * | Unwrapping keys are restricted the same way as wrapping keys.Nikos Mavrogiannopoulos2010-08-262-3/+3
| | |
| * | enforce the key wrap version.Nikos Mavrogiannopoulos2010-08-251-2/+10
| | |
| * | Added ENCRYPT, UNWRAPPING and VERIFY key flagsNikos Mavrogiannopoulos2010-08-255-6/+10
| | |
| * | The RFC5649 wrapping algorithm now includes a DER encoding of the data to ↵Nikos Mavrogiannopoulos2010-08-253-27/+170
| | | | | | | | | | | | distinguish between keys of different types. This prevents keys being unwrapped in a wrong type.
| * | use the rfc3394 suffix.Nikos Mavrogiannopoulos2010-08-251-2/+2
| | |
* | | Merge branch 'bugfixes'Miloslav Trmač2010-08-252-4/+4
|\ \ \
| * | | Make some objects staticMiloslav Trmač2010-08-252-4/+4
| | | |
* | | | Merge branch 'clone-session'Miloslav Trmač2010-08-257-15/+357
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: cryptodev_int.h ncr-sessions.c
| * | | | Add hash cloning example.Miloslav Trmač2010-08-251-0/+218
| | | | |
| * | | | Implement cloning hash sessionsMiloslav Trmač2010-08-254-17/+134
| | | | |
| * | | | Remove a redundant argument of cryptodev_hash_initMiloslav Trmač2010-08-255-8/+8
| | | | |
| * | | | Define session cloning interfaceMiloslav Trmač2010-08-253-0/+7
| | | | |
* | | | | Merge branch 'cleanups'Miloslav Trmač2010-08-255-8/+8
|\ \ \ \ \
| * | | | | Remove a redundant argument of cryptodev_hash_initMiloslav Trmač2010-08-255-8/+8
| | | | | |
* | | | | | Merge branch 'ids-after-initialization'Miloslav Trmač2010-08-251-121/+193
|\ \ \ \ \ \ | |/ / / / / |/| / / / / | |/ / / / | | | | | Conflicts: ncr-sessions.c
| * | | | Document locking.Miloslav Trmač2010-08-251-16/+31
| | | | | | | | | | | | | | | | | | | | | | | | | Document how members of session_item_st are protected, and what assumptions are made by internal functions.
| * | | | Move session_item_st definition to ncr-sessions.cMiloslav Trmač2010-08-252-26/+26
| | | | | | | | | | | | | | | | | | | | It is not used anywhere else.
| * | | | Unpublish session ID at start of ncr_session_final.Miloslav Trmač2010-08-251-21/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This means that ncr_session_final() can't be called on one ID twice, ensuring that the ID is still unique throughout the runtime of ncr_session_final(). (Note that this is not guaranteed for ncr_session_update(): a concurrent thread can call ncr_session_final() on the ID and reuse it before ncr_session_update() finishes.)