toddouska
0ea10a4388
add 3DES fips mode
2014-03-24 13:37:52 -07:00
toddouska
8889e17489
Merge branch 'master' of github.com:cyassl/cyassl
2014-03-21 14:50:52 -07:00
toddouska
9fe9276236
finish fips aes w/ tests
2014-03-21 14:49:49 -07:00
John Safranek
e19e2a801d
Ext Key Usage
...
1. Store reference to raw EKU OIDs in the DecodedCert.
2. Fixed usage of the anyEKU.
2014-03-21 09:37:10 -07:00
John Safranek
08ae775406
Merge branch 'master' of github.com:cyassl/cyassl
2014-03-21 09:34:08 -07:00
toddouska
98c6e3f3af
have Base16 Decode on for FIPS tests
2014-03-20 11:38:14 -07:00
toddouska
8bc6bf9424
add lower case support to Base16 decode for better known answer test support, export
2014-03-20 10:31:52 -07:00
John Safranek
1e041abf04
decode Extended Key Usage extension
2014-03-20 10:07:47 -07:00
toddouska
58885b36eb
add AesCbc fips mode
2014-03-19 16:43:52 -07:00
toddouska
388436c53e
add AesSetKey fips mode
2014-03-19 13:56:11 -07:00
John Safranek
1ea620cece
Merge branch 'master' of github.com:cyassl/cyassl
2014-03-14 16:02:38 -07:00
John Safranek
bcd7f03495
X.509
...
1. Added stubs for the Extended Key Usage and Inhibit anyPolicy
extensions.
2. Key Usage extension is decoded normally.
3. Certificate Policy extension is noted normally.
2014-03-14 15:48:33 -07:00
Chris Conlon
a28d0dd276
add EROAD settings
2014-03-14 15:54:21 -06:00
John Safranek
1c35e5929a
Merge branch 'master' of github.com:cyassl/cyassl
2014-03-12 15:41:40 -07:00
John Safranek
92c31d81f9
X.509 with unsupported critical extensions should be rejected
2014-03-11 11:50:45 -07:00
Takashi Kojo
6235c949b3
PIC32MZ
2014-03-11 11:32:16 +09:00
Takashi Kojo
a9ca608030
Sync with CyaSSL master
2014-03-11 11:22:39 +09:00
Takashi Kojo
3e41d8cecb
Merge branch 'PIC32MZ-HWCrypt'
...
Conflicts:
configure.ac
ctaocrypt/benchmark/benchmark.c
ctaocrypt/src/asn.c
ctaocrypt/src/coding.c
ctaocrypt/src/des3.c
ctaocrypt/src/md5.c
ctaocrypt/src/random.c
ctaocrypt/src/sha.c
ctaocrypt/src/sha256.c
cyassl/ctaocrypt/aes.h
cyassl/ctaocrypt/settings.h
cyassl/ssl.h
cyassl/version.h
examples/server/server.c
m4/ax_debug.m4
m4/ax_tls.m4
mplabx/benchmark_main.c
mplabx/ctaocrypt_test.X/nbproject/configurations.xml
mplabx/test_main.c
src/io.c
src/ocsp.c
src/ssl.c
src/tls.c
testsuite/testsuite.c
2014-03-11 10:11:36 +09:00
Takashi Kojo
8ea2eec773
Merge https://github.com/cyassl/cyassl
2014-03-11 09:55:57 +09:00
Takashi Kojo
65dc202356
settings.h for Harmony
2014-03-04 22:57:51 +09:00
Takashi Kojo
e5a51ca516
PIC32MZ Crypt Engine
2014-03-04 22:10:19 +09:00
Takashi Kojo
f5922255b0
Catching up 2.9.0
2014-03-04 22:09:38 +09:00
toddouska
a50d2e1e21
fix -Wcast-align
2014-03-02 11:47:43 -08:00
toddouska
12a1b2faed
more settings
2014-02-18 17:46:08 -08:00
toddouska
5421990c80
add ARM to settings
2014-02-18 17:01:27 -08:00
Chris Conlon
85a47b4596
add NO_STDIO_FILESYSTEM to exclude FILE usage from non standard filesystems
2014-02-14 14:57:43 -07:00
Chris Conlon
bc3fc658bb
move filesystem abstraction to port.h
2014-02-14 14:46:49 -07:00
Chris Conlon
e3f8b74181
update tyto settings.h
2014-02-12 14:18:23 -07:00
Chris Conlon
cf6eaf219a
tyto build - add GenerateSeed, exclude ctype.h, test.h
2014-02-12 13:39:38 -07:00
John Safranek
f669e73c8d
Merge branch 'master' of github.com:cyassl/cyassl
2014-02-03 14:49:38 -08:00
John Safranek
2758f40a09
For OCSP, when decoding X.509 Auth Info Access record, find the first
...
OCSP responder, rather than only looking at the first item.
2014-02-03 14:39:41 -08:00
Takashi Kojo
168985ed9f
LwIP native TCP Socket
2014-02-02 18:09:25 +09:00
toddouska
c14bc1a45c
fix ecc w/o openssl extra
2014-02-01 11:37:08 -08:00
Chris Conlon
42ad70591a
prevent XFREE from freeing NULL pointer under Freescale MQX
2014-01-28 10:28:19 -07:00
toddouska
e040e0ba7a
fix scep 32
2014-01-27 12:50:29 -08:00
Chris Conlon
43199cd573
PKCS7_DecodeEnvelopedData, only do ParseCert once in PKCS7_InitWithCert
2014-01-23 14:48:18 -07:00
toddouska
45c05ffd30
add non block size AesCtr support
2014-01-23 12:34:27 -08:00
John Safranek
15f94b2f98
1. Resized sample PKCS7 signed data attribute.
...
2. Removed unnecessary PKCS7 signed data attribute.
2014-01-21 11:45:15 -08:00
John Safranek
c35a635fd7
Added initial PKCS7_VerifySignedData(). Only saves
...
the first included certificate if available.
2014-01-20 15:52:41 -08:00
John Safranek
28f3a2dc21
Added deallocator function for PKCS7 initializer data.
2014-01-20 10:51:26 -08:00
John Safranek
c4eb5642b1
1. Sign the PKCS#7 with a supplied private key, not
...
the single cert's public key.
2. Rename PKCS7 Envelope Data function as
`PKCS7_EncodeEnvelopedData()`.
3. Encode signed data to check input parameters.
2014-01-17 14:07:40 -08:00
John Safranek
cf22e49117
Merge branch 'master' of github.com:cyassl/cyassl
2014-01-16 16:19:34 -08:00
John Safranek
264ce75041
1. Split SetTagged into SetExplicit and SetImplicit.
...
2. Updated code using SetTagged to use new functions.
2014-01-16 16:17:17 -08:00
Chris Conlon
a75b95facc
more comments to PKCS#7 files
2014-01-16 13:29:37 -07:00
John Safranek
85c5c29e7a
Merge branch 'master' of github.com:cyassl/cyassl
...
Conflicts:
ctaocrypt/test/test.c
cyassl/ctaocrypt/pkcs7.h
2014-01-15 13:23:26 -08:00
John Safranek
c33a8a890e
Added encoding PKCS#7 signed data messages.
2014-01-15 12:31:51 -08:00
Chris Conlon
9f7e33e7e1
add PKCS7_DecodeEnvelopedData()
2014-01-14 22:57:55 -07:00
Chris Conlon
d63c58864f
expose more ASN.1 helper functions with CYASSL_LOCAL
2014-01-14 22:48:55 -07:00
Chris Conlon
80c19aaf33
add PKCS7 error codes
2014-01-14 22:46:54 -07:00
Chris Conlon
f072d92ed8
Merge branch 'master' of github.com:cyassl/cyassl
2014-01-13 13:20:29 -07:00
Chris Conlon
69ffa3a481
add PKCS7_EncodeEnvelopeData()
2014-01-13 13:19:44 -07:00
toddouska
bb6b2e86c6
add base64 encode with esacped line ending, keep existing api intact
2014-01-13 12:17:12 -08:00
John Safranek
ef9cfc2172
Added method to encode PKCS7 data type messages.
2014-01-13 10:58:01 -08:00
Chris Conlon
3a984990c2
update pkcs7.h
2014-01-10 16:17:02 -07:00
Chris Conlon
71e13a3c3a
expose ASN.1 helper fns, add blkType
2014-01-10 16:13:56 -07:00
Chris Conlon
1d67d9217e
initial PKCS#7 stubs, tie into ./configure
2014-01-10 15:17:03 -07:00
John Safranek
f9e73a8aeb
Added setting the cert req challenge password.
2014-01-09 14:17:55 -08:00
John Safranek
f545a33e77
Cert Req
...
1. Added support for the cert req attributes.
2. Added setting the Basic Constraints extenstion request.
3. Added error checking for the cert req attribs.
2014-01-08 16:26:42 -08:00
John Safranek
4de6a6d902
Cert Request
...
1. Added function to make simple DER format cert reqs.
2. Added cert req type to DerToPem.
2014-01-07 17:25:46 -08:00
Chris Conlon
99ac08cf3d
lower case mp_sqr() parameters, missed in previous commit
2014-01-02 13:37:11 -07:00
Chris Conlon
9f4ea7d059
update TYTO settings, FREESCALE_MMCAU AES check for NULL
2014-01-02 13:13:18 -07:00
Chris Conlon
7cc9ab3d6f
use lower case variables, prevent conflict with some toolchain defines
2014-01-02 13:11:27 -07:00
John Safranek
d46c68ba10
Moved OCSP into the CertManager like the CRL.
2013-12-27 12:11:47 -08:00
rofl0r
a36c18c27f
implement CyaSSL_ERR_reason_error_string
...
this has several advantages:
- we can provide a replacement for openssl's ERR_reason_error_string,
which makes porting simpler,
- code shrink due to removal of excessive strcpy call
- all error strings are const anyway so there's no point to force the
user to supply storage for them and copying them around.
2013-12-19 19:40:48 +01:00
John Safranek
75e6ac534e
Force Cygwin to use function tolower() rather than macro version
2013-12-18 10:58:10 -08:00
toddouska
7585e92fee
allow cert signing w/o Cert object, buffer only
2013-11-19 16:56:49 -08:00
John Safranek
4377996d87
Saved original SKID and AKID from certificate for later use with X.509 functions.
2013-11-19 16:20:18 -08:00
John Safranek
0fd6aed9b6
Save more decoded data from certificate for later use with X.509 functions.
2013-11-19 14:44:55 -08:00
Chris Conlon
c0007ad6b3
move Coldfire SEC specific DES/3DES header sections into define
2013-11-19 14:34:05 -07:00
toddouska
d91e8ab38e
add cert gen for ecc certs
2013-11-14 20:34:39 -08:00
toddouska
a7bcca84c3
add ecdsa cert signing
2013-11-14 15:00:22 -08:00
Chris Conlon
7a1fb428d1
fix ecc_set_type member name conflict
2013-11-14 11:10:29 -07:00
toddouska
cf4230b073
add ecc encrypt secure message exchange, hide ecEncCtx
2013-11-13 17:53:11 -08:00
toddouska
0ef44329ef
add thread local storage to ecc fp cache, no locking required but cache is per thread, higher conncurrent performance but more memory needed
2013-11-11 17:00:35 -08:00
Takashi Kojo
23cada35ba
Catch up master
2013-11-10 21:06:34 +09:00
toddouska
c2f9064ae4
Merge branch 'master' of github.com:cyassl/cyassl
2013-11-07 16:00:34 -08:00
toddouska
554adff672
add basic ecc encrypt/decrypt
2013-11-07 15:59:31 -08:00
Takashi Kojo
16bda74536
For MDK5 Pack
2013-11-07 10:29:01 +09:00
Takashi Kojo
f26cf50ff2
Merge branch 'master' of https://github.com/cyassl/cyassl into MDK5
2013-11-06 10:22:21 +09:00
John Safranek
913e200cd0
X.509 Additions:
...
* CyaSSL_X509_d2i()
* CyaSSL_X509_d2i_fp()
* CyaSSL_X509_version()
* CyaSSL_X509_get_notBefore()
* CyaSSL_X509_get_notAfter()
* CyaSSL_X509_STORE_new()
* CyaSSL_X509_STORE_free()
* CyaSSL_X509_STORE_add_cert()
* CyaSSL_X509_STORE_set_default_paths()
* CyaSSL_X509_get_pubkey()
* CyaSSL_EVP_PKEY_free()
* CyaSSL_X509_NAME_get_text_by_NID()
* CyaSSL_X509_NAME_entry_count()
* CyaSSL_X509_verify_cert()
* CyaSSL_X509_STORE_CTX_new()
* CyaSSL_X509_STORE_CTX_init()
* CyaSSL_X509_STORE_CTX_free()
2013-11-04 11:02:17 -08:00
toddouska
5e00d62ea3
add HMAC-KDF
2013-10-31 18:03:00 -07:00
toddouska
f402d7eed9
add ecc export pirvate only
2013-10-29 16:44:33 -07:00
toddouska
9438d0d41b
add Microchip MPLAB Harmony support
2013-10-28 11:03:50 -07:00
Takashi Kojo
b4a03de8ee
port.h for MDK5
2013-10-24 20:55:21 +09:00
Takashi Kojo
558735c862
port.[ch] for MDK5
2013-10-24 20:33:36 +09:00
Takashi Kojo
2f98233825
For MDK5
2013-10-24 18:50:26 +09:00
toddouska
c039b0106a
add HC-128 Blake2b 256 cipher suite for speed test
2013-10-23 17:13:54 -07:00
Chris Conlon
f45d0709b3
case insensitivity fix for domain name check
2013-10-18 15:17:19 -06:00
John Safranek
33bcc76a07
Merge branch 'master' of github.com:cyassl/cyassl
2013-10-02 15:27:10 -07:00
Chris Conlon
3e12f43342
add CyaSSL_GetHmacMaxSize for JNI wrapper
2013-09-25 14:20:36 -06:00
toddouska
363f157f50
fix sniffer build w/o fastmath
2013-09-23 13:37:04 -07:00
toddouska
bdb8b9396c
Merge branch 'master' of github.com:cyassl/cyassl
2013-09-20 10:37:16 -07:00
toddouska
d1fcce2f73
more settings
2013-09-20 10:36:05 -07:00
John Safranek
5e4ca53496
clean up Windows build issues with OCSP
2013-09-18 14:47:51 -07:00
John Safranek
b0f94a34e6
Deleted stray semicolon from struct Des definition
2013-09-17 16:42:52 -07:00
Chris Conlon
ee78b108cf
CTaoCrypt test mods for MQX
2013-09-16 15:48:36 -06:00
John Safranek
e564b614bf
Decode the serialNumber field in the X.509 names
2013-09-15 22:10:58 -07:00
toddouska
74e7ba8536
fix Kojo-san pull errors
2013-09-11 10:07:33 -07:00
kojo
0869da34a0
Coldfire SEC
2013-09-11 17:06:28 +09:00
John Safranek
03d7c694e8
Merge branch 'master' of github.com:cyassl/cyassl
2013-09-10 16:49:40 -07:00