toddouska
abbfcde0dc
add fips in core first/last files for code/data hashing
2014-05-08 10:26:31 -07:00
John Safranek
72e9ea8e4b
added Hash DRBG as configure option
2014-05-07 11:54:12 -07:00
John Safranek
ac18ce03df
DRBG Update
...
1. picked better values for entropy and nonce sizes based on
security strength
2. changed output block length to be the SHA-256 digest size
3. use constant drbgReseed when reseeding
4. renamed the "drgb" type constants from "dbrg"
5. removed the small stack change due to buffer size changes
6. internal helper function Hash_DRBG_Instantiate now also
takes a pointer to a nonce and a personalization string
7. the InitRng gathers enough bits from GenerateSeed() to
supply the entropy input and a nonce
8. lowered the reseed interval to 1 million
2014-05-06 14:05:52 -07:00
Takashi Kojo
371d2efa2c
remove SWO.ini files
2014-05-06 21:03:10 +09:00
Takashi Kojo
cdf8ab295c
current_time, generic to CortexM
2014-05-06 11:16:43 +09:00
John Safranek
d6b98c1fab
moved OCSP config code outside NO_FILESYSTEM fence
2014-05-05 16:13:08 -07:00
John Safranek
ec13f65ef0
made OCSP callback not dependent on stdio
2014-05-05 16:11:02 -07:00
Takashi Kojo
6ac7b056ee
Pic benchmark, clock config
2014-05-05 16:41:07 +09:00
Takashi Kojo
cb09e266c3
CMSIS-core based current_time
2014-05-05 15:33:04 +09:00
Takashi Kojo
3063c7d663
Update component version in option files
2014-05-05 12:13:34 +09:00
Takashi Kojo
52144ee9ca
Update component version in project files to 3.0.0
2014-05-05 11:34:36 +09:00
Takashi Kojo
eeb2e28f54
Sync with 3.0.0
2014-05-05 09:45:25 +09:00
Takashi Kojo
238e7b9458
Remove files
2014-05-05 09:39:59 +09:00
John Safranek
2f39b50063
fixed DateLessThan()
...
It was returning true on less-than or equal-to.
2014-05-03 16:46:56 -07:00
John Safranek
fd707ebafb
Hash_DRBG refactoring
...
1. Renamed everything that had DBRG with the correct DRBG
2. Changed word64 reseed_ctr to word32 reseedCtr
3. Changed reseed interval to 0xFFFFFFFF
2014-05-02 15:35:10 -07:00
toddouska
fbe09780ca
remove deadcode redundant length check
2014-05-02 11:40:36 -07:00
toddouska
697f77bef5
help coverity with max size issue on unsigned addition
2014-05-02 11:06:59 -07:00
toddouska
4104b74c40
fix resource leak on bad user cert chain big buffer
2014-05-02 10:30:07 -07:00
toddouska
3e62da0bc9
add linux crl monitor clean shutdown
2014-05-02 10:14:40 -07:00
Takashi Kojo
35d5b66d2c
Merge remote-tracking branch 'CyaSSL-master/master' into IAR
2014-05-02 09:32:55 +09:00
Takashi Kojo
b680e62832
set up Simulator
2014-05-02 09:31:22 +09:00
toddouska
912ec25a0f
fix linux crl monitor build
2014-05-01 09:34:16 -07:00
toddouska
14c978ca67
remove space
2014-05-01 09:30:17 -07:00
toddouska
5ff0336491
add custom kqueue event for crl monitor shutdown
2014-05-01 09:28:33 -07:00
Takashi Kojo
f225714e75
io.c, #include
2014-05-01 17:09:28 +09:00
Takashi Kojo
fb00110b77
CyaSSL library project and README
2014-05-01 17:03:01 +09:00
Takashi Kojo
2069394386
benchmark.c: cert file name
2014-05-01 15:26:55 +09:00
Takashi Kojo
3448610f9d
remove icf
2014-05-01 15:14:20 +09:00
Takashi Kojo
3de36b106e
Merge remote-tracking branch 'CyaSSL-master/master' into IAR
2014-05-01 14:33:49 +09:00
Takashi Kojo
5217d9ca98
Remove unused file
2014-05-01 14:32:02 +09:00
Takashi Kojo
169c0eee20
IAR EWARM project: test, benchmark
2014-05-01 14:29:09 +09:00
John Safranek
fb5200aa95
1. Added more options to the full commit test.
...
2. Cleanups from static analysis.
2014-04-30 15:01:10 -07:00
John Safranek
85d453f2d1
fix const issue with PK callbacks
2014-04-30 10:15:15 -07:00
John Safranek
09a7a087a2
fix static analysis warnings
2014-04-29 14:52:42 -07:00
John Safranek
2cf3564d1e
added fips_test.h to rpm/spec.in
2014-04-29 11:23:27 -07:00
John Safranek
838d9ea780
bump dev version, update README for v3.0.0
2014-04-29 10:45:01 -07:00
John Safranek
70dee7e190
Added the directoryName comparison to the name constraint checks.
2014-04-28 13:29:44 -07:00
John Safranek
68878d33d9
Merge branch 'frankencert'
2014-04-28 11:10:37 -07:00
John Safranek
618d282d94
Decodes the Name Constraints certificate extension on the CA cert
...
and checks the names on the peer cert, rejecting it if invalid
based on the name.
2014-04-28 11:03:24 -07:00
Takashi Kojo
20f12af8ec
crypto.h
2014-04-28 15:05:44 +09:00
Takashi Kojo
6cf1c8149b
AesCbcEncrypt/Decrypt return value
2014-04-28 10:52:35 +09:00
Takashi Kojo
f9ad1888cb
Fixed pic32mx/mz clock for benchmark
2014-04-28 10:51:18 +09:00
toddouska
2b34153c6a
remove microchip header for their API use, we'll try to get them to put in standard place and we'll include it instead
2014-04-25 14:32:11 -07:00
Takashi Kojo
6e3bbd135e
des3.h
2014-04-25 14:21:28 +09:00
Takashi Kojo
cb70631512
aes.c indentation
2014-04-25 14:18:23 +09:00
Takashi Kojo
2460679718
des3.h
2014-04-25 14:11:56 +09:00
Takashi Kojo
11aff767fd
corrected pic32mz header path
2014-04-25 13:50:12 +09:00
Takashi Kojo
e3becc3a65
des3 parity. internal.h to ctaocrypt/types.h
2014-04-25 13:35:35 +09:00
Chris Conlon
f20b25b510
add RSA_DECODE_EXTRA to RsaPublicKeyDecode() to handle OpenSSL-generated keys
2014-04-23 15:53:20 -06:00
Moisés Guimarães
30b63bda6f
random: InitRng and RNG_GenerateBlock to reduce stack usage: (up to 512 bytes - pointer sizes) moved to the heap.
...
with ARC4
--- InitRng: entropy variable moved to the heap; (256 bytes)
--- RNG_GenerateBlock: entropy variable moved to the heap; (256 bytes)
without ARC4
--- InitRng: key variable moved to the heap; (32 bytes)
--- InitRng: junk variable moved to the heap; (256 bytes)
2014-04-23 16:06:14 -03:00
