Commit Graph

455 Commits

Author SHA1 Message Date
Ludovic FLAMENT 409126a97c add support for curve 25519 and Ed25519 in OpenSSH
refactor curve25519 and Ed25519 code
fix warning in PEM_xxx_mem_xxx functions
2015-08-01 18:28:18 +02:00
toddouska 2ade35c65a expose have 128bit type to options flags 2015-07-31 16:43:59 -07:00
toddouska 2cbb30745e bump dev version 2015-07-30 12:59:17 -07:00
kaleb-himes 37211d4636 crl script initialize 2015-07-21 13:56:47 -06:00
toddouska 51f177fdb7 bump dev version 2015-07-17 15:41:51 -07:00
toddouska 262f5f87cb remove auto timing resistant with stunnel 2015-07-17 14:52:03 -07:00
Nickolas Lapp cb3873ea03 Configure options to allow stunnel to use fastmath 2015-07-17 15:05:04 -06:00
JacobBarthelmeh 7d44ed3989 Merge pull request #97 from jschanck-si/libntruencrypt
Use updated drbg ntru functions from stable libntruencrypt api
2015-07-17 14:18:27 -06:00
toddouska bae8c6fd50 add openssh ./configure build 2015-07-17 09:14:58 -07:00
kaleb-himes 11f1159e30 fortress relies on aes disallowed pair 2015-07-17 09:30:25 -06:00
toddouska 9b81e41856 merge pull request 96 2015-07-16 16:46:37 -07:00
kaleb-himes e698c12530 ecc_encrypt + hkdf requires aes 2015-07-16 15:31:36 -06:00
John M. Schanck 53fb9188e7 Use ntru functions from stable libntruencrypt api
ntru_crypto_external_drbg_instantiate has been renamed
to ntru_crypto_drbg_external_instantiate in the 1.0.0
release of libntruencrypt. Made various other small changes
to build against libntruencrypt.
2015-07-16 15:43:50 -04:00
toddouska 0b3bc289ae fix enable stunnel help alignment 2015-07-15 13:44:09 -07:00
Nickolas Lapp 96cf16848c Stunnel Base Commit 2015-07-14 14:56:26 -06:00
toddouska e6d8ab0d45 add enable lighty 2015-07-09 09:14:33 -06:00
Jacob Barthelmeh 14723b7e65 QSH (quantum-safe handshake) extension 2015-07-07 09:55:58 -06:00
toddouska 74245dcc1c bump dev version 2015-07-01 14:43:58 -07:00
toddouska 48a42e1a75 prepare release 2015-06-18 16:58:59 -07:00
toddouska fe39cd34b9 bump version 2015-06-18 11:18:51 -07:00
toddouska 6d9fece9f4 bump dev version 2015-06-12 09:39:03 -07:00
Jacob Barthelmeh e461bc72b8 curve25519 and ed25519 low memory 2015-06-05 15:39:37 -06:00
Chris Conlon defd1f9f94 add configure option for wolfSSL JNI, --enable-jni 2015-06-02 21:58:23 -06:00
John Safranek 77fe4f3a2e Fixes #71. Disable SHA works with TLS, PWDBASED, testing. 2015-05-28 10:25:41 -07:00
toddouska c52b7160e9 fix ipv6 external test case 2015-05-07 12:15:58 -07:00
toddouska 7536cec0d6 fix github issue #65, ignore sys options 2015-04-17 09:23:43 -07:00
toddouska 281decae46 fix github issue #65, don't undef with arg to options.h 2015-04-16 10:36:51 -07:00
toddouska ceeb3d007e fix github issue #65, don't output (N)DEBUG to options.h 2015-04-13 12:01:21 -07:00
toddouska 7e9a5fb8ee remove poly/chacha from fips build 2015-04-12 11:01:16 -07:00
John Safranek aef879dc20 Updated iOS FIPS project, bump version 2015-04-06 15:06:56 -07:00
Jacob Barthelmeh 10f853ae4d adjustment to chacha for big endian 2015-04-03 12:19:40 -06:00
toddouska 7552764fbb turn off chacha on big endian 2015-04-02 11:34:17 -07:00
John Safranek b5a1cd186f Merge branch 'master' of github.com:wolfSSL/wolfssl 2015-04-01 13:39:30 -07:00
John Safranek 3039d16e09 1. HAVE_AEAD and HAVE_PFS should be set in internal.h, not CFLAGS
2. Added WOLFSSL_MAX_STRENGTH as option in settings.h for non-autoconf
3. When selecting max-strength cipher suites, ECDHE is only dependent on
   ECC, not DH
2015-04-01 13:35:13 -07:00
toddouska 8dd1afb49c have ./configure error out on maxstrength + sniffer 2015-04-01 12:30:46 -07:00
John Safranek 5ecbe14d2c Added --enable-maxstrength configure build to only
allow TLSv1.2, PFS, and AEAD ciphers.
2015-04-01 11:55:49 -07:00
toddouska 5ed451a29d Merge branch 'master' of github.com:wolfssl/wolfssl 2015-04-01 09:39:10 -07:00
toddouska 3abf1952c8 fix leanpsk default changes 2015-04-01 09:37:41 -07:00
John Safranek 748c5ac128 update configure help strings for AESGCM and DH 2015-03-31 16:23:28 -07:00
toddouska d84ff83689 fix leanpsk w/ new defaults 2015-03-31 15:55:39 -07:00
toddouska 24102eb95f on x86_64 enable sha512, ecc, and increase max_bits by default 2015-03-31 13:28:49 -07:00
Chris Conlon a24a22670c fix configure help string for arc4, chacha, poly1305 2015-03-31 09:42:32 -06:00
toddouska 1c19b67885 update lib version 2015-03-30 13:07:59 -07:00
toddouska e917df4c59 prepare 3.4.6 release 2015-03-30 12:28:12 -07:00
toddouska 4332acbeaa leanpsk doesn't need new gcm, poly, chacah defaults 2015-03-29 11:30:05 -07:00
toddouska 9ba62a2c52 allow examples build if no-sha but psk is on 2015-03-28 14:58:17 -07:00
toddouska 27faf15678 add intelasm ./configure option 2015-03-28 14:34:39 -07:00
toddouska 1fc3aa100b aes gcm/ccm require aes, duh 2015-03-27 21:30:27 -07:00
toddouska 495fbe087e allow dh to be used w/o certs and asn 2015-03-27 14:28:05 -07:00
toddouska ff11df2c14 enable chacha - poly by default 2015-03-27 11:22:42 -07:00
toddouska af1fd4719a enable gcm by default 2015-03-27 11:12:42 -07:00
toddouska c5f7c7ce57 enable dh by default 2015-03-27 10:23:15 -07:00
toddouska d655fb9d74 remove rc4 from default build 2015-03-27 10:17:22 -07:00
toddouska 8f6d7a1ce7 rename ecc25519 to curve25519, less confusing with ed25519 now in play too 2015-03-24 11:56:40 -07:00
toddouska 478a8bb059 adjust ./configure format, change ed sign/verify to msg from hash 2015-03-19 12:48:32 -07:00
Jacob Barthelmeh d89d524570 initial ed25519 implementation 2015-03-19 11:40:41 -06:00
toddouska 6b0bfa1b2c bump dev version 2015-03-17 14:59:01 -07:00
John Safranek 84edbd1ff2 cleanup some configure help text 2015-03-12 12:25:39 -07:00
John Safranek dbe6ecedf8 fix enable-sniffer option in configure.ac 2015-03-12 12:07:48 -07:00
toddouska 7caf0499d6 bump version 2015-03-06 13:39:57 -08:00
toddouska d5975e39f8 fix github issue #27, better help on fips not working w/o license 2015-03-06 09:15:33 -08:00
toddouska 9d20e712bf add autoconf support for chapoly-aead, wipe temp polykey, minor whitespace adjusts 2015-02-24 12:33:52 -08:00
toddouska 608da64ece add ForceZero() to force memset(0) 2015-02-20 15:51:21 -08:00
Jacob Barthelmeh 4babd2cf2d added in curve25519 crypto 2015-02-19 10:59:05 -07:00
toddouska 0efdabb9a0 move pwdbased lower in config for openssl manual sets 2015-02-16 09:54:55 -08:00
kaleb-himes 297e1751b2 return line options.h being read literally by debian, fixed 2015-02-11 14:10:06 -07:00
kaleb-himes 14eaa69eae version git diff fix 2015-01-27 11:42:25 -07:00
toddouska 466d8a970c bump version 2015-01-26 14:02:57 -08:00
John Safranek e5734d5ef5 wolfssl is a new library, reset libtool version number to 0:0:0 2015-01-09 11:20:41 -08:00
kaleb-himes be35f0df47 3.3.3 2015-01-09 10:37:42 -07:00
kaleb-himes b7aa0e1057 Johns changes in cyassl/cyassl 2015-01-08 16:51:59 -07:00
kaleb-himes a389620a29 Copyright (C) updates 2015-01-08 09:39:04 -07:00
kaleb-himes 8d98db7593 cyassl/options.h backwards compatibile 2015-01-07 14:30:02 -07:00
kaleb-himes e84f429ed4 white space configure.ac 2015-01-06 15:00:38 -07:00
Jacob Barthelmeh bc48c83147 blake2 debug and settings refactor 2015-01-06 10:16:56 -07:00
kaleb-himes e8af870e37 distribution fix 2015-01-05 16:58:28 -07:00
kaleb-himes 5cff32e271 backing up 2014-12-31 16:04:42 -07:00
kaleb-himes a50af85e95 autoconf, libversioning, .gitignore updated 2014-12-31 14:06:01 -07:00
kaleb-himes b569165ad8 configure.ac updates 2014-12-31 13:04:03 -07:00
kaleb-himes 59eb83c6e9 auto-tools and wc_ updates 2014-12-31 10:01:32 -07:00
Jacob Barthelmeh 8594ccf2df working on commit tests 2014-12-30 11:00:18 -07:00
kaleb-himes 64d06580c1 examples not seeing WOLFSSL_API 2014-12-29 16:30:26 -07:00
kaleb-himes edf53a1ed0 new changes 2014-12-29 10:27:03 -07:00
Jacob Barthelmeh d958a2f3d6 close to build test with --disable-examples option 2014-12-18 15:40:09 -07:00
Jacob Barthelmeh 881c0b941a progress on name change, arc4, aes, camilea 2014-12-17 10:28:35 -07:00
toddouska 15bffb2a1e prepare 3.3.0 release 2014-12-05 09:37:19 -08:00
John Safranek 1742e0ddb6 Merge in the ADH-AES128-SHA changes and add a check for it during the
packet order sanity checking.
2014-12-01 11:44:32 -08:00
toddouska b2f9d62852 make HASH-DRBG default RNG w/ autoconf 2014-12-01 09:12:26 -08:00
toddouska de388bf37f version 3.2.6 2014-11-14 11:49:14 -08:00
toddouska 6c2a238c9b bump version 2014-11-13 10:19:03 -08:00
toddouska c982dd2281 allow aes gcm fips wrappers, no void returns 2014-10-27 15:52:22 -07:00
toddouska 08cdf91761 bump version 2014-10-13 14:44:39 -07:00
toddouska 668fed4796 don't allow scr and fake indication together 2014-10-02 10:18:11 -07:00
toddouska 41647e441a preview scr 2014-10-01 09:44:24 -07:00
Moisés Guimarães 6a75c8d144 fix TURN_ON mask
adds --enable-session-ticket configure option
2014-09-30 09:30:23 -03:00
Jacob Barthelmeh f5a95a9f62 struct for one time authentication ciphers 2014-09-25 16:19:50 -06:00
toddouska 0c20584ed3 add client side initiated secure r, same specs 2014-09-24 18:48:23 -07:00
Moisés Guimarães d80e820654 Renames TLSX_Append to TLSX_Push, adding data param and making sure the list doesn't holds duplicate extensions.
Adds SecureRenegotiation functions
2014-09-16 20:33:17 -03:00
Chris Conlon 7ea5d6c509 bump version to 3.2.0 2014-09-10 16:46:39 -06:00
toddouska c8d67670f3 fix hello_request processing w/ mac-verify at upper layer 2014-09-05 14:29:18 -07:00
toddouska 3072edb696 add compressed key support 2014-08-29 14:25:58 -07:00
toddouska cc72a50cee bump dev version 2014-07-21 16:28:57 -07:00
JacobBarthelmeh 3c27deb9d0 merge 2014-07-21 13:50:22 -06:00
JacobBarthelmeh 7eb8f571ed reverse compatibility 2014-07-16 14:55:38 -06:00
JacobBarthelmeh c322cb05ad uses most recent version of cyassl 2014-07-10 11:18:49 -06:00
JacobBarthelmeh 5bf411f345 progress on suite 2014-07-01 14:16:44 -06:00
Chris Conlon 7e5287e578 update NTRU support, with help from thesourcerer8 2014-06-05 14:42:15 -06:00
toddouska 66eb3caac5 bump dev version 2014-05-30 17:02:30 -07:00
toddouska 0f311adb2c if icc doesn't have 128bit type on x64 don't use it 2014-05-30 16:54:09 -07:00
toddouska 4c9fa39d34 fix icc aesni warning where claims to be gcc 2014-05-28 17:48:08 -07:00
toddouska e11dd9803a fix icc v14 warnings 2014-05-28 17:36:21 -07:00
toddouska 3d803653c6 add visual studio 64 project files to autoconf, fix distclcean 2014-05-20 13:45:11 -07:00
toddouska 2bc066a116 change first output line to cyassl/options gen 2014-05-15 10:39:54 -07:00
Moisés Guimarães cffcf3512c Making small stack usage disabled by default 2014-05-12 08:38:35 -03:00
toddouska e57d5d1d2f Merge branch 'master' of github.com:cyassl/cyassl 2014-05-08 10:27:54 -07:00
toddouska abbfcde0dc add fips in core first/last files for code/data hashing 2014-05-08 10:26:31 -07:00
John Safranek 72e9ea8e4b added Hash DRBG as configure option 2014-05-07 11:54:12 -07:00
John Safranek 838d9ea780 bump dev version, update README for v3.0.0 2014-04-29 10:45:01 -07:00
Moisés Guimarães d7e5b604f5 removing NO_CYASSL_SMALL_STACK from configure 2014-04-16 18:18:28 -03:00
Moisés Guimarães ac56927e20 CYASSL_SMALL_STACK build option (default enabled) 2014-04-16 13:25:51 -03:00
Moisés Guimarães 69890dd023 blake2b: blake2b_init_key and blake2b_compress refactory to reduce stack usage: (384 bytes - pointer sizes) moved to the heap.
--- block variable moved to the heap; (128 bytes)
--- m and w variables moved to the heap; (256 bytes)
--- chain of dependency updated to propagate the error.
2014-04-15 12:46:43 -03:00
Chris Conlon be65f5d518 update FSF address, wolfSSL copyright 2014-04-11 15:58:58 -06:00
toddouska 78ebc49bd2 bump dev version 2014-04-10 13:53:01 -07:00
toddouska 06faa47001 version bump 2014-04-09 09:51:11 -07:00
toddouska 348f50b4b1 bump dev version 2014-04-01 12:08:18 -07:00
toddouska e873d7998b SHA512 fips mode 2014-03-27 14:03:12 -07:00
Chris Conlon 59c1adaf0e version 2.9.2 release 2014-03-27 10:35:57 -06:00
toddouska faecf7f849 require thread local storage for power on self thread check 2014-03-19 10:19:08 -07:00
toddouska 8bbc30f3e1 add fips enable switch 2014-03-19 09:43:57 -07:00
toddouska b56ecd1842 add enable-iopool , simple I/O pool example using memory overrides 2014-03-13 18:54:51 -07:00
toddouska c39cdbea54 make sure enable-webserver (HAVE_WEBSERVER) can handle password callbacks as well as opensslextra unless NO_PWDBASED defined 2014-03-03 12:18:26 -08:00
John Safranek 24dcddb216 Update autoconf scripts
1. Add patch to AX_TLS to let it work with AC v2.63.
2. AX_TLS() call needs a no-op in the false case.
3. Move AX_HARDEN call back to its original position.
4. Print CC rather than CC_VERSION in configuration
   summary.
2014-02-17 15:33:07 -08:00
John Safranek 260c37acec Update autoconf scripts
1. Since AX_HARDEN is called always, moved the few items
   set in configure for gcc-hardening to AX_HARDEN.
2. Dropped the macros that AX_DEBUG was setting that we
   haven't been using and aren't using now.
2014-02-14 15:59:59 -08:00
toddouska 7959239fb0 bump dev version 2014-02-13 15:15:49 -08:00
toddouska 1a075e3629 use host_cpu instead of target_cpu to determine cpu to run on, target is now only for cross compilation tools 2014-02-13 09:33:30 -08:00
toddouska 02858ab40b Merge branch 'master' of github.com:cyassl/cyassl 2014-02-13 08:54:56 -08:00
toddouska 757db12917 add to certservice requirements 2014-02-13 08:53:12 -08:00
John Safranek b6d4f10222 Reenabled examples when building single-threaded.
Changed testsuite and unit tests to leave out tests cases
that require threading.
2014-02-11 18:59:20 -08:00
toddouska 1cf884dccc add enable-certservice, ease of use 2014-02-11 13:08:12 -08:00
John Safranek 594feec68b v2.9.0 release 2014-02-07 12:28:41 -08:00
Moisés Guimarães 36b5bf0df1 Renaming Elliptic Curves to Supported Curves for better extension representation and avoid confusion. 2014-02-03 16:14:35 -03:00
Moisés Guimarães ae6d593096 added curve names extension to all extensions 2014-01-31 16:52:13 -03:00
Moisés Guimarães 7d2a6800f7 added Elliptic Curves Extensions implementation and configuration. 2014-01-31 16:52:13 -03:00
toddouska b2ebfe9004 determine if openssl command line tool available for testing with ocsp, if so, HAVE_OPENSSL_CMD define is set 2014-01-31 10:37:11 -08:00
John Safranek cfa9007199 1. Bumped release version in configure.ac.
2. Added enable option for SCEP. Enables prereqs.
3. Added CyaSSL_wolfSCEP() for ac to test for CyaSSL SCEP.
2014-01-27 11:35:43 -08:00
Moisés Guimarães 8541c2cc97 added renegotiation indication SCSV sending on client hello. 2014-01-21 11:38:59 -03:00
Chris Conlon 0024db221f fix --enable-pkcs7 configure.ac 2014-01-10 16:11:17 -07:00
Chris Conlon 1d67d9217e initial PKCS#7 stubs, tie into ./configure 2014-01-10 15:17:03 -07:00
John Safranek 9e55d71ccc Added enable-certgen to configure.ac. 2014-01-10 11:50:55 -08:00
toddouska 5efbf98f31 separate sniffer / snifftest ./configure build 2013-12-12 14:20:56 -08:00