delta/gnutls.git/lib/nettle, branch tmp-remove-debugging-code

sign APIs: introduce RSA-RAW signing algorithm

2017-08-17T08:43:29+00:00

This ensures that there is a signing algorithm for all the operations
we support. Previously, we required GNUTLS_SIGN_UNKNOWN to be acceptable
by signing functions to accomodate for raw RSA operations. Now we make
that explicit and in the process clean-up the API.

Signed-off-by: Nikos Mavrogiannopoulos

fuzzer: Suppress unsigned integer overflow in rnd-fuzzer.c

2017-08-16T07:44:19+00:00

Signed-off-by: Tim Rühsen

fuzzer: added a fuzzer target

2017-08-16T07:39:52+00:00

This allows to compile the library with flags which will add predictable
random generation and eliminate some crypto checks, in order for the
library to be used for testing (fuzzying).

Signed-off-by: Nikos Mavrogiannopoulos

rnd: use time_t for prng_reseed_time

2017-08-09T13:33:01+00:00

This ensures that all time comparisons are done
under the same type.

Signed-off-by: Nikos Mavrogiannopoulos

gnutls_pk_params_st: separate flags/qbits and curve

2017-08-08T06:30:01+00:00

Previously we were using the field flags to store the
size of q in case of GNUTLS_PK_DH, some key generation flags
in case of GNUTLS_PK_RSA, and the curve in case of elliptic
curve key. Separate this into multiple fields to reduce
confusion on the field.

Signed-off-by: Nikos Mavrogiannopoulos

wrap_nettle_pk_fixup: added sanity check in RSA-PSS param checking

2017-08-06T09:35:34+00:00

Signed-off-by: Nikos Mavrogiannopoulos

introduced error code GNUTLS_E_PK_INVALID_PUBKEY_PARAMS

2017-08-04T09:08:51+00:00

This is being use to indicate errors in the public key parameters
such as the RSA-PSS salt size or digest algorithm.

Signed-off-by: Nikos Mavrogiannopoulos

_rsa_pss_verify_digest: verify the validity of the salt_size length on verification

2017-08-04T09:08:51+00:00

Signed-off-by: Nikos Mavrogiannopoulos

wrap_nettle_pk_fixup: check RSA PSS parameters for validity on import

2017-08-04T09:08:47+00:00

Signed-off-by: Nikos Mavrogiannopoulos

pct_test: use local SPKI structure to override parameters if not set

2017-08-04T07:38:27+00:00

Signed-off-by: Nikos Mavrogiannopoulos