| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | lib: add support for AES-GMAC | Dmitry Eremin-Solenikov | 2019-06-28 | 1 | -0/+3 |
| | | | | | | | | | | Add support for computing AES-GMAC using MAC API, as requested by Samba for SMB3 support. Resolves: #781 Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | ||||
| * | Add or clean header guards in lib/ | Tim Rühsen | 2019-05-07 | 1 | -3/+3 |
| | | | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de> | ||||
| * | Vendor in XTS functionality from Nettle | Simo Sorce | 2019-03-29 | 1 | -0/+2 |
| | | | | | | | | | If nettle's XTS is not available, use a vendored in version from master. This is necessary as long as we need to link against 3.4 for ABI compatibility reasons. Signed-off-by: Simo Sorce <simo@redhat.com> | ||||
| * | Use https:// for www.gnu.org and www.example.com | Tim Rühsen | 2019-03-13 | 1 | -1/+1 |
| | | | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de> | ||||
| * | Add selftests for CMAC | Simo Sorce | 2018-10-28 | 1 | -0/+2 |
| | | | | | Signed-off-by: Simo Sorce <simo@redhat.com> | ||||
| * | Add selftest for CFB8 | Simo Sorce | 2018-10-25 | 1 | -0/+3 |
| | | |||||
| * | fips140: added function for applications to switch the FIPS140-2 mode | Nikos Mavrogiannopoulos | 2018-02-19 | 1 | -6/+37 |
| | | | | | | | | | | | That would allow FIPS140-2 compliant applications to use forbidden algorithms by switching to a lax FIPS140-2 mode. Resolves #352 Resolves #353 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org> | ||||
| * | fips140: enforcement of allowed ciphers moved to crypto-api.c and cipher_int.c | Nikos Mavrogiannopoulos | 2018-02-19 | 1 | -0/+27 |
| | | | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org> | ||||
| * | fips140: enforcement of hash and MACs use moved to crypto-api.c and hash_int.c | Nikos Mavrogiannopoulos | 2018-02-19 | 1 | -0/+29 |
| | | | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com> | ||||
| * | Added _gnutls_lib_force_operational | Nikos Mavrogiannopoulos | 2017-03-06 | 1 | -0/+1 |
| | | | | | | | | | This allows recovering from _gnutls_lib_simulate_error() which in turn allows more advanced tests. Not documented, and intended to be an internal symbol only. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com> | ||||
| * | pk: always use _gnutls_switch_lib_state | Nikos Mavrogiannopoulos | 2017-03-06 | 1 | -3/+3 |
| | | | | | | | | | | This avoids relying on abort() for RNG errors in PK wrappers. We use instead the library state originally added for FIPS140-2 support, and if the state indicates failure the operation will fail. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com> | ||||
| * | Removed the 'gnutls_' prefix from files to simplify file naming | Nikos Mavrogiannopoulos | 2015-08-23 | 1 | -1/+1 |
| | | |||||
| * | properly reset the zombie mode in FIPS mode | Nikos Mavrogiannopoulos | 2014-11-16 | 1 | -0/+1 |
| | | | | | This amends 9158f590f4a18c84fc9eb41877b29d73b30af879 | ||||
| * | perform the FIPS140-2 self tests in two rounds | Nikos Mavrogiannopoulos | 2014-09-02 | 1 | -1/+2 |
| | | | | | | | One round is before the AES acceleration is registered, and the second is after. That is to allow testing of the AES implementation used in the DRBG. That is a hack until nettle handles all cipher acceleration. | ||||
| * | The FIPS140 random number generator is enabled conditionally when required. | Nikos Mavrogiannopoulos | 2014-01-17 | 1 | -0/+1 |
| | | |||||
| * | FIPS140 mode is detected on run-time. | Nikos Mavrogiannopoulos | 2013-12-09 | 1 | -0/+5 |
| | | | | | | That allows a library compiled in FIPS140 mode to operate as the full library if the system is not in FIPS mode. | ||||
| * | removed zombie mode, and no longer use fips140.h | Nikos Mavrogiannopoulos | 2013-12-04 | 1 | -5/+3 |
| | | |||||
| * | fips140_simulate_error -> lib_simulate_error | Nikos Mavrogiannopoulos | 2013-11-30 | 1 | -1/+1 |
| | | |||||
| * | The library state is used even when not in FIPS mode. | Nikos Mavrogiannopoulos | 2013-11-30 | 1 | -30/+19 |
| | | | | | | This allows having an error state that blocks the library usage even when not in FIPS mode. | ||||
| * | Better handling of FIPS140-2 initialization | Nikos Mavrogiannopoulos | 2013-11-27 | 1 | -5/+6 |
| | | |||||
| * | gnutls_key_generate() is restricted by the size of the initial RNG seed in ↵ | Nikos Mavrogiannopoulos | 2013-11-27 | 1 | -0/+2 |
| | | | | | FIPS140-2 mode. | ||||
| * | zeroize ECC secret scalars and points. | Nikos Mavrogiannopoulos | 2013-11-27 | 1 | -0/+3 |
| | | |||||
| * | Updated FIPS140 initialization and added a self test for it. | Nikos Mavrogiannopoulos | 2013-11-27 | 1 | -1/+4 |
| | | |||||
| * | Added binary integrity test | Nikos Mavrogiannopoulos | 2013-11-27 | 1 | -0/+1 |
| | | |||||
| * | Added support for fips states. | Nikos Mavrogiannopoulos | 2013-11-27 | 1 | -0/+70 |
| This implies that when in FIPS mode and the library is not in operational state (i.e., all self checks succeeded), crypto functionality of the library will fail. This includes: * API functions of gnutls/crypto.h * API functions of gnutls/abstract.h * API functions of gnutls/x509.h * gnutls_init() * API functions of gnutls/xssl.h | |||||
 |
index : delta/gnutls.git | |
| gitlab.com: gnutls/gnutls.git |
| summaryrefslogtreecommitdiff |