Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-08-26 | Pull in <time.h> for clock_gettime() | Philip Guenther | |
ok deraadt@ | |||
2016-06-26 | increase the minimum for auto rounds to 6. that was the previous low bound | Ted Unangst | |
for login.conf, and we don't want to go lower. | |||
2015-09-13 | Wrap <pwd.h> so that calls go direct and the symbols are all weak. | Philip Guenther | |
Hide bcrypt_autorounds(), prefixing with an underbar for static builds. | |||
2015-09-13 | The number of rounds is just two digits in the salt. We've already | Todd C. Miller | |
verified that they are there via isdigit() so we can convert from ASCII to an int without using atoi(). OK guenther@ deraadt@ | |||
2015-07-18 | standards compliant error return (null). will make ruby happier, at least. | Ted Unangst | |
ok deraadt jeremy | |||
2015-01-28 | dial the time back to about 0.1s, closer to the original targets and | Ted Unangst | |
friendlier for users. requested by deraadt | |||
2015-01-12 | rename blocks to words. bcrypt "blocks" are unrelated to blowfish blocks, | Ted Unangst | |
nor are they the same size. | |||
2015-01-07 | stupid me. need errno.h | Ted Unangst | |
2015-01-07 | set errno = EINVAL for invalid salts and hashes in most functions. | Ted Unangst | |
remember to set EACCES in bcrypt_checkpass for hash differences. the higher level crypt_checkpass function will reset errno to EACCES in all cases, which is probably the right behavior, but this change gives code working with the lower level functions the correct errno if they care. | |||
2015-01-05 | convert clock() to clock_gettime() for improved precision (and accuracy?) | Ted Unangst | |
guenther suggested using thread time, which actually may improve accuracy if somebody puts this in a threaded program. | |||
2014-12-30 | copy bcrypt autotune from encrypt(1) and expose via crypt_newhash | Ted Unangst | |
ok deraadt miod | |||
2014-11-24 | introduce a hashspace define and check that there's enough space to | Ted Unangst | |
write out a hash. also simplify writing out the hash. | |||
2014-07-20 | From ISO/IEC 9899:1999 and 9899:201x, | Philip Guenther | |
6.11.5 - Storage-class specifiers: The placement of a storage-class specifier other than at the beginning of the declaration specifiers in a declaration is an obsolescent feature. Diff from Jean-Philippe Ouellet (jean-philippe (at) ouellet.biz) | |||
2014-05-17 | Add missing header needed by isdigit(). | Charles Longeau | |
While there, sort headers. ok tedu@ | |||
2014-05-06 | fix stupid commit | Ted Unangst | |
2014-05-06 | use explicit_bzero | Ted Unangst | |
2014-05-03 | now that 5.5 has been released with compatibility for 2b hashes, | Ted Unangst | |
switch to generating them by default. prodded by deraadt and sthen | |||
2014-05-03 | 1. Drop support for no minor. This variant doesn't exist anymore. | Ted Unangst | |
2. Pull up the actual minor processing code into the switch that parses it. 3. atoi is actually simpler than strtonum in this case, but check the input beforehand so we don't get unexpected results. 4. Slightly more consistent style between various parse and check and increment operations on salt. ok deraadt | |||
2014-04-19 | one small tweak to avoid ever going off the end of a string. | Ted Unangst | |
2014-04-19 | improved checking for invalid hashes. from solar designer | Ted Unangst | |
2014-04-08 | use char * for strings, saving casts. add return codes to base64 functions | Ted Unangst | |
2014-03-24 | oops, merge error | Ted Unangst | |
2014-03-23 | clear stack variables, suggested by djm | Ted Unangst | |
2014-03-23 | some improvements suggested by djm. | Ted Unangst | |
use better constant for salt size. always copy ":" to gerror, in case somebody is dumb enough to overwrite it timingsafe_bcmp before somebody whines about strcmp | |||
2014-03-23 | two functions don't need to be exported | Ted Unangst | |
2014-03-23 | minimal change to implementation of bcrypt to not require static globals. | Ted Unangst | |
add some friendlier functions. move the classic static data api into wrapper functions. a few more changes to come... | |||
2014-03-22 | switch to shorter ISC license. this was ok with Niels Provos. | Ted Unangst | |
2014-03-19 | consolidate the base64 code in one place, and remove inadequate test code | Ted Unangst | |
2014-02-24 | solar's testsuite revealed insufficient validation of invalid input hashes. | Ted Unangst | |
add a more complete check for the rounds parameter. ok deraadt | |||
2014-02-17 | remove redundant test | Ted Unangst | |
2014-02-17 | sticking strlen into a char leads to wraparound at 256. fix this and | Ted Unangst | |
introduce a new 'b' hash minor. still generate 'a' minors for now. reported by solar designer. diff by some combination of solar and jca. ok deraadt | |||
2013-12-19 | pseudo-code corrections from Solar Designer <solar@openwall.com> | Theo de Raadt | |
2012-09-04 | arc4random_buf is the easy way to fill a buffer now. ok deraadt | Ted Unangst | |
2008-04-02 | Zero state buffers on return. OK deraadt@ | Todd C. Miller | |
2007-03-19 | Get rid of useless #if 0 block, especially since the code is included | Ray Lai | |
immediately after. OK millert@. | |||
2007-02-20 | Change hard coded numbers to sizeof(buf). Also change some | Ray Lai | |
sizeof(buf) - 1 to sizeof(buf), since fgets takes the whole buffer size. Based on diff from Charles Longeau <chl at tuxfamily dot org> long ago. OK millert@. | |||
2006-07-04 | allocate gsalt large enough; from Matthew R. Dempsky <mrd at alkemio | Otto Moerbeek | |
dot org>; ok djm@ deraadt@ | |||
2006-04-03 | be more careful with atoi() result; ok otto | Theo de Raadt | |
2004-12-22 | Test the upper limit for the max # of rounds to, to avoid wrapping and ending | Otto Moerbeek | |
up with a low number of rounds. Spotted by mpech@; ok mpech@ millert@ | |||
2003-08-07 | ansi | Theo de Raadt | |
2003-06-25 | protos | Theo de Raadt | |
2002-02-19 | We live in an ANSI C world. Remove lots of gratuitous #ifdef __STDC__ cruft. | Todd C. Miller | |
2002-02-16 | Part one of userland __P removal. Done with a simple regexp with some minor ↵ | Todd C. Miller | |
hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be done automatically. | |||
2001-01-04 | grammer/spelling | Todd T. Fries | |
2000-08-02 | return error if salt is too small; pr 1336 | Niels Provos | |
1998-08-10 | fix base64 encoding, this problem was reported by | Niels Provos | |
Solar Designer <solar@false.com> some time ago. | |||
1998-02-18 | #if __STDC__ -> #ifdef __STDC__, now all of them. | Niels Provos | |
1997-09-10 | indentation cleanup | Theo de Raadt | |
1997-07-25 | #if __STDC__ --> #ifdef __STDC__ | Michael Shalayeff | |
1997-07-23 | tabify | kstailey | |