index
:
src
cvs/HEAD
kms/intel
kms/radeon
master
OpenBSD base system
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
sbin
/
iked
/
crypto.c
Age
Commit message (
Expand
)
Author
2023-08-04
Convert calls to ibuf_length() where it is clear that the ibuf is not
Claudio Jeker
2023-07-28
Use ibuf_data() instead of accessing the ibuf buf pointer directly.
Claudio Jeker
2023-06-06
Use ibuf_seek() instead of ibuf_data() + offset constructs. Effect is
Claudio Jeker
2023-05-23
Replace ibuf_release() with ibuf_free() since the former just calls the latter
Claudio Jeker
2023-03-30
i2d_ECDSA_SIG() may return a negative value in case of error.
Alexander Bluhm
2022-11-30
Switch idiom of d2i_ECDSA_SIG() invocation
Theo Buehler
2022-11-07
Free objects that were dynamically allocated in libcrypto with OPENSSL_free().
Tobias Heider
2021-12-13
Cleanup libcrypto memory management. Remove redundant NULL checks
Tobias Heider
2021-12-01
whitespace cleanup during review read
Theo de Raadt
2021-11-29
sys/param.h was included for MAX(), MIN() and roundup(). make local
Theo de Raadt
2021-11-18
iked: replace a conditional EVP_CIPHER_CTX_cleanup() + free() stanza
Theo Buehler
2021-11-18
Check if encoding works in dsa_init(). This avoids calling fatal()
Tobias Heider
2021-02-25
Constify cipher API.
tobhe
2021-02-04
Upgrade to OpenSSL 1.1 compatible crypto API. Add additional
tobhe
2021-01-26
Add support for RSA-PSS PKCS1 signatures. Don't enable them by
tobhe
2020-12-06
Add support for RSASSA-PSS signature verification (RFC 7427).
tobhe
2020-12-03
Fix type mismatch. auth_method should be uint8_t.
tobhe
2020-11-26
Use a counter instead of random IV for AES-GCM. Security depends on
tobhe
2020-05-26
Add AES-GCM mode ciphers (IANA IDs 19 and 20) for IKEv2.
tobhe
2020-05-14
Stricter return value checking for EVP_Cipher* calls.
tobhe
2020-04-22
Fix leaks in signature validation.
tobhe
2020-04-20
Remove unused 'dsa_cert' variable.
tobhe
2020-04-08
Prevent multiple ibuf leaks. Clean up on proccess shutdown.
tobhe
2020-02-14
Switch from EVP_SignInit_ex() to the newer EVP_DigestSignInit()
tobhe
2017-08-28
fix char ** to const char ** conversion warning; ok mikeb@
Otto Moerbeek
2017-03-27
spacing
Reyk Floeter
2017-03-27
Add support for RFC4754 (ECDSA) and RFC7427 authentication.
Reyk Floeter
2015-10-31
RFC4754 specifies ECDSA-521 (sic), not -512. ok reyk@
Christian Weisgerber
2015-08-21
Switch iked to C99-style fixed-width integer types.
Reyk Floeter
2015-08-19
spacing (no binary change, verified with checksums)
Reyk Floeter
2015-03-26
initial support for RFC 7427 signatures, so we are no longer
Markus Friedl
2015-01-16
Replace <sys/param.h> with <limits.h> and other less dirty headers where
Theo de Raadt
2014-07-10
add additional includes required to build with -DOPENSSL_NO_DEPRECATED
Jonathan Gray
2014-02-17
Fix compiler warnings in the format strings: use %zd for ssize_t and
Reyk Floeter
2014-01-24
don't leak prv RSA key for each signature; ok mikeb
Markus Friedl
2013-12-04
Use EVP_sha1 directly instead of doing the EVP_get_digestbyname lookup.
Mike Belopuhov
2013-11-14
pass caller to ca_sslerror for better error messages; ok mikeb
Markus Friedl
2013-01-08
Remove private CVS tag from an obsolete repository and bump copyright
Reyk Floeter
2012-12-15
Plug two memory leaks when cleaning up the dh/dsa crypto structures.
Reyk Floeter
2012-09-18
update email addresses to match reality.
Reyk Floeter
2011-08-27
Under certain circumstances iked can be tricked to bypass a signature
Mike Belopuhov
2010-12-21
fixup log_warn and log_debug arguments; ok reyk
Mike Belopuhov
2010-11-08
fixup number rounding; ok reyk
Mike Belopuhov
2010-09-30
disable padding correctly. therefore we no longer need to supply
Mike Belopuhov
2010-06-14
fix block length for AES
Reyk Floeter
2010-06-03
Import iked, a new implementation of the IKEv2 protocol.
Reyk Floeter