| Commit message (Expand) | Author | Age |
|---|
| * | Replace base-{16,32,64} with base{16,32,64} in the code•••Patch from onizuka generated with
find ./ -type f -perm -u+rw -exec sed -ri 's/(Base)-(16|32|64)/\1\2/gi' {} \;
Fixes issue 6875 on Tor.
| Nick Mathewson | 2013-01-17 |
| * | Add ntor-related modules to the Makefiles.nmake | Nick Mathewson | 2013-01-17 |
| * | Even more code-removal for 6826•••(Pull on a thread and the whole sweater unravels.)
| Nick Mathewson | 2013-01-17 |
| * | Merge branch 'bug6826_squashed' | Nick Mathewson | 2013-01-17 |
| |\ |
|
| | * | Drop detection logic for pre-1.3 busted libevents•••This won't actually break them any worse than they were broken before:
it just removes a set of warnings that nobody was actually seeing, I
hope.
Closes 6826
| Nick Mathewson | 2013-01-17 |
| * | | Merge remote-tracking branch 'public/bug6302' | Nick Mathewson | 2013-01-17 |
| |\ \ |
|
| | * | | Refactor: Use SOCK_ERRNO to avoid some #ifdef _WIN32s•••Fixes ticket 6302
| Nick Mathewson | 2013-01-16 |
| | |/ |
|
| * | | Merge branch '024_msvc_squashed'•••Conflicts:
src/or/or.h
srcwin32/orconfig.h
| Nick Mathewson | 2013-01-16 |
| |\ \ |
|
| | * | | Fix an instance of snprintf; don't use _snprintf directly | Nick Mathewson | 2013-01-16 |
| | * | | When building with MSVC, call every enum bitfield unsigned•••Fixes bug 7305.
| Nick Mathewson | 2013-01-16 |
| | * | | Fix a const warning under msvc | Nick Mathewson | 2013-01-16 |
| | * | | Add clean target and test subdir to makefile.nmake | Nick Mathewson | 2013-01-16 |
| | * | | Add missing includes and libs to makefile.nmake•••Fixes bugs 7312 and 7310.
| Nick Mathewson | 2013-01-16 |
| | * | | Define SIZEOF_INTPTR_T when defining replacement intptr_t•••Fixes bug 7669
| Nick Mathewson | 2013-01-16 |
| * | | | Rename *_isin to *_contains•••This is an automatically generated commit, from the following perl script,
run with the options "-w -i -p".
s/smartlist_string_num_isin/smartlist_contains_int_as_string/g;
s/smartlist_string_isin((?:_case)?)/smartlist_contains_string$1/g;
s/smartlist_digest_isin/smartlist_contains_digest/g;
s/smartlist_isin/smartlist_contains/g;
s/digestset_isin/digestset_contains/g;
| Nick Mathewson | 2013-01-16 |
| | |/
|/| |
|
| * | | Check for nacl headers in nacl/ subdir•••Fix for bug 7972
| Nick Mathewson | 2013-01-16 |
| * | | Update the copyright date to 201. | Nick Mathewson | 2013-01-16 |
| * | | Clean up odds and ends | Roger Dingledine | 2013-01-15 |
| * | | Merge branch 'bug7869' | Nick Mathewson | 2013-01-14 |
| |\ \ |
|
| | * | | Make the = at the end of ntor-onion-key optional.•••Makes bug 7869 more easily fixable if we ever choose to do so.
| Nick Mathewson | 2013-01-05 |
| * | | | Handle EWOULDBLOCK as EAGAIN if they happen to be different.•••Fixes bug 7935. Reported by 'oftc_must_be_destroyed'.
| Nick Mathewson | 2013-01-11 |
| |/ / |
|
| * | | Merge branch 'ntor-resquashed'•••Conflicts:
src/or/cpuworker.c
src/or/or.h
src/test/bench.c
| Nick Mathewson | 2013-01-03 |
| |\ \ |
|
| | * | | Check all crypto_rand return values for ntor. | Nick Mathewson | 2013-01-03 |
| | * | | Use safe_mem_is_zero for checking curve25519 output for 0-ness•••This should make the intent more explicit. Probably needless, though.
| Nick Mathewson | 2013-01-03 |
| | * | | Implement a constant-time safe_mem_is_zero. | Nick Mathewson | 2013-01-03 |
| | * | | Make libcurve25519_donna get built as a .a•••This lets us give it compiler flags differing from the rest of
libor-crypto.a
| Nick Mathewson | 2013-01-03 |
| | * | | Move curve25519 keypair type to src/common; give it functions•••This patch moves curve25519_keypair_t from src/or/onion_ntor.h to
src/common/crypto_curve25519.h, and adds new functions to generate,
load, and store keypairs.
| Nick Mathewson | 2013-01-02 |
| | * | | Refactor strong os-RNG into its own function•••Previously, we only used the strong OS entropy source as part of
seeding OpenSSL's RNG. But with curve25519, we'll have occasion to
want to generate some keys using extremely-good entopy, as well as the
means to do so. So let's!
This patch refactors the OS-entropy wrapper into its own
crypto_strongest_rand() function, and makes our new
curve25519_secret_key_generate function try it as appropriate.
| Nick Mathewson | 2013-01-02 |
| | * | | Add a wrapper around, and test and build support for, curve25519.•••We want to use donna-c64 when we have a GCC with support for
64x64->uint128_t multiplying. If not, we want to use libnacl if we
can, unless it's giving us the unsafe "ref" implementation. And if
that isn't going to work, we'd like to use the
portable-and-safe-but-slow 32-bit "donna" implementation.
We might need more library searching for the correct libnacl,
especially once the next libnacl release is out -- it's likely to have
bunches of better curve25519 implementations.
I also define a set of curve25519 wrapper functions, though it really
shouldn't be necessary.
We should eventually make the -donna*.c files get build with
-fomit-frame-pointer, since that can make a difference.
| Nick Mathewson | 2013-01-02 |
| | * | | Add a data-invariant linear-search map structure•••I'm going to use this for looking op keys server-side for ntor.
| Nick Mathewson | 2013-01-02 |
| | * | | Implement HKDF from RFC5869•••This is a customizable extract-and-expand HMAC-KDF for deriving keys.
It derives from RFC5869, which derives its rationale from Krawczyk,
H., "Cryptographic Extraction and Key Derivation: The HKDF Scheme",
Proceedings of CRYPTO 2010, 2010, <http://eprint.iacr.org/2010/264>.
I'm also renaming the existing KDF, now that Tor has two of them.
This is the key derivation scheme specified in ntor.
There are also unit tests.
| Nick Mathewson | 2012-12-06 |
| | * | | Add a crypto_dh_dup, for benchmark support | Nick Mathewson | 2012-12-06 |
| * | | | Fix a couple of harmless clang3.2 warnings | Sebastian Hahn | 2012-12-31 |
| * | | | One last fix for a warning on non-EC systems | Nick Mathewson | 2012-12-25 |
| * | | | Be more noncomittal about performance improvement of uint128 backend. | Nick Mathewson | 2012-12-25 |
| * | | | Make ECDHE group configurable: 224 for public, 256 for bridges (default) | Nick Mathewson | 2012-12-25 |
| * | | | Inform the user if they're passing up a 10x ECDH speedup. | Nick Mathewson | 2012-12-25 |
| * | | | Let servers choose better ciphersuites when clients support them•••This implements the server-side of proposal 198 by detecting when
clients lack the magic list of ciphersuites that indicates that
they're lying faking some ciphers they don't really have. When
clients lack this list, we can choose any cipher that we'd actually
like. The newly allowed ciphersuites are, currently, "All ECDHE-RSA
ciphers that openssl supports, except for ECDHE-RSA-RC4".
The code to detect the cipher list relies on on (ab)use of
SSL_set_session_secret_cb.
| Nick Mathewson | 2012-12-25 |
| * | | | Remove the address argument from client cipher classification fns | Nick Mathewson | 2012-12-25 |
| * | | | Cache the type of client cipher list we have in the tor_tls_t•••We already use this classification for deciding whether (as a server)
to do a v2/v3 handshake, and we're about to start using it for
deciding whether we can use good ciphersuites too.
| Nick Mathewson | 2012-12-25 |
| * | | | prop198: Detect the list of ciphersuites we used to lie about having•••This is less easy than you might think; we can't just look at the
client ciphers list, since openssl doesn't remember client ciphers if
it doesn't know about them. So we have to keep a list of the "v2"
ciphers, with the ones we don't know about removed.
| Nick Mathewson | 2012-12-25 |
| * | | | Configure SSL context to know about using P-256 for ECDHE. | Nick Mathewson | 2012-12-25 |
| | |/
|/| |
|
| * | | Nuke uses of memcmp outside of unit tests•••We want to be saying fast_mem{cmp,eq,neq} when we're doing a
comparison that's allowed to exit early, or tor_mem{cmp,eq,neq} when
we need a data-invariant timing. Direct use of memcmp tends to imply
that we haven't thought about the issue.
| Nick Mathewson | 2012-12-13 |
| * | | Merge branch 'win64-7260'•••Conflicts:
src/or/dns.c
| Nick Mathewson | 2012-12-07 |
| |\ \
| |/
|/| |
|
| | * | Add a TOR_SOCKET_T_FORMAT construction for logging sockets.•••We need this since win64 has a 64-bit SOCKET type.
Based on a patch from yayooo for 7260, forward-ported to 0.2.4.
| Nick Mathewson | 2012-11-02 |
| | * | Add a PID_T_FORMAT for writing pids to logs•••This is based on code by yayooo for 7260, but:
- It allows for SIZEOF_PID_T == SIZEOF_SHORT
- It addresses some additional cases where we weren't getting any
warnings only because we were casting pid_t to int.
| Nick Mathewson | 2012-11-02 |
| | * | Remove an unused variable; part of mingw64 patch from yayooo | Nick Mathewson | 2012-11-02 |
| | * | Compile (with warnings) with mingw64•••Patch from yayooo for bug 7260, forward-ported to 0.2.4.
| Nick Mathewson | 2012-11-02 |
| * | | Merge branch 'bug7013_take2_squashed' | Nick Mathewson | 2012-11-27 |
| |\ \ |
|
| | * | | Introduce tor_addr_port_parse() and use it to parse ServerTransportListenAddr. | George Kadianakis | 2012-11-27 |