aboutsummaryrefslogtreecommitdiff
path: root/src/common
Commit message (Collapse)AuthorAge
* Replace base-{16,32,64} with base{16,32,64} in the codeNick Mathewson2013-01-17
| | | | | | | | Patch from onizuka generated with find ./ -type f -perm -u+rw -exec sed -ri 's/(Base)-(16|32|64)/\1\2/gi' {} \; Fixes issue 6875 on Tor.
* Add ntor-related modules to the Makefiles.nmakeNick Mathewson2013-01-17
|
* Even more code-removal for 6826Nick Mathewson2013-01-17
| | | | (Pull on a thread and the whole sweater unravels.)
* Merge branch 'bug6826_squashed'Nick Mathewson2013-01-17
|\
| * Drop detection logic for pre-1.3 busted libeventsNick Mathewson2013-01-17
| | | | | | | | | | | | | | | | This won't actually break them any worse than they were broken before: it just removes a set of warnings that nobody was actually seeing, I hope. Closes 6826
* | Merge remote-tracking branch 'public/bug6302'Nick Mathewson2013-01-17
|\ \
| * | Refactor: Use SOCK_ERRNO to avoid some #ifdef _WIN32sNick Mathewson2013-01-16
| |/ | | | | | | Fixes ticket 6302
* | Merge branch '024_msvc_squashed'Nick Mathewson2013-01-16
|\ \ | | | | | | | | | | | | | | | Conflicts: src/or/or.h srcwin32/orconfig.h
| * | Fix an instance of snprintf; don't use _snprintf directlyNick Mathewson2013-01-16
| | |
| * | When building with MSVC, call every enum bitfield unsignedNick Mathewson2013-01-16
| | | | | | | | | | | | Fixes bug 7305.
| * | Fix a const warning under msvcNick Mathewson2013-01-16
| | |
| * | Add clean target and test subdir to makefile.nmakeNick Mathewson2013-01-16
| | |
| * | Add missing includes and libs to makefile.nmakeNick Mathewson2013-01-16
| | | | | | | | | | | | Fixes bugs 7312 and 7310.
| * | Define SIZEOF_INTPTR_T when defining replacement intptr_tNick Mathewson2013-01-16
| | | | | | | | | | | | Fixes bug 7669
* | | Rename *_isin to *_containsNick Mathewson2013-01-16
| |/ |/| | | | | | | | | | | | | | | | | | | This is an automatically generated commit, from the following perl script, run with the options "-w -i -p". s/smartlist_string_num_isin/smartlist_contains_int_as_string/g; s/smartlist_string_isin((?:_case)?)/smartlist_contains_string$1/g; s/smartlist_digest_isin/smartlist_contains_digest/g; s/smartlist_isin/smartlist_contains/g; s/digestset_isin/digestset_contains/g;
* | Check for nacl headers in nacl/ subdirNick Mathewson2013-01-16
| | | | | | | | Fix for bug 7972
* | Update the copyright date to 201.Nick Mathewson2013-01-16
| |
* | Clean up odds and endsRoger Dingledine2013-01-15
| |
* | Merge branch 'bug7869'Nick Mathewson2013-01-14
|\ \
| * | Make the = at the end of ntor-onion-key optional.Nick Mathewson2013-01-05
| | | | | | | | | | | | Makes bug 7869 more easily fixable if we ever choose to do so.
* | | Handle EWOULDBLOCK as EAGAIN if they happen to be different.Nick Mathewson2013-01-11
|/ / | | | | | | Fixes bug 7935. Reported by 'oftc_must_be_destroyed'.
* | Merge branch 'ntor-resquashed'Nick Mathewson2013-01-03
|\ \ | | | | | | | | | | | | | | | | | | Conflicts: src/or/cpuworker.c src/or/or.h src/test/bench.c
| * | Check all crypto_rand return values for ntor.Nick Mathewson2013-01-03
| | |
| * | Use safe_mem_is_zero for checking curve25519 output for 0-nessNick Mathewson2013-01-03
| | | | | | | | | | | | This should make the intent more explicit. Probably needless, though.
| * | Implement a constant-time safe_mem_is_zero.Nick Mathewson2013-01-03
| | |
| * | Make libcurve25519_donna get built as a .aNick Mathewson2013-01-03
| | | | | | | | | | | | | | | This lets us give it compiler flags differing from the rest of libor-crypto.a
| * | Move curve25519 keypair type to src/common; give it functionsNick Mathewson2013-01-02
| | | | | | | | | | | | | | | | | | This patch moves curve25519_keypair_t from src/or/onion_ntor.h to src/common/crypto_curve25519.h, and adds new functions to generate, load, and store keypairs.
| * | Refactor strong os-RNG into its own functionNick Mathewson2013-01-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Previously, we only used the strong OS entropy source as part of seeding OpenSSL's RNG. But with curve25519, we'll have occasion to want to generate some keys using extremely-good entopy, as well as the means to do so. So let's! This patch refactors the OS-entropy wrapper into its own crypto_strongest_rand() function, and makes our new curve25519_secret_key_generate function try it as appropriate.
| * | Add a wrapper around, and test and build support for, curve25519.Nick Mathewson2013-01-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We want to use donna-c64 when we have a GCC with support for 64x64->uint128_t multiplying. If not, we want to use libnacl if we can, unless it's giving us the unsafe "ref" implementation. And if that isn't going to work, we'd like to use the portable-and-safe-but-slow 32-bit "donna" implementation. We might need more library searching for the correct libnacl, especially once the next libnacl release is out -- it's likely to have bunches of better curve25519 implementations. I also define a set of curve25519 wrapper functions, though it really shouldn't be necessary. We should eventually make the -donna*.c files get build with -fomit-frame-pointer, since that can make a difference.
| * | Add a data-invariant linear-search map structureNick Mathewson2013-01-02
| | | | | | | | | | | | I'm going to use this for looking op keys server-side for ntor.
| * | Implement HKDF from RFC5869Nick Mathewson2012-12-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a customizable extract-and-expand HMAC-KDF for deriving keys. It derives from RFC5869, which derives its rationale from Krawczyk, H., "Cryptographic Extraction and Key Derivation: The HKDF Scheme", Proceedings of CRYPTO 2010, 2010, <http://eprint.iacr.org/2010/264>. I'm also renaming the existing KDF, now that Tor has two of them. This is the key derivation scheme specified in ntor. There are also unit tests.
| * | Add a crypto_dh_dup, for benchmark supportNick Mathewson2012-12-06
| | |
* | | Fix a couple of harmless clang3.2 warningsSebastian Hahn2012-12-31
| | |
* | | One last fix for a warning on non-EC systemsNick Mathewson2012-12-25
| | |
* | | Be more noncomittal about performance improvement of uint128 backend.Nick Mathewson2012-12-25
| | |
* | | Make ECDHE group configurable: 224 for public, 256 for bridges (default)Nick Mathewson2012-12-25
| | |
* | | Inform the user if they're passing up a 10x ECDH speedup.Nick Mathewson2012-12-25
| | |
* | | Let servers choose better ciphersuites when clients support themNick Mathewson2012-12-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This implements the server-side of proposal 198 by detecting when clients lack the magic list of ciphersuites that indicates that they're lying faking some ciphers they don't really have. When clients lack this list, we can choose any cipher that we'd actually like. The newly allowed ciphersuites are, currently, "All ECDHE-RSA ciphers that openssl supports, except for ECDHE-RSA-RC4". The code to detect the cipher list relies on on (ab)use of SSL_set_session_secret_cb.
* | | Remove the address argument from client cipher classification fnsNick Mathewson2012-12-25
| | |
* | | Cache the type of client cipher list we have in the tor_tls_tNick Mathewson2012-12-25
| | | | | | | | | | | | | | | | | | We already use this classification for deciding whether (as a server) to do a v2/v3 handshake, and we're about to start using it for deciding whether we can use good ciphersuites too.
* | | prop198: Detect the list of ciphersuites we used to lie about havingNick Mathewson2012-12-25
| | | | | | | | | | | | | | | | | | | | | This is less easy than you might think; we can't just look at the client ciphers list, since openssl doesn't remember client ciphers if it doesn't know about them. So we have to keep a list of the "v2" ciphers, with the ones we don't know about removed.
* | | Configure SSL context to know about using P-256 for ECDHE.Nick Mathewson2012-12-25
| |/ |/|
* | Nuke uses of memcmp outside of unit testsNick Mathewson2012-12-13
| | | | | | | | | | | | | | We want to be saying fast_mem{cmp,eq,neq} when we're doing a comparison that's allowed to exit early, or tor_mem{cmp,eq,neq} when we need a data-invariant timing. Direct use of memcmp tends to imply that we haven't thought about the issue.
* | Merge branch 'win64-7260'Nick Mathewson2012-12-07
|\ \ | |/ |/| | | | | Conflicts: src/or/dns.c
| * Add a TOR_SOCKET_T_FORMAT construction for logging sockets.Nick Mathewson2012-11-02
| | | | | | | | | | | | We need this since win64 has a 64-bit SOCKET type. Based on a patch from yayooo for 7260, forward-ported to 0.2.4.
| * Add a PID_T_FORMAT for writing pids to logsNick Mathewson2012-11-02
| | | | | | | | | | | | | | | | | | This is based on code by yayooo for 7260, but: - It allows for SIZEOF_PID_T == SIZEOF_SHORT - It addresses some additional cases where we weren't getting any warnings only because we were casting pid_t to int.
| * Remove an unused variable; part of mingw64 patch from yayoooNick Mathewson2012-11-02
| |
| * Compile (with warnings) with mingw64Nick Mathewson2012-11-02
| | | | | | | | Patch from yayooo for bug 7260, forward-ported to 0.2.4.
* | Merge branch 'bug7013_take2_squashed'Nick Mathewson2012-11-27
|\ \
| * | Introduce tor_addr_port_parse() and use it to parse ServerTransportListenAddr.George Kadianakis2012-11-27
| | |
generated by cgit v1.2.3 (git 2.48.1) at 2025-04-06 08:41:36 +0000