Commit message (Collapse) | Author | Files | Lines | ||
---|---|---|---|---|---|
2017-06-25 | curve25519: keep certain sandy2x functions in C | Jason A. Donenfeld | 2 | -232/+84 | |
We can let the compiler optimize how it sees fit. | |||||
2017-06-24 | curve25519: satisfy sparse and use short types | Jason A. Donenfeld | 1 | -26/+26 | |
2017-06-24 | receive: extend rate limiting to 1 second after under load detection | Jason A. Donenfeld | 1 | -0/+5 | |
2017-06-24 | device: only use one sleep notifier | Jason A. Donenfeld | 2 | -23/+27 | |
This greatly improves performance when adding and removing interfaces, since the power registration function does a linear search each time. | |||||
2017-06-24 | device: netdevice destruction logic change for 4.12 | Jason A. Donenfeld | 1 | -4/+13 | |
2017-06-24 | wg-quick: properly match IPv6 endpoint | Jason A. Donenfeld | 1 | -1/+1 | |
2017-06-24 | haskell: re-add updated haskell example | Jason A. Donenfeld | 5 | -0/+268 | |
Code-from: John Galt <jgalt@centromere.net> | |||||
2017-06-24 | selftest: remove antique siphash self test | Jason A. Donenfeld | 1 | -89/+0 | |
2017-06-24 | main: annotate init/exit functions to save memory | Jason A. Donenfeld | 11 | -39/+39 | |
2017-06-13 | version: bump snapshot0.0.20170613 | Jason A. Donenfeld | 2 | -2/+2 | |
2017-06-12 | tools: use proper __linux__ ifdef | Jason A. Donenfeld | 1 | -1/+1 | |
2017-06-12 | random: wait for random bytes when generating nonces and ephemerals | Jason A. Donenfeld | 4 | -7/+12 | |
We can let userspace configure wireguard interfaces before the RNG is fully initialized, since what we mostly care about is having good randomness for ephemerals and xchacha nonces. By deferring the wait to actually asking for the randomness, we give a lot more opportunity for gathering entropy. This won't cover entropy for hash table secrets or cookie secrets (which rotate anyway), but those have far less catastrophic failure modes, so ensuring good randomness for elliptic curve points and nonces should be sufficient. | |||||
2017-06-12 | version: bump snapshot0.0.20170612 | Jason A. Donenfeld | 2 | -2/+2 | |
2017-06-12 | wg-quick: match ipv6 default route more broadly | Jason A. Donenfeld | 1 | -1/+1 | |
2017-06-11 | wg-quick: make sure we have empty table for both v6 and v4 | Jason A. Donenfeld | 1 | -1/+3 | |
Otherwise, we wind up not doing the right thing in the v6-only case, or doing something totally borked when v4 and v6 are filled unevenly. Reported-by: Roelf Wichertjes <contact@roelf.org> | |||||
2017-06-09 | external-tests: trim the fat | Jason A. Donenfeld | 5 | -205/+0 | |
2017-06-08 | config: ensure the RNG is initialized before setting | Jason A. Donenfeld | 2 | -0/+48 | |
It's possible that get_random_bytes() will return bad randomness if it hasn't been seeded. This patch makes configuration block until the RNG is properly initialized. Reference: http://www.openwall.com/lists/kernel-hardening/2017/06/02/2 | |||||
2017-06-08 | noise: fix race when replacing handshake | Jason A. Donenfeld | 3 | -11/+24 | |
Replacing an entry that's already been replaced is something that could happen when processing handshake messages in parallel, when starting up multiple instances on the same machine. Reported-by: Hubert Goisern <zweizweizwoelf@gmail.com> | |||||
2017-06-08 | go test: use x/crypto for blake2s now that we have 128-bit mac | Jason A. Donenfeld | 1 | -3/+3 | |
2017-06-05 | peer: explicitly initialize atomic | Jason A. Donenfeld | 1 | -0/+3 | |
2017-06-01 | go test: correct tai64n and formatting | Jason A. Donenfeld | 1 | -26/+26 | |
2017-06-01 | external-tests: add keepalive packet | Jason A. Donenfeld | 2 | -0/+23 | |
2017-06-01 | compat: remove padata hotplug code | Jason A. Donenfeld | 1 | -149/+0 | |
It's different on different kernel versions, and we're not using it anyway, so it's easiest to just get rid of it, rather than having another ifdef maze. | |||||
2017-06-01 | curve25519: use more standard label convention in asm | Jason A. Donenfeld | 2 | -24/+24 | |
2017-06-01 | device: do-while assignment style | Jason A. Donenfeld | 1 | -1/+1 | |
2017-06-01 | receive: trim incoming packets to IP header length | Jason A. Donenfeld | 3 | -2/+17 | |
2017-06-01 | go test: properly pad message | Jason A. Donenfeld | 1 | -2/+2 | |
2017-05-31 | timers: queue up killing ephemerals only if not already | Jason A. Donenfeld | 1 | -1/+1 | |
2017-05-31 | config: add new line for style | Jason A. Donenfeld | 1 | -0/+1 | |
2017-05-31 | version: bump snapshot0.0.20170531 | Jason A. Donenfeld | 2 | -2/+2 | |
2017-05-31 | timers: reset retry-attempt counter when not retrying | Jason A. Donenfeld | 4 | -7/+10 | |
2017-05-31 | timers: the completion of a handshake also is on key confirmation | Jason A. Donenfeld | 2 | -2/+3 | |
2017-05-31 | timers: rework handshake reply control flow | Jason A. Donenfeld | 1 | -9/+8 | |
2017-05-31 | debug: print interface name in dmesg | Jason A. Donenfeld | 11 | -50/+52 | |
2017-05-31 | compat: remove warning for < 4.1 | Jason A. Donenfeld | 1 | -2/+0 | |
It still is sort of experimental, I suppose, especially this part in the udp_tunnel drop-in: skb_orphan(skb); sk_mem_reclaim(sk); It seems like sometimes this won't do what we want, but it's hard to diagnose exactly what's happening. In any case, nobody paid attention to that warning anyway, so let's just get rid of it. | |||||
2017-05-31 | config: it's faster to memcpy than strncpy | Jason A. Donenfeld | 1 | -2/+1 | |
IFNAMSIZ is 16, so this is two instructions on 64-bit. | |||||
2017-05-31 | routingtable: Remove unnecessary check in node_placement() | Sultan Alsawaf | 1 | -2/+1 | |
node_placement() is always given the address of a stack variable for rnode, so there's no need to check if rnode is null. Signed-off-by: Sultan Alsawaf <sultanxda@gmail.com> | |||||
2017-05-31 | data: enable BH during parallel crypto on ARM/NEON | Jason A. Donenfeld | 1 | -0/+12 | |
padata disables it, but in order to use SIMD on ARM, we can't be in an interrupt. We only do this on ARM since it adds jitter to the performance. | |||||
2017-05-31 | curve25519: add NEON versions for ARM | Jason A. Donenfeld | 3 | -29/+2160 | |
2017-05-31 | curve25519: align the basepoint to 32 bytes | Jason A. Donenfeld | 1 | -2/+2 | |
2017-05-31 | curve25519: actually, do some things on heap sometimes | Jason A. Donenfeld | 1 | -0/+170 | |
This reverts commit 42dd5bd87e418275203dd6644b6b6b0cc310d4d9. | |||||
2017-05-31 | tools: allow creating device with no peers | Jason A. Donenfeld | 1 | -4/+0 | |
2017-05-31 | config: do not error out when getting if no peers | Jason A. Donenfeld | 1 | -0/+1 | |
2017-05-30 | device: keep going when share_check fails | Jason A. Donenfeld | 1 | -4/+4 | |
Suggested-by: Sultan Alsawaf <sultanxda@gmail.com> | |||||
2017-05-30 | timers: fix typo in comment | Jason A. Donenfeld | 1 | -1/+1 | |
Suggested-by: Peter Wu <peter@lekensteyn.nl> | |||||
2017-05-30 | rust test: add icmp ping | Jason A. Donenfeld | 2 | -10/+63 | |
2017-05-30 | rust test: convert screech test to snow | Jake McGinty | 2 | -39/+31 | |
2017-05-30 | style: spaces after for loops | Jason A. Donenfeld | 7 | -15/+15 | |
2017-05-30 | peer: use iterator macro instead of callback | Jason A. Donenfeld | 6 | -77/+73 | |
2017-05-30 | noise: precompute static-static ECDH operation | Jason A. Donenfeld | 4 | -15/+30 | |