| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Let crypt_checkpass() set EACCES after bcrypt_checkpass() failure; |   schwarze | 2014-11-21 | 1 | -2/+4 | |
| | | | | | ok tedu@ | |||||
| * | change prototype for crypt_newhash. the login_cap_t is a holdover from its |   tedu | 2014-11-21 | 2 | -15/+10 | |
| | | | | | | | pwd_gensalt origins, but a string argument works equally work and is more friendly to consumers beyond local user accounts. ok deraadt | |||||
| * | split crypt_checkpass off into a new file | tedu | 2014-11-20 | 3 | -36/+73 | |
| | | ||||||
| * | add crypt_newhash to NAME and add an MLINK; |   jmc | 2014-11-18 | 2 | -4/+6 | |
| | | ||||||
| * | add new function crypt_newhash to simplify creating new hashes. | tedu | 2014-11-17 | 2 | -3/+46 | |
| | | | | | | does most of the work pwd_gensalt did, but also creates the hash. (unused yet) | |||||
| * | missing newline |   deraadt | 2014-07-21 | 1 | -1/+2 | |
| | | ||||||
| * | Move more OS-specific functionality to arc4random.h headers. |   bcook | 2014-07-20 | 2 | -6/+14 | |
| | | | | | | | | | Move <sys/mman.h> and raise(SIGKILL) calls to OS-specific headers. On OpenBSD, move thread_private.h as well to arc4random.h. On Windows, use TerminateProcess on getentropy failure. ok deraadt@ | |||||
| * | From ISO/IEC 9899:1999 and 9899:201x, |   guenther | 2014-07-20 | 1 | -3/+3 | |
| | | | | | | | | | | 6.11.5 - Storage-class specifiers: The placement of a storage-class specifier other than at the beginning of the declaration specifiers in a declaration is an obsolescent feature. Diff from Jean-Philippe Ouellet (jean-philippe (at) ouellet.biz) | |||||
| * | arc4random re-seeds with getentropy() now; ok deraadt@ jmc@ |   naddy | 2014-07-19 | 1 | -3/+3 | |
| | | ||||||
| * | Change _rs_allocate so it can combine the two regions (rs and rsx) | deraadt | 2014-07-19 | 2 | -28/+25 | |
| | | | | | | | | | | | into one if a system has an awesome getentropy(). In that case it is valid to totally throw away the rsx state in the child. If the getentropy() is not very good and has a lazy reseed operation, this combining is a bad idea, and the reseed should probably continue to use the "something old, something new" mix. _rs_allocate() can accomodate either method, but not on the fly. ok matthew | |||||
| * | Seperate arc4random's os-dependent parts into static inline functions, | deraadt | 2014-07-18 | 2 | -36/+57 | |
| | | | | | | making it much easier for libressl -portable to fill in the gaps. ok bcook beck | |||||
| * | "Race-free because we're running single-threaded in a new | deraadt | 2014-07-17 | 1 | -1/+5 | |
| | | | | | | address space, and once allocated rs is never deallocated." document the forkhandler to save reviewers time, with matthew | |||||
| * | #ifdef wrap the _rs_forkhandler | deraadt | 2014-07-16 | 1 | -1/+3 | |
| | | ||||||
| * | added handler for an atfork hook from kettenis@ | bcook | 2014-07-16 | 1 | -1/+10 | |
| | | | | | ok deraadt@ beck@ kettenis@ | |||||
| * | While we thought this would make portable life easier it actually |   beck | 2014-07-13 | 1 | -3/+1 | |
| | | | | | | makes it much harder. ok bcook@ kettenis@ | |||||
| * | Wrap "thread_private.h" with #ifdef __OpenBSD__ so that other systems | deraadt | 2014-07-12 | 1 | -1/+3 | |
| | | | | | | | can copy this file (plus chacha_private.h) directly and reuse it trivially. Well, as long as they have a getentropy() as well.. ok beck | |||||
| * | Split arc4random_uniform into it's own file, to assist other projects | deraadt | 2014-07-12 | 3 | -39/+60 | |
| | | | | | | | now using this as upstream code. The particular problem is systems that contain older arc4random derivations lacking arc4random_uniform(). ok tedu miod | |||||
| * | Clean up after arc4random u_int32_t uint32_t change | beck | 2014-07-09 | 1 | -5/+5 | |
| | | | | | ok jsing@ | |||||
| * | changes to improve portability | bcook | 2014-07-09 | 1 | -10/+11 | |
| | | | | | ok beck@ deraadt@ jsing@ guenther@ | |||||
| * | re-init and init code paths are now more shared, so the getpid()-based | deraadt | 2014-06-27 | 1 | -2/+3 | |
| | | | | | portable code path must handle that; with brent cook | |||||
| * | Add back an #ifndef MAP_INHERIT_ZERO chunk to support the old getpid() | deraadt | 2014-06-26 | 1 | -1/+13 | |
| | | | | | | mechanism, to aid in portability to other systems as requested. ok matthew | |||||
| * | document why we explicit_bzero | deraadt | 2014-06-25 | 1 | -2/+2 | |
| | | ||||||
| * | arc4random: hard fail with raise(SIGKILL) if getentropy() returns -1 |   matthew | 2014-06-20 | 1 | -3/+4 | |
| | | | | | | | | Allow other non-zero return values in case we change our mind to return an ssize_t byte count instead of simple success/fail. ok deraadt, djm | |||||
| * | Move rs_chacha and rs_buf into the same memory page and don't mark it | matthew | 2014-06-19 | 1 | -22/+31 | |
| | | | | | | | | | | MAP_INHERIT_ZERO anymore. This restores arc4random's previous behavior where fork children would mix in some randomness from the parent process. New behavior noticed by deraadt ok deraadt, tedu | |||||
| * | Use MAP_INHERIT_ZERO in arc4random(3) | matthew | 2014-06-17 | 1 | -37/+44 | |
| | | | | | | | | | Now instead of calling getpid() each time a user invokes arc4random(), we're able to rely on the kernel zero'ing out the RNG state if the process forks. ok deraadt, djm | |||||
| * | For now... assume success of getentropy() just like we assumed success | deraadt | 2014-06-13 | 1 | -3/+3 | |
| | | | | | of sysctl(). Mark it with XXX while we consider. | |||||
| * | use getgentropy() call. If it fails, things are pretty bad -- | deraadt | 2014-06-13 | 1 | -8/+3 | |
| | | | | | | call abort(). this direction discussed at length with miod beck tedu matthew etc | |||||
| * | Delete the extraneous "return" statement at the end of a void function. |   jca | 2014-05-31 | 1 | -2/+1 | |
| | | | | | From Fritjof Bornebusch. | |||||
| * | Add missing header needed by isdigit(). |   chl | 2014-05-17 | 1 | -4/+5 | |
| | | | | | | | While there, sort headers. ok tedu@ | |||||
| * | refactor some of the des crypt code to use fewer globals. | tedu | 2014-05-17 | 2 | -42/+45 | |
| | | | | | ok miod | |||||
| * | update NAME and MLINKS for previous; | jmc | 2014-05-16 | 2 | -5/+7 | |
| | | ||||||
| * | document crypt_checkpass | tedu | 2014-05-16 | 1 | -1/+14 | |
| | | ||||||
| * | use $2b in the bcrypt example, ok tedu |   sthen | 2014-05-16 | 1 | -3/+3 | |
| | | ||||||
| * | remove md5crypt. | tedu | 2014-05-12 | 5 | -195/+65 | |
| | | | | | | | while changing things, add a crypt_checkpass wrapper that handles most of the edge cases. (not quite ready for production, though.) ok deraadt | |||||
| * | missing NULL checks to see if init is needed. found hard way by deraadt. | tedu | 2014-05-06 | 1 | -3/+3 | |
| | | ||||||
| * | fix stupid commit | tedu | 2014-05-06 | 1 | -5/+5 | |
| | | ||||||
| * | use explicit_bzero | tedu | 2014-05-06 | 1 | -5/+5 | |
| | | ||||||
| * | clear a stack buffer with explicit_bzero | tedu | 2014-05-06 | 1 | -2/+2 | |
| | | ||||||
| * | move chacha context and buffer out of bss and allow mmap to place them | tedu | 2014-05-06 | 1 | -6/+16 | |
| | | | | | wherever it decides it would like them. first step. ok deraadt dlg djm | |||||
| * | delete useless test code | deraadt | 2014-05-04 | 1 | -23/+1 | |
| | | ||||||
| * | now that 5.5 has been released with compatibility for 2b hashes, | tedu | 2014-05-03 | 1 | -2/+2 | |
| | | | | | switch to generating them by default. prodded by deraadt and sthen | |||||
| * | 1. Drop support for no minor. This variant doesn't exist anymore. | tedu | 2014-05-03 | 1 | -44/+30 | |
| | | | | | | | | | | | 2. Pull up the actual minor processing code into the switch that parses it. 3. atoi is actually simpler than strtonum in this case, but check the input beforehand so we don't get unexpected results. 4. Slightly more consistent style between various parse and check and increment operations on salt. ok deraadt | |||||
| * | one small tweak to avoid ever going off the end of a string. | tedu | 2014-04-19 | 1 | -4/+6 | |
| | | ||||||
| * | improved checking for invalid hashes. from solar designer | tedu | 2014-04-19 | 1 | -6/+10 | |
| | | ||||||
| * | use char * for strings, saving casts. add return codes to base64 functions | tedu | 2014-04-08 | 1 | -15/+26 | |
| | | ||||||
| * | I have discussed these licenses with Poul-Henning Kamp and he has agreed to | beck | 2014-04-03 | 1 | -8/+17 | |
| | | | | | this license change. We will remember that we all still like beer. | |||||
| * | oops, merge error | tedu | 2014-03-24 | 1 | -2/+2 | |
| | | ||||||
| * | clear stack variables, suggested by djm | tedu | 2014-03-23 | 1 | -1/+4 | |
| | | ||||||
| * | some improvements suggested by djm. | tedu | 2014-03-23 | 1 | -4/+6 | |
| | | | | | | | use better constant for salt size. always copy ":" to gerror, in case somebody is dumb enough to overwrite it timingsafe_bcmp before somebody whines about strcmp | |||||
| * | two functions don't need to be exported | tedu | 2014-03-23 | 1 | -3/+3 | |
| | | ||||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |