index
:
wireguard-openbsd
jd/histogram
jd/queueboosts
jd/simplify-queueing
master
WireGuard implementation for the OpenBSD kernel
Matt Dunwoodie
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
sbin
/
iked
/
crypto.c
(
follow
)
Commit message (
Expand
)
Author
Age
Files
Lines
*
Constify cipher API.
tobhe
2021-02-25
1
-5
/
+5
*
Upgrade to OpenSSL 1.1 compatible crypto API. Add additional
tobhe
2021-02-04
1
-29
/
+27
*
Add support for RSA-PSS PKCS1 signatures. Don't enable them by
tobhe
2021-01-26
1
-18
/
+21
*
Add support for RSASSA-PSS signature verification (RFC 7427).
tobhe
2020-12-06
1
-12
/
+110
*
Fix type mismatch. auth_method should be uint8_t.
tobhe
2020-12-03
1
-4
/
+4
*
Use a counter instead of random IV for AES-GCM. Security depends on
tobhe
2020-11-26
1
-3
/
+17
*
Add AES-GCM mode ciphers (IANA IDs 19 and 20) for IKEv2.
tobhe
2020-05-26
1
-5
/
+100
*
Stricter return value checking for EVP_Cipher* calls.
tobhe
2020-05-14
1
-18
/
+23
*
Fix leaks in signature validation.
tobhe
2020-04-22
1
-1
/
+5
*
Remove unused 'dsa_cert' variable.
tobhe
2020-04-20
1
-6
/
+1
*
Prevent multiple ibuf leaks. Clean up on proccess shutdown.
tobhe
2020-04-08
1
-1
/
+2
*
Switch from EVP_SignInit_ex() to the newer EVP_DigestSignInit()
tobhe
2020-02-14
1
-32
/
+40
*
fix char ** to const char ** conversion warning; ok mikeb@
otto
2017-08-28
1
-2
/
+4
*
spacing
reyk
2017-03-27
1
-2
/
+2
*
Add support for RFC4754 (ECDSA) and RFC7427 authentication.
reyk
2017-03-27
1
-46
/
+217
*
RFC4754 specifies ECDSA-521 (sic), not -512. ok reyk@
naddy
2015-10-31
1
-2
/
+2
*
Switch iked to C99-style fixed-width integer types.
reyk
2015-08-21
1
-26
/
+26
*
spacing (no binary change, verified with checksums)
reyk
2015-08-19
1
-6
/
+10
*
initial support for RFC 7427 signatures, so we are no longer
markus
2015-03-26
1
-7
/
+134
*
Replace <sys/param.h> with <limits.h> and other less dirty headers where
deraadt
2015-01-16
1
-2
/
+2
*
add additional includes required to build with -DOPENSSL_NO_DEPRECATED
jsg
2014-07-10
1
-1
/
+2
*
Fix compiler warnings in the format strings: use %zd for ssize_t and
reyk
2014-02-17
1
-2
/
+2
*
don't leak prv RSA key for each signature; ok mikeb
markus
2014-01-24
1
-1
/
+2
*
Use EVP_sha1 directly instead of doing the EVP_get_digestbyname lookup.
mikeb
2013-12-04
1
-10
/
+3
*
pass caller to ca_sslerror for better error messages; ok mikeb
markus
2013-11-14
1
-5
/
+5
*
Remove private CVS tag from an obsolete repository and bump copyright
reyk
2013-01-08
1
-3
/
+2
*
Plug two memory leaks when cleaning up the dh/dsa crypto structures.
reyk
2012-12-15
1
-1
/
+2
*
update email addresses to match reality.
reyk
2012-09-18
1
-2
/
+2
*
Under certain circumstances iked can be tricked to bypass a signature
mikeb
2011-08-27
1
-10
/
+13
*
fixup log_warn and log_debug arguments; ok reyk
mikeb
2010-12-21
1
-8
/
+8
*
fixup number rounding; ok reyk
mikeb
2010-11-08
1
-2
/
+2
*
disable padding correctly. therefore we no longer need to supply
mikeb
2010-09-30
1
-4
/
+8
*
fix block length for AES
reyk
2010-06-14
1
-2
/
+2
*
Import iked, a new implementation of the IKEv2 protocol.
reyk
2010-06-03
1
-0
/
+686