summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Unknown key-share resistanceHEADmasterJason A. Donenfeld2017-07-171-0/+6
|
* .io -> .comJason A. Donenfeld2017-07-161-1/+1
|
* Fixed unhappy m4 commentKevin Milner2017-07-141-1/+2
|
* Updated comments for additional explanations and clarityKevin Milner2017-07-141-21/+40
|
* Add auto proving mode as default makefile targetJason A. Donenfeld2017-07-141-1/+4
|
* Removed unnecessary restrictionsKevin Milner2017-07-141-7/+0
|
* GPLv2Jason A. Donenfeld2017-07-141-0/+339
|
* Re-add heuristic hacksJason A. Donenfeld2017-05-091-4/+8
|
* Be less uglyJason A. Donenfeld2017-05-081-84/+84
|
* StyleJason A. Donenfeld2017-05-081-87/+96
|
* Fix commentsJason A. Donenfeld2017-05-081-5/+1
|
* Begin psk simplificationJason A. Donenfeld2017-05-081-104/+50
|
* Use proof serverJason A. Donenfeld2017-05-061-0/+2
|
* Makefile should be functional on linuxJason A. Donenfeld2017-05-061-1/+1
|
* No TODOJason A. Donenfeld2017-05-061-2/+2
|
* State carries over ci6 not ci3Jason A. Donenfeld2017-05-061-1/+1
|
* Exists PSKJason A. Donenfeld2017-05-061-0/+5
|
* Without heuristic hackeryKevin Milner2017-05-041-76/+5
|
* Manual proof for heuristic hackeryKevin Milner2017-05-041-0/+71
|
* PSK mode readdedKevin Milner2017-05-041-50/+72
|
* Model the PSK mixing non lazilyJason A. Donenfeld2017-05-041-2/+4
| | | | It's not actually that hard to do it properly, so just do it properly.
* New psk modelJason A. Donenfeld2017-05-041-208/+51
| | | | | | | | In the psk rework, we're now keeping the same protocol for PSK and for non-PSK. The only difference, therefore, will be whether or not the PSK is revealed. That is to say -- non-PSK mode is simply an all NULL PSK. To make this happen, a few other aspects of the protocol were changed, so this commit changes some fundumental calculations.
* Cleanup and commentingKevin Milner2017-04-031-46/+51
| | | | | | Cleaned up some of the comments and actions that turned out to be unnecessary. Also clarified some of the things that are assumed in the current model
* Additional documentation of propertiesKevin Milner2017-03-311-26/+49
|
* Jason likes things in orderKevin Milner2017-03-301-2/+2
| | | | So now they're in order
* PSK related secrecy, reformulated injectivityKevin Milner2017-03-301-9/+18
|
* Identity HidingKevin Milner2017-03-301-19/+14
|
* Changed timestamp to public valueKevin Milner2017-03-301-6/+6
| | | | | | Speeds up the PSK solving case instead of getting stuck on solving for a fresh timestamp unnecessarily. Also added comment on how to manually prove the PSK exists-trace lemma
* Updated agreement properties + efficiencyKevin Milner2017-03-301-64/+140
| | | | | Optimized some of the ways the heuristic deals with state during handshake, by doubling the state fact to have a high priority version
* Fixed awk syntax in remoteKevin Milner2017-03-301-5/+5
|
* Change of agreement property and compromise modelKevin Milner2017-03-291-8/+31
|
* Makefile: be less insaneJason A. Donenfeld2017-03-281-18/+20
| | | | This is still insane, but now slightly less so.
* PSK Mode added, and efficiency improved by splitting out state invariantskmilner2017-03-091-123/+161
|
* More efficiency changes to reduce DH variant computations. Injective agreement now proves directly from agreementKevin Milner2017-03-061-68/+170
|
* Minor updates to terms for ease of use, and preparation for adding PSK mode. Everything but injective agreement proves automaticallyKevin Milner2017-03-051-53/+120
|
* Removed incorrect commentKevin Milner2017-03-021-4/+2
|
* Minor update to remove unnecessary terms, and untype the sidI term so the heuristic does better at picking terms to solve forKevin Milner2017-03-021-17/+19
|
* Hacky makefile for convenienceKevin Milner2017-03-011-0/+46
|
* Initial modelKevin Milner2017-03-011-0/+163