Thomas Pornin
|
4aac1cd5c6
|
Fixed behaviour in case of rejected renegotiation.
|
2017-07-15 06:14:55 +02:00 |
|
Thomas Pornin
|
57b2175020
|
Fixed selection of ECDHE_RSA suites for pre-1.2 TLS versions.
|
2017-07-07 00:49:58 +02:00 |
|
Thomas Pornin
|
ea95d8264c
|
Added implementation of keying material export (RFC 5705) (API for PRF implementations changed, to handle chunked seeds).
|
2017-07-04 20:43:39 +02:00 |
|
Thomas Pornin
|
d8641065c9
|
Fixed mishandling of tree structure in the cache for session parameters.
|
2017-06-24 00:29:41 +02:00 |
|
Thomas Pornin
|
7f343eedfc
|
Added encoded OID for hash functions (for use with PKCS#1 v1.5 signatures) into the public API.
|
2017-06-21 15:19:32 +02:00 |
|
Thomas Pornin
|
81437e1175
|
Fixed proper handling of clients with no "secure renegotiation" support.
|
2017-06-18 23:53:17 +02:00 |
|
Thomas Pornin
|
968da0f646
|
Fixed handling of incoming application data after sending a close_notify (data shall be discarded silently, not trigger an error). Also fixed a couple of bugs in the command-line test tool.
|
2017-06-15 16:57:37 +02:00 |
|
Thomas Pornin
|
8b2fe3add6
|
New "i62" code for big integers with 64x64->128 opcodes; also improved "i31" modular exponentiation.
|
2017-03-19 14:55:11 -04:00 |
|
Thomas Pornin
|
5db2d48b12
|
Added "ctmulq" implementation of Poly1305 (using 64->128 multiplications when available).
|
2017-03-18 16:46:00 +01:00 |
|
Thomas Pornin
|
db8f1b6645
|
New AES and GHASH implementations using POWER8 crypto opcodes.
|
2017-02-15 14:08:37 +00:00 |
|
Thomas Pornin
|
5f045c7599
|
Added AES+GHASH implementation using AES-NI opcodes; also ARM-Thumb assembly for faster Montgomery multiplication on Cortex-M0+. Added selection functions for "default" implementations.
|
2017-01-29 21:46:33 +01:00 |
|
Thomas Pornin
|
3f00688b9d
|
New Makefile structure; added compatibility with Windows + Visual C + nmake.
|
2017-01-22 20:00:29 +01:00 |
|
Thomas Pornin
|
3655193439
|
Activated Curve25519 support for ECDHE cipher suites.
|
2017-01-15 20:40:24 +01:00 |
|
Thomas Pornin
|
ef318ef83a
|
Added API for external hashing of ServerKeyExchange, and signature algorithm identifiers in the 0x080* format (preparatory steps for EdDSA support).
|
2017-01-13 21:46:28 +01:00 |
|
Thomas Pornin
|
44c79c1add
|
More optimisations for EC P-256 "i15" (specialised squaring function, mixed coordinates addition with a 4-bit window when the base point is the conventional generator).
|
2017-01-13 05:10:43 +01:00 |
|
Thomas Pornin
|
05ac106834
|
Added ALPN support (client and server).
|
2016-12-28 14:11:51 +01:00 |
|
Thomas Pornin
|
8bb8d74d4a
|
Fixed scheduling error (jumping back to failed engine, could lead to segfault).
|
2016-12-24 03:20:03 +01:00 |
|
Thomas Pornin
|
32c995f23d
|
Fixed definition of function (wrong name).
|
2016-12-22 17:01:02 +01:00 |
|
Thomas Pornin
|
b42bd5972f
|
Added ChaCha20+Poly1305 support (stand-alone, cipher suites).
|
2016-12-13 20:01:19 +01:00 |
|
Thomas Pornin
|
9e71c0673a
|
Added certificate name extraction API (from subject DN and SAN extension).
|
2016-12-12 20:45:06 +01:00 |
|
Thomas Pornin
|
e61ad42191
|
Added support for client certificates (both client-side and server-side, but still missing an API for extracting the client identity from the certificate).
|
2016-12-10 17:35:06 +01:00 |
|
Thomas Pornin
|
298ce6530e
|
More Doxygen-compatible documentation (SSL API).
|
2016-11-23 16:59:44 +01:00 |
|
Thomas Pornin
|
ab68048011
|
Added API to save and restore session parameters (for controllable session resumption on the client side).
|
2016-11-20 20:14:48 +01:00 |
|
Thomas Pornin
|
d16eee962a
|
Added flag to prohibit renegotiations.
|
2016-11-20 18:50:37 +01:00 |
|
Thomas Pornin
|
7561e7d6c8
|
Added support for TLS_FALLBACK_SCSV.
|
2016-11-20 16:14:48 +01:00 |
|
Thomas Pornin
|
60126cafc8
|
Added support for ClientHello padding (RFC 7685) and fixed buffering bug.
|
2016-11-18 18:03:06 +01:00 |
|
Thomas Pornin
|
3210f38e04
|
Initial import.
|
2016-11-02 19:01:13 -04:00 |
|