- 688646f [tls] Add GCM cipher suites by Michael Brown · 2 years, 4 months ago
- 4acded7 [crypto] Support in-place decryption for GCM ciphers by Michael Brown · 2 years, 4 months ago
- 6357720 [crypto] Ensure relevant GCM cipher state is cleared by cipher_setiv() by Michael Brown · 2 years, 4 months ago
- 7256a6e [tls] Allow handshake digest algorithm to be specified by cipher suite by Michael Brown · 2 years, 4 months ago
- c453b4c [tls] Add MAC length as a cipher suite parameter by Michael Brown · 2 years, 4 months ago
- 30243ad [crypto] Add concept of cipher alignment size by Michael Brown · 2 years, 4 months ago
- d1bc872 [tls] Formalise notions of fixed and record initialisation vectors by Michael Brown · 2 years, 4 months ago
- 8fce267 [crypto] Add block cipher Galois/Counter mode of operation by Michael Brown · 2 years, 4 months ago
- da81214 [crypto] Add concept of authentication tag to cipher algorithms by Michael Brown · 2 years, 4 months ago
- 8e478e6 [crypto] Allow initialisation vector length to vary from cipher blocksize by Michael Brown · 2 years, 4 months ago
- 52f72d2 [crypto] Expose null crypto algorithm methods for reuse by Michael Brown · 2 years, 4 months ago
- 2c78242 [tls] Add support for DHE variants of the existing cipher suites by Michael Brown · 2 years, 5 months ago
- ea33ea3 [tls] Add key exchange mechanism to definition of cipher suite by Michael Brown · 2 years, 5 months ago
- 18b8610 [crypto] Add Ephemeral Diffie-Hellman key exchange algorithm by Michael Brown · 2 years, 5 months ago
- 007d3cb [crypto] Simplify internal HMAC API by Michael Brown · 2 years, 5 months ago
- fc8bd4b [x509] Use case-insensitive comparison for certificate names by Michael Brown · 3 years, 10 months ago
- 68f1914 [x509] Clarify debug message for an untrusted X.509 issuer by Josh McSavaney · 4 years, 5 months ago
- f43a8f8 [crypto] Allow private key to be specified as a TLS connection parameter by Michael Brown · 4 years, 3 months ago
- 3475f91 [x509] Make root of trust a reference-counted structure by Michael Brown · 4 years, 3 months ago
- 39f5293 [x509] Record root of trust used when validating a certificate by Michael Brown · 4 years, 3 months ago
- 6e92d62 [ocsp] Remove dummy OCSP certificate root by Michael Brown · 4 years, 3 months ago
- e4b6328 [asn1] Rename ASN1_OID_CURSOR to ASN1_CURSOR by Michael Brown · 4 years, 3 months ago
- 8bc85ec [deflate] Fix typo in comment describing length codes by Daniel Johnson · 4 years, 8 months ago
- 3f637d7 [ocsp] Accept SHA1 certID responses even if SHA1 is not enabled by Michael Brown · 4 years, 8 months ago
- bd7a5e4 [crypto] Allow algorithms to be included without being OID-identifiable by Michael Brown · 4 years, 9 months ago
- 0cc12f0 [crypto] Profile the various stages of modular multiplication by Michael Brown · 6 years ago
- 131635e [crypto] Drag in configured digestInfo prefixes for any use of RSA by Michael Brown · 6 years ago
- b6ffe28 [ocsp] Accept response certID with missing hashAlgorithm parameters by Michael Brown · 6 years ago
- 36a4c85 [init] Show startup and shutdown function names in debug messages by Michael Brown · 6 years ago
- 0d35411 [rng] Use fixed-point calculations for min-entropy quantities by Michael Brown · 7 years ago
- a0021a3 [ocsp] Centralise test for whether or not an OCSP check is required by Michael Brown · 7 years ago
- fc2f0dd [ntlm] Add support for NTLM authentication mechanism by Michael Brown · 7 years ago
- 0077b09 [crypto] Add MD4 message digest algorithm by Michael Brown · 7 years ago
- 32d5469 [crypto] Eliminate repetitions in MD5 round constant table by Michael Brown · 7 years ago
- fb6b66c [crypto] Fix endianness typo in comment by Michael Brown · 7 years ago
- e5bfa10 [crypto] Expose asn1_grow() by Michael Brown · 8 years ago
- 5b608bb [crypto] Expose RSA_CTX_SIZE constant by Michael Brown · 8 years ago
- 827dd1b [crypto] Mark permanent certificates as permanent by Michael Brown · 9 years ago
- 1e277ab [crypto] Add certstat() to display basic certificate information by Michael Brown · 9 years ago
- 9a1a42f [crypto] Allow certificates to be marked as having been added explicitly by Michael Brown · 9 years ago
- 534eae4 [crypto] Expose certstore_del() to explicitly remove stored certificates by Michael Brown · 9 years ago
- ff28b22 [crypto] Generalise X.509 "valid" field to a "flags" field by Michael Brown · 9 years ago
- e564a4e [crypto] Add image_x509() to extract X.509 certificates from image by Michael Brown · 9 years ago
- 942b798 [crypto] Enable both DER and PEM formats by default by Michael Brown · 9 years ago
- 296670a [crypto] Allow for parsing of partial ASN.1 cursors by Michael Brown · 9 years ago
- 2a187f4 [arm] Avoid instruction references to symbols defined via ".equ" by Michael Brown · 9 years ago
- 0141ea3 [crypto] Allow trusted certificates to be stored in non-volatile options by Michael Brown · 9 years ago
- 1f65ed5 [build] Allow assembler section type character to vary by architecture by Michael Brown · 9 years ago
- 5a6ed90 [crypto] Allow for zero-length ASN.1 cursors by Michael Brown · 9 years ago
- 42c2a6a [ocsp] Avoid including a double path separator in request URI by Michael Brown · 9 years ago
- 29cb090 [crypto] Dual-license more selected DRBG files by Michael Brown · 9 years ago
- 0c396dd [crypto] Dual-license selected DRBG files by Michael Brown · 9 years ago
- b1caa48 [crypto] Support SHA-{224,384,512} in X.509 certificates by Michael Brown · 10 years ago
- fae7a53 [build] Fix strict-aliasing warning on older gcc versions by Michael Brown · 10 years ago
- 657dd5f [crypto] Remove AXTLS headers by Michael Brown · 10 years ago
- 09824ec [crypto] Replace AES implementation by Michael Brown · 10 years ago
- 69891db [crypto] Add ECB block cipher mode (for debug and self-tests only) by Michael Brown · 10 years ago
- 1205721 [base64] Add buffer size parameter to base64_encode() and base64_decode() by Michael Brown · 10 years ago
- 9aa8090 [base16] Add buffer size parameter to base16_encode() and base16_decode() by Michael Brown · 10 years ago
- ea3d587 [crypto] Add SHA-512/224 algorithm by Michael Brown · 10 years ago
- e5e91ab [crypto] Add SHA-512/256 algorithm by Michael Brown · 10 years ago
- 0287929 [crypto] Add SHA-384 algorithm by Michael Brown · 10 years ago
- 6f713c2 [crypto] Add SHA-512 algorithm by Michael Brown · 10 years ago
- 4dbc443 [crypto] Add SHA-224 algorithm by Michael Brown · 10 years ago
- fbc4ba4 [build] Fix the REQUIRE_SYMBOL mechanism by Michael Brown · 10 years ago
- b6ee89f [legal] Relicense files under GPL2_OR_LATER_OR_UBDL by Michael Brown · 10 years ago
- 5cbdc41 [crypto] Fix parsing of OCSP responder ID key hash by Michael Brown · 10 years ago
- 50e48d5 [crypto] Fix debug message by Michael Brown · 11 years ago
- 8484e97 [crypto] Add support for iPAddress subject alternative names by Michael Brown · 11 years ago
- 93acb5d [crypto] Allow wildcard matches on commonName as well as subjectAltName by Michael Brown · 11 years ago
- f10726c [crypto] Add support for subjectAltName and wildcard certificates by Michael Brown · 11 years ago
- 7c7c957 [crypto] Allow signed timestamp error margin to be configured at build time by Michael Brown · 11 years ago
- d904905 [crypto] Use fingerprint when no common name is available for debug messages by Michael Brown · 11 years ago
- bc8ca6b [crypto] Generalise X.509 cache to a full certificate store by Michael Brown · 11 years ago
- 2dd3fff [crypto] Add pubkey_match() to check for matching public/private key pairs by Michael Brown · 11 years ago
- e1ebc50 [crypto] Remove dynamically-allocated storage for certificate OCSP URI by Michael Brown · 11 years ago
- 01fa7ef [crypto] Remove dynamically-allocated storage for certificate name by Michael Brown · 11 years ago
- 151e4d9 [ocsp] Handle OCSP responses that don't provide certificates by Alexander Chernyakhovsky · 11 years ago
- 7667536 [uri] Refactor URI parsing and formatting by Michael Brown · 11 years ago
- 97fd5cc [deflate] Fix literal data length calculation by Michael Brown · 11 years ago
- 9bdfc36 [deflate] Add support for DEFLATE decompression by Michael Brown · 11 years ago
- b094253 [settings] Force settings into alphabetical order within sections by Michael Brown · 11 years ago
- 22001cb [settings] Explicitly separate the concept of a completed fetched setting by Michael Brown · 11 years ago
- 72fb55e [settings] Change "not-found" semantics of fetch_setting_copy() by Michael Brown · 12 years ago
- 0036fdd [crypto] Accept OCSP responses containing multiple certificates by Michael Brown · 12 years ago
- cb29cd4 [crypto] Report meaningful error when certificate chain validation fails by Michael Brown · 12 years ago
- e42bc3a [libc] Use __einfo() tuple as first argument to EUNIQ() by Michael Brown · 12 years ago
- 09d45ff [crypto] Allow in-place CBC decryption by Michael Brown · 12 years ago
- c3b4860 [legal] Update FSF mailing address in GPL licence texts by Michael Brown · 13 years ago
- 0242473 [arp] Try to avoid discarding ARP cache entries by Michael Brown · 13 years ago
- 4010890 [crypto] Allow an error margin on X.509 certificate validity periods by Michael Brown · 13 years ago
- 4fa1a2b [crypto] Rename KEY= to PRIVKEY= and "key" to "privkey" by Michael Brown · 13 years ago
- 7fa1f41 [crypto] Require OCSP check if certificate provides an OCSP URI by Michael Brown · 13 years ago
- 944e023 [crypto] Construct OCSP check URI by Michael Brown · 13 years ago
- 57de8b6 [crypto] Fix margin of error for OCSP checks by Michael Brown · 13 years ago
- b278094 [crypto] Return a NULL OCSP check if construction fails by Michael Brown · 13 years ago
- c923d57 [crypto] Return a NULL X.509 certificate if construction fails by Michael Brown · 13 years ago
- f20c374 [crypto] Accept UTCTime/GeneralizedTime with no "seconds" field by Michael Brown · 13 years ago
- 39ac285 [crypto] Add framework for OCSP by Michael Brown · 13 years ago
- deac4ea [crypto] Add functions for constructing ASN.1 objects by Michael Brown · 13 years ago
