Age | Commit message (Collapse) | Author |
|
|
|
The test case for the stream api creates one initial state with stream_init/3
That initial state is then used for a series of encrypts, and for a series of
decrypts.
That is not possible any more since the changes are saved in the nif reference.
|
|
|
|
Replaced by api_ng.c
|
|
|
|
|
|
Replaced by api_ng.c
|
|
|
|
Also: Compatibility functions for aes_ctr in historic crypto libs
|
|
Unnecessary, because the underlying crypto libraries handles this case.
Also:
- Relax the condition of binary Key and IV
-Fix bug for empty data on historic cryptolibs because tests fails for
empty data on at least aes_cfb8 on OpenSSL 0.9.8h. It does not fail
on OpenSSL 0.9.8zh.
|
|
* hans/crypto/fix_chacha20_bug/OTP-15678:
crypto: Disable chacha20 if OpenSSL 1.1.0-1.1.0c
|
|
due to a bug. The cipher first appeared in 1.1.0
|
|
Returned the atom notsup instead of the exception notsup.
|
|
* maint:
Updated OTP version
Prepare release
|
|
|
|
Also adds some more aliases that contain the key length
in their name.
|
|
* hans/crypto/bad_ret_fips/OTP-15634:
crypto: Fix bad return value for aes_cfb8 and aes_cfb128 if FIPS_SUPPORT
crypto: Fix bad return code for eddsa if FIPS_SUPPORT
|
|
There were some bad values returned if FIPS mode was enabled. The exclusion of
algorithms were not completly correct either.
|
|
* maint:
crypto: Remove assertion
crypto: Fail if FIPS mode is present but can't be enabled
crypto: Remove blowfish_SUITE.
crypto: Update crypto_SUITE checking of FIPS
|
|
This is not needed any more
|
|
|
|
The tests are a subset of the newer and larger crypto_SUITE.
|
|
The testing for not supported were missing in some cases
|
|
This reverts commit df130102cdeca8d35fec95a0c926fd1cfec54eab.
|
|
|
|
|
|
|
|
The new files api_ng.h and api_ng.c implements an api using EVP.
The api is not by any mean new, except for the crypto application
in Erlang/OTP.
The aims at using the block api in a stream manor, that is
1) call crypto_init/4
2..N) call crypto_update/{2,3}
The purpose is to simplify and hopefully optimize the SSL and SSH
applications.
By keeping the crypto state in C in an enif_resource the costful state
copying in SSL and SSH is reduced with 1-2 per message sent or received.
Changes in other files are for adaptation like FIPS etc since many
functions uses the central get_cipher_type() function.
|
|
* maint:
crypto: Fix of engine_SUITE:engine_list test case
|
|
|
|
|
|
Add hash function BLAKE2 to crypto:hash/hmac
OTP-15564
|
|
|
|
Conflicts:
lib/ssl/doc/src/ssl.xml
lib/ssl/src/ssl.erl
lib/ssl/src/ssl_cipher_format.erl
lib/ssl/src/tls_handshake.erl
|
|
|
|
Adds two hash functions blake2b and blake2s (64 bit hash and 32 bit hash
respectively). These are modern and standard hash functions used in
blockchains and encrypted communication protocols (e.g. Noise -
http://www.noiseprotocol.org/). The hash functions are available in
OpenSSL since version 1.1.1.
Also add test cases and mention in documentation.
|
|
|
|
|
|
crypto: revamp C code [WIP]
OTP-14732
|
|
Add missing type {rsa_mgf1_md, sha2} to rsa_sign_verify_opt.
This commit fixes dialyzer warnings when crypto users configured
explicit MGF1 hash function for RSA PSS signatures.
Change-Id: Ie11b1c73fc0d111303e256a578a2fd7b0d09b18a
|
|
* maint:
crypto: Reorg
crypto: Misc fixes: double time, calibrate once
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* maint:
crypto: Refresh of test case for elliptic curves
crypto: Rename a testcase
|
|
|