Age | Commit message (Collapse) | Author | |
---|---|---|---|
2019-04-24 | ssl: Enable additional ciphers for TLS 1.3 | Péter Dimitrov | |
Enable TLS_CHACHA20_POLY1305_SHA256 and TLS_AES_128_CCM_SHA256. Change-Id: I04e32bcbf0683bb517f235a3e352facffc674692 | |||
2019-04-02 | Merge branch 'peterdmv/ssl/update-chacha-ciphers' | Péter Dimitrov | |
* peterdmv/ssl/update-chacha-ciphers: ssl: Update Chacha20-Poly1305 cipher suite codes Change-Id: I0a3c48d7eb30d7c8fae2afdc4eaa68e909a474ea | |||
2019-04-01 | ssl: Update Chacha20-Poly1305 cipher suite codes | Péter Dimitrov | |
Update the cipher suite codes of the Chacha20-Poly1305 ciphers to align them with RFC7905. Change-Id: I85aa8dfd8a3782d61304b7f74b48f7a09f15a033 | |||
2019-03-29 | ssl: Add support AES_CCM cipher suites form RFC 6655 | Ingela Anderton Andin | |
2019-02-08 | ssl: Improve TLS 1.3 statem | Péter Dimitrov | |
- Store FinishedKey in cipher_state. - Implement state 'wait_finished'. - Calculate traffic secrets in 'wait_finished' after Finished received from client and go to state 'Connection'. - Drop 'change_cipher_spec' messages (middlebox compatibility mode). - Extend tests of 1-RTT. Change-Id: Id69619ec5da053ffaaef75378678a27afeef6916 | |||
2018-10-22 | Merge branch 'maint' | Ingela Anderton Andin | |
2018-10-19 | ssl: Refactor AEAD ciphers | Ingela Anderton Andin | |
TLS-1.3 needs to handle AEAD inputs diffrently than previous versions. Refactor code to facilitate TLS-1.3 additions. Change CHACHA20_POLY1305 NONCE to match RFC 7905. This will be important later when we fix interop with TLS compatible crypto invocation. | |||
2018-09-07 | ssl: Add TLS 1.3 cipher suites | Péter Dimitrov | |
TLS_AES_128_GCM_SHA256 = {0x13,0x01} TLS_AES_256_GCM_SHA384 = {0x13,0x02} TLS_CHACHA20_POLY1305_SHA256 = {0x13,0x03} Change-Id: I3406aaedac812fc43519ff31e5f00d26e375c5d5 | |||
2018-06-18 | Update copyright year | Henrik Nord | |
2017-07-23 | add draft-mattsson-tls-ecdhe-psk-aead ECDHE-PSK with GCM ciphers | Andreas Schultz | |
Add the GCM ciphers from draft-mattsson-tls-ecdhe-psk-aead and the specification for the CCM cipher (but leave them commented out as we don't support CCM yet). | |||
2017-07-21 | ssl: add ECDHE_PSK cipher suites | Andreas Schultz | |
2015-06-18 | Change license text to APLv2 | Bruce Yinhe | |
2015-03-05 | Merge branch 'maint' | Ingela Anderton Andin | |
Conflicts: lib/ssl/src/ssl_cipher.erl lib/ssl/test/ssl_basic_SUITE.erl | |||
2015-03-02 | ssl: Implement support for TLS_FALLBACK_SCSV | Ingela Anderton Andin | |
2014-09-03 | ssl: add draft-agl-tls-chacha20poly1305-04 Chacha20/Poly1305 Suites | Andreas Schultz | |
2014-09-03 | ssl: add PSK-GCM suites | Andreas Schultz | |
2014-09-03 | ssl: implement AES128-GCM suites | Andreas Schultz | |
2014-03-25 | ssl: Improve type specs | Ingela Anderton Andin | |
Conflicts: lib/ssl/src/dtls_record.erl | |||
2013-09-10 | ssl: Refactor TLS/DTLS record handling | Ingela Anderton Andin | |
2013-09-10 | ssl: Dialyzer fixes | Ingela Anderton Andin | |
2013-05-08 | ssl: Fix dialyzer spec | Ingela Anderton Andin | |
2013-05-08 | crypto: Deprecate functions, update doc and specs | Ingela Anderton Andin | |
2013-05-08 | SSL: add Elliptic Curve support for ssl app | Andreas Schultz | |
2013-03-28 | SSL: add TLS-SRP (RFC 5054) cipher suites | Andreas Schultz | |
2013-03-28 | SSL: add TLS PSK (RFC 4279 and RFC 5487) cipher suites | Andreas Schultz | |
2012-08-22 | ssl: Add TLS 1.2 cipher suites | Andreas Schultz | |
2012-08-22 | ssl: make PRF function selectable | Andreas Schultz | |
TLS 1.2 allows to negotiate the used PRF, additional the default PRF uses a different hash. This change make the PRF selectable and hardwires the PRF for TLS < 1.2 | |||
2010-08-23 | Revise the public_key API | Ingela Anderton Andin | |
Cleaned up and documented the public_key API to make it useful for general use. | |||
2010-06-22 | Added more -spec definitions. | Ingela Anderton Andin | |
2010-05-21 | Decision not to support DH and export cipher suites. | Ingela Anderton Andin | |
2010-05-11 | OTP-8568 RFC -5746 | Ingela Anderton Andin | |
New ssl now supports secure renegotiation as described by RFC 5746. | |||
2009-11-20 | The R13B03 release.OTP_R13B03 | Erlang/OTP | |