]>
wagner.pp.ru Git - openssl-gost/engine.git/log
Vitaly Chikunov [Mon, 21 Jan 2019 05:15:19 +0000 (08:15 +0300)]
asn1: make hash_params optional
R
1323565 .1.023-2018 defines in the `parameters' for
`AlgorithmIdentifier' field `digestParamSet' is optional.
Vitaly Chikunov [Mon, 21 Jan 2019 08:53:11 +0000 (11:53 +0300)]
test_params: signature verify tests for different curves
Interoperability with third party software.
Vitaly Chikunov [Mon, 21 Jan 2019 08:46:56 +0000 (11:46 +0300)]
Export bind_gost to allow local engine init
Look at `test_params.c` for example.
Vitaly Chikunov [Mon, 21 Jan 2019 08:52:10 +0000 (11:52 +0300)]
Fix DEBUG_SIGN
Dmitry Belyavskiy [Sat, 29 Dec 2018 12:01:32 +0000 (15:01 +0300)]
Some PVS Studio nits
Dmitry Belyavskiy [Fri, 28 Dec 2018 10:12:37 +0000 (13:12 +0300)]
Merge branch 'master' of https://github.com/gost-engine/engine
Dmitry Belyavskiy [Fri, 28 Dec 2018 10:11:48 +0000 (13:11 +0300)]
Acceptance tests of TLSTREE ctrl
Dmitry Belyavskiy [Fri, 28 Dec 2018 10:11:01 +0000 (13:11 +0300)]
Bugfix: iv should be adjusted before tlstree
Dmitry Belyavskiy [Fri, 28 Dec 2018 08:22:28 +0000 (11:22 +0300)]
Merge pull request #103 from UndefBehavior/edw_paramsets
Replace orders of groups with orders of cyclic subgroups
Dmitry Meshkov [Thu, 27 Dec 2018 10:03:13 +0000 (13:03 +0300)]
Replace orders of groups with orders of cyclic subgroups
According to OpenSSL documentation EC_GROUP's member named order contains the cardinality of cyclic subgroup. Some paramsets contain cardinalities of elliptic curves' groups.
Dmitry Belyavskiy [Thu, 27 Dec 2018 23:34:46 +0000 (02:34 +0300)]
Bugfix of seq decrement
Dmitry Belyavskiy [Thu, 27 Dec 2018 17:39:35 +0000 (20:39 +0300)]
CryptoPro compatibility
Dmitry Belyavskiy [Thu, 27 Dec 2018 07:30:30 +0000 (10:30 +0300)]
Merge pull request #101 from vt-alt/master
benchmark: Extend sign/verify benchmark.
Dmitry Belyavskiy [Tue, 25 Dec 2018 15:25:16 +0000 (18:25 +0300)]
Typo
Dmitry Belyavskiy [Tue, 25 Dec 2018 15:18:59 +0000 (18:18 +0300)]
Avoid memory leak
Dmitry Belyavskiy [Tue, 25 Dec 2018 13:34:24 +0000 (16:34 +0300)]
Avoid double-free, restore ephemeral mode self-compatibility
Dmitry Belyavskiy [Tue, 25 Dec 2018 10:39:59 +0000 (13:39 +0300)]
Non-ephemeral sec_key, more on TLS 1.2, remove extra params from VKO
Vitaly Chikunov [Mon, 24 Dec 2018 14:02:29 +0000 (17:02 +0300)]
benchmark: Extend sign/verify benchmark.
- Cycle through all supported parameters.
- Also do verification tests.
- Increase precision of timer (allow test to work faster).
Dmitry Belyavskiy [Mon, 24 Dec 2018 09:25:29 +0000 (12:25 +0300)]
As "openssl speed" does not support GOST parameters,
benchmark is done separately.
Dmitry Belyavskiy [Sat, 22 Dec 2018 11:48:16 +0000 (14:48 +0300)]
Merge pull request #100 from vt-alt/master
Split and integrate tests
Vitaly Chikunov [Fri, 21 Dec 2018 17:56:35 +0000 (20:56 +0300)]
Move tests from gost89.c into test_gost89.c.
Vitaly Chikunov [Fri, 21 Dec 2018 17:47:08 +0000 (20:47 +0300)]
Make keyexpimp independent test.
Move test code from gost_keyexpimp.c into separate test_keyexpimp.c and
link into test target.
Also, make tests work without requiring config.
Dmitry Belyavskiy [Tue, 18 Dec 2018 12:07:28 +0000 (15:07 +0300)]
Errors adjusted
Dmitry Belyavskiy [Thu, 6 Dec 2018 16:03:22 +0000 (19:03 +0300)]
New master API versioning.
Dmitry Belyavskiy [Sun, 18 Nov 2018 12:06:43 +0000 (15:06 +0300)]
GOST md aliases
Dmitry Belyavskiy [Sun, 18 Nov 2018 11:07:04 +0000 (14:07 +0300)]
Merge branch 'master' of https://github.com/gost-engine/engine
Dmitry Belyavskiy [Sun, 11 Nov 2018 11:24:55 +0000 (14:24 +0300)]
Merge pull request #95 from mojoman/master
Add LICENSE file to satisfy the lawyer in you
Wartan Hachaturow [Thu, 8 Nov 2018 06:53:52 +0000 (09:53 +0300)]
Add LICENSE file to satisfy the lawyer in you
Dmitry Belyavskiy [Tue, 30 Oct 2018 18:45:22 +0000 (21:45 +0300)]
Merge pull request #94 from candrews/cmake-improvements
Cmake improvements
Craig Andrews [Tue, 30 Oct 2018 01:29:30 +0000 (21:29 -0400)]
Support out-of-source building and have Travis do it
Craig Andrews [Tue, 30 Oct 2018 00:41:12 +0000 (20:41 -0400)]
Discover OpenSSL engines directory
The directory can be overriden by setting the CMake variable OPENSSL_ENGINES_DIR
Craig Andrews [Mon, 29 Oct 2018 19:48:21 +0000 (15:48 -0400)]
Use `make test` to run tests
CMakeLists.txt uses `add_test` to execute `test/run_tests` which does the same thing as the `prove` line did.
Dmitry Belyavskiy [Fri, 12 Oct 2018 19:31:31 +0000 (22:31 +0300)]
Make it compileable
Dmitry Belyavskiy [Fri, 12 Oct 2018 18:28:07 +0000 (21:28 +0300)]
Initial commit
GOST 28147-89 test suite from
https://github.com/openssl/openssl/blob/
26906f2d93ad4bc092b8b5783d1b35f8c9f0c6d8 /engines/ccgost/gost2814789t.c
WIP
Dmitry Belyavskiy [Tue, 2 Oct 2018 07:28:54 +0000 (10:28 +0300)]
Merge branch 'master' of https://github.com/gost-engine/engine
Dmitry Belyavskiy [Tue, 2 Oct 2018 07:28:00 +0000 (10:28 +0300)]
Link to page related to GOST crypto in Open Source projects
Dmitry Belyavskiy [Thu, 20 Sep 2018 08:09:35 +0000 (11:09 +0300)]
Merge pull request #86 from vt-alt/curves
Test to validate curve parameters
Dmitry Belyavskiy [Wed, 19 Sep 2018 14:31:32 +0000 (17:31 +0300)]
Updated MAC size
Dmitry Belyavskiy [Wed, 19 Sep 2018 14:30:44 +0000 (17:30 +0300)]
Result check
Dmitry Belyavskiy [Wed, 19 Sep 2018 10:43:29 +0000 (13:43 +0300)]
Formatting
Dmitry Belyavskiy [Wed, 19 Sep 2018 10:31:04 +0000 (13:31 +0300)]
TLSTREE ctrl
Dmitry Belyavskiy [Wed, 19 Sep 2018 10:26:23 +0000 (13:26 +0300)]
TODO
Dmitry Belyavskiy [Tue, 18 Sep 2018 13:58:07 +0000 (16:58 +0300)]
TLSTREE - OMAC processing, not tested.
Dmitry Belyavskiy [Tue, 18 Sep 2018 13:45:22 +0000 (16:45 +0300)]
TLSTREE examples for Grasshopper
Vitaly Chikunov [Sun, 16 Sep 2018 04:58:08 +0000 (07:58 +0300)]
Add more GOST R 34.10-2012 parameters
NID_id_tc26_gost_3410_2012_256_paramSetA
NID_id_tc26_gost_3410_2012_512_paramSetC
Vitaly Chikunov [Sun, 16 Sep 2018 04:23:31 +0000 (07:23 +0300)]
Add basic tests for curves parameters
Dmitry Belyavskiy [Sat, 15 Sep 2018 13:18:05 +0000 (16:18 +0300)]
Merge pull request #85 from vt-alt/in-places
test_context: make tests return values affect overall test result
Vitaly Chikunov [Sat, 15 Sep 2018 01:22:00 +0000 (04:22 +0300)]
test_context: make tests return values affect overall test result
Dmitry Belyavskiy [Thu, 13 Sep 2018 07:59:03 +0000 (10:59 +0300)]
Merge pull request #83 from vt-alt/in-places
In-place encryption tests and fixes
Vitaly Chikunov [Thu, 13 Sep 2018 03:48:56 +0000 (06:48 +0300)]
Add test_context to test context copy
Currently, for Grasshopper only.
Vitaly Chikunov [Thu, 13 Sep 2018 00:26:19 +0000 (03:26 +0300)]
Fix in-place decryption for CBC mode
Vitaly Chikunov [Wed, 12 Sep 2018 22:41:30 +0000 (01:41 +0300)]
In-place cipher tests
Dmitry Belyavskiy [Tue, 11 Sep 2018 12:49:59 +0000 (15:49 +0300)]
Default size of imitovstavka adjusted
Dmitry Belyavskiy [Tue, 11 Sep 2018 10:11:29 +0000 (13:11 +0300)]
Fixed in-place encryption for CTR and CTR-ACPKM modes
Dmitry Belyavskiy [Tue, 11 Sep 2018 09:28:40 +0000 (12:28 +0300)]
Formatting
Dmitry Belyavskiy [Tue, 11 Sep 2018 09:27:19 +0000 (12:27 +0300)]
Formatting
Dmitry Belyavskiy [Tue, 11 Sep 2018 08:55:47 +0000 (11:55 +0300)]
Remove unused functions
Dmitry Belyavskiy [Fri, 7 Sep 2018 12:59:06 +0000 (15:59 +0300)]
We should get key nid from our private key, not from peer's ephemeral
Dmitry Belyavskiy [Fri, 7 Sep 2018 12:48:20 +0000 (15:48 +0300)]
Missing NID
Dmitry Belyavskiy [Thu, 6 Sep 2018 15:36:53 +0000 (18:36 +0300)]
Make Travis more happy
Dmitry Belyavskiy [Thu, 6 Sep 2018 15:22:44 +0000 (18:22 +0300)]
Temporary FIXME to make engine kuznyuechik-omac friendly.
Dmitry Belyavskiy [Thu, 6 Sep 2018 14:51:57 +0000 (17:51 +0300)]
Mkae kuznyechik recognizable by libssl
Dmitry Belyavskiy [Thu, 6 Sep 2018 13:25:42 +0000 (16:25 +0300)]
One more TODO
Dmitry Belyavskiy [Tue, 4 Sep 2018 14:02:57 +0000 (17:02 +0300)]
Let's wrap old and new key enncryption together
Dmitry Belyavskiy [Tue, 4 Sep 2018 13:32:48 +0000 (16:32 +0300)]
Update comment to match reality
Dmitry Belyavskiy [Tue, 4 Sep 2018 13:10:01 +0000 (16:10 +0300)]
GOST key transport 2018 - decrypt as separate function
Dmitry Belyavskiy [Tue, 4 Sep 2018 11:41:01 +0000 (14:41 +0300)]
GOST key export, separate function
Dmitry Belyavskiy [Tue, 4 Sep 2018 08:38:32 +0000 (11:38 +0300)]
ASN1 definitions
Dmitry Belyavskiy [Mon, 3 Sep 2018 18:30:40 +0000 (21:30 +0300)]
Merge pull request #82 from vt-alt/fix
Sanity checking in gost_grasshopper_cipher_cleanup
Vitaly Chikunov [Sat, 11 Aug 2018 04:57:38 +0000 (07:57 +0300)]
Allow double calling of gost_grasshopper_cipher_cleanup()
Dmitry Belyavskiy [Mon, 3 Sep 2018 16:02:52 +0000 (19:02 +0300)]
Remove dependency from DSA
Dmitry Belyavskiy [Mon, 3 Sep 2018 13:47:01 +0000 (16:47 +0300)]
KDF TREE + test
Dmitry Belyavskiy [Mon, 3 Sep 2018 12:48:59 +0000 (15:48 +0300)]
Indent + gost_kdftree2012_256 declaration
Dmitry Belyavskiy [Mon, 3 Sep 2018 08:47:50 +0000 (11:47 +0300)]
Refactoring of VKO
Dmitry Belyavskiy [Fri, 31 Aug 2018 12:24:47 +0000 (15:24 +0300)]
Remove redundant parameters
Dmitry Belyavskiy [Fri, 31 Aug 2018 11:45:43 +0000 (14:45 +0300)]
gost_kimp15 tested
Dmitry Belyavskiy [Fri, 31 Aug 2018 10:47:23 +0000 (13:47 +0300)]
gost_kimp15, untested
Dmitry Belyavskiy [Fri, 31 Aug 2018 10:19:05 +0000 (13:19 +0300)]
Try to fix Travis build
Dmitry Belyavskiy [Fri, 31 Aug 2018 10:07:30 +0000 (13:07 +0300)]
GOST Kexp + test
Dmitry Belyavskiy [Fri, 31 Aug 2018 10:02:52 +0000 (13:02 +0300)]
Some fixes of OMAC processing
Dmitry Belyavskiy [Thu, 30 Aug 2018 16:07:23 +0000 (19:07 +0300)]
+unit test, untested yet.
Dmitry Belyavskiy [Thu, 30 Aug 2018 15:50:57 +0000 (18:50 +0300)]
Bugfix + some basic test setup
Dmitry Belyavskiy [Thu, 30 Aug 2018 15:07:01 +0000 (18:07 +0300)]
Error codes fixed
Dmitry Belyavskiy [Thu, 30 Aug 2018 13:55:02 +0000 (16:55 +0300)]
Kexp/Kimp15 implementation, initial commmit.
Dmitry Belyavskiy [Thu, 30 Aug 2018 09:06:25 +0000 (12:06 +0300)]
Dealing with new KeyExchange
Dmitry Belyavskiy [Thu, 30 Aug 2018 08:27:23 +0000 (11:27 +0300)]
Indentation
Dmitry Belyavskiy [Mon, 20 Aug 2018 12:02:06 +0000 (15:02 +0300)]
Merge pull request #75 from IamUndef/patch-1
Fixed GOST_PK_FORMAT param
Sergey Aganin [Mon, 20 Aug 2018 11:47:37 +0000 (14:47 +0300)]
Fixed GOST_PK_FORMAT param
Dmitry Belyavskiy [Sat, 18 Aug 2018 17:37:15 +0000 (20:37 +0300)]
Comment out branch 1.1.0
Dmitry Belyavskiy [Fri, 17 Aug 2018 15:02:32 +0000 (18:02 +0300)]
libgost => gost
Dmitry Belyavskiy [Fri, 17 Aug 2018 14:39:18 +0000 (17:39 +0300)]
Not in master
Dmitry Belyavskiy [Fri, 17 Aug 2018 14:32:18 +0000 (17:32 +0300)]
Master is designed to be 1.1.1-compatible.
Vitaly Chikunov [Wed, 8 Aug 2018 18:37:59 +0000 (21:37 +0300)]
Add NIDs to compile with vanilla OpenSSL_1_1_0-stable
Vitaly Chikunov [Sun, 5 Aug 2018 00:44:46 +0000 (03:44 +0300)]
Add grasshopper_omac_acpkm (OMAC-ACPKM)
Vitaly Chikunov [Thu, 2 Aug 2018 18:41:02 +0000 (21:41 +0300)]
Allow EVP_MD_CTX_copy_ex OMAC before key is set
Reported-by: Gleb Fotengauer-Malinovskiy <glebfm@altlinux.org>
Vitaly Chikunov [Thu, 2 Aug 2018 13:59:14 +0000 (16:59 +0300)]
Fix possible overflow of digest result writing
Openssl is already have output result size in EVP_MD.md_size
We should not exceed its value when writing digest output.
This should be fixed more consistently, probably, by removing
dgst_size from OMAC_CTX.
Vitaly Chikunov [Wed, 1 Aug 2018 21:03:06 +0000 (00:03 +0300)]
Fix EVP_MD_CTX_copy_ex for OMAC
Openssl copies a state between valid contexts. But, EVP_MD_CTX_copy_ex
just memcpy-s private data (md_data), which points to OMAC_CTX), which
have pointer to CMAC_CTX. Copying pointer makes CMAC context just the
same on the both sides. As a consequence, we can not do normal copy of a
state between CMAC contexts. As a fix, we just clone it if it's equal
between copy sides.
Reported-by: Gleb Fotengauer-Malinovskiy <glebfm@altlinux.org>
Vitaly Chikunov [Sat, 28 Jul 2018 07:36:29 +0000 (10:36 +0300)]
Optimize out skip_sections and add tests for ACPKM-Master
ACPKM-Master is from R 23565.1.017-2018, it will be required for
ACPKM-OMAC for TLS 1.2.
Vitaly Chikunov [Thu, 26 Jul 2018 09:23:55 +0000 (12:23 +0300)]
Ensure proper cipher type for EVP_CTRL_KEY_MESH
Vitaly Chikunov [Thu, 26 Jul 2018 09:07:11 +0000 (12:07 +0300)]
Set default value for CTR ACPKM limit
Default limit for Kuznyechik is 4KiB, from TLS 1.2 recommendations. As
a consequence it does not need to be configured via EVP_CTRL_KEY_MESH.
Also, explicitly set ACPKM limit in tests.