aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Reorganize DHParameters and DHPublicKey *WithSerialization (#3722)Paul Kehrer2017-06-243-24/+22
| | | | | | | | * Reorganize DHParameters and DHPublicKey *WithSerialization fixes #3720 * fix up the changelog
* pypy3 compilation fix for locking callback (#3716)Paul Kehrer2017-06-241-20/+60
| | | | | | | | | | | | | | | | | | * pypy3 fix on macos using work from the pypy project https://bitbucket.org/pypy/pypy/commits/198dc138680f96c391802fa1e77b8b6d2e0134e6?at=py3.5 * change abort error msg and fix wrong type * oh windows * remove an unused variable * rename mutex1_t, use calloc, small style fixes * calloc correctly * (call)
* add missing methods to DH interfaces (#3719)Paul Kehrer2017-06-241-0/+18
|
* changelog entry and a few updates to the new DH params docs (#3718)Paul Kehrer2017-06-245-7/+16
|
* Dh parameters serialization (#3504)Aviv Palivoda2017-06-2411-2/+395
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Support DH parameter serizalization - no X9.42 * Support X9.42 serialization - DER not working * Fix dhp_rfc5114_2.der Changing the DER parameters serialization after the fix in openssl commit a292c9f1b835 * DH parameters X9.42 DER serialization fixed * fix _skip_dhx_unsupported * document DH parameter_bytes * PEP8 fixes * Document load_pem_parameters * Document load_der_parameters * document ParameterFormat * Increase test coverage * Increase test covrage * Remove unneeded check * Fix typo * Fix error in load_der_parameters * Add load_pem_parameters and load_der_parameters to interfaces * CR fixes * Removed unverified phrase * Update version to 2.0 * Fix pep8 * Rename ParameterFormat.ASN1 to ParameterFormat.DHParameter * link pkcs3 * Add new line at end of file to serialization.rst * Rename DHparameters to PKCS3 * doc CR fix
* Add DERSerializationBackend to test_dh serialization tests (#3717)Aviv Palivoda2017-06-241-1/+3
|
* be clearer that 65537 is the right answer (#3714)Paul Kehrer2017-06-231-1/+2
| | | | | | | | * be clearer that 65537 is the right answer * Different language * remove trailing whitespace
* implement CCM vector parser (#3699)Paul Kehrer2017-06-212-3/+260
|
* ed25519 vector loader (#3707)Paul Kehrer2017-06-202-1/+110
| | | | | | * ed25519 vector loader * refactor to use unpacking
* Removed executable bit from vectors (#3708)Alex Gaynor2017-06-1919-0/+0
|
* disallow empty string for NameAttribute (#3711)Paul Kehrer2017-06-192-0/+7
|
* add pypy3.5 to our test matrix (#3709)Paul Kehrer2017-06-192-1/+10
| | | | | | * add pypy3.5 to our test matrix * pypy-nocoverage time
* add FAQ entry for failed to install (#3710)Paul Kehrer2017-06-191-0/+10
|
* add NIST CAVP CCM vectors (#3698)Paul Kehrer2017-06-1820-1/+21709
| | | | | http://csrc.nist.gov/groups/STM/cavp/documents/mac/ccmtestvectors.zip No TLS :(
* update pythons and pypy, a little prep for pypy3 in CI again (#3702)Paul Kehrer2017-06-182-13/+13
| | | | | | | | | | * update pythons and pypy, a little prep for pypy3 in CI again * slightly renamed * oops * pypy renames all around
* fix typo in docs for curve name (#3705)Paul Kehrer2017-06-141-1/+1
| | | fixes #3704
* It's a method you must call (#3696)Jean-Paul Calderone2017-06-091-1/+1
| | | Fix misworded guidance for how to serialize a private key to bytes.
* X25519 Support (#3686)Paul Kehrer2017-06-097-0/+386
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * early days * sort of working * more things * remove private_bytes * public bytes, interface fix * load public keys * x25519 support basically done now * private_bytes is gone * some reminders * doctest this too * remove a thing that doesn't matter * x25519 supported checks * libressl has the NID, but a different API, so check for OpenSSL * pep8 * add missing coverage * update to use reasons * expand test a little * add changelog entry * review feedback
* ChaCha20Poly1305 support (#3680)Paul Kehrer2017-06-089-0/+402
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * chacha20poly1305 support * add chacha20poly1305 backend and some fixes * refactor * forgot to remove this * pep8 * review feedback and a lot of type/value checking * review feedback * raise unsupportedalgorithm when creating a ChaCha20Poly1305 object if it's not supported. * switch to ciphertext||tag * typo * remove a branch we don't need * review feedback * decrypts is *also* a word * use reasons
* scrypt can be doctested now that we're using 1.1.0 (#3688)Paul Kehrer2017-06-071-1/+1
|
* compile all our mac builds against 1.1.0 in travis (#3689)Paul Kehrer2017-06-072-2/+5
| | | | | | | | | | | | | | * compile all our mac builds against 1.1.0 in travis * Just install * try this why not * ... * of course * upgrade the existing openssl
* run our docs job using 1.1.0 (#3687)Paul Kehrer2017-06-062-3/+3
|
* add X25519 test vectors from RFC 7748 section 5.2 (#3685)Paul Kehrer2017-06-062-0/+17
|
* bind even more evp (#3684)Paul Kehrer2017-06-062-4/+10
| | | | | | * bind even more evp * oops
* Do more retries in linkcheck because NIST websites are down a lot (#3683)Alex Gaynor2017-06-051-1/+1
|
* bind EVP_PKEY_get1_tls_encodedpoint because X25519 (#3682)Paul Kehrer2017-06-052-0/+14
|
* add EVP_PKEY_keygen and EVP_PKEY_keygen_init for x25519/ed25519 (#3681)Paul Kehrer2017-06-051-0/+6
| | | | | | * add EVP_PKEY_keygen and EVP_PKEY_keygen_init for x25519/ed25519 * add a few more bindings we'll need for X25519
* bind EVP_CTRL_AEAD even when on < 1.1.0 (#3679)Paul Kehrer2017-06-042-7/+18
|
* when you :%s/\:/=/g sometimes there's a colon you shouldn't have touched (#3678)Paul Kehrer2017-06-041-1/+1
|
* Change the link to appease linkcheck (#3677)Alex Gaynor2017-06-041-1/+1
|
* fix symmetric encryption interfaces heading (#3676)Paul Kehrer2017-06-041-1/+1
|
* document invalidtag (#3675)Paul Kehrer2017-06-041-0/+11
| | | | | | * document invalidtag * move invalidtag
* add ChaCha20Poly1305 test vectors from OpenSSL/RFC7539 (#3673)Paul Kehrer2017-06-043-0/+579
| | | | | | | | * add ChaCha20Poly1305 test vectors from OpenSSL/RFC7539 * add the boringssl tests as well * highlight the lines
* typo fix (#3674)Alex Gaynor2017-06-041-1/+1
|
* Remove a line from "Why do we exist" (#3672)Alex Gaynor2017-06-041-1/+0
| | | I have no idea what this meant
* Refs #3646 -- include stdout in the output when spawning a process fails in ↵Alex Gaynor2017-06-041-1/+6
| | | | the release script (#3671)
* Refs #3461 -- parse SCTs from x.509 extension (#3480)Alex Gaynor2017-06-048-6/+173
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Stub API for SCTs, feedback wanted * grr, flake8 * finish up the __init__ * Initial implementation and tests * write a test. it fails because computer * get the tests passing and fix some TODOs * changelog entry * This can go now * Put a skip in this test * grump * Removed unreachable code * moved changelog to the correct section * Use the deocrator for expressing requirements * This needs f for the right entry_type * coverage * syntax error * tests for coverage * better sct eq tests * docs * technically correct, the most useless kind of correct * typo and more details * bug * drop __eq__
* Fixes #2347 -- link to the stdlib secrets module in our random number ↵Alex Gaynor2017-06-041-0/+5
| | | | generation section (#3669)
* deprecate signer/verifier on asymmetric keys (#3663)Paul Kehrer2017-06-0313-210/+160
| | | | | | * deprecate signer/verifier on asymmetric keys * review feedback, switch deprecated_call to work around a bug
* call check_backend_support directly from backend fixture (#3666)Alex Gaynor2017-06-033-40/+15
|
* Switched our backend to be a normal fixture in tests (#3665)Alex Gaynor2017-06-033-39/+17
|
* revert codecov.yml workaround and pin coverage to 4.3.4 (#3662)Paul Kehrer2017-06-033-12/+4
| | | | | | | | * Revert "Attempted workaround for intermittent coverage issues (#3661)" This reverts commit 84a634c1e7645970382a3a271dfae9ef95685e7a. * pin coverage to 4.3.4
* Attempted workaround for intermittent coverage issues (#3661)Alex Gaynor2017-06-031-0/+9
| | | The root cause is https://bitbucket.org/ned/coveragepy/issues/578/incomplete-file-path-in-xml-report
* Fixes #3653 -- attempt to retry git clones up to 3 times (#3660)Alex Gaynor2017-06-031-28/+30
|
* make signature and verification contexts error better re: prehashed (#3658)Paul Kehrer2017-06-028-3/+86
| | | | | | * make signature and verification contexts error better re: prehashed * code review feedback
* Simplify git clones in Jenkinsfile (#3654)Alex Gaynor2017-06-011-4/+4
|
* FreeBSD 10 and higher use Fortuna, not Yarrow (#3652)Jeroen Ruigrok van der Werven2017-06-011-2/+4
|
* runtime detection of getentropy for macOS via weak-linking (#3650)Paul Kehrer2017-05-303-23/+56
| | | | | | | | | | | | | | | | | | | | | | | | | * runtime detection of getentropy for macOS via weak-linking In the before time, in the long long ago, there was a desire to use getentropy on macOS. So some code was written and it detected getentropy support by seeing if SYS_getentropy was available in the headers. But lo, it turns out Apple ships headers for different SDK versions and users on < 10.12 were getting headers that had SYS_getentropy even though their OS did not support it. There was much wailing and gnashing of teeth, but the frustrated developers remembered that Apple wants their developers to use weak linking. With weak linking the mighty developer can specify a minimum version and any symbol that was added after that version will be weakly linked. Then, at runtime, the dynamic linker will make unavailable symbols thus marked into NULLs. So, the developer need only alter their code to do runtime detection of weakly linked symbols and then a single binary may be compiled that will correctly select getentropy or /dev/urandom at runtime. Hallelujah! * oops * separate the enum * okay just apple
* move files to make the next PR easier to read (#3651)Paul Kehrer2017-05-301-43/+43
|
* Remove a binding that hasn't been used for a while (#3643)Alex Gaynor2017-05-301-7/+0
|