Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add support for AES XTS (#3900) | Paul Kehrer | 2017-10-01 | 1 | -1/+35 |
| | | | | | | | | | | | | | | | | | | | | | | | | * Add support for AES XTS We drop the non-byte aligned test vectors because according to NIST http://csrc.nist.gov/groups/STM/cavp/documents/aes/XTSVS.pdf "An implementation may support a data unit length that is not a multiple of 8 bits." OpenSSL does not support this, so we can't use those test vectors. * fix docs and pep8 * docs fix * the spellchecker is so frustrating * add note about AES 192 for XTS (it's not supported) * docs work * enforce key length on ECB mode in AES as well (thanks XTS) * a few more words about why we exclude some test vectors for XTS | ||||
* | Removed branches that are now unused (#3589) | Alex Gaynor | 2017-05-24 | 1 | -3/+0 |
| | |||||
* | use openssl constants (#3534) | Paul Kehrer | 2017-05-03 | 1 | -6/+15 |
| | |||||
* | postpone GCM authentication tag requirement until finalization (#3421) | Philipp Gesang | 2017-05-02 | 1 | -0/+96 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * postpone GCM authentication tag requirement until finalization Add a .finalize_with_tag() variant of the .finalize() function of the GCM context. At the same time, do not enforce the requirement of supplying the tag with the mode ctor. This facilitates streamed decryption when the MAC is appended to the ciphertext and cannot be efficiently retrieved ahead of decryption. According to the GCM spec (section 7.2: “Algorithm for the Authenticated Decryption Function”), the tag itself is not needed until the ciphertext has been decrypted. Addresses #3380 Signed-off-by: Philipp Gesang <philipp.gesang@intra2net.com> * disallow delayed GCM tag passing for legacy OpenSSL Old versions of Ubuntu supported by Cryptography ship a v1.0.1 of OpenSSL which is no longer supported by upstream. This library seems to cause erratic test failures with the delayed GCM tag functionality which are not reproducible outside the CI. Unfortunately OpenSSL v1.0.1 does not even document the required API (``EVP_EncryptInit(3)``) so there is no by-the-book fix. For backends of version 1.0.1 and earlier, verify the GCM tag at the same stage as before. Also, indicate to the user that late passing of GCM tags is unsupported by throwing ``NotImplementedError`` for these backend versions if - the method ``finalize_with_tag()`` is invoked, or - the mode ctor is called without passing a tag. Unit tests have been adapted to account for different backend versions. | ||||
* | pass bytes to modes/algorithms like we should | Paul Kehrer | 2016-03-07 | 1 | -6/+6 |
| | |||||
* | do the same simplification to the aad test | Paul Kehrer | 2015-07-01 | 1 | -3/+1 |
| | |||||
* | add missing test, simplify encrypted byte near limit calculation | Paul Kehrer | 2015-07-01 | 1 | -3/+15 |
| | |||||
* | add additional increment tests | Paul Kehrer | 2015-07-01 | 1 | -8/+18 |
| | |||||
* | put the AAD and encrypted byte limit checks in the parent context | Paul Kehrer | 2015-07-01 | 1 | -0/+30 |
| | |||||
* | Update the license header for every source file, as well as the documentation. | Alex Gaynor | 2014-11-16 | 1 | -12/+3 |
| | | | | Fixes #1209 | ||||
* | Change how we represented that a test requires a backend. | Alex Gaynor | 2014-10-23 | 1 | -7/+8 |
| | | | | This way is more extensible and requires less maintaince | ||||
* | resolve GCM tag issue with AAD only on OpenSSL 1.0.1 in Ubuntu 12.04 | Paul Kehrer | 2014-09-12 | 1 | -4/+4 |
| | |||||
* | moved GCM tests to be run against all backends, added radar bug numbers | Paul Kehrer | 2014-09-11 | 1 | -1/+34 |
| | |||||
* | Simplify code and add test | Alex Gaynor | 2014-06-30 | 1 | -2/+2 |
| | |||||
* | Fixes #1200 -- disallow GCM truncation by default | Alex Gaynor | 2014-06-29 | 1 | -1/+1 |
| | |||||
* | add CFB8 support for AES/3DES on CommonCrypto and OpenSSL backends | Paul Kehrer | 2014-05-15 | 1 | -0/+33 |
| | |||||
* | import order fixes for future automated checking | Paul Kehrer | 2014-03-19 | 1 | -1/+1 |
| | |||||
* | updates to make the project pep8-naming clean | Paul Kehrer | 2014-02-24 | 1 | -6/+6 |
| | |||||
* | Reformat AES CTR vectors to use NIST loader & document their source properly | Paul Kehrer | 2014-02-15 | 1 | -4/+2 |
| | |||||
* | refactor all tests to use mark instead of generator skips | Paul Kehrer | 2013-12-26 | 1 | -25/+52 |
| | |||||
* | correct import style | Paul Kehrer | 2013-12-24 | 1 | -0/+1 |
| | |||||
* | add all the markers to the tests | Paul Kehrer | 2013-12-24 | 1 | -0/+2 |
| | |||||
* | add more skip check lambdas | Paul Kehrer | 2013-12-23 | 1 | -0/+16 |
| | |||||
* | use both kwargs and named args in lambdas for clarity | Paul Kehrer | 2013-12-21 | 1 | -9/+9 |
| | |||||
* | don't modify params on parametrized tests | Paul Kehrer | 2013-12-20 | 1 | -10/+10 |
| | | | | | multiple backends receive the same params dicts, but we were modifying them using pop. | ||||
* | GCM support | Paul Kehrer | 2013-11-29 | 1 | -1/+20 |
| | |||||
* | Also remove teh ciphers specific class | Alex Gaynor | 2013-11-13 | 1 | -1/+1 |
| | |||||
* | Remove separate file loaders and replace with one | Paul Kehrer | 2013-11-11 | 1 | -6/+6 |
| | | | | All tests updated to work with the new simplified loader | ||||
* | Ignore the sections of the NIST files | Alex Gaynor | 2013-11-11 | 1 | -4/+4 |
| | |||||
* | block cipher rename | Paul Kehrer | 2013-11-06 | 1 | -7/+7 |
| | | | | | | * block renamed to ciphers * ciphers renamed to algorithms * base moved into algorithms | ||||
* | simplify some test class structure | Paul Kehrer | 2013-10-31 | 1 | -13/+1 |
| | |||||
* | update tests for new test vector locations | Paul Kehrer | 2013-10-31 | 1 | -45/+9 |
| | |||||
* | move around the tests to organize by cipher | Paul Kehrer | 2013-10-30 | 1 | -0/+182 |