Brad Hards
8d7b21b102
Hmm, turns out that no constraints doesn't mean
...
no authorised usage, it means any authorised usage.
Maybe no common, but probably very important for
interoperability.
svn path=/trunk/kdesupport/qca/; revision=410238
2005-05-07 07:32:18 +00:00
Brad Hards
62125521f8
Add in support for checking usage when validating keys.
...
CCMAIL: justin-psi2@affinix.com
svn path=/trunk/kdesupport/qca/; revision=409986
2005-05-06 11:09:29 +00:00
Brad Hards
2255042598
Make sure that we can compile with a released libgrypt.
...
Also add in a couple of TODO items I thought of along the way.
svn path=/trunk/kdesupport/qca/; revision=408964
2005-05-01 08:03:55 +00:00
Brad Hards
86710a6f04
Change to the way we check if a certificate is self-signed, to use the
...
build in OpenSSL test (X509_check_issued).
CCMAIL: justin-psi@affinix.com
svn path=/trunk/kdesupport/qca/; revision=408755
2005-04-30 07:33:22 +00:00
Justin Karneges
7f1146c396
identity result not plugin's job
...
svn path=/trunk/kdesupport/qca/; revision=407599
2005-04-24 19:15:55 +00:00
Justin Karneges
db68d7059e
ssl works now
...
svn path=/trunk/kdesupport/qca/; revision=407592
2005-04-24 19:09:06 +00:00
Brad Hards
74fc4be540
Add in extra HMAC support. We had SHA1, RIPEMD-160, and MD5 hashing.
...
This change adds SHA-224, SHA-256, SHA-384 and SHA-512. Note that
libgcrypt-1.2.1 doesn't have SHA-224, so this will break if you don't
have a more recent version. Also note that there is no more recent
version at the moment.
svn path=/trunk/kdesupport/qca/; revision=407453
2005-04-24 07:50:56 +00:00
Justin Karneges
a76718c1c3
load the trusted store
...
svn path=/trunk/kdesupport/qca/; revision=407307
2005-04-23 04:40:11 +00:00
Justin Karneges
9e92bb4675
TLS support in qca-openssl
...
svn path=/trunk/kdesupport/qca/; revision=407124
2005-04-22 12:46:55 +00:00
Justin Karneges
3ed21c34d7
updated the build system: subdirs layout, latest qconf
...
svn path=/trunk/kdesupport/qca/; revision=406922
2005-04-21 13:26:38 +00:00
Brad Hards
e14b232489
Add qca to the provider libs requirements. Not including it appears
...
harmless on linux, but causes macos to barf.
svn path=/trunk/kdesupport/qca/; revision=406687
2005-04-20 08:44:31 +00:00
Brad Hards
4808b30585
Remove some debugging verbage
...
svn path=/trunk/kdesupport/qca/; revision=406686
2005-04-20 08:43:25 +00:00
Brad Hards
a101cdeff6
Initial add of HMAC support for Botan provider
...
Note that this has issues with long keys (more than 512 bytes). If you get
segfaults in set_key, then that is likely the problem. I've queried
Jack Lloyd about it, but no answer at this stage.
svn path=/trunk/kdesupport/qca/; revision=406446
2005-04-18 22:18:50 +00:00
Brad Hards
8da07f1232
Add in skeleton of a QCA2 SASL provider, based on Cyrus SASL
...
svn path=/trunk/kdesupport/qca/; revision=406284
2005-04-18 11:50:58 +00:00
Justin Karneges
55997c30ba
mac fixes
...
svn path=/trunk/kdesupport/qca/; revision=405481
2005-04-14 06:51:54 +00:00
Brad Hards
e81156fea5
Enable the secure memory plugin.
...
svn path=/trunk/kdesupport/qca/; revision=405284
2005-04-13 12:10:35 +00:00
Brad Hards
5d0cb8476f
Add in HMAC support, and turn on the new secure memory
...
code. HMAC appears to be fine, but the memory allocation
code is showing a few problems (probably in qca proper,
but I need to track it down).
svn path=/trunk/kdesupport/qca/; revision=405045
2005-04-12 11:52:03 +00:00
Justin Karneges
9ed313b545
default handled in qca lib, not here
...
svn path=/trunk/kdesupport/qca/; revision=405024
2005-04-12 10:27:12 +00:00
Justin Karneges
beb5736f05
smart provider handling for pkey
...
svn path=/trunk/kdesupport/qca/; revision=405023
2005-04-12 10:25:35 +00:00
Brad Hards
f6e45f2b84
Add a local TODO
...
svn path=/trunk/kdesupport/qca/; revision=404491
2005-04-10 01:46:01 +00:00
Justin Karneges
80ac2306df
handle input of both encrypted and non-encrypted DER private keys
...
svn path=/trunk/kdesupport/qca/; revision=404478
2005-04-09 22:46:24 +00:00
Justin Karneges
e5af5435ec
turn cert info into a multimap
...
svn path=/trunk/kdesupport/qca/; revision=403256
2005-04-05 08:50:28 +00:00
Justin Karneges
1d64b89332
cert key ids
...
svn path=/trunk/kdesupport/qca/; revision=403249
2005-04-05 07:57:40 +00:00
Justin Karneges
704de04a07
key bitsize
...
svn path=/trunk/kdesupport/qca/; revision=402997
2005-04-04 00:34:13 +00:00
Brad Hards
1de05d8ff7
Add in support for PBKDF1 with SHA-1 and MD2.
...
Also a minor indenting fix.
svn path=/trunk/kdesupport/qca/; revision=402813
2005-04-03 09:31:00 +00:00
Brad Hards
d05d0dc11c
Implement PBKDF1 with SHA1. Passes unit tests.
...
svn path=/trunk/kdesupport/qca/; revision=402796
2005-04-03 07:04:34 +00:00
Brad Hards
8899426efc
Avoid repetive initialisation of the secure memory.
...
svn path=/trunk/kdesupport/qca/; revision=402794
2005-04-03 06:18:09 +00:00
Brad Hards
8dcb0db99e
Add in CFB, CBC, CBC-PKCS7 and OFB modes for Blowfish.
...
svn path=/trunk/kdesupport/qca/; revision=402619
2005-04-02 11:50:55 +00:00
Brad Hards
bbb76611eb
Add CBC and CFB modes for blowfish.
...
svn path=/trunk/kdesupport/qca/; revision=402617
2005-04-02 11:42:55 +00:00
Brad Hards
ea902c60dd
libgcrypt can't do OFB, so not much point in trying.
...
svn path=/trunk/kdesupport/qca/; revision=401573
2005-03-29 11:34:34 +00:00
Brad Hards
b468afe516
Add in AES OFB modes support (128, 192 and 256 bits)
...
svn path=/trunk/kdesupport/qca/; revision=401196
2005-03-28 07:58:43 +00:00
Brad Hards
c0d8aff18a
Add in some more ciphers (disable OFB for now, doesn't appear to be
...
supported). Also rework the error display code, to make it easier
to figure out where it is breaking.
Refactor hashes, reducing code a bit and making it much easier to
add in more hash algorithms.
svn path=/trunk/kdesupport/qca/; revision=401195
2005-03-28 07:57:29 +00:00
Justin Karneges
ab508f9893
keystore API for accessing system stores, smart cards, and pgp
...
svn path=/trunk/kdesupport/qca/; revision=401186
2005-03-28 07:11:58 +00:00
Brad Hards
185dc77ee5
Split init order, to support variable length keys.
...
Secure Programming Cookbook recipe 5.18.
svn path=/trunk/kdesupport/qca/; revision=400945
2005-03-27 10:39:40 +00:00
Justin Karneges
8bd7a0e5a9
fix some things
...
svn path=/trunk/kdesupport/qca/; revision=400938
2005-03-27 10:18:03 +00:00
Brad Hards
42051b887f
Add new Cipher mode / padding combinations:
...
DES / ECB / PKCS7 padding
DES / CBC / No padding
DES / CBC / PKCS7 padding
DES / OFB / No padding
DES / CFB / No padding
The DES / OFB combination is failing unit test, but I don't know why.
svn path=/trunk/kdesupport/qca/; revision=400923
2005-03-27 09:37:41 +00:00
Brad Hards
ad05026577
Add in pkcs5.c code, originally posted to gcrypt-devel mailing list.
...
I just converted it to current API.
svn path=/trunk/kdesupport/qca/; revision=400726
2005-03-26 11:30:47 +00:00
Brad Hards
60a6a8cff3
General upgrade to the libgcrypt provider:
...
* Complete PBKDF2 support (now working)
* Factor out a common versioning check
* Initial support for memory plugin, broken for reasons I don't understand
svn path=/trunk/kdesupport/qca/; revision=400723
2005-03-26 11:26:56 +00:00
Brad Hards
b653e4c8be
Change the way namespacing is used.
...
Add in implementation for PBKDF2.
svn path=/trunk/kdesupport/qca/; revision=400462
2005-03-25 11:07:16 +00:00
Brad Hards
090ae6e407
Enclose libgcrypt plugin in a namespace, for safety.
...
svn path=/trunk/kdesupport/qca/; revision=399408
2005-03-21 07:21:44 +00:00
Brad Hards
7908cc28e5
Add cipher support for OpenSSL plugin. There is no unit test coverage
...
for the PKCS7 padding versions, and the Blowfish ECB code is failing
unit tests for reasons I don't understand.
svn path=/trunk/kdesupport/qca/; revision=399407
2005-03-21 07:19:14 +00:00
Brad Hards
77a3a44cb1
Refactor OpenSSL plugin hashing code, just pass in the digest object
...
as a parameter instead of a separate class for each Hash.
svn path=/trunk/kdesupport/qca/; revision=398907
2005-03-19 09:09:44 +00:00
Brad Hards
854a8d4c65
Refactor the HMAC code, passing in the hash as an argument.
...
svn path=/trunk/kdesupport/qca/; revision=398903
2005-03-19 07:51:28 +00:00
Brad Hards
ccbe232ccb
Update libgcrypt provider to support the symmetric ciphers that I have test
...
cases for. The code to handle padding is untested and almost certainly
broken / incomplete. I'm still figuring out the libgcrypt side of that.
svn path=/trunk/kdesupport/qca/; revision=398900
2005-03-19 06:58:53 +00:00
Brad Hards
1f4635e38b
Initial changes to support new Cipher API. This segfaults if you use
...
the ciphertest example, or the unit tests.
CCMAIL: justin-psi@affinix.com
svn path=/trunk/kdesupport/qca/; revision=398879
2005-03-19 01:05:32 +00:00
Justin Karneges
a78d3f2d54
add publickey and cert functionality
...
svn path=/trunk/kdesupport/qca/; revision=397510
2005-03-14 11:38:23 +00:00
Brad Hards
1bb8a9b13c
Update to new plugin approach.
...
svn path=/trunk/kdesupport/qca/; revision=393981
2005-03-01 02:59:18 +00:00
Brad Hards
84964053c9
Update to work with new (Qt4) plugin architecture.
...
svn path=/trunk/kdesupport/qca/; revision=393975
2005-03-01 02:43:16 +00:00
Justin Karneges
4bc8bbe725
new plugin style
...
svn path=/trunk/kdesupport/qca/; revision=393758
2005-02-28 09:56:07 +00:00
Brad Hards
320a135a69
Update to new Qt4 approach.
...
svn path=/trunk/kdesupport/qca/; revision=393740
2005-02-28 08:20:09 +00:00