Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | solar's testsuite revealed insufficient validation of invalid input hashes. | tedu | 2014-02-24 | 1 | -8/+10 |
| | | | | add a more complete check for the rounds parameter. ok deraadt | ||||
* | remove redundant test | tedu | 2014-02-17 | 1 | -3/+2 |
| | |||||
* | sticking strlen into a char leads to wraparound at 256. fix this and | tedu | 2014-02-17 | 1 | -5/+18 |
| | | | | | | introduce a new 'b' hash minor. still generate 'a' minors for now. reported by solar designer. diff by some combination of solar and jca. ok deraadt | ||||
* | pseudo-code corrections from Solar Designer <solar@openwall.com> | deraadt | 2013-12-19 | 1 | -4/+4 |
| | |||||
* | tweak previous; | jmc | 2013-10-22 | 1 | -4/+2 |
| | |||||
* | delete extra words; Henri Kemppainen | deraadt | 2013-10-22 | 1 | -3/+2 |
| | |||||
* | update documentation for these functions. They now state the case regarding | deraadt | 2013-10-21 | 1 | -63/+45 |
| | | | | | | | pthreads and chroot, and safe initialization without /dev/random and such junk. If you are in control of an arc4random in another library, please look at these pages and get caught up. ok various | ||||
* | Remove arc4random_stir() and arc4random_addrandom(), which none should | deraadt | 2013-10-21 | 2 | -28/+2 |
| | | | | | | be using directly. Well, a few rare people cloned it upstream and it will take a bit of time for them to learn. ok various | ||||
* | a couple of warning fixes and an RCS marker; ok markus@ | djm | 2013-10-04 | 1 | -2/+4 |
| | |||||
* | replace rc4 with ChaCha20; inspired by Nick Mathewson's work on libottery; | markus | 2013-10-01 | 2 | -98/+326 |
| | | | | feedback and ok djm@ | ||||
* | use .Mt for email addresses; from Jan Stary <hans at stare dot cz>; ok jmc@ | schwarze | 2013-07-16 | 2 | -6/+6 |
| | |||||
* | spacing | deraadt | 2013-06-11 | 1 | -3/+2 |
| | |||||
* | Use the fancy .In macro for includes. From Jan Klemkow. ok jmc schwarze | tedu | 2013-06-05 | 3 | -10/+10 |
| | |||||
* | tweak a few comments | tedu | 2013-04-21 | 1 | -5/+7 |
| | |||||
* | this man page is mostly about password hashing now (you really don't | tedu | 2013-04-21 | 1 | -18/+5 |
| | | | | | want to be using DES) and some of the notes about the export controls are no longer so relevant. ok deraadt jmc | ||||
* | Xr encrypt(1) to give people a hint if they just want a password string | tedu | 2013-04-20 | 1 | -2/+3 |
| | |||||
* | add some prototypes, casts, includes, parenthesis, and whatnot to | tedu | 2013-04-17 | 1 | -1/+4 |
| | | | | silence some warnings. | ||||
* | Document a known bug in the DES crypt cipher implementation which we're | stsp | 2012-11-30 | 1 | -2/+6 |
| | | | | | | | | | | not going to fix in order to stay compatible with legacy password data. Nobody should use DES crypt anyway these days. See http://www.freebsd.org/security/advisories/FreeBSD-SA-12:02.crypt.asc for details about this bug. Discussed with deraadt and beck about half a year ago (I'm pruning Ms from my tree). | ||||
* | arc4random_buf is the easy way to fill a buffer now. ok deraadt | tedu | 2012-09-04 | 1 | -10/+3 |
| | |||||
* | remove reference to no longer existing description of nonexistent devices; | naddy | 2012-07-26 | 1 | -7/+4 |
| | | | | ok deraadt@ tedu@, wording tweaks jmc@ | ||||
* | Change arc4random_uniform() to calculate ``2**32 % upper_bound'' as | matthew | 2012-06-24 | 1 | -12/+3 |
| | | | | | | | | | | ``-upper_bound % upper_bound''. Simplifies the code and makes it the same on both ILP32 and LP64 architectures, and also slightly faster on LP64 architectures by using a 32-bit remainder instead of a 64-bit remainder. Pointed out by Jorden Verwer on tech@ ok deraadt; no objections from djm or otto | ||||
* | Update STANDARDS section for a few <stdlib.h> functions | guenther | 2012-06-02 | 1 | -5/+6 |
| | | | | | | Update SYNOPSIS for setkey() to show it's in <stdlib.h> ok jmc@, millert@ | ||||
* | remove comment that hasn't been true for quite a while now; | otto | 2010-12-22 | 1 | -6/+1 |
| | | | | ok deraadt@ djm@ | ||||
* | remove skipjack and cast from the libc; ok deraadt | mikeb | 2010-10-28 | 3 | -1053/+2 |
| | |||||
* | Use MACHINE_CPU instead of MACHINE_ARCH to pick the correct machine dependent | miod | 2010-02-03 | 1 | -2/+2 |
| | | | | | | | files or directories when applicable. The inspiration and name of MACHINE_CPU come from NetBSD, although the way to provide it to Makefiles is completely different. ok kettenis@ | ||||
* | No point in refreshing the pid from inside arc4_stir() when that | guenther | 2009-12-15 | 1 | -6/+15 |
| | | | | | | | | | doesn't test it, so factor out the two places that test it into a routine and do the refreshing there. With this, arch4random_buf() doesn't trigger superfluous calls to getpid() when filling large buffers. ok deraadt@, "looks nicer indeed" otto@ | ||||
* | s/Mhz/MHz/, MHz is a multiple of the SI unit hertz (whose symbol is Hz). | sobrado | 2009-10-31 | 1 | -2/+2 |
| | |||||
* | repair the ARC4 story; ok jmc djm millert | deraadt | 2008-12-23 | 1 | -5/+7 |
| | |||||
* | zap __arc4_getbyte(), it was only used by the old malloc; ok millert@ | otto | 2008-10-03 | 1 | -14/+1 |
| | | | | kurt@ | ||||
* | fix an Xr, and use a more appropriate macro; | jmc | 2008-06-09 | 1 | -4/+4 |
| | |||||
* | arc4random_stir() does not use /dev/arandom anymore, but sysctl kern.arandom | deraadt | 2008-06-08 | 1 | -4/+6 |
| | |||||
* | fix math screwup that reintroduced a bias for upper_bounds in range | djm | 2008-06-04 | 1 | -2/+2 |
| | | | | | | | (2^30,2^31). Nothing in the tree yet requests random numbers bounded by this range. report jakob!deraadt; ok deraadt@ | ||||
* | Zero state buffers on return. OK deraadt@ | millert | 2008-04-02 | 1 | -1/+5 |
| | |||||
* | - add NAME entries for arc4random_buf and arc4random_uniform | jmc | 2008-03-16 | 1 | -2/+4 |
| | | | | - simplify a macro call (Do/Dc -> Dq) | ||||
* | Add missing MLINKS | deraadt | 2008-03-16 | 1 | -1/+2 |
| | |||||
* | diff from djm@ committed at his request: | otto | 2008-03-16 | 2 | -3/+84 |
| | | | | | | | | | | | | | | introduce two new APIs for requesting strong random numbers: arc4random_buf() - fill an arbitrary memory range with random numbers arc4random_uniform() - return a uniformly distributed random number below a specified upper bound, avoiding the bias that comes from a naive "arc4random() % upper_bound" construction. these mirror similarly-named functions in the kernel; lots of discussion deraadt@ mcbride@ | ||||
* | - make arc4random*() functions thread safe. Use a custom spinlock function | kurt | 2008-01-01 | 1 | -41/+56 |
| | | | | | | | | | | | instead of the generic pthread macros since free(3) uses __arc4_getbyte() when freeing small sized allocations and the generic pthread macros call malloc(3). - eliminate passing pointers to a static variable with global scope (rs) for additional code clarity and reduction. - shlib minor bumps for libc and libpthread due to new functions. From andreas@ with some bits from me. okay tedu@ marc@ w/some spot checking from millert@ | ||||
* | add a RETURN VALUES section. | pyr | 2007-10-08 | 1 | -9/+9 |
| | | | | ok jmc@ | ||||
* | convert to new .Dd format; | jmc | 2007-05-31 | 3 | -6/+6 |
| | |||||
* | macros at start of line require a `.'; | jmc | 2007-05-02 | 1 | -2/+2 |
| | |||||
* | Document the lack of error return value in arc4random. | pyr | 2007-05-02 | 1 | -1/+4 |
| | | | | Sync the documentation in getpid with arc4random's format. | ||||
* | Get rid of useless #if 0 block, especially since the code is included | ray | 2007-03-19 | 1 | -5/+1 |
| | | | | | | immediately after. OK millert@. | ||||
* | Change hard coded numbers to sizeof(buf). Also change some | ray | 2007-02-20 | 1 | -3/+3 |
| | | | | | | | | sizeof(buf) - 1 to sizeof(buf), since fgets takes the whole buffer size. Based on diff from Charles Longeau <chl at tuxfamily dot org> long ago. OK millert@. | ||||
* | provide an libc internal interface to get random bytes, to be used by malloc | otto | 2007-02-12 | 1 | -3/+12 |
| | | | | to get random data without calling getpid(), ok millert@ deraadt@ | ||||
* | no point mentioning functions if we have nothing useful to say | jmc | 2006-08-05 | 1 | -13/+1 |
| | | | | | | about them; ok djm | ||||
* | wording/grammar tweaks; | jmc | 2006-07-26 | 1 | -3/+4 |
| | |||||
* | better macros; | jmc | 2006-07-26 | 1 | -6/+6 |
| | |||||
* | document `iv'; | jmc | 2006-07-26 | 1 | -1/+4 |
| | | | | | from eren elci; tweaked by djm ok djm | ||||
* | updates from nicholas marriott; | jmc | 2006-07-25 | 1 | -5/+9 |
| | | | | re-worded and ok djm | ||||
* | allocate gsalt large enough; from Matthew R. Dempsky <mrd at alkemio | otto | 2006-07-04 | 1 | -2/+2 |
| | | | | dot org>; ok djm@ deraadt@ |