| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | delete documentation for deleted DES interfaces | tedu | 2014-12-08 | 2 | -87/+3 |
| | | |||||
| * | remove setkey and encrypt interfaces. they are useless and dangerous. | tedu | 2014-12-08 | 3 | -116/+9 |
| | | | | | ok deraadt naddy | ||||
| * | macro cleanup; kaspars at bankovskis dot net | schwarze | 2014-12-02 | 2 | -49/+55 |
| | | |||||
| * | rand48(3) not drand48(3) to align with the actual man page and Xr | millert | 2014-11-25 | 1 | -3/+3 |
| | | | | | entries. | ||||
| * | no need for md5 xr | tedu | 2014-11-25 | 1 | -3/+2 |
| | | |||||
| * | revert the bludgeoning of DES. if we need a thread safe crypt, maybe it's | tedu | 2014-11-25 | 1 | -31/+33 |
| | | | | | better to find one instead of continuing to mangle this mess. | ||||
| * | push some global data down into functions to make this threadlier. | tedu | 2014-11-25 | 1 | -33/+31 |
| | | | | | only doing what's needed for crypt_hashpass. sigh. | ||||
| * | introduce a hashspace define and check that there's enough space to | tedu | 2014-11-24 | 1 | -15/+10 |
| | | | | | write out a hash. also simplify writing out the hash. | ||||
| * | check crypt() for null. noticed by Jonas Termansen | tedu | 2014-11-24 | 1 | -2/+2 |
| | | |||||
| * | space needed between macro args and punctuation; | jmc | 2014-11-21 | 1 | -2/+2 |
| | | |||||
| * | add ERRORS, HISTORY, AUTHORS, Copyright year, and some missing macros; | schwarze | 2014-11-21 | 1 | -6/+39 |
| | | | | | ok tedu@ on a previous version | ||||
| * | Let crypt_checkpass() set EACCES after bcrypt_checkpass() failure; | schwarze | 2014-11-21 | 1 | -2/+4 |
| | | | | | ok tedu@ | ||||
| * | change prototype for crypt_newhash. the login_cap_t is a holdover from its | tedu | 2014-11-21 | 2 | -15/+10 |
| | | | | | | | pwd_gensalt origins, but a string argument works equally work and is more friendly to consumers beyond local user accounts. ok deraadt | ||||
| * | split crypt_checkpass off into a new file | tedu | 2014-11-20 | 3 | -36/+73 |
| | | |||||
| * | add crypt_newhash to NAME and add an MLINK; | jmc | 2014-11-18 | 2 | -4/+6 |
| | | |||||
| * | add new function crypt_newhash to simplify creating new hashes. | tedu | 2014-11-17 | 2 | -3/+46 |
| | | | | | | does most of the work pwd_gensalt did, but also creates the hash. (unused yet) | ||||
| * | missing newline | deraadt | 2014-07-21 | 1 | -1/+2 |
| | | |||||
| * | Move more OS-specific functionality to arc4random.h headers. | bcook | 2014-07-20 | 2 | -6/+14 |
| | | | | | | | | | Move <sys/mman.h> and raise(SIGKILL) calls to OS-specific headers. On OpenBSD, move thread_private.h as well to arc4random.h. On Windows, use TerminateProcess on getentropy failure. ok deraadt@ | ||||
| * | From ISO/IEC 9899:1999 and 9899:201x, | guenther | 2014-07-20 | 1 | -3/+3 |
| | | | | | | | | | | 6.11.5 - Storage-class specifiers: The placement of a storage-class specifier other than at the beginning of the declaration specifiers in a declaration is an obsolescent feature. Diff from Jean-Philippe Ouellet (jean-philippe (at) ouellet.biz) | ||||
| * | arc4random re-seeds with getentropy() now; ok deraadt@ jmc@ | naddy | 2014-07-19 | 1 | -3/+3 |
| | | |||||
| * | Change _rs_allocate so it can combine the two regions (rs and rsx) | deraadt | 2014-07-19 | 2 | -28/+25 |
| | | | | | | | | | | | into one if a system has an awesome getentropy(). In that case it is valid to totally throw away the rsx state in the child. If the getentropy() is not very good and has a lazy reseed operation, this combining is a bad idea, and the reseed should probably continue to use the "something old, something new" mix. _rs_allocate() can accomodate either method, but not on the fly. ok matthew | ||||
| * | Seperate arc4random's os-dependent parts into static inline functions, | deraadt | 2014-07-18 | 2 | -36/+57 |
| | | | | | | making it much easier for libressl -portable to fill in the gaps. ok bcook beck | ||||
| * | "Race-free because we're running single-threaded in a new | deraadt | 2014-07-17 | 1 | -1/+5 |
| | | | | | | address space, and once allocated rs is never deallocated." document the forkhandler to save reviewers time, with matthew | ||||
| * | #ifdef wrap the _rs_forkhandler | deraadt | 2014-07-16 | 1 | -1/+3 |
| | | |||||
| * | added handler for an atfork hook from kettenis@ | bcook | 2014-07-16 | 1 | -1/+10 |
| | | | | | ok deraadt@ beck@ kettenis@ | ||||
| * | While we thought this would make portable life easier it actually | beck | 2014-07-13 | 1 | -3/+1 |
| | | | | | | makes it much harder. ok bcook@ kettenis@ | ||||
| * | Wrap "thread_private.h" with #ifdef __OpenBSD__ so that other systems | deraadt | 2014-07-12 | 1 | -1/+3 |
| | | | | | | | can copy this file (plus chacha_private.h) directly and reuse it trivially. Well, as long as they have a getentropy() as well.. ok beck | ||||
| * | Split arc4random_uniform into it's own file, to assist other projects | deraadt | 2014-07-12 | 3 | -39/+60 |
| | | | | | | | now using this as upstream code. The particular problem is systems that contain older arc4random derivations lacking arc4random_uniform(). ok tedu miod | ||||
| * | Clean up after arc4random u_int32_t uint32_t change | beck | 2014-07-09 | 1 | -5/+5 |
| | | | | | ok jsing@ | ||||
| * | changes to improve portability | bcook | 2014-07-09 | 1 | -10/+11 |
| | | | | | ok beck@ deraadt@ jsing@ guenther@ | ||||
| * | re-init and init code paths are now more shared, so the getpid()-based | deraadt | 2014-06-27 | 1 | -2/+3 |
| | | | | | portable code path must handle that; with brent cook | ||||
| * | Add back an #ifndef MAP_INHERIT_ZERO chunk to support the old getpid() | deraadt | 2014-06-26 | 1 | -1/+13 |
| | | | | | | mechanism, to aid in portability to other systems as requested. ok matthew | ||||
| * | document why we explicit_bzero | deraadt | 2014-06-25 | 1 | -2/+2 |
| | | |||||
| * | arc4random: hard fail with raise(SIGKILL) if getentropy() returns -1 | matthew | 2014-06-20 | 1 | -3/+4 |
| | | | | | | | | Allow other non-zero return values in case we change our mind to return an ssize_t byte count instead of simple success/fail. ok deraadt, djm | ||||
| * | Move rs_chacha and rs_buf into the same memory page and don't mark it | matthew | 2014-06-19 | 1 | -22/+31 |
| | | | | | | | | | | MAP_INHERIT_ZERO anymore. This restores arc4random's previous behavior where fork children would mix in some randomness from the parent process. New behavior noticed by deraadt ok deraadt, tedu | ||||
| * | Use MAP_INHERIT_ZERO in arc4random(3) | matthew | 2014-06-17 | 1 | -37/+44 |
| | | | | | | | | | Now instead of calling getpid() each time a user invokes arc4random(), we're able to rely on the kernel zero'ing out the RNG state if the process forks. ok deraadt, djm | ||||
| * | For now... assume success of getentropy() just like we assumed success | deraadt | 2014-06-13 | 1 | -3/+3 |
| | | | | | of sysctl(). Mark it with XXX while we consider. | ||||
| * | use getgentropy() call. If it fails, things are pretty bad -- | deraadt | 2014-06-13 | 1 | -8/+3 |
| | | | | | | call abort(). this direction discussed at length with miod beck tedu matthew etc | ||||
| * | Delete the extraneous "return" statement at the end of a void function. | jca | 2014-05-31 | 1 | -2/+1 |
| | | | | | From Fritjof Bornebusch. | ||||
| * | Add missing header needed by isdigit(). | chl | 2014-05-17 | 1 | -4/+5 |
| | | | | | | | While there, sort headers. ok tedu@ | ||||
| * | refactor some of the des crypt code to use fewer globals. | tedu | 2014-05-17 | 2 | -42/+45 |
| | | | | | ok miod | ||||
| * | update NAME and MLINKS for previous; | jmc | 2014-05-16 | 2 | -5/+7 |
| | | |||||
| * | document crypt_checkpass | tedu | 2014-05-16 | 1 | -1/+14 |
| | | |||||
| * | use $2b in the bcrypt example, ok tedu | sthen | 2014-05-16 | 1 | -3/+3 |
| | | |||||
| * | remove md5crypt. | tedu | 2014-05-12 | 5 | -195/+65 |
| | | | | | | | while changing things, add a crypt_checkpass wrapper that handles most of the edge cases. (not quite ready for production, though.) ok deraadt | ||||
| * | missing NULL checks to see if init is needed. found hard way by deraadt. | tedu | 2014-05-06 | 1 | -3/+3 |
| | | |||||
| * | fix stupid commit | tedu | 2014-05-06 | 1 | -5/+5 |
| | | |||||
| * | use explicit_bzero | tedu | 2014-05-06 | 1 | -5/+5 |
| | | |||||
| * | clear a stack buffer with explicit_bzero | tedu | 2014-05-06 | 1 | -2/+2 |
| | | |||||
| * | move chacha context and buffer out of bss and allow mmap to place them | tedu | 2014-05-06 | 1 | -6/+16 |
| | | | | | wherever it decides it would like them. first step. ok deraadt dlg djm | ||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |