Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						5ec628a2b9 
					 
					
						
						
							
							Add rsa_rsassa_pss_verify_ext()  
						
						
						
						
					 
					
						2014-06-05 14:02:05 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						e6d1d82b66 
					 
					
						
						
							
							Relax checks on RSA mode for public key operations  
						
						
						
						
					 
					
						2014-06-04 12:09:08 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						b9e4e2c97a 
					 
					
						
						
							
							Fix formatting: fix some 'easy' > 80 length lines  
						
						
						
						
					 
					
						2014-05-01 14:18:25 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						cef4ad2509 
					 
					
						
						
							
							Adapt sources to configurable config.h name  
						
						
						
						
					 
					
						2014-04-30 16:40:20 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						844a4c0aef 
					 
					
						
						
							
							Fix RSASSA-PSS example programs  
						
						
						
						
					 
					
						2014-03-13 19:25:06 +01:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						42099c3155 
					 
					
						
						
							
							Revert "Add pk_rsa_set_padding() and rsa_set_padding()"  
						
						... 
						
						
						
						This reverts commit b4fae579e8 
						
						
					 
					
						2014-01-27 11:59:29 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						b4fae579e8 
					 
					
						
						
							
							Add pk_rsa_set_padding() and rsa_set_padding()  
						
						
						
						
					 
					
						2014-01-22 13:03:27 +01:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						a36d23e290 
					 
					
						
						
							
							Fixed documentation issues found by clang  
						
						
						
						
					 
					
						2013-12-30 17:57:27 +01:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						c9965dca27 
					 
					
						
						
							
							RSA blinding threading support  
						
						
						
						
					 
					
						2013-09-29 15:02:11 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						ea53a55c0f 
					 
					
						
						
							
							Refactor to prepare for RSA blinding optimisation  
						
						
						
						
					 
					
						2013-09-10 13:55:35 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						f451bac000 
					 
					
						
						
							
							Blinding RSA only active when f_rng is provided  
						
						
						
						
					 
					
						2013-08-30 15:48:53 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						548957dd49 
					 
					
						
						
							
							Refactored RSA to have random generator in every RSA operation  
						
						... 
						
						
						
						Primarily so that rsa_private() receives an RNG for blinding purposes. 
						
						
					 
					
						2013-08-30 10:30:02 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						e511ffca50 
					 
					
						
						
							
							Allow compiling without RSA or DH  
						
						... 
						
						
						
						Only library and programs now, need to check test suites later. 
						
						
					 
					
						2013-08-27 22:21:21 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						3053f5bcb4 
					 
					
						
						
							
							Get rid of pk_wrap_rsa()  
						
						
						
						
					 
					
						2013-08-20 20:46:04 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						cc0a9d040d 
					 
					
						
						
							
							Fix const-correctness of rsa_*_verify()  
						
						
						
						
					 
					
						2013-08-20 20:46:03 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						407a0da160 
					 
					
						
						
							
							Moved __cplusplus extern statement to include struct definitions as well.  
						
						
						
						
					 
					
						2013-06-27 14:29:21 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						ed27a041e4 
					 
					
						
						
							
							More granular define selections within code to allow for smaller code  
						
						... 
						
						
						
						sizes 
						
						
					 
					
						2013-04-18 23:12:34 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						c70b982056 
					 
					
						
						
							
							OID functionality moved to a separate module.  
						
						... 
						
						
						
						A new OID module has been created that contains the main OID searching
functionality based on type-dependent arrays. A base type is used to
contain the basic values (oid_descriptor_t) and that type is extended to
contain type specific information (like a pk_alg_t).
As a result the rsa sign and verify function prototypes have changed. They
now expect a md_type_t identifier instead of the removed RSA_SIG_XXX
defines.
All OID definitions have been moved to oid.h
All OID matching code is in the OID module.
The RSA PKCS#1 functions cleaned up as a result and adapted to use the
MD layer.
The SSL layer cleanup up as a result and adapted to use the MD layer.
The X509 parser cleaned up and matches OIDs in certificates with new
module and adapted to use the MD layer.
The X509 writer cleaned up and adapted to use the MD layer.
Apps and tests modified accordingly 
						
						
					 
					
						2013-04-07 22:00:46 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						a43231c5a5 
					 
					
						
						
							
							Added support for custom labels when using rsa_rsaes_oaep_encrypt() or rsa_rsaes_oaep_decrypt()  
						
						
						
						
					 
					
						2013-03-06 18:01:02 +01:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						b386913f8b 
					 
					
						
						
							
							Split up the RSA PKCS#1 encrypt, decrypt, sign and verify functions  
						
						... 
						
						
						
						Split rsa_pkcs1_encrypt() into rsa_rsaes_oaep_encrypt() and
rsa_rsaes_pkcs1_v15_encrypt()
Split rsa_pkcs1_decrypt() into rsa_rsaes_oaep_decrypt() and
rsa_rsaes_pkcs1_v15_decrypt()
Split rsa_pkcs1_sign() into rsa_rsassa_pss_sign() and
rsa_rsassa_pkcs1_v15_sign()
Split rsa_pkcs1_verify() into rsa_rsassa_pss_verify() and
rsa_rsassa_pkcs1_v15_verify()
The original functions exist as generic wrappers to these functions. 
						
						
					 
					
						2013-03-06 18:01:02 +01:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						9a73632fd9 
					 
					
						
						
							
							- Merged changesets 1399 up to and including 1415 into 1.2 branch  
						
						
						
						
					 
					
						2012-11-14 12:39:52 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						56a7684023 
					 
					
						
						
							
							- Added alternative for SHA1 signature structure to check for (without NULL)  
						
						
						
						
					 
					
						2012-03-22 15:31:27 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						a3d195c41f 
					 
					
						
						
							
							- Changed the used random function pointer to more flexible format. Renamed havege_rand() to havege_random() to prevent mistakes. Lots of changes as a consequence in library code and programs  
						
						
						
						
					 
					
						2011-11-27 21:07:34 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						314052fbfc 
					 
					
						
						
							
							- Removed extraneous "polarssl/" in front on include directives in header files  
						
						
						
						
					 
					
						2011-08-15 09:07:52 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						4d8ca70833 
					 
					
						
						
							
							- Fixed order of comments to match function rsa_pkcs1_decrypt  
						
						
						
						
					 
					
						2011-08-09 10:31:05 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						9d781407bc 
					 
					
						
						
							
							- A error_strerror function() has been added to translate between error codes and their description.  
						
						... 
						
						
						
						- The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative.
 - Descriptions to all error codes have been added.
 - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers. 
						
						
					 
					
						2011-05-09 16:17:09 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						23986e5d5d 
					 
					
						
						
							
							- Major type rewrite of int to size_t for most variables and arguments used for buffer lengths and loops  
						
						
						
						
					 
					
						2011-04-24 08:57:21 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						9dcc32236b 
					 
					
						
						
							
							- Added support for PKCS#1 v2.1 encoding and thus support for the RSAES-OAEP and RSASSA-PSS operations (enabled by POLARSSL_PKCS1_V21)  
						
						
						
						
					 
					
						2011-03-08 14:16:06 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						37ca75d6f2 
					 
					
						
						
							
							- Added Doxygen source code documentation parts (donated by Fox-IT)  
						
						
						
						
					 
					
						2011-01-06 12:28:03 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						21eb2802fe 
					 
					
						
						
							
							- Changed origins of random function and pointer in rsa_pkcs1_encrypt, rsa_init, rsa_gen_key.  
						
						... 
						
						
						
						Moved to parameters of function instead of context pointers as within ssl_cli, context pointer cannot be set easily. 
						
						
					 
					
						2010-08-16 11:10:02 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						b96f154e51 
					 
					
						
						
							
							- Fixed copyright message  
						
						
						
						
					 
					
						2010-07-18 20:36:00 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						84f12b76fc 
					 
					
						
						
							
							- Updated Copyright to correct entity  
						
						
						
						
					 
					
						2010-07-18 10:13:04 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						c38b2f5bcf 
					 
					
						
						
							
							- Fixed documentation  
						
						
						
						
					 
					
						2010-07-18 10:06:45 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						b924f0494a 
					 
					
						
						
							
							- Fixed documentation typo  
						
						
						
						
					 
					
						2010-07-18 08:49:19 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						b572adf5e6 
					 
					
						
						
							
							- Removed dependency on rand() in rsa_pkcs1_encrypt(). Now using random fuction provided to context  
						
						... 
						
						
						
						- Expanded ssl_client2 arguments for more flexibility
 - rsa_check_private() now supports PKCS1v2 keys as well
 - Fixed deadlock in rsa_pkcs1_encrypt() on failing random generator 
						
						
					 
					
						2010-07-18 08:29:32 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						fc8c4360b8 
					 
					
						
						
							
							- Updated copyright line to 2010  
						
						
						
						
					 
					
						2010-03-21 17:37:16 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						1f3c39c194 
					 
					
						
						
							
							- Removed copyright line for Christophe Devine for clarity  
						
						
						
						
					 
					
						2010-03-21 17:30:05 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						ff60ee6c2a 
					 
					
						
						
							
							- Added const-correctness to main codebase  
						
						
						
						
					 
					
						2010-03-16 21:09:09 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						3391b12ce3 
					 
					
						
						
							
							- Fixed error codes. Negative when needed (SSL error codes). Non-negative if error-codes are OR'ed to other error codes (ASN1, Base64, MPI, DHM). The rest is negative by default.  
						
						
						
						
					 
					
						2009-07-28 20:11:54 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						77b385e91a 
					 
					
						
						
							
							- Updated copyright messages on all relevant files  
						
						
						
						
					 
					
						2009-07-28 17:23:11 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						13e2dfecaa 
					 
					
						
						
							
							- Cleaned up header documentation  
						
						
						
						
					 
					
						2009-07-28 07:18:38 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						38e2b482ff 
					 
					
						
						
							
							- Fixed typo in name of POLARSSL_ERR_RSA_OUTPUT_TOO_LARGE.  
						
						
						
						
					 
					
						2009-07-19 20:41:06 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						fc22c441bc 
					 
					
						
						
							
							- Renamed RSA_RAW to SIG_RSA_RAW for consistency in the code.  
						
						
						
						
					 
					
						2009-07-19 20:36:27 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						b5bf176f4c 
					 
					
						
						
							
							- Major change: Errors are now positive numbers instead of negative.  
						
						... 
						
						
						
						Reason: You cannot OR negative values correctly 
						
						
					 
					
						2009-07-19 20:28:35 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						592457c0ad 
					 
					
						
						
							
							- Fixed documentation typos..  
						
						
						
						
					 
					
						2009-04-01 19:01:43 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						619467aff8 
					 
					
						
						
							
							- Added explanation for first bit/byte to zero in rsa_public  
						
						
						
						
					 
					
						2009-03-28 23:26:51 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						4593aeadaf 
					 
					
						
						
							
							- Added support for RFC4055 SHA2 and SHA4 signature algorithms for  
						
						... 
						
						
						
						use with PKCS#1 v1.5 signing and verification.
 - Added extra certificates to test-ca and test code to further test
   functionality of SHA2 and SHA4 signing and verification.
 - Updated other program files accordingly 
						
						
					 
					
						2009-02-09 22:32:35 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						785a9eeece 
					 
					
						
						
							
							- Added email address to header license information  
						
						
						
						
					 
					
						2009-01-25 14:15:10 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						060c56871c 
					 
					
						
						
							
							- Fixed possible heap overflow in pkcs1_decrypt on data larger than output  
						
						... 
						
						
						
						buffer after padding. For instance the premaster decryption in
   ssl_parse_client_key_exchange() in ssl_serv.c (Thanks to Christophe
   Devine) 
						
						
					 
					
						2009-01-12 21:48:39 +00:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						e0ccd0a7c3 
					 
					
						
						
							
							- Updated Copyright notices  
						
						
						
						
					 
					
						2009-01-04 16:27:10 +00:00