nihilist/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-11-13 14:43:46 +01:00
Code Issues Packages Projects Releases Wiki Activity
5e2cba8eb4
tor/src/lib/crypt_ops/include.am

76 lines
2.5 KiB
Plaintext
Raw Normal View History

Split crypto and tls libraries into directories I am calling the crypto library "crypt_ops", since I want higher-level crypto things to be separated from lower-level ones. This library will hold only the low-level ones, once we have it refactored.
2018-06-21 18:46:11 +02:00
noinst_LIBRARIES += src/lib/libtor-crypt-ops.a
if UNITTESTS_ENABLED
noinst_LIBRARIES += src/lib/libtor-crypt-ops-testing.a
endif
src_lib_libtor_crypt_ops_a_SOURCES = \
Rename crypto.c to crypto_cipher.c (since that's all it still has.)
2018-07-11 20:08:22 +02:00
src/lib/crypt_ops/crypto_cipher.c \
Split crypto and tls libraries into directories I am calling the crypto library "crypt_ops", since I want higher-level crypto things to be separated from lower-level ones. This library will hold only the low-level ones, once we have it refactored.
2018-06-21 18:46:11 +02:00
src/lib/crypt_ops/crypto_curve25519.c \
src/lib/crypt_ops/crypto_dh.c \
src/lib/crypt_ops/crypto_digest.c \
src/lib/crypt_ops/crypto_ed25519.c \
src/lib/crypt_ops/crypto_format.c \
src/lib/crypt_ops/crypto_hkdf.c \
Move the initialization and cleanup parts of crypto.c These are now part of crypto_init.c. The openssl-only parts now live in crypto_openssl_mgt.c. I recommend reviewing this patch with -b and --color-moved.
2018-07-11 19:44:35 +02:00
src/lib/crypt_ops/crypto_init.c \
Merge branch 'bug25552_ope_squashed'
2018-07-17 22:19:32 +02:00
src/lib/crypt_ops/crypto_ope.c \
Split crypto and tls libraries into directories I am calling the crypto library "crypt_ops", since I want higher-level crypto things to be separated from lower-level ones. This library will hold only the low-level ones, once we have it refactored.
2018-06-21 18:46:11 +02:00
src/lib/crypt_ops/crypto_pwbox.c \
src/lib/crypt_ops/crypto_rand.c \
Implement a fast aes-ctr prng This module is currently implemented to use the same technique as libottery (later used by the bsds' arc4random replacement), using AES-CTR-256 as its underlying stream cipher. It's backtracking- resistant immediately after each call, and prediction-resistant after a while. Here's how it works: We generate psuedorandom bytes using AES-CTR-256. We generate BUFLEN bytes at a time. When we do this, we keep the first SEED_LEN bytes as the key and the IV for our next invocation of AES_CTR, and yield the remaining BUFLEN - SEED_LEN bytes to the user as they invoke the PRNG. As we yield bytes to the user, we clear them from the buffer. Every RESEED_AFTER times we refill the buffer, we mix in an additional SEED_LEN bytes from our strong PRNG into the seed. If the user ever asks for a huge number of bytes at once, we pull SEED_LEN bytes from the PRNG and use them with our stream cipher to fill the user's request.
2019-02-05 18:49:04 +01:00
src/lib/crypt_ops/crypto_rand_fast.c \
Extract numeric CSPRNG functions into a new module. Some of the code for getting a random value within a range wants to be shared between crypto_rand() and the new crypto_fast_rng() code.
2019-02-06 18:40:01 +01:00
src/lib/crypt_ops/crypto_rand_numeric.c \
Split crypto and tls libraries into directories I am calling the crypto library "crypt_ops", since I want higher-level crypto things to be separated from lower-level ones. This library will hold only the low-level ones, once we have it refactored.
2018-06-21 18:46:11 +02:00
src/lib/crypt_ops/crypto_rsa.c \
src/lib/crypt_ops/crypto_s2k.c \
Refactor bloom filter logic not to be digest-specific. Now the address-set code and the digest-set code share the same backend. Closes ticket 26510
2018-06-26 19:18:23 +02:00
src/lib/crypt_ops/crypto_util.c \
src/lib/crypt_ops/digestset.c
Split crypto and tls libraries into directories I am calling the crypto library "crypt_ops", since I want higher-level crypto things to be separated from lower-level ones. This library will hold only the low-level ones, once we have it refactored.
2018-06-21 18:46:11 +02:00
Initialize and shut down NSS. This is largely conjectural, based on online documentation for NSS and NSPR.
2018-07-11 20:46:28 +02:00
if USE_NSS
src_lib_libtor_crypt_ops_a_SOURCES += \
Use NSS for AES_CTR.
2018-07-16 15:49:05 +02:00
src/lib/crypt_ops/aes_nss.c \
Split crypto_digest.c * Move out code that depends on NSS to crypto_digest_nss.c * Move out code that depends on OpenSSL to crypto_digest_openssl.c * Keep the general code that is not specific to any of the above in crypto_digest.c
2019-01-18 11:26:13 +01:00
src/lib/crypt_ops/crypto_digest_nss.c \
Implement DH in NSS.
2018-07-17 17:27:08 +02:00
src/lib/crypt_ops/crypto_dh_nss.c \
Implement RSA for NSS.
2018-07-19 18:03:01 +02:00
src/lib/crypt_ops/crypto_nss_mgt.c \
src/lib/crypt_ops/crypto_rsa_nss.c
Use NSS for AES_CTR.
2018-07-16 15:49:05 +02:00
else
src_lib_libtor_crypt_ops_a_SOURCES += \
Implement RSA for NSS.
2018-07-19 18:03:01 +02:00
src/lib/crypt_ops/aes_openssl.c \
Split crypto_digest.c * Move out code that depends on NSS to crypto_digest_nss.c * Move out code that depends on OpenSSL to crypto_digest_openssl.c * Keep the general code that is not specific to any of the above in crypto_digest.c
2019-01-18 11:26:13 +01:00
src/lib/crypt_ops/crypto_digest_openssl.c \
Implement RSA for NSS.
2018-07-19 18:03:01 +02:00
src/lib/crypt_ops/crypto_rsa_openssl.c
Initialize and shut down NSS. This is largely conjectural, based on online documentation for NSS and NSPR.
2018-07-11 20:46:28 +02:00
endif
Use NSS for AES_CTR.
2018-07-16 15:49:05 +02:00
Initialize and shut down NSS. This is largely conjectural, based on online documentation for NSS and NSPR.
2018-07-11 20:46:28 +02:00
if USE_OPENSSL
src_lib_libtor_crypt_ops_a_SOURCES += \
When enabling NSS, disable OpenSSL. We used to link both libraries at once, but now that I'm working on TLS, there's nothing left to keep OpenSSL around for when NSS is enabled. Note that this patch causes a couple of places that still assumed OpenSSL to be disabled when NSS is enabled - tor-gencert - pbkdf2
2018-08-12 23:18:41 +02:00
src/lib/crypt_ops/crypto_dh_openssl.c \
Initialize and shut down NSS. This is largely conjectural, based on online documentation for NSS and NSPR.
2018-07-11 20:46:28 +02:00
src/lib/crypt_ops/crypto_openssl_mgt.c
endif
Add a configure switch to build with NSS. When it is set, include the NSS headers and libraries as appropriate. Doesn't actually use them yet, though.
2018-07-11 18:57:30 +02:00
src_lib_libtor_crypt_ops_a_CFLAGS = $(AM_CFLAGS) $(TOR_CFLAGS_CRYPTLIB)
Split crypto and tls libraries into directories I am calling the crypto library "crypt_ops", since I want higher-level crypto things to be separated from lower-level ones. This library will hold only the low-level ones, once we have it refactored.
2018-06-21 18:46:11 +02:00
src_lib_libtor_crypt_ops_testing_a_SOURCES = \
$(src_lib_libtor_crypt_ops_a_SOURCES)
src_lib_libtor_crypt_ops_testing_a_CPPFLAGS = $(AM_CPPFLAGS) $(TEST_CPPFLAGS)
Add a configure switch to build with NSS. When it is set, include the NSS headers and libraries as appropriate. Doesn't actually use them yet, though.
2018-07-11 18:57:30 +02:00
src_lib_libtor_crypt_ops_testing_a_CFLAGS = \
$(AM_CFLAGS) $(TOR_CFLAGS_CRYPTLIB) $(TEST_CFLAGS)
Split crypto and tls libraries into directories I am calling the crypto library "crypt_ops", since I want higher-level crypto things to be separated from lower-level ones. This library will hold only the low-level ones, once we have it refactored.
2018-06-21 18:46:11 +02:00
noinst_HEADERS += \
src/lib/crypt_ops/aes.h \
src/lib/crypt_ops/compat_openssl.h \
src/lib/crypt_ops/crypto_curve25519.h \
src/lib/crypt_ops/crypto_dh.h \
src/lib/crypt_ops/crypto_digest.h \
src/lib/crypt_ops/crypto_ed25519.h \
src/lib/crypt_ops/crypto_format.h \
Rename crypto.c to crypto_cipher.c (since that's all it still has.)
2018-07-11 20:08:22 +02:00
src/lib/crypt_ops/crypto_cipher.h \
Split crypto and tls libraries into directories I am calling the crypto library "crypt_ops", since I want higher-level crypto things to be separated from lower-level ones. This library will hold only the low-level ones, once we have it refactored.
2018-06-21 18:46:11 +02:00
src/lib/crypt_ops/crypto_hkdf.h \
Move the initialization and cleanup parts of crypto.c These are now part of crypto_init.c. The openssl-only parts now live in crypto_openssl_mgt.c. I recommend reviewing this patch with -b and --color-moved.
2018-07-11 19:44:35 +02:00
src/lib/crypt_ops/crypto_init.h \
Fix "make distcheck."
2018-07-18 15:52:47 +02:00
src/lib/crypt_ops/crypto_nss_mgt.h \
Split crypto and tls libraries into directories I am calling the crypto library "crypt_ops", since I want higher-level crypto things to be separated from lower-level ones. This library will hold only the low-level ones, once we have it refactored.
2018-06-21 18:46:11 +02:00
src/lib/crypt_ops/crypto_openssl_mgt.h \
Merge branch 'bug25552_ope_squashed'
2018-07-17 22:19:32 +02:00
src/lib/crypt_ops/crypto_ope.h \
Split crypto and tls libraries into directories I am calling the crypto library "crypt_ops", since I want higher-level crypto things to be separated from lower-level ones. This library will hold only the low-level ones, once we have it refactored.
2018-06-21 18:46:11 +02:00
src/lib/crypt_ops/crypto_pwbox.h \
src/lib/crypt_ops/crypto_rand.h \
src/lib/crypt_ops/crypto_rsa.h \
src/lib/crypt_ops/crypto_s2k.h \
Add crypto module as a subsystem.
2018-11-02 16:21:06 +01:00
src/lib/crypt_ops/crypto_sys.h \
Refactor bloom filter logic not to be digest-specific. Now the address-set code and the digest-set code share the same backend. Closes ticket 26510
2018-06-26 19:18:23 +02:00
src/lib/crypt_ops/crypto_util.h \
src/lib/crypt_ops/digestset.h
Reference in New Issue Copy Permalink