5 Commits

Author	SHA1	Message	Date
Nick Mathewson	7c52a0555a	Check key_len in secret_to_key_new() ... This bug shouldn't be reachable so long as secret_to_key_len and secret_to_key_make_specifier stay in sync, but we might screw up someday. Found by coverity; this is CID 1241500	2014-09-26 09:06:36 -04:00
Nick Mathewson	05a6439f1f	Use preferred key-expansion means for pbkdf2, scrypt. ... Use HKDF for RFC2440 s2k only.	2014-09-25 11:58:13 -04:00
Nick Mathewson	2b2cab4141	Tweak and expose secret_to_key_compute_key for testing ... Doing this lets me pass in a salt of an unusual length.	2014-09-25 11:58:13 -04:00
Nick Mathewson	e84e1c9745	More generic passphrase hashing code, including scrypt support ... Uses libscrypt when found; otherwise, we don't have scrypt and we only support openpgp rfc2440 s2k hashing, or pbkdf2. Includes documentation and unit tests; coverage around 95%. Remaining uncovered code is sanity-checks that shouldn't be reachable fwict.	2014-09-25 11:58:13 -04:00
Nick Mathewson	e72a5b3c07	Move secret-to-key functionality into a separate module ... I'm about to add more of these, so we might as well trudge forward.	2014-08-28 12:04:22 -04:00