summary refs log tree commit diff
path: root/crypto/src/tls (follow)
Commit message (Collapse)AuthorAgeFilesLines
* TLS: refactoring around extended_master_secretPeter Dettman2023-07-055-92/+172
| | | | - especially the interaction with session resumption and the methods relating to use of EMS.
* TLS: extra client validation of ServerHello parametersPeter Dettman2023-07-051-1/+12
|
* Add TlsClient.ShouldUseCompatibilityModePeter Dettman2023-06-284-1/+18
|
* Fix renegotiation after resumption handshakesPeter Dettman2023-06-202-2/+2
| | | | - see https://github.com/bcgit/bc-java/issues/1430
* Prefer AES/GCM over CHACHA20_POLY1305 (cipher suites)Peter Dettman2023-06-092-7/+7
|
* Refactoring in DH key pair generatorsPeter Dettman2023-05-311-1/+1
| | | | - obsolete DHBasicKeyPairGenerator
* Refactoring in Stream classesPeter Dettman2023-05-181-1/+1
|
* DTLS: Improve DtlsVerifier performancePeter Dettman2023-05-175-116/+101
|
* TLS: NotifyConnectionClosed after failurePeter Dettman2023-05-171-0/+2
|
* Refactoring in Tls.Crypto.Impl.BCPeter Dettman2023-05-172-6/+11
|
* Avoid dummy cipher initPeter Dettman2023-05-161-16/+4
|
* Refactoring in Tls.Crypto.ImplPeter Dettman2023-05-162-1/+2
|
* DTLS: Remove the need to reset AEAD ciphersPeter Dettman2023-05-165-19/+52
|
* Fix XML commentsPeter Dettman2023-05-111-4/+8
|
* TLS: Add NotifyConnectionClosed callbackPeter Dettman2023-05-114-0/+19
|
* fix exception during DTLS server handshake when the client has no extensionsPatrick Krämer2023-05-111-1/+1
|
* Patch #1 for 2.2 release-2.2.1Peter Dettman2023-04-211-1/+1
| | | | | | | - enable optimized code in 'Publish' configuration - fixed blocksRemaining tracking in GcmBlockCipher (not net60) - complete connection ID for block ciphers with encrypt_then_mac (not net60) - added some missing entries for the contributors file
* FIx binary compatibility issuesPeter Dettman2023-04-168-91/+84
|
* Minor fixups for github_445Peter Dettman2023-04-156-7/+19
|
* make initial DTLS handshake resend time configurablePatrick Krämer2023-04-156-8/+21
|
* Fix warningPeter Dettman2023-04-141-1/+1
|
* Add and use DtlsRecordCallbackPeter Dettman2023-04-142-15/+40
|
* RFC 9146: Add simple record callback for testing purposesPeter Dettman2023-04-133-21/+64
|
* RFC 9146: TODOs for API changes when possiblePeter Dettman2023-04-131-0/+4
|
* RFC 9146: Update RecordStream for completenessPeter Dettman2023-04-131-2/+14
|
* RFC 9146: Add ReceivePending methodsPeter Dettman2023-04-132-61/+211
|
* RFC 9146: TlsNullCipher support for connection IDPeter Dettman2023-04-134-40/+118
|
* RFC 9146: DtlsRecordLayer support for connection IDPeter Dettman2023-04-132-35/+156
|
* RFC 9146: TlsAeadCipher support for connection IDPeter Dettman2023-04-132-38/+85
|
* RFC 9146: DtlsEpoch tracks record header lengthsPeter Dettman2023-04-132-3/+16
| | | | - accounts for whether connection ID is in use for read/write.
* RFC 9146: TlsBlockCipher support for connection IDPeter Dettman2023-04-133-46/+136
|
* RFC 9146: Introduce AbstractTlsCipher base classPeter Dettman2023-04-134-46/+79
|
* RFC 9146: Update HMAC calculationPeter Dettman2023-04-131-17/+105
|
* RFC 9146: connection_id extension negotiationPeter Dettman2023-04-136-1/+126
|
* RFC 9146: Add registry entriesPeter Dettman2023-04-132-0/+11
|
* Platform guards for Stream codePeter Dettman2023-04-111-0/+4
|
* Fix rethrow syntaxPeter Dettman2023-03-1610-72/+72
| | | | - see https://github.com/bcgit/bc-csharp/issues/425
* Refactoring around Stream usagePeter Dettman2023-03-091-0/+26
|
* Refactoring in Asn1Peter Dettman2023-03-061-1/+1
|
* Support 'leaveOpen' in Asn1 streamsPeter Dettman2023-03-051-8/+9
|
* TLS: Process CCM packet directlyPeter Dettman2023-02-163-11/+41
|
* Restore some RC4_128 registry entries (only)Peter Dettman2023-02-161-0/+10
|
* Use 2 * output length for seed sizePeter Dettman2023-02-131-2/+2
|
* Increase seed size for DigestRandomGenerator usesPeter Dettman2023-02-101-2/+2
|
* Misc. refactoring after bc-fips-csharp updatesPeter Dettman2023-02-041-1/+0
|
* Misc. cleanup after bc-fips-csharp updatesPeter Dettman2023-01-288-25/+15
|
* Refactor SendSignatureInput and callersPeter Dettman2023-01-051-4/+8
|
* Use FixedTimeEqualsPeter Dettman2022-11-239-11/+11
|
* Dispose cleanupPeter Dettman2022-11-094-5/+5
| | | | - IDisposable for PemReader, PemWriter, IStreamGenerator
* Pqc cleanupPeter Dettman2022-11-081-1/+1
|
* Add Span-based variants in DTLSPeter Dettman2022-11-055-10/+276
|
* Add TlsPeer.IgnoreCorruptDtlsRecordsPeter Dettman2022-11-059-5/+41
| | | | | | - property controls behaviour when bad_record_mac thrown for DTLS record. - defaults to 'false' (don't ignore i.e. fail the connection) - see https://github.com/bcgit/bc-csharp/pull/279
* Preprocessor symbol cleanupPeter Dettman2022-11-052-10/+0
|
* A few span opts.Peter Dettman2022-11-021-1/+8
|
* Span-based TlsStream methodsPeter Dettman2022-11-0110-0/+419
|
* More Span-based Stream methodsPeter Dettman2022-11-019-0/+73
|
* Complete SecureRandom refactoringPeter Dettman2022-10-231-1/+4
|
* Add BcTlsCrypto default constructorPeter Dettman2022-10-121-0/+5
|
* Tweak allocation strategyPeter Dettman2022-10-081-16/+7
|
* New Spans methodsPeter Dettman2022-10-082-2/+4
|
* More span variants in randomness classesPeter Dettman2022-10-074-1/+40
|
* Refactor stackalloc usage in TLSPeter Dettman2022-10-065-7/+18
|
* Remove Times classPeter Dettman2022-10-051-2/+2
|
* Various span usagesPeter Dettman2022-10-051-1/+1
|
* Various span usage in TLS codePeter Dettman2022-10-0518-30/+465
|
* (D)TLS: RFC 7250 Raw Public KeysPeter Dettman2022-09-2415-530/+745
|
* CleanupPeter Dettman2022-09-201-1/+0
|
* Stream modernizationPeter Dettman2022-09-034-21/+77
|
* NullOutputStream => Stream.NullPeter Dettman2022-09-021-1/+1
|
* FIx return value for empty readPeter Dettman2022-09-021-1/+1
|
* TlsCrypto only needs IAeadCipherPeter Dettman2022-08-242-22/+22
|
* TLS: 'tls-exporter' channel bindingPeter Dettman2022-08-012-0/+8
| | | | | - defined in RFC 9266 - see https://github.com/bcgit/bc-java/issues/1198
* ChaCha20Poly1305 perf. opts.Peter Dettman2022-07-231-2/+2
|
* Utility method for selecting AES enginePeter Dettman2022-07-171-1/+1
|
* Cleanup doc warningsPeter Dettman2022-07-1212-23/+24
|
* Move m_resumedSession to SecurityParametersPeter Dettman2022-07-054-45/+53
|
* Custom serializationPeter Dettman2022-07-012-5/+25
|
* Refactoring around MemoryStreamPeter Dettman2022-06-309-65/+24
|
* Refactoring around PlatformPeter Dettman2022-06-293-5/+3
|
* Generics migration in TlsPeter Dettman2022-06-2837-589/+574
|
* Cleanup Exception classesPeter Dettman2022-06-246-40/+87
|
* Warnings cleanupPeter Dettman2022-06-221-1/+1
|
* Code cleanupPeter Dettman2022-06-223-3/+3
|
* Cleanup old build systemsPeter Dettman2022-06-212-15/+0
|
* ObsoleteAttribute cleanupPeter Dettman2022-06-211-20/+0
|
* Set randoms before extensions processingPeter Dettman2022-05-303-33/+33
| | | | - see https://github.com/bcgit/bc-java/issues/1167
* Work on Stream classesPeter Dettman2022-05-235-30/+38
| | | | | | | - consistent naming, ordering - CanRead/Seek/Write fixes - argument validation - some cases of blocking zero-byte Read calls
* Add ValidateBufferArgumentsPeter Dettman2022-05-192-31/+29
|
* Add previewing of pending output recordsPeter Dettman2022-05-192-0/+30
|
* ByteQueue improvementsPeter Dettman2022-05-191-3/+12
|
* Blocking zero-byte Read for TlsStreamPeter Dettman2022-05-131-7/+15
|
* Merge branch 'alpn-id'Peter Dettman2022-05-121-0/+11
|\
| * Add missing ALPN Protocol namesMatthew Sitton2022-05-121-0/+11
| |
* | Improve anon suitesPeter Dettman2022-05-115-7/+30
| |
* | Check EncryptionAlgorithm explicitlyPeter Dettman2022-05-111-4/+27
| |
* | (D)TLS: now defaults to offering (D)TLS 1.2, TLS 13Peter Dettman2022-05-117-13/+12
| |
* | Register DTLS 1.3 version numberPeter Dettman2022-05-111-0/+5
| |
* | ReformatPeter Dettman2022-05-111-27/+40
| |
* | RefactoringPeter Dettman2022-05-111-3/+2
| |
* | Test config for ClientHello sig algsPeter Dettman2022-05-101-1/+6
| |
* | Improve TLS handshake hash trackingPeter Dettman2022-05-107-40/+61
| |
* | Minor SignatureAlgorithm additionsPeter Dettman2022-05-103-8/+44
| |
* | Improve TLS handshake hash trackingPeter Dettman2022-05-106-183/+223
| |
* | Avoid duplicate callPeter Dettman2022-05-061-1/+1
| |
* | Mark method obsoletePeter Dettman2022-05-051-2/+3
| |
* | Rework TLS 1.3 verifiersPeter Dettman2022-05-0513-187/+314
| |
* | Change method to propertyPeter Dettman2022-05-056-14/+14
| |
* | Fix member namesPeter Dettman2022-05-051-9/+9
| |
* | Refactor client cert type checksPeter Dettman2022-05-051-19/+17
| |
* | Followup fix for PSS changesPeter Dettman2022-05-051-1/+9
| |
* | TLS PSS raw signaturesPeter Dettman2022-05-042-8/+17
|/
* Provide getter for native certificate instancePeter Dettman2022-05-031-0/+5
|
* Add HasHkdfAlgorithm method and use in testPeter Dettman2022-04-213-41/+62
|
* RefactoringPeter Dettman2022-04-218-32/+8
|
* Consistent namingPeter Dettman2022-04-208-26/+26
|
* No HMacDsaKCalculator for verificationPeter Dettman2022-04-204-12/+7
|
* RefactoringPeter Dettman2022-04-063-29/+40
|
* RefactoringPeter Dettman2022-04-041-8/+7
|
* Improve IsSupportedCipherSuitePeter Dettman2022-03-281-3/+16
|
* Fix TLS 1.3 Export Keying MaterialPeter Dettman2022-03-281-2/+15
| | | | - see https://github.com/bcgit/bc-java/issues/1133
* RefactoringPeter Dettman2022-03-173-11/+13
|
* Fix return typePeter Dettman2022-03-161-4/+2
|
* DTLS: delayed handshake hash updatePeter Dettman2022-03-166-105/+122
| | | | - avoid clone of handshake hash
* RefactoringPeter Dettman2022-03-162-3/+35
|
* RefactoringPeter Dettman2022-03-124-30/+24
|
* RFC 8879 preliminariesPeter Dettman2022-03-027-0/+135
|
* Improve curve registry lazinessPeter Dettman2022-02-031-6/+2
|
* TLS: Improve ASN.1 parsingPeter Dettman2021-11-067-23/+67
|
* PORTABLE fixesPeter Dettman2021-10-181-0/+4
|
* Experimental server-side TLS 1.3 PSKPeter Dettman2021-10-171-51/+89
|
* Server-side PSK selectionPeter Dettman2021-10-172-10/+97
|
* TLS 1.3 PSK server-side workPeter Dettman2021-10-176-7/+96
|
* Fixes for new_session_ticketPeter Dettman2021-10-046-16/+53
| | | | - see https://github.com/bcgit/bc-csharp/issues/317
* Allow IOException from NotifySelectedPskPeter Dettman2021-07-282-0/+2
|
* Enable only psk_dhe_ke by defaultPeter Dettman2021-07-281-1/+1
|
* Set psk_key_exchange_modes extensionPeter Dettman2021-07-281-0/+2
|
* Client message flow for PSK handshakePeter Dettman2021-07-283-27/+45
|
* ServeHello selected PSK handlingPeter Dettman2021-07-281-19/+36
|
* Filter PSK set for ClientHello retryPeter Dettman2021-07-274-27/+91
|
* Seal handshake hash externallyPeter Dettman2021-07-273-5/+6
|
* Add pre_shared_key to ClientHelloPeter Dettman2021-07-276-50/+119
|
* Use PSK early secret when negotiatedPeter Dettman2021-07-274-17/+15
|
* OfferedPsks.Config and methods to buildPeter Dettman2021-07-272-3/+134
|
* More work on PSK bindersPeter Dettman2021-07-268-38/+149
|
* ClientHello 'splitting' to handle PSK bindersPeter Dettman2021-07-263-1/+66
|
* PSK binder based on explicit PRF hashPeter Dettman2021-07-262-44/+29
|
* Initial fix for reneg issuePeter Dettman2021-07-262-2/+20
| | | | - see https://github.com/bcgit/bc-java/issues/990
* TLS 1.3 client API for external PSKsPeter Dettman2021-07-257-0/+84
|
* Fix Truncate methodPeter Dettman2021-07-251-1/+1
|
* Only GetSessionToResume if pre-1.3 offeredPeter Dettman2021-07-251-15/+19
|
* Store the PRF CryptoHashAlgorithmPeter Dettman2021-07-256-26/+28
|
* Refactoring around TLS HKDFPeter Dettman2021-07-255-36/+108
|
* Calculate HMAC without extracting TlsSecretPeter Dettman2021-07-243-6/+23
|
* Simplify HandleClosePeter Dettman2021-07-211-7/+7
|
* Avoid redundant CheckUsageInRole callsPeter Dettman2021-07-148-61/+25
|
* Refactoring around TlsEncryptorPeter Dettman2021-07-138-28/+39
|
* Some methods towards GMSSL supportPeter Dettman2021-07-134-20/+57
|
* Port of new TLS API from bc-javaPeter Dettman2021-07-12266-0/+36270