Lucas Clemente
|
240946dfde
|
replace version number literals with constants to make grepping easier
|
2016-06-03 11:09:48 +02:00 |
|
Lucas Clemente
|
fa2e34d360
|
require and generate source address tokens in crypto setup
fixes #121
|
2016-05-24 11:20:16 +02:00 |
|
Lucas Clemente
|
241c9f3a3c
|
add support for diversification to key derivation
ref #51
|
2016-05-21 00:04:28 +02:00 |
|
Lucas Clemente
|
2606b891e2
|
add diversification to AEADs and conditionally include in public header
ref #51
|
2016-05-20 23:41:04 +02:00 |
|
Lucas Clemente
|
52d734f644
|
fix 0-RTT handshakes by not requiring SNOs for initial encryption
fixes #118, fixes #119
|
2016-05-20 13:05:51 +02:00 |
|
Lucas Clemente
|
f86875f746
|
reject small CHLOs to prevent amplification attacks
fixes #1
|
2016-05-19 16:20:22 +02:00 |
|
Lucas Clemente
|
7a97f34fac
|
don't panic 🤓
fixes #93
|
2016-05-18 18:29:42 +02:00 |
|
Lucas Clemente
|
b185ea04e1
|
add CloseRemote method to stream
ref #109
|
2016-05-18 13:33:36 +02:00 |
|
Lucas Clemente
|
d0e6b993bb
|
use new error codes throughout the server
fixes #86
|
2016-05-17 12:49:59 +02:00 |
|
Lucas Clemente
|
9f63cdbd91
|
add stream.StreamID()
|
2016-05-14 13:35:43 +02:00 |
|
Lucas Clemente
|
c7126137d1
|
queue undecryptable packets for later decryption & possibly send PRST
fixes #38, fixes #69, fixes #73
|
2016-05-12 16:46:18 +02:00 |
|
Lucas Clemente
|
ea83ca8950
|
implement cert compression with cached certificates
|
2016-05-11 16:30:04 +02:00 |
|
Lucas Clemente
|
7c1e1cde56
|
rename GetCertCompressed to GetCertsCompressed
|
2016-05-11 11:41:44 +02:00 |
|
Lucas Clemente
|
20655bac5a
|
rename GetCertUncompressed to GetLeafCert
|
2016-05-11 11:40:20 +02:00 |
|
Lucas Clemente
|
7609246b45
|
re-add support for version 30
fixes #72
|
2016-05-10 11:05:52 +02:00 |
|
Lucas Clemente
|
f4ac8ff949
|
read SNI from crypto handshake
fixes #48
|
2016-05-08 23:06:18 +02:00 |
|
Lucas Clemente
|
85c39721ec
|
change Signer interface to return errors
|
2016-05-08 22:46:59 +02:00 |
|
Lucas Clemente
|
6738f0eadf
|
add sni to crypto.Signer interface
|
2016-05-08 22:23:36 +02:00 |
|
Lucas Clemente
|
40ee20c02b
|
use a ephermal curve25519 for forward secure key exchange
fixes #17
|
2016-05-04 12:45:25 +02:00 |
|
Marten Seemann
|
d07baef91b
|
manage connection parameters in a separate class
|
2016-05-04 17:20:36 +07:00 |
|
Lucas Clemente
|
daf4e4a867
|
remove support for version 30, since we don't implement FEC at all
|
2016-05-02 20:56:02 +02:00 |
|
Lucas Clemente
|
53ef5669e2
|
fix crypto setup tests
|
2016-05-02 20:52:09 +02:00 |
|
Lucas Clemente
|
6178ef83fe
|
discard undecryptable packets
hopefully fixes issue #33, the workaround is tracked in #38
|
2016-05-02 16:45:26 +02:00 |
|
Lucas Clemente
|
a6d3dca74c
|
re-add crypto test
|
2016-05-02 14:40:43 +02:00 |
|
Lucas Clemente
|
623bf065fd
|
accept null-encrypted pckts until an encrypted pckt has ben received
this should fix issue #33
|
2016-05-02 14:38:05 +02:00 |
|
Lucas Clemente
|
23a1e08e90
|
make stream private
|
2016-04-25 17:54:00 +02:00 |
|
Lucas Clemente
|
4e1942a76e
|
improve inchoate CHLO recognition
|
2016-04-19 13:37:59 +02:00 |
|
Lucas Clemente
|
9cbeb49d49
|
change AEAD interface to use byte slices, simplifying its usage
|
2016-04-18 14:37:34 +02:00 |
|
Lucas Clemente
|
57b144bdef
|
fix pending cryptosetup tests
|
2016-04-18 12:38:41 +02:00 |
|
Lucas Clemente
|
758fdeb3d3
|
change CryptoSetup to use streams
|
2016-04-18 11:03:49 +02:00 |
|
Lucas Clemente
|
d32a1b8a2b
|
add tests for crypto escalation
|
2016-04-17 17:11:54 +02:00 |
|
Lucas Clemente
|
5c6e72303e
|
add more crypto setup tests
|
2016-04-17 16:46:44 +02:00 |
|
Lucas Clemente
|
7e65940188
|
add more cryptosetup tests
|
2016-04-17 00:37:07 +02:00 |
|
Lucas Clemente
|
b5c7bcda18
|
extract SHLO into separate method and test it
|
2016-04-17 00:31:30 +02:00 |
|
Lucas Clemente
|
cbbf29e3d5
|
add some cryptosetup tests
|
2016-04-17 00:22:41 +02:00 |
|
Lucas Clemente
|
14d3b03b44
|
more consistent filenames
|
2016-04-15 22:28:45 +02:00 |
|