- Oct 22, 2013
-
-
Dr. Stephen Henson authored
-
- Oct 21, 2013
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Ben Laurie authored
-
Nick Mathewson authored
-
Nick Mathewson authored
Instead, send random bytes, unless SSL_SEND_{CLIENT,SERVER}RANDOM_MODE is set. This is a forward-port of commits: 4af79303 f4c93b46 3da721da 25832701 While the gmt_unix_time record was added in an ostensible attempt to mitigate the dangers of a bad RNG, its presence leaks the host's view of the current time in the clear. This minor leak can help fingerprint TLS instances across networks and protocols... and what's worse, it's doubtful thet the gmt_unix_time record does any good at all for its intended purpose, since: * It's quite possible to open two TLS connections in one second. * If the PRNG output is prone to repeat itself, ephemeral handshakes (and who knows what else besides) are broken.
-
- Oct 20, 2013
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Steve Marquess authored
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
Extend SSL_CONF to return command value types. Add certificate and key options. Update documentation.
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
The function gettimeofday() is not supported on all platforms. Use more portable versions. Adapted from FIPS code.
-
Dr. Stephen Henson authored
Removing RSA+MD5 from the default signature algorithm list prevents its use by default. If a broken implementation attempts to use RSA+MD5 anyway the sanity checking of signature algorithms will cause a fatal alert.
-
Ben Laurie authored
-
- Oct 15, 2013
-
-
Andy Polyakov authored
Suggested by: Anton Blanchard
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
- Oct 14, 2013
-
-
Andy Polyakov authored
-
Andy Polyakov authored
-
- Oct 13, 2013
-
-
Andy Polyakov authored
-
Andy Polyakov authored
Latest MIPS ISA specification declared 'branch likely' instructions obsolete. To makes code future-proof replace them with equivalent.
-
- Oct 12, 2013
-
-
Andy Polyakov authored
Excessive fragmentation put additional burden (of addtional MAC calculations) on the other size and limiting fragments it to 1KB limits the overhead to ~6%.
-
Andy Polyakov authored
PR: 3139
-
- Oct 10, 2013
-
-
Andy Polyakov authored
-
- Oct 09, 2013
-
-
Andy Polyakov authored
-
- Oct 08, 2013
-
-
Andy Polyakov authored
-
Andy Polyakov authored
-
Andy Polyakov authored
-
Andy Polyakov authored
-
Andy Polyakov authored
-
- Oct 07, 2013
-
-
Ben Laurie authored
-
- Oct 03, 2013
-
-
Andy Polyakov authored
Improve decrypt performance by 10-20% depending on platform. Thanks to Jussi Kivilinna for providing valuable hint. Also thanks to Ard Biesheuvel.
-
Ben Laurie authored
-
Andy Polyakov authored
Submitted by: Yuriy Kaminskiy
-
Andy Polyakov authored
PR: 3130
-
- Oct 02, 2013
-
-
Andy Polyakov authored
-