Tree: 76b6a8aa40

2.4-stable

2.6-stable

2.8-stable

3.0-stable

dependabot/github_actions/dot-github/workflows/actions/download-artifact-4.1.7

dev

master

2.4

2.6

2.8

2.9.1

3.0

3.1.0

3.1.1

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from '76b6a8aa40'

${ noResults }

Commit Graph

33 Commits (76b6a8aa4050d78c77870aab6e0dcb349eacc5d0)

Author	SHA1	Message	Date
Logan007	aa3b2b17a5	allowed flexibe iv seed size	4 years ago
Logan007	0ff7eac6fc	made openssl_err_as_string static to avoid conflicts with other ciphers that would also use their own function - those can't rely on the AES module being there	4 years ago
Logan007	453489b1e8	fixed typo	4 years ago
Logan007	20847c0063	fixed typo	4 years ago
Luca Deri	8b8e3ed3ee	Updated OpenSSL checks	4 years ago
Luca Deri	1cc4996ef3	Added comparibility with OpenSSL 1.0	4 years ago
Luca Deri	97c8948113	MacOS fixes	4 years ago
Logan007	fb1dfdbdf2	reused evp context	5 years ago
Logan007	7712279a8a	fixed one more typo	5 years ago
Logan007	e0741a5912	added additional length check after evp-en/decryption	5 years ago
Logan007	8649de7a16	made use of openssl's evp interface to achieve better hardware acceleration for AESed payload	5 years ago
emanuele-f	bf0ad28b4b	Update openwrt readme	5 years ago
emanuele-f	7cc73aec62	Add support for libcrypto headers	5 years ago
Logan008	47a298cb4d	AES: remove obsolete fields sa and nonce (#152) * removed obsolete fields for nonce and sa	5 years ago
Logan008	bc260c2312	optimization to flexible AES keysize depending on input key size	5 years ago
emanuele-f	d76cb64d0f	Fix seed debug print	5 years ago
lucaderi	86870a781e	Removed PRIx64, a C99 feature	5 years ago
emanuele-f	f33907ebd8	Fix seed debug print on 32bit platforms	5 years ago
emanuele-f	04226c09c8	Fix compilation warnings and little leak	5 years ago
emanuele-f	c89ece71ca	Code rework changes - Remove keyschedule leftover and adapt to new API - Fix cleanup functions - Remove unused random_device_mac	5 years ago
emanuele-f	c702ca8686	Move AES IV out of struct sa_aes	5 years ago
emanuele-f	84593a2254	memcpy fix	6 years ago
emanuele-f	bb07f0426e	Properly initialize AES IV and hash the AES key This implements the changes discussed in #68 and #72. This breaks compatibility with the previous AES implementation. This also fixes two problems reported by valgrind: ==4887== Invalid write of size 2 ==4887== at 0x483E9DB: memmove (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==4887== by 0x10E37F: setup_aes_key (transform_aes.c:378) ==4887== by 0x10E451: add_aes_key (transform_aes.c:401) ==4887== by 0x10ED10: transop_aes_setup_psk (transform_aes.c:580) ==4887== by 0x10A547: main (benchmark.c:92) ==4887== Address 0x4d574a0 is 0 bytes after a block of size 16 alloc'd ==4887== at 0x4839B65: calloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==4887== by 0x10E337: setup_aes_key (transform_aes.c:374) ==4887== by 0x10E451: add_aes_key (transform_aes.c:401) ==4887== by 0x10ED10: transop_aes_setup_psk (transform_aes.c:580) ==4887== by 0x10A547: main (benchmark.c:92) ==13057== Use of uninitialised value of size 8 ==13057== at 0x49023B3: ??? (in /usr/lib/libcrypto.so.1.1) ==13057== by 0x490346A: AES_cbc_encrypt (in /usr/lib/libcrypto.so.1.1) ==13057== by 0x11270A: transop_encode_aes (transform_aes.c:230) ==13057== by 0x10F5CD: send_packet2net (edge_utils.c:1224) ==13057== by 0x10F813: readFromTAPSocket (edge_utils.c:1278) ==13057== by 0x1106A8: run_edge_loop (edge_utils.c:1596) ==13057== by 0x10B9F7: main (edge.c:701)	6 years ago
emanuele-f	50bc1492e2	Remove unnecessary structures in AES encryption This undoes most of the changes made in 37233553a4 as the problem with the drops was only mitigated. The actual fix for the dropped packets was in e989f475a1 and the invalid initialization was the root cause	6 years ago
emanuele-f	e989f475a1	Fix invalid initializations	6 years ago
emanuele-f	c71f629d1b	Fix encryption key being zeroed by AES initialization	6 years ago
emanuele-f	37233553a4	Fixes packet drops while communicating with multiple nodes in AES PSK Per-node AES structures must be kept as CBC cannot work with a single structure across multiple nodes	6 years ago
Luca	dcf96a0809	Added #ifdef's for AES	6 years ago
emanuele-f	e4601590aa	Add -A option to enable AES CBC psk encryption	6 years ago
Luca Deri	7b07636281	Refreshed copyright and added contributors list	6 years ago
Luca Deri	b1e9ce6d2a	Initial SVN import of n2n v2	8 years ago