svn:r17734

Add DOCDOC comments for all undocumented functions.  Add missing *s to other comments so that they will get recognized as doxygen.

svn:r17729

Ben confirms that the MUST in rfc2631 is only for compatibility with X9.42, and isn't actually a security thing.

svn:r17685

Fix bug 889: share deep-copied keys between threads to avoid races in reference counts.  Bugfix on 0.1.0.1-rc.

svn:r17672

Use ctags and a python script to find identifiers that are never used anywhere, and remove the ones that we really want gone.

svn:r17651

svn:r16778

The first of Karsten's proposal 121 patches: configure and maintain client authorization data.  Tweaked a bit: see comments on or-dev.

svn:r16475

 fix for bug 704; found by sjmurdoch.  Windows and recent openssl both want to define OCSP_RESPONSE; do not let them.


svn:r15533

svn:r15222

svn:r14950

 New (temporary) tool to dump the modulus of a key.  May help with a project of weasel's.


svn:r14580

 Use RAND_poll() again: the bug that made us stop using it has been fixed.


svn:r14150

 Whitespace fixes


svn:r13700

 More 64-to-32 fixes. Partial backport candidate. still not done.


svn:r13680

 Fix all remaining shorten-64-to-32 errors in src/common.  Some were genuine problems.  Many were compatibility errors with libraries (openssl, zlib) that like predate size_t.  Partial backport candidate.


svn:r13665

 Apply warnings about implicit 64-to-32 conversions; some from Sebastian Hahn; some not.


svn:r13664

 Replace the hefty tor_strpartition with a simple function to replace its only (trivial) use.


svn:r13532

svn:r13440

 Change DNs in x509 certificates to be harder to fingerprint.  Raise common code.  Refactor random hostname generation into crypto.c


svn:r13429

 Fix bug in last patch that made secret_to_key crash.


svn:r13415

 Be more thorough about memory poisoning and clearing.  Add an in-place version of aes_crypt in order to remove a memcpy from relay_crypt_one_payload.


svn:r13414

svn:r13412

 Remove some dead code; fix some XXX020s; turn some XXX020s into XXXX_IP6s (i.e., "needs to be fixed when we add ipv6 support").


svn:r13382

 Do not segfault if symetric key generation somehow fails in crypto_hybrid_encrypt.


svn:r13132

 Remove some dead code.


svn:r13053

svn:r12786

svn:r12580

 Parse CERT cells and act correctly when we get them.


svn:r12396

 Use HMAC() function from openssl. Oops.


svn:r12304

 HMAC-SHA-1 implementation, with unit tests based on vectors from RVFC2202.  Steven's stuff will need this.


svn:r12289

 Drop support for OpenSSL 0.9.6.


svn:r12191

 oprofile was telling me that a fair bit of our time in openssl was spent in base64_decode, so replace base64_decode with an all-at-once fairly optimized implementation.  For decoding keys and digests, it seems 3-3.5x faster than calling out to openssl.  (Yes, I wrote it from scratch.)


svn:r12002

 Fix bug 528: fix memory leak in base32_decode().  While there, also make base32_decode() accept upper-case inputs.


svn:r11946

 Remove a bunch of redundant includes in crypto.c


svn:r11885

 Patch from karsten: remove cbc and make unit tests handle aes-ctr-with-iv.


svn:r11538

 New (untested) code to implement AES-with-IV.  Currently, IVs are generated randomly.  Once tested, should be (almost) a drop-in replacement for the CBC functions.


svn:r11519

svn:r11490

step of integrating his new hidden service stuff


svn:r11489

 Expose a function to parse a private key from a string as CRYPTO_PRIVATE.  For testing.


svn:r10583

 Fix up a couple of loops flagged by -Wunsafe-loop-optimizations so that they are more readable (and more amenable to compilation)


svn:r10513