0
0
mirror of https://github.com/OpenVPN/openvpn3.git synced 2024-09-20 12:12:15 +02:00
openvpn3/openvpn/crypto
David Sommerseth 29e060ffb3
CryptoAlgs: Don't report any digests for ciphers not using them
The CryptoDCSettings::digest() method returns SHA1 digest when the
cipher is an AEAD cipher.  This is incorrect, as AEAD ciphers does not
use digests for authentication at all; the authentication is an
integral part of the AEAD cipher itself.

To solve this, the CryptoAlgs::AlgFlags has been extended with a new
F_NO_CIPHER_DIGEST flag which is expected to be set on ciphers not
depending on any digests for authentication, like AES-GCM/AEAD
ciphers.  A new method, use_cipher_digest(), will return True if
the cipher depends on a digest for authentication.

Signed-off-by: David Sommerseth <davids@openvpn.net>
2019-10-24 14:48:22 +02:00
..
bs64_data_limit.hpp [OVPN3-140] Update company names in copyrights 2017-12-22 17:59:39 +08:00
cipher.hpp [OVPN3-140] Update company names in copyrights 2017-12-22 17:59:39 +08:00
crypto_aead.hpp [OVPN3-140] Update company names in copyrights 2017-12-22 17:59:39 +08:00
crypto_chm.hpp [OVPN3-140] Update company names in copyrights 2017-12-22 17:59:39 +08:00
cryptoalgs.hpp CryptoAlgs: Don't report any digests for ciphers not using them 2019-10-24 14:48:22 +02:00
cryptodc.hpp CryptoAlgs: Don't report any digests for ciphers not using them 2019-10-24 14:48:22 +02:00
cryptodcsel.hpp [OVPN3-140] Update company names in copyrights 2017-12-22 17:59:39 +08:00
decrypt_chm.hpp [OVPN3-140] Update company names in copyrights 2017-12-22 17:59:39 +08:00
digestapi.hpp [OVPN3-140] Update company names in copyrights 2017-12-22 17:59:39 +08:00
encrypt_chm.hpp [OVPN3-140] Update company names in copyrights 2017-12-22 17:59:39 +08:00
hashstr.hpp [OVPN3-140] Update company names in copyrights 2017-12-22 17:59:39 +08:00
ovpnhmac.hpp [OVPN3-140] Update company names in copyrights 2017-12-22 17:59:39 +08:00
packet_id.hpp Make tls-crypt/tls-cryptv2 compile with multiple compilation units 2019-08-29 16:59:33 +02:00
selftest.hpp [OVPN3-140] Update company names in copyrights 2017-12-22 17:59:39 +08:00
static_key.hpp BufferAllocated: improve movability 2018-03-10 02:28:31 +08:00
tls_crypt_v2.hpp Make tls-crypt/tls-cryptv2 compile with multiple compilation units 2019-08-29 16:59:33 +02:00
tls_crypt.hpp Make tls-crypt/tls-cryptv2 compile with multiple compilation units 2019-08-29 16:59:33 +02:00