boringssl/crypto/cipher/CMakeLists.txt

include_directories(. .. ../../include)

add_library(
	cipher

	OBJECT

	cipher.c
	cipher_error.c
	derive_key.c
	aead.c

	e_null.c
	e_rc2.c
	e_rc4.c
	e_des.c
	e_aes.c
	e_chacha20poly1305.c

	tls_cbc.c
	e_tls.c
	e_ssl3.c
)

add_executable(
	cipher_test

	cipher_test.c
)

add_executable(
	aead_test

	aead_test.c
)

target_link_libraries(cipher_test crypto)
target_link_libraries(aead_test crypto)
Inital import. Initial fork from f2d678e6e89b6508147086610e985d4e8416e867 (1.0.2 beta). (This change contains substantial changes from the original and effectively starts a new history.) 2014-06-20 20:00:00 +01:00			`include_directories(. .. ../../include)`

			`add_library(`
			`cipher`

			`OBJECT`

			`cipher.c`
			`cipher_error.c`
			`derive_key.c`
AEAD interface. This change adds an AEAD interface to EVP and an AES-GCM implementation suitable for use in TLS. 2014-06-20 20:00:00 +01:00			`aead.c`
Inital import. Initial fork from f2d678e6e89b6508147086610e985d4e8416e867 (1.0.2 beta). (This change contains substantial changes from the original and effectively starts a new history.) 2014-06-20 20:00:00 +01:00
			`e_null.c`
Add 40-bit RC2 support. As useless as it might seem, the certificates in PKCS#12 files appear to always be encrypted with 40-bit RC2. OpenSSL, NSS and Windows are all the same on this point. Thus, in order to be able to import PKCS#12 files we need RC2 support. RC2 has deliberately not been added to EVP_get_cipherbynid so that the linker can drop the RC2 code unless the PKCS#12 functions are actually called. Change-Id: I5b2062fdf78cb622a8038c326da01aac8fb58962 Reviewed-on: https://boringssl-review.googlesource.com/1590 Reviewed-by: Adam Langley <agl@google.com> 2014-08-21 18:48:32 +01:00			`e_rc2.c`
Inital import. Initial fork from f2d678e6e89b6508147086610e985d4e8416e867 (1.0.2 beta). (This change contains substantial changes from the original and effectively starts a new history.) 2014-06-20 20:00:00 +01:00			`e_rc4.c`
			`e_des.c`
			`e_aes.c`
ChaCha20-Poly1305 support. 2014-06-20 20:00:00 +01:00			`e_chacha20poly1305.c`
Replicate s3_cbc.c under crypto/cipher/internal.h. These helper functions will be used in the implementation of the legacy CBC mode AEADs. The file is copied as-is and then modified to remove the dependency on ssl/. Notably explicit IV logic is removed (that's a side effect of how explicit IVs are currently implemented) and the padding length is returned directly rather than smuggled into rec->type. (Diffing tls_cbc.c and s3_cbc.c is probably the easiest for a review.) The helpers are currently unused. Change-Id: Ib703f4d3620196c9f2921cb3b8bf985f2d1777db Reviewed-on: https://boringssl-review.googlesource.com/2691 Reviewed-by: Adam Langley <agl@google.com> 2014-12-20 16:13:41 +00:00
			`tls_cbc.c`
Implement all TLS ciphers with stateful AEADs. The EVP_CIPHER codepath should no longer be used with TLS. It still exists for DTLS and SSLv3. The AEAD construction in TLS does not allow for variable-overhead AEADs, so stateful AEADs do not include the length in the ad parameter. Rather the AEADs internally append the unpadded length once it is known. EVP_aead_rc4_md5_tls is modified to account for this. Tests are added (and RC4-MD5's regenerated) for each of the new AEADs. The cipher tests are all moved into crypto/cipher/test because there's now a lot of them and they clutter the directory listing. In ssl/, the stateful AEAD logic is also modified to account for stateful AEADs with a fixed IV component, and for AEADs which use a random nonce (for the explicit-IV CBC mode ciphers). The new implementation fixes a bug/quirk in stateless CBC mode ciphers where the fixed IV portion of the keyblock was generated regardless. This is at the end, so it's only relevant for EAP-TLS which generates a MSK from the end of the key block. Change-Id: I2d8b8aa11deb43bde2fd733f4f90b5d5b8cb1334 Reviewed-on: https://boringssl-review.googlesource.com/2692 Reviewed-by: Adam Langley <agl@google.com> 2014-12-22 02:27:41 +00:00			`e_tls.c`
Implement SSLv3 ciphers with stateful AEADs. This introduces another knob into SSL_AEAD_CTX to omit the version from the ad parameter. It also allows us to fold a few more SSL3_ENC_METHOD hooks together. Change-Id: I6540d410d4722f734093554fb434dab6e5217d4f Reviewed-on: https://boringssl-review.googlesource.com/2698 Reviewed-by: Adam Langley <agl@google.com> 2014-12-23 15:57:17 +00:00			`e_ssl3.c`
Inital import. Initial fork from f2d678e6e89b6508147086610e985d4e8416e867 (1.0.2 beta). (This change contains substantial changes from the original and effectively starts a new history.) 2014-06-20 20:00:00 +01:00			`)`

			`add_executable(`
			`cipher_test`

			`cipher_test.c`
			`)`

AEAD tests. 2014-06-20 20:00:00 +01:00			`add_executable(`
			`aead_test`

			`aead_test.c`
			`)`

Inital import. Initial fork from f2d678e6e89b6508147086610e985d4e8416e867 (1.0.2 beta). (This change contains substantial changes from the original and effectively starts a new history.) 2014-06-20 20:00:00 +01:00			`target_link_libraries(cipher_test crypto)`
AEAD tests. 2014-06-20 20:00:00 +01:00			`target_link_libraries(aead_test crypto)`