12 commits

Author	SHA1	Message	Date
cinap_lenrek	a121806126	kernel: replace various custom random iv buffer filling functions with calls to prng()	2016-09-11 01:54:06 +02:00
cinap_lenrek	7250c438bb	devssl: allocate cipher states in secret memory	2016-08-27 20:37:14 +02:00
cinap_lenrek	409babb990	devtls, devssl: make sure channel has ORDWR mode and is not a mount chan on fdtochan()	2016-07-24 03:24:42 +02:00
cinap_lenrek	cb4b187f10	devssl, devtls: fix permission checks	2016-05-11 02:10:05 +02:00
cinap_lenrek	21b70c782a	devssl: use tsmemcmp() to compare mac to close timing side channel	2016-01-13 21:48:09 +01:00
glenda	c4fdc6bfdb	fix fuckup	2015-08-25 09:35:10 +00:00
mischief	6b402b83cf	import E script from bell labs	2015-08-25 02:07:46 -07:00
cinap_lenrek	6946118644	devssl: use parsecmd() to process control message to get rid of 128 byte stack buffer limit ... (11:02:29 PM) me: why is buf in /sys/src/9/port/devssl.c:/^sslwrite only 128 bytes? (11:02:58 PM) me: it makes it so you can't use a 128 bytes secret as negotiated by infauth in a secretin or secretout ctl message (11:03:30 PM) me: which in turn means you can't use such a secret with pushssl(2) (11:06:15 PM) me: inferno's sslwrite is limited to 32 bytes, but its ssl library writes to the secret files instead of to the ctl file (11:08:50 PM) mischief: what should it be instead of 128 bytes (11:08:58 PM) me: larger (11:09:16 PM) mischief: how about 129 bytes? (11:09:59 PM) me: also broken in 9front, by the way (11:15:14 PM) me: i guess it should be replaced with parsecmd	2013-12-16 10:06:34 +01:00
cinap_lenrek	b296b96c68	devssl: handle bad secretin/secretout ctl arguments (import from sources)	2012-12-04 10:52:42 +01:00
cinap_lenrek	589f99915e	devssl: tiny fixes (from plan 9)	2011-12-12 14:59:14 +01:00
Taru Karttunen	a9060cc06b	Import sources from 2011-03-30 iso image - lib	2011-03-30 19:35:09 +03:00
Taru Karttunen	e5888a1ffd	Import sources from 2011-03-30 iso image	2011-03-30 15:46:40 +03:00