 Caleb James DeLisle
|
eb83a46260
Implemented boringtun protocol
|
%!s(int64=3) %!d(string=hai) anos |
|
Caleb James DeLisle
|
9a9ffd57d5
Return anyhow::Error from Iface_DEFUN functions rather than an integer error type
|
%!s(int64=3) %!d(string=hai) anos |
|
Caleb James DeLisle
|
a0084a9e21
Switch to Rust CryptoAuth
|
%!s(int64=3) %!d(string=hai) anos |
|
Caleb James DeLisle
|
8e3011cb6e
Change message->bytes to message->msgbytes in prep for privatizing it
|
%!s(int64=3) %!d(string=hai) anos |
|
Caleb James DeLisle
|
3651b0d413
Message privatize length
|
%!s(int64=3) %!d(string=hai) anos |
|
Caleb James DeLisle
|
cd188e865c
Message: Privatized alloc
|
%!s(int64=3) %!d(string=hai) anos |
|
Caleb James DeLisle
|
7272cbdfc9
Got the new cryptoauth working with message-passthrough model
|
%!s(int64=3) %!d(string=hai) anos |
|
Caleb James DeLisle
|
ccf923d8f6
Major refactor, switch CryptoAuth to be an Iface adaptor rather than using encrypt() and decrypt() functions
|
%!s(int64=3) %!d(string=hai) anos |
|
Caleb James DeLisle
|
d4fda124c0
Temporarily disable CryptoAuth_test for noise protocol
|
%!s(int64=3) %!d(string=hai) anos |
|
Caleb James DeLisle
|
7542749b39
Make CryptoAuth_test use deterministic random because cross-testing requires it
|
%!s(int64=3) %!d(string=hai) anos |
|
Caleb James DeLisle
|
e583348880
Hopefully this should make the tests work correctly
|
%!s(int64=3) %!d(string=hai) anos |
|
Caleb James DeLisle
|
6c34a9e507
Activated tests for new CryptoAuth
|
%!s(int64=4) %!d(string=hai) anos |
|
Caleb James DeLisle
|
6d9ecb7e55
re-shuffled tests to be able to run on both new and old CryptoAuth
|
%!s(int64=4) %!d(string=hai) anos |
|
Caleb James DeLisle
|
cafed5019f
Manual merge links update by soredake
|
%!s(int64=8) %!d(string=hai) anos |
 soredake
|
c49cc24869
links update
|
%!s(int64=8) %!d(string=hai) anos |
|
Caleb James DeLisle
|
575878e2cd
Standardize on CryptoAuth states for peerStats and sessionStats
|
%!s(int64=8) %!d(string=hai) anos |
|
Caleb James DeLisle
|
dc77557291
Improvements to the CryptoAuth state machine to help it setup sessions better
|
%!s(int64=8) %!d(string=hai) anos |
 Kubuxu
|
a38e58b1c7
Remove usage of Bits_memcpyConst and Bits_memmoveConst
|
%!s(int64=9) %!d(string=hai) anos |
|
Caleb James DeLisle
|
40c15580a1
New Rule: You need to know the key of a node before you can start a CA session with them. This sheds significant code and state weirdness from CryptoAuth.
|
%!s(int64=9) %!d(string=hai) anos |
|
Caleb James DeLisle
|
ced280bc17
Serious bug fixes in CryptoAuth (and probably some new bugs added)
|
%!s(int64=9) %!d(string=hai) anos |
|
Caleb James DeLisle
|
881cdfe128
wip
|
%!s(int64=9) %!d(string=hai) anos |
|
Caleb James DeLisle
|
12fd242eae
more crap
|
%!s(int64=9) %!d(string=hai) anos |
|
Caleb James DeLisle
|
57e25c76c2
it fucking compiles \:D/
|
%!s(int64=9) %!d(string=hai) anos |
|
Caleb James DeLisle
|
876147509d
refactoring...
|
%!s(int64=10) %!d(string=hai) anos |
|
Caleb James DeLisle
|
da1d2d82d3
Change the CryptoAuth internal protocol so that CryptoAuth now pushes the nonce to the plaintext packet because it is useful.
|
%!s(int64=10) %!d(string=hai) anos |
|
Caleb James DeLisle
|
0b1fbd17f7
Refactoring to allow for re-enabling threeNodes_test
|
%!s(int64=10) %!d(string=hai) anos |
 Caleb James DeLisle
|
3005cac83c
Removed some old string.h portability stuff and replaced it with CString.h which is easier portability, also made TUNInterface and NetPlatform fully non-portable since they are not intended to be portable and portability code changes from time to time, putting them at risk since they are not often compiled.
|
%!s(int64=10) %!d(string=hai) anos |
|
Caleb James DeLisle
|
0fdda4fc72
Replaced all instances of Assert_always() with Assert_true() to standardize on Assert_true() for 'always', Assert_ifParanoid() for assertions which trigger if PARANOIA is enabled and Assert_ifTesting() for asserions which would be triggered by bad nodes in a real network
|
%!s(int64=10) %!d(string=hai) anos |
|
Caleb James DeLisle
|
77242cb8d8
[CRYPTO] Hardened the crypto infrastructure by explicitly allowing binding a CryptoAuth session to an IPv6 address even if you don't know the other party's key
|
%!s(int64=11) %!d(string=hai) anos |
|
Caleb James DeLisle
|
b0df03f933
[CRYPTO] Removed the option of encryption without authentication because it is insecure and it adds code to CryptoAuth which is not used
|
%!s(int64=11) %!d(string=hai) anos |
