github.com/cert-manager/crypto commits | Ecosyste.ms: OpenCollective

go.crypto/ssh: add hook for host key checking.

R=dave, agl
CC=gobot, golang-dev
https://golang.org/cl/9922043

afdc305bc8582a7ba5d9ea2c622ce9927a92050a authored over 11 years ago

go.crypto/ocsp: allow cert-less responses and support making requests.

Some OCSP responses (notably COMODO's) don't use an intermediate
certificate to sign OCSP respon...

b88b0165229e30fa2f41d4cdfa5ac2b6e282917d authored over 11 years ago

go.crypto/ssh: fix test breakages introduced by 125:40246d2ae2eb

* Remove special handling for dynamically allocated
ports. This was a bug in OpenSSH 5.x sshd....

7cbb17fecb34db5291cde2f20061eaf746fb8e17 authored over 11 years ago

go.crypto/ssh/test: Run sshd with -e, so the debug output goes onto stderr.

R=dave, agl
CC=golang-dev
https://golang.org/cl/10230043

b9b389267759753493ba1a5102c9ff9fab91dfad authored over 11 years ago

go.crypto/ssh: fix and test port forwarding.

Set maxPacket in forwarded connection, and use the requested port
number as key in forwardList.
...

0d8dc3cd6a6b69fac2c54037ae8c235519cfbddc authored over 11 years ago

go.crypto/nacl/secretbox: fix append behaviour.

secretbox is supposed to append to the given slice, like hash.Sum() and
append(). However, I had...

c2ba5865a83564a5fa4620622d80f37ae8bb8338 authored over 11 years ago

go.crypto: revert 7f5a59ff6b43.

This change reverts https://golang.org/cl/10113043/ because
some folks are stuck on 1.0 till 1.1...

aa0f5b40812c405df7480c8a69e7f0160363a94b authored over 11 years ago

go.crypto: remove unreachable code.

I ran go vet over all of go.crypto and removed lots of panic("unreachable") that are no longer n...

eca6c1626e1a5b651a7a131cdb6b435930f64498 authored over 11 years ago

ssh/terminal: support home, end, up and down keys.

R=golang-dev, dave
CC=golang-dev
https://golang.org/cl/9777043

59566675d541dfd284dfcd061a0073d5eee510fe authored over 11 years ago

go.crypto/ssh: implement keyboard-interactive auth (RFC 4256), both

on client and server-side.

R=dave, agl
CC=gobot, golang-dev
https://golang.org/cl/9853050

c7df565dd496496a8cb668c506c846583869306e authored over 11 years ago

go.crypto/ssh: add a error return to decode(), and avoid casting decode() output.

R=dave, kardianos, agl
CC=gobot, golang-dev
https://golang.org/cl/9738053

36bf31eb718ec2736757374731392dc3e7f6f8c1 authored over 11 years ago

go.crypto/ssh: fix race on mock ssh network connection

Fixes golang/go#5138.
Fixes golang/go#4703.

This appears to pass my stress tests with and witho...

e8889f5e72ba80aeb1e4a4896672cc113bd65818 authored over 11 years ago

go.crypto/ssh: fix test breakage

Followup CL for 9711043. The order that CombinedOutput returns data captured from stdout/stderr ...

1a6f1e67fb969f7e7242e84a75364517105b94c3 authored over 11 years ago

ssh: add Output and CombinedOutput helpers

R=golang-dev, dave
CC=golang-dev
https://golang.org/cl/9711043

0e971cde331a162b9e50b41920750dcb25a05ca3 authored over 11 years ago

go.crypto/ssh: More error reporting improvements.

R=golang-dev, kardianos, dave
CC=golang-dev
https://golang.org/cl/8596047

ac9976b0b777e245f8d604b85443ae50f1514d04 authored almost 12 years ago

go.crypto/ssh/test: Replace FailNow with Fail where it is obvious that the test doesn't want to fail now.

Improve a couple of test error messages too.

R=golang-dev, bradfitz
CC=golang-dev
https://golan...

41998200ebb41bca6452a301213ceea70be2cfc9 authored almost 12 years ago

go.crypto/ssh/test: Fix distracting nil pointer dereference in a test.

If cgo is disabled (such as it appears to be on a subset of builders),
username() panics, and s....

952dc419292be95786d4a0503da0f68486fc0402 authored almost 12 years ago

go.crypto/ssh/test: improve diagnostics for test failing to get username.

R=golang-dev, dave
CC=golang-dev
https://golang.org/cl/8817043

c7af4ef7d9e15a6783ae5ec853ec430c9944cdcc authored almost 12 years ago

go.crypto/ssh/test: wait on sshd process in tests

R=dave
CC=golang-dev
https://golang.org/cl/8449043

62eb5d3facc84e0f28e7ae08a3c4f0e83df63633 authored almost 12 years ago

go.crypto/sha3: change keccakF to stateless function

Taken from my implementation: https://bitbucket.org/ede/sha3
Performance gain from using less me...

d52ec7351039b2cc8163124ca2c9aad90ceec159 authored almost 12 years ago

go.crypto/sha3: fix typo; remove 4 million map lookups (5% of "go test"

time); delete some comments that didn't add much and were incorrect
anyway (the test specificatio...

44f6c2e4a20176f15adaddc1ec7d806c8bfed19b authored almost 12 years ago

go.crypto/ssh: fix tests with -cpu 1,2.

When running the ssh tests several times (e.g. with -cpu 1,2), the
second run would fail because...

1ddfbba54b04d4acf0785dacec9098d7d5e6b9a5 authored almost 12 years ago

go.crypto/sha3: new package

Added a pure Go implementation of SHA3 (Keccak) which implements the hash.Hash interface.
A test ...

0bc0bccba9c26181104e6c8db849ff5b2b092a94 authored almost 12 years ago

ssh/test: deflake session test.

The session test previously had a one second timeout for the output of
stty and this was leading...

dc703e91d7bf2ed50e4e847371f53a4c0a83693c authored almost 12 years ago

go.crypto/bcrypt: fix interger overflow for cost == 31

Fixes golang/go#4803.

R=golang-dev, rsc
CC=golang-dev
https://golang.org/cl/7329043

eccdd1285ab9ae1cb35bf3b90d777d304263f478 authored almost 12 years ago

go.crypto/{curve25519,poly1305,salsa20/salsa}: add //go:noescape annotation

R=golang-dev, rsc, agl
CC=golang-dev
https://golang.org/cl/7319045

bf5456312c3c6f6243ec820103e0d4976f1c4c89 authored almost 12 years ago

ssh/terminal: add darwin support.

terminal contains a number of utility functions that are currently only
implemented for Linux. D...

db732cbcc6772c3a16d666f5cd737d32c4a12052 authored almost 12 years ago

scrypt: 2x faster.

Work on uint32 slices instead of bytes.
Replace usage of Salsa20/8 from salsa package with
the s...

97488752adaa67932479f2d4ac3f524a97ffa0b4 authored about 12 years ago

ssh/terminal: add GetState and make ReadPassword work in raw mode.

GetState is useful for restoring the terminal in a signal handler.

R=golang-dev, rsc
CC=golang-...

03be8f3bf08562c9abf595f4a88954d5dff55e82 authored about 12 years ago

openpgp: remove TeeReader from packet.Read

This is a followup to issue 6927044. I *really* don't want to
break streaming for large encrypte...

50ff460fe18dd7f30883cadb9926ed1da056e107 authored about 12 years ago

go.crypto/ssh: support OpenSSH keepalives

Fixes golang/go#4552.

R=minux.ma, agl
CC=golang-dev
https://golang.org/cl/6948059

61ab4d36dfa7fa0e3b13aebf87f8127a649463fb authored about 12 years ago

go.crypto/ssh: some cleanup

Simplify MarshalAuthorizedKey by using the algoName func.
Make the algoName func be very specific...

d95b28330da59cfd5b511cea8d98ce3379610013 authored about 12 years ago

openpgp: improve parser resilience & flexibility, add PublicKey.BitLength()

These are improvements I've made as necessary to develop Hockeypuck,
an OpenPGP keyserver (https...

2da167fbbea6ce6a7da8f70e1219ce25af656cbe authored about 12 years ago

go.crypto/bn256: updates tests in light of b2b2ae1f5140.

https://golang.org/cl/6850091 fixed the bug in question.
This change updates the tests so that t...

84f97f92d07406863db3f6bf1344732bb4098567 authored about 12 years ago

go.crypto: gofmt -w -s

R=golang-dev, dave
CC=golang-dev
https://golang.org/cl/6948057

eeef66c5287c304f8b2e04072263bb5edf2814a5 authored about 12 years ago

go.crypto/ssh: Miscellaneous changes up for discussion.

Export key and certificate algorithm names.
Switch from string literals over to using the constan...

54c65aebf48315c6bb0ffbf0384aabbce05c23c4 authored about 12 years ago

go.crypto/ssh/test: move some variables into common os source file to fix windows build

R=golang-dev, dave
CC=golang-dev
https://golang.org/cl/6944048

97c15b3da8a92f9c4e76a7289a85e68584d06d40 authored about 12 years ago

go.crypto/ssh: Add support for ECDSA keys and certs.

R=agl, dave
CC=golang-dev
https://golang.org/cl/6873060

94c9f92c921cdca7aa54dee7375fc491462194d6 authored about 12 years ago

go.crypto/ssh: run gofmt

gofmt got better at removing trailing whitespace.

R=golang-dev, rsc
CC=golang-dev
https://golan...

4002be2701c53712ad98ba0ce19367403ad51d0d authored about 12 years ago

ssh: add functions for public keys in wire & auth keys format.

This allows easy import/export of public keys in the format
expected by OpenSSH for authorized_k...

887809b6be9ec1319bff7f999e91d710cafd68e4 authored about 12 years ago

go.crypto: remove cipher.Reset()

The go.crypto repo was missed when this function was removed from the
ciphers in the standard li...

62944567d8abab8255c3bfcf82c8c347c7577c62 authored about 12 years ago

go.crypto/bn256: ensure that t is initialised correctly.

t caches the value of z squared, but wasn't getting correctly
initialised when the value of z wa...

4c5258d8b6be6789e3c5433562c226507dc1249f authored about 12 years ago

go.crypto/ssh: make tests work on non-cgo platforms.

user.Current() currently requires cgo - if an error is returned
attempt to get the username from...

ae58a7bde0ebc1afab65a3bbcffcf63d4e7e7e9c authored about 12 years ago

go.crypto/ssh/test: don't kill process if it was never started

This case arises if s.cmd.Start fails when called by
server.Dial.

R=golang-dev, dave
CC=golang-...

153731a6de123b98250cbf9e5adbc8d0d950c10a authored about 12 years ago

go.crypto: add and adjust +build lines for 386 and gccgo

R=golang-dev, bradfitz
CC=golang-dev
https://golang.org/cl/6827061

6779fad1d0d8720564def24b071a3963dbec64db authored about 12 years ago

go.crypto/bcrypt: add Cost function

Extracts the cost used to generate a bcrypt hash from the hash itself.

R=agl, agl, dchest
CC=go...

2c5e2074680afae185175121fc549913bf6f32c9 authored about 12 years ago

go.crypto/ssh: never negotiate unsupported ciphers

Fixes golang/go#4285.

Adding a new cipher that is supported by the remote end, but not supporte...

1582bf0781a894a66c3168ac9e7be32995bc1e73 authored about 12 years ago

go.crypto/ssh: add terminal modes to ssh.RequestPty()

R=dave, agl
CC=golang-dev
https://golang.org/cl/6655046

2fccde5d00389df8edd4f660470ac8f105c6280e authored over 12 years ago

go.crypto/otr: expose IsEncrypted.

It's useful to expose this bit of state because, although callers can
keep track of it themselve...

c9c0e06eed439a60df0ef7aa13c0b97e19cdd3a7 authored over 12 years ago

go.crypto: various: fix appengine compatibility

Fixes golang/go#4102.

R=russross, minux.ma, rsc, agl
CC=golang-dev
https://golang.org/cl/6623053

4ce1924ebb688e3801fbb71192c1edaa2f96adf2 authored over 12 years ago

go.crypto/blowfish: document that only 16 bytes of salt are used.

Also fix salt expansion code to fill the properly sized array,
since the following code never us...

dc67354e864179a90a9bec14aa1c9af1344e1394 authored over 12 years ago

go.crypto/ssh: new test subpackage

This proposal is an attempt to improve the state of functional testing in the ssh package. The p...

0b9766a68d2131652820774b030d6b0ba2d00569 authored over 12 years ago

go.crypto/ssh: Read returns all unread bytes before returning io.EOF.

Fixes golang/go#4158.

R=dave, agl
CC=golang-dev
https://golang.org/cl/6586060

1aa39d6262fd81b5cdcfb1ca514bca5e32de756e authored over 12 years ago

curve25519: fix asm comment

As suggested in review of CL 6544048.

TBR=seed
CC=golang-dev
https://golang.org/cl/6553065

b1c91de896b0dc1b0c1b50dcadeaeae7672155d8 authored over 12 years ago

go.crypto: match asm variable names to Go func declarations

R=golang-dev, r
CC=golang-dev
https://golang.org/cl/6544048

750c6a9860f0f7006036a266f25db51a7b70550e authored over 12 years ago

go.crypto/scrypt: add package

R=golang-dev, agl, r
CC=golang-dev
https://golang.org/cl/6535043

6ba10a7acbbf2ad7cc0e72a5a9c60fc304c09461 authored over 12 years ago

go.crypto/salsa20: add salsa.Core208.

R=golang-dev, agl, r
CC=golang-dev
https://golang.org/cl/6530044

815dd50d919544b788cf81f97a9bfc4353524458 authored over 12 years ago

go.crypto/poly1305: enable AMD64 assembly

This change alters the assembly to use FSUBD instructions such that
6l will actually emit the co...

9c0a3ae19916a277d6d5b582d10b048f04b19e1a authored over 12 years ago

go.crypto/ssh: sanity check incoming packet length

The check for a sensible packet length was removed a while ago
when the window size and channel ...

591d65c6649950e22ed2a7d7c50b9a3be38b428e authored over 12 years ago

go.crypto/nacl: add package

R=golang-dev, dchest, r, rsc
CC=golang-dev
https://golang.org/cl/6497101

f09bfbbb5660706d89f1a245c785d1838ef0d5d6 authored over 12 years ago

go.crypto/poly1305: add package.

(Reference implementation by dchest. amd64 disabled pending 6l fix.)

R=golang-dev, dchest
CC=go...

6814ed3bb5624e5d43a42c85e2a15fe812f54714 authored over 12 years ago

go.crypto/salsa20: add package.

Package salsa20 implements the Salsa20 stream cipher as specified in
http://cr.yp.to/snuffle/spe...

62fc357018396c47587579ce6e8173aa383e3529 authored over 12 years ago

go.crypto/ssh: assorted close related fixes

Fixes golang/go#3810.

Fixes chanWriter Write after close behaviour bug.

Fixes serverChan write...

552202b8e32b8d23879f85948aa263fb809ec2e8 authored over 12 years ago

go.crypto/ssh: improve test reliability

Fixes golang/go#3989.

Tested for several hours on an 8 core ec2 instance with
random GOMAXPROC ...

06790d30c2b7a35798d7a3f18da2523990c1ed18 authored over 12 years ago

go.crypto/ssh: fix test failure on windows

Use a handler that does not attempt to send a status message
as the failing test closes the conn...

d1710933d8cd3444a1e1db63301e8ab3dcfd5e3f authored over 12 years ago

go.crypto/ssh: prevent server from sending more than maxPacket

Fixes golang/go#4003.

R=agl, dave, agl
CC=golang-dev
https://golang.org/cl/6483052

fc6f6ba08799ac250c6ca494a19eaded915ef996 authored over 12 years ago

go.crypto/ssh: prevent channel writes after Close

Fixes golang/go#3810.

This change introduces an atomic boolean to guard the close
of the client...

c1c0bfbd3ac981a523e036008cfb2d9ac2d9c967 authored over 12 years ago

go.crypto/ssh: fix misplaced defer

Fixes golang/go#3972.

R=golang-dev, agl, r
CC=golang-dev
https://golang.org/cl/6448166

096d0eae018b8e5d55a109ed511d21612c436cd6 authored over 12 years ago

go.crypto/ssh: improve channel max packet handling

This proposal moves the check for max packet into
channel.writePacket. Callers should be aware t...

7343d5f5849484ec61fca3e4a0e6c529e400aaa9 authored over 12 years ago

openpgp: support 3DES encrypted private keys.

It appears that CentOS (and so I presume Fedora/RHEL too) default to
encrypting private keys wit...

be3c8d448b3e3d1b7fb5ac2aec3d9fbe8eeebe98 authored over 12 years ago

go.crypto/ssh: cosmetic: move remaining channel code into channel.go

This CL scratches an itch by moving the remaining channel related code
into channel.go.

R=agl
C...

00f60517a3eed0919a2eccab2df81e2dc51c79f4 authored over 12 years ago

go.crypto/curve25519: fix incorrect build tag

The build tag was incorrect. CL 6458091 exposed the mistake.

R=golang-dev, dsymonds, r
CC=golan...

f0da3456291ed9606ad11a10b9ea754c05a24923 authored over 12 years ago

go.crypto/ssh: never send more data than maxpacket

RFC 4254 s5.2 is clear that a client must never send a data
packet larger than the value of maxi...

f4749cba326ed8754af0bc35042d8c92b46c23d7 authored over 12 years ago

bn256: add package

Package bn256 implements a particular bilinear group at the 128-bit
security level.

R=golang-de...

71484c7202898427e5450e785e7fd68f03367f72 authored over 12 years ago

otr: fix compilation

R=golang-dev, r
CC=golang-dev
https://golang.org/cl/6446054

2aed6cb9f14655520faca5137f1991fd5f66c435 authored over 12 years ago

otr: support signaling the end of a conversation.

The explicit OTR termination signal tells the peer that they should
discard their session keys a...

327f4563716f23c4b0041ff1ce3725daad387371 authored over 12 years ago

go.crypto/ssh: improve TestServerWindow robustness

Fix a few resource leaks and prevent the test from
hanging if an error occurs reading from the r...

e751d5236aebf3b015b9a54aadf6af1807d3956e authored over 12 years ago

go.crypto/ssh: use binary.BigEndian throughout

A small cleanup.

R=agl, gustav.paul
CC=golang-dev
https://golang.org/cl/6406043

d1bf83abcbf80a644ecdaabdecf1f429b9c8f63a authored over 12 years ago

go.crypto/ssh: avoid recover() when handling invalid channel ids

This proposal removes the use of recover() to catch
invalid channel ids sent from the remote sid...

f77e98d970f686788dc59c872b6dc73c29adabf0 authored over 12 years ago

bcrypt: Documentation

If you supply a cost < MinCost this package will use DefaultCost, not MinCost

R=golang-dev, jef...

dd83c0b64f027ecefd228bee774f20fb3abd61a7 authored over 12 years ago

xts: add package.

Package xts implements the XTS cipher mode as specified in IEEE
P1619/D16.

R=golang-dev, r, dch...

e6db49c37b6820fac57f2c4d4ca8121f594da598 authored over 12 years ago

go.crypto/ssh: add ClientAuthAgent

ClientAuthAgent adapts a *AgentClient to a ClientAuth.

R=golang-dev, agl
CC=golang-dev
https://...

f997e8a33c99cb293e168ddab8f99111dbe864e7 authored over 12 years ago

ssh: added RequestSubsystem().

RequestSubsystem requests the association of a subsystem with the ssh
session on the remote host...

cde552e05fc46a4051273bcd80956debf3e548bd authored over 12 years ago

otr: add package

otr implements the Off-the-Record messaging protocol from
http://www.cypherpunks.ca/otr/. It's o...

929dedf39d9e8e1ffa201091598b681961c04b85 authored over 12 years ago

go.crypto/ssh: allow server to respond to client init key exchange.

A windows SSH client, PuTTY, by default re-keys after every 60 minutes
or 1G of data transfer.

...

f8bd48beccf3c3dcb90eb36943f5a0842cd5caa8 authored over 12 years ago

go.crypto/ssh: allow zero sized window adjustments

The RFC doesn't prohibit zero sized window adjustments and
there is evidence of well known clien...

55aa08130e6a3dc3c4078f2f939f415f7391c540 authored over 12 years ago

go.crypto/ssh: fix panic unmarshalling channelOpenFailureMsg

I introduced this problem in change set 33 when I redefined
RejectionReason from a uint32 to an ...

36d74d6fed0f383a535f280944e1e2dc24844b67 authored over 12 years ago

go.crypto/ssh: introduce a circular buffer for chanReader

R=agl, gustav.paul, kardianos
CC=golang-dev
https://golang.org/cl/6207051

e6ded1797187ebd338e6764d03052931453e7658 authored over 12 years ago

go.crypto/ssh: make {client,server}Chan use common window management

R=agl, gustav.paul, kardianos
CC=golang-dev
https://golang.org/cl/6208043

8a2e7c966ac3d095281f62b188a7de5f18d596ae authored over 12 years ago

go.crypto/ssh: move common channel methods into an embedded struct

This CL introduces a new struct, channel to hold common shared
functions.

* add a new channel s...

523290a72d9890cbc6b6ada8198f21a3c6dffc87 authored over 12 years ago

go.crypto/ssh: struct renaming

This CL is in preparation for 6128059.

* rename channel -> serverChan
* rename chanlist -> chan...

68e64b8f78602a073405f904abfeb2d376d77ecd authored over 12 years ago

go.crypto/ssh: hide private forwardList methods

This was my mistake. I should have checked godoc before
submitting the previous CL.

R=agl
CC=go...

9e30a3e1c50934bb2505894443243960e8a3d49f authored over 12 years ago

go.crypto/ssh: add support for client side global requests

* Add support for RFC4254 section 4 global requests.
* Improve clientConn.Listen to process resp...

b4b42222afc734a8fac0549d5ae6c4ab6a7ac71f authored over 12 years ago

ssh: fix flaky TestInvalidServerMessage

When shutting down the test, we sometimes see EOF on the server's side
of the connection and som...

2e60680932240e15a179f3b34782f42b7199981a authored over 12 years ago

go.crypto/ssh: prevent concurrent reads and concurrent writes over the same agent connection

minor fix for v01 cert parsing when algo is not supported

R=golang-dev, agl, dave
CC=golang-dev...

8ab8312ac8477e95f7072dbf919df5227d3d6e85 authored over 12 years ago

ssh: fix deadlock

The code was taking locks in the wrong order.

Fixes golang/go#3570.

R=fullung
CC=golang-dev
ht...

0d3cfff99f4428b308d63d9386fec9cd86475faa authored over 12 years ago

go.crypto/ssh: add support for remote tcpip forwarding

Add support for server (remote) forwarded tcpip channels.
See RFC4254 Section 7.1

R=gustav.paul...

b333fd1d05df0831a43bd3138e35c61dc0f49cc0 authored almost 13 years ago

ssh: handle bad servers better.

This change prevents bad servers from crashing a client by sending an
invalid channel ID. It als...

bcdd6a2fd3e36323c71ab4c80588f4e48e8a3678 authored almost 13 years ago

go.crypto/ssh: server_test should bind to localhost only

Hopefully fix build error under windows.

Binding to the wildcard is poor form for our darwin us...

58afe880f197c244a2edbfab2bb090a5bf02dfe1 authored almost 13 years ago

ssh: cosmetic cleanups

These are the cosmetic cleanups from the bits of code that I
rereviewed.

1) stringLength now ta...

63f855d724c1fff8ec15a0191dcda32ec7761cc4 authored almost 13 years ago