summaryrefslogtreecommitdiff
path: root/lib/crypto/wscript
AgeCommit message (Collapse)AuthorFilesLines
2024-04-23lib/crypto: add legacy_gnutls_server_end_point_cb() if neededStefan Metzmacher1-1/+5
gnutls_session_channel_binding(GNUTLS_CB_TLS_SERVER_END_POINT) is only available with gnutls 3.7.2, but we still want to support older gnutls versions and that's easily doable... BUG: https://bugzilla.samba.org/show_bug.cgi?id=15621 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16lib:crypto: Add test for GMSA password derivationJo Sutton1-0/+5
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16lib:crypto: Add functions for deriving gMSA passwordsJo Sutton1-0/+6
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-12-22lib:crypto: Add tests for GKDI key derivationJoseph Sutton1-0/+5
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Dec 22 06:31:29 UTC 2023 on atb-devel-224
2023-12-22lib:crypto: Add implementation of GKDI key derivationJoseph Sutton1-1/+6
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-12-21lib:crypto: Add GKDI module with some constantsJoseph Sutton1-0/+3
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-11-30lib:crypto: Add tests for samba_gnutls_sp800_108_derive_key()Joseph Sutton1-0/+8
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-11-30lib:crypto: Add samba_gnutls_sp800_108_derive_key()Joseph Sutton1-0/+1
Rename smb2_key_derivation() to samba_gnutls_sp800_108_derive_key() and move it to GNUTLS_HELPERS. Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-11-30lib:crypto: Remove unused variableJoseph Sutton1-2/+0
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-11-30lib:crypto: Remove unused importsJoseph Sutton1-1/+0
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-06-30build: Remove unused check for SHA1_Update and SHA1_RENAME_NEEDEDAndrew Bartlett1-5/+0
I can not find the code that required this, even in the history. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Fri Jun 30 14:59:46 UTC 2023 on atb-devel-224
2023-06-30Remove redundant check and fallback for AES CMAC 128 as we now require ↵Andrew Bartlett1-20/+1
GnuTLS 3.6.13 This allows us to remove a lot of conditionally compiled code and so know with more certainly that our tests are covering our code-paths. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2023-06-30crypto: Remove aesni-intel accelerated AES crypto functionsAndrew Bartlett1-26/+0
These will shortly be unused as we will rely on GnuTLS for all AES cryptography now that we require GnuTLS 3.6.13 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2022-09-12CVE-2021-20251 lib:crypto: Add des_crypt_blob_16() for encrypting data with DESJoseph Sutton1-1/+1
This lets us access single-DES from Python. This function is used in a following commit for encrypting an NT hash to obtain the verifier for a SAMR password change. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14611 Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2022-07-28lib:crypto: Add test for samba_gnutls_aead_aes_256_cbc_hmac_sha512_encrypt()Andreas Schneider1-0/+9
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2022-07-28lib:crypto: Implement samba_gnutls_aead_aes_256_cbc_hmac_sha512_encrypt()Andreas Schneider1-0/+1
This is for [MS-SAMR] 3.2.2.4 AES Cipher Usage Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2022-07-28lib:crypto: Merge wscript_build into wscriptAndreas Schneider1-0/+55
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2022-07-28lib:crypto: Merge wscript_configure into wscriptAndreas Schneider1-0/+20
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2022-07-28lib:crypto: Reformat wscriptAndreas Schneider1-2/+5
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2018-09-05lib/crypto/wscript: update to handle waf 2.0.4Alexander Bokovoy1-1/+1
Signed-off-by: Alexander Bokovoy <ab@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2017-09-07lib: crypto: Add the ability to select Intel AESNI instruction set at ↵Jeremy Allison1-0/+6
configure time. Add --accel-aes=[none|intelaesni] to select. Default is none. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13008 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>