chiark / gitweb /
server/: Prepare an interface for multiple bulk-crypto transforms.
authorMark Wooding <mdw@distorted.org.uk>
Sat, 24 May 2014 13:00:03 +0000 (14:00 +0100)
committerMark Wooding <mdw@distorted.org.uk>
Sun, 20 Jul 2014 00:42:30 +0000 (01:42 +0100)
commita93aacce200e0d68b614d8bfb05d9cbeba850b12
treece16a757deffa83fa65dca9413555f48137a3dd6
parent494a7ac04de2a38bf6aade234602f831be314c55
server/: Prepare an interface for multiple bulk-crypto transforms.

The current bulk-crypto transform is rather old-fashioned (though in
most formal senses secure).  It is neither as efficient as it could
be (in terms of overhead); nor does it provide privacy properties which
are as good as I'd like.  So it would be good to be able to replace it
with something better.

There's now a table of named transforms.  It only has one entry, `v0',
which is compatible with previous versions, but we now have all of the
machinery necessary to add new transforms later.

There are also some minor improvements to the tracing of cryptographic
details (notably: reporting the types of messages being encrypted and
decrypted); and an interface change for @ks_encrypt@ and @ks_decrypt@,
which are now allowed to corrupt @buf_u@ in the course of their
operation.
server/Makefile.am
server/admin.c
server/bulkcrypto.c [new file with mode: 0644]
server/keymgmt.c
server/keyset.c
server/tests.at
server/tripe-admin.5.in
server/tripe.8.in
server/tripe.h
svc/tripe-ifup.in