9 Commits

Author	SHA1	Message	Date
Antonio Quartulli	e87e885756	tests/pkcs5/pbkdf2_hmac: add unit tests for additional SHA algorithms ... Test vectors for SHA224,256,384 and 512 have been generated using Python's hashlib module by the following oneliner: import binascii, hashlib binascii.hexlify(hashlib.pbkdf2_hmac(ALGO, binascii.unhexlify('PASSWORD'), binascii.unhexlify('SALT'), ITER, KEYLEN))) where ALGO was 'sha224', 'sha256', 'sha384' and 'sha512' respectively. Values for PASSWORD, SALT, ITER and KEYLEN were copied from the existent test vectors for SHA1. For SHA256 we also have two test vectors coming from RFC7914 Sec 11. Signed-off-by: Antonio Quartulli <antonio@openvpn.net>	2018-02-08 17:18:19 +08:00
Antonio Quartulli	12ccef2761	pkcs5v2: add support for additional hmacSHA algorithms ... Currently only SHA1 is supported as PRF algorithm for PBKDF2 (PKCS#5 v2.0). This means that keys encrypted and authenticated using another algorithm of the SHA family cannot be decrypted. This deficiency has become particularly incumbent now that PKIs created with OpenSSL1.1 are encrypting keys using hmacSHA256 by default (OpenSSL1.0 used PKCS#5 v1.0 by default and even if v2 was forced, it would still use hmacSHA1). Enable support for all the digest algorithms of the SHA family for PKCS#5 v2.0. Signed-off-by: Antonio Quartulli <antonio@openvpn.net>	2018-02-08 17:18:15 +08:00
Paul Bakker	81c60910e1	Run PKCS#5 selftest in test suites	2016-08-25 16:36:35 +01:00
Simon Butcher	02c4a38013	Corrects missing dependency for MBEDTLS_CIPHER_MODE_CBC in some tests	2016-06-23 02:41:31 +01:00
Manuel Pégourié-Gonnard	2cf5a7c98e	The Great Renaming ... A simple execution of tmp/invoke-rename.pl	2015-04-08 13:25:31 +02:00
Paul Bakker	237a847f1c	Fix typos in comments	2014-06-25 14:45:24 +02:00
Manuel Pégourié-Gonnard	66aca931bc	Add tests for pkcs5_pbes2	2014-06-23 11:52:59 +02:00
Paul Bakker	68a4fce8aa	Added missing dependencies on functions and tests	2013-08-20 12:42:31 +02:00
Paul Bakker	b0c19a4b3d	PKCS#5 module added. Moved PBKDF2 functionality inside and deprecated ... old PBKDF2 module. (cherry picked from commit 19bd297dc8) Conflicts: include/polarssl/error.h scripts/generate_errors.pl	2013-06-25 15:06:52 +02:00