summaryrefslogtreecommitdiff
path: root/lib/libcrypt
AgeCommit message (Collapse)Author
2023-06-24Fix typo in comment.msaitoh
2023-01-17crypt(3): Minor markup tweaksuwe
2023-01-17crypt(3): Call it password hashing, not `encrypting'.riastradh
Tidy up some of the markup while here, and be consistent about calling the neatly formatted US-ASCII string an `encoded password hash').
2022-05-29Make it compile againmartin
2022-05-29Avoid null SEGV if libargon passed string with too few $abs
Seen on netbsd-9 built xscreensaver running on a current system. Whatever triggered this should also be fixed, but in the meantime we can improve the behaviour from "Segmentation Fault"
2022-05-29Free strdup'd value in libargon decode_option error pathsabs
If its worth freeing in the success path, its worth freeing in the error path... (given we don't _exit or similar)
2022-05-15PR/56838: David A. Holland: namespace pollution in static libcryptchristos
2022-02-13remove dup assignments (RVP)christos
2021-11-22crypt(3): document some of the memory units we're dealing withnia
2021-11-01Remove theagc
COPTS.*+= -Wno-error=.* lines for building argon2 sources, by fixing the problems at source. Addresses Rin Okuyama's concerns on tech-userlevel/tech-crypto in Message-ID: <f1eab199-3607-bb05-15cc-033e38721ba4@gmail.com>
2021-10-31libcrypt: Compile with USE_FORT, for this is cryptographic software.nia
2021-10-29libcrypt: Fix a floating point exception when a low number of HMAC-SHA1nia
iterations are specified.
2021-10-26libcrypt: Make Werror-disables for external Argon2 library per-file.nia
Requested by rin.
2021-10-26libcrypt: fine-grained warnings for argon2, requested by rinnia
2021-10-20crypt.3: add a reference for Argon2nia
2021-10-20Be a little bit more eager to let Argon2 use memory.nia
2021-10-20crypt(3): For argon2, default to time=3.nia
Good enough for a 50MHz SPARC, a shark, and the spec.
2021-10-20crypt(3): return 0 -> return NULL for function returning char *nia
2021-10-20crypt(3): Adapt default Argon2 parameters to system performancenia
If the parameters are unspecified: - Set the default memory consumption based on the amount of memory available to userspace. The algorithm actually slows down incredibly quickly as the "memory" parameter is increased. We want to avoid running out of memory on low memory systems, but increase the difficulty of bruteforcing passwords from systems with a lot of memory. At the same time, we want to avoid problems when concurrent logins are happening. - Run a hashing loop for one second with steadily increasing "time" until we settle on a value for "time". We want to use as much CPU time as reasonable for computing the password hash without making logins inconvenient.
2021-10-16libcrypt: Hide more private symbols by default. Fix style.nia
2021-10-13libcrypt: work around compiler bugs to get MKARGON2 working on vaxnia
2021-10-12Capitalize word.wiz
2021-10-12crypt.3: note parallelism caveatsnia
2021-10-12Fix release builds with MKARGON2=yesnia
This changes argon2 from a separately built library into a private dependency of libcrypt and removes the argon2(1) utility (we already have pwhash(1)). Giving libcrypt more library dependencies complicates things (e.g. libcrypt is a dependency of openssl). pthreads support gets disabled in argon2 for similar reasons. For testing argon2, we rely on the libcrypt test suite.
2021-10-12added missing copyright header. pointed out by nia. no functional changejhigh
2021-10-12crypt(3): clean up some leftover debug goonia
2021-10-12crypt(3): match the Argon2 reference implementation's Base64 exactlynia
There are too many minor variations regarding padding and exact alphabet to safely use the implementation in libc or an existing implementation in libcrypt.
2021-10-12fix typos in man pages.andvar
2021-10-12crypt(3): Make Argon2 implementation match the reference impl bynia
making sure input salts are decoded as base64.
2021-10-12paranoia: use explicit_memsetnia
2021-10-12pw_gensalt.3: add argon2 bitsnia
2021-10-12crypt-argon2: Properly honor user's version number.nia
Follow upstream by defaulting to 0x10 if it's not specified.
2021-10-12crypt-argon2: improve resilience of the parser.nia
Allow the version number to be unspecified as in the argon2 upstream test suite, properly defaulting to a version if the v= block is entirely missing, and treating the remaining block as parameters. Fix a null pointer derefence when the encoded password is unspecified in the settings string.
2020-05-14Remove extra semicolon.msaitoh
2020-03-25Remove trailing whitespace.wiz
2020-03-25new paragraphchristos
2020-03-25more infochristos
2020-03-25Revert putting a $ as the final character for blowfish. It is not required bychristos
MCF and we want to be compatible.
2020-03-25Fix typos. Use more markup. New sentence, new line.wiz
2020-03-25- bump blowfish size, explain versionchristos
- add passwd xref
2020-03-25Add missing trailing $ for blowfishchristos
2020-03-25PR/55095: David A. Holland: pw_gensalt(3) undocumentedchristos
2020-02-22Avoid undefined behavior in left shiftkamil
crypt.c:772:11, left shift of 1363235140 by 1 places cannot be represented in type 'int32_t' (aka 'int')
2020-02-22Avoid undefined behavior in bit shift operationskamil
crypt.c:839:40, left shift of negative value -1197182952 crypt.c:840:40, left shift of negative value -264997776
2019-10-21Mark up argon2 description. Restore removed lines/text from previouswiz
commit.
2019-10-21adding argon2 support to libcrypt. argon2 user authentication nowjhigh
available via MKARGON2=yes (3 variants supported; argon2id recommended) before using, please read argon2 paper at https://github.com/P-H-C/phc-winner-argon2
2019-10-05adding full scheme comparison to libcrypt:crypt and pwhash testsjhigh
2015-06-17fix error messageschristos
2013-08-28Publish explicit_memset and consttime_memequal in userland libc.riastradh
Remove the double-underscore from the userland versions, and do the weak alias dance instead, now that these are public parts of libc. As discussed on tech-userlevel: https://mail-index.netbsd.org/tech-userlevel/2013/06/24/msg007843.html (option 3)
2013-08-10Silence -Wpointer-sign on crypt-sha1.c.dholland
This requires casts, which is not entirely desirable; however, this way at least no *more* pointer sign issues can creep in. Output object files are unchanged on amd64.