summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2022-11-07alg-sha256.c: SHA-2 Maj() optimization proposed by Wei Dai.Björn Esser1-3/+9
This patch has been cherry-picked from: https://github.com/openwall/yescrypt/commit/9edf51061b45
2022-11-07Fix warning about truncating conversionMoinak Bhattacharyya1-1/+1
2022-11-01Bump tarball version to 4.4.31 and update NEWS.Björn Esser2-1/+3
2022-11-01Update NEWS.Björn Esser1-0/+12
2022-11-01doc/crypt.3: Fix variable name for datamember in 'struct crypt_data'.Björn Esser1-5/+5
Fixes #153.
2022-11-01configure: Restore the functionality of the '--disable-symvers' switch.GalaxyMaster6-2/+40
Without this change the build was simply broken, if symbol versioning was disabled for any reason, e.g. whether the compiler nor the linker supporting it, or if disabled on purpose by the user. Also adapt the testsuite and the CI test-matrix. Fixes #142. Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2022-11-01configure: Restore ucontext api functionality check.Yureka2-1/+34
In c3f01c72b303cbbb0cc8983120677edee2f3fa4b the use of the ucontext api in the main program was removed, and with it the configure check for it. However, the ucontext api is still used in the "explicit_bzero" test and this has the same problem as described in the comment: > The ucontext.h functions that we use were withdrawn from > POSIX.1-2008, so the existence of the header does not prove > we can use the functions. Thus, restore the full configure check and use it instead of the header check for the explicit_bzero test. See https://bugs.gentoo.org/838172 Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2022-10-31Bump tarball version to 4.4.30 and update NEWS.Björn Esser2-1/+3
2022-10-31Update NEWS.Björn Esser1-0/+2
2022-10-31libcrypt.minver: Add glibc-on-loongarch-lp64 (Loongson LA464 / LA664).Björn Esser2-0/+2
This was added in GNU libc 2.36.
2022-02-04rpkg: Add config file needed for newer versions of rpkg.Björn Esser1-0/+2
2022-02-04rpkg: Port changes from Fedora release spec-file.Björn Esser1-3/+9
2022-02-01Bump tarball version to 4.4.29 and update NEWS.Björn Esser2-1/+3
2022-02-01Update NEWS.Björn Esser1-0/+2
2022-02-01libcrypt.minver: Add glibc-on-or1k (OpenRISC 1000) entry.Björn Esser2-1/+2
This was added in GNU libc 2.35.
2022-01-05Handle properly looping over filenames with whitespacequapka1-1/+1
Using `-exec` would be another option, maybe slightly simpler.
2022-01-05Restrain from using undefined shell featuresquapka1-1/+1
I've missed a ShellCheck's warning about `local`, which said that `In POSIX sh, 'local' is undefined.`
2022-01-05Generate a sufficiently random stop-commands tokenquapka1-2/+8
The token in ::stop-commands::{token} GA workflow command has to be a cryptographically random and secure string. Definitely not a hardcoded string literal. See the docs for details: https://docs.github.com/en/actions/learn-github-actions/workflow-commands-for-github-actions#stopping-and-starting-workflow-commands
2021-12-17Bump tarball version to 4.4.28 and update NEWS.Björn Esser2-1/+3
2021-12-17Update NEWS.Björn Esser1-0/+3
2021-11-30lib: Silently truncate rbytes after a maximum of 512 bits for yescrypt.Björn Esser3-0/+12
Likewise for gost-yescrypt and scrypt, as those hashing methods share the same codebase.
2021-11-30doc/crypt.5: Document the recommended amount of salt-bits for yescrypt.Björn Esser1-3/+3
Also document the same value as the recommended amount for gost-yescrypt and scrypt.
2021-09-18Makefile: Add release target for signed distribution tarballs.Björn Esser2-0/+44
2021-09-18configure: Check for optional gpg2 and sha256sum programs.Björn Esser1-0/+2
2021-09-18Packit: Drop COPR builds, as scratch-building on Fedora Koji is enough.Björn Esser1-21/+0
2021-09-18autogen.sh: Consider all files obsolete when running autoreconf.Björn Esser1-1/+1
2021-09-18Move CI-scripts into seperate subdir.Björn Esser11-19/+19
2021-09-18Move auxiliary build-scripts into seperate subdir.Björn Esser17-40/+43
2021-09-18Use seperate subdir for autogenerated autotools-scripts.Björn Esser9-71/+17
2021-09-18Move m4sh scripts to build-aux/m4 directory.Björn Esser27-66/+65
2021-09-17Bump tarball version to 4.4.27 and update NEWS.Björn Esser2-1/+3
2021-09-17Update NEWS.Björn Esser1-0/+2
2021-09-17configure: Check availability of __attribute__((symver)).Björn Esser2-1/+2
Fixes #140.
2021-09-17build-aux/ax_gcc_func_attribute.m4: Add check for symver attribute.Björn Esser1-1/+5
2021-09-17build-aux/ax_gcc_func_attribute.m4: New file.Björn Esser2-0/+245
2021-08-16rpkg: Compile test-programs during %%build stage.Björn Esser1-0/+3
2021-08-08Bump tarball version to 4.4.26 and update NEWS.Björn Esser2-1/+3
2021-08-08Update NEWS.Björn Esser1-0/+6
2021-08-08test/checksalt.c: Add some testcases for invalid salt characters.Björn Esser1-9/+21
Add some more testcases for stricter checks of valid salt strings.
2021-08-08test/special-char-salt.c: Adapt testcases for invalid salt characters.Björn Esser1-493/+493
In the previous commit we added stricter checks for which characters are valid inside of salt strings, so we need to update the testcases for this change.
2021-08-08lib/crypt.c: Stricter checking of invalid salt characters.Björn Esser1-17/+38
However, our generic code currently only enforced the absence of ‘:’ and newline. Prior to 2112d2b, there was no generic check at all. Prior to b2b813a, some but not all hashing methods implemented much more restrictive rules (allowing only their own base64 alphabet in the salt part of a setting); these were found to conflict with existing salts (see #105). The setting-parsing code in each hashing method is ad hoc and difficult to audit for what syntax it actually accepts; there might be other quirks hiding. The change in this commit enforces salt strings to not contain characters that are present in the ‘badsalt_chars’ array. The ‘crypt_checksalt’ function now also validates the passed salt string for the absense of such invalid characters. For now we consider the following characters to be valid for any salt string in the generic check: 0 1 2 3 4 5 6 7 8 9 a b c d e f g h i j k l m n o p q r s t u v w x y z A B C D E F G H I J K L M N O P Q R S T U V W X Y Z . / + - _ = , $ " # % & ' ( ) < > ? @ [ ] ^ ` { | } ~ Fixes #135.
2021-08-05CI: Run make with parallel jobs.Björn Esser6-11/+46
This cuts down build times for code coverage and memory access checking drastically.
2021-08-05configure: Add support for Python 3.11.Björn Esser1-1/+1
2021-08-05CI: Add more files to be ignored for CI run.Björn Esser4-4/+4
2021-08-05Packit: Add scratch build for Rawhide on Koji.Björn Esser1-6/+16
2021-08-05lib/util-base64.c: Explicitly terminate the c string.Björn Esser1-2/+3
Adding an explicit terminator at the end of the base64 character array will ensure it cannot be declared, nor defined in a too small size, which might omit the needed null byte at the end for proper termination of the c string.
2021-08-05test/special-char-salt.c: Fix formatting of error message.Björn Esser1-2/+2
2021-08-04Drop scripts used for TravisCI.Björn Esser5-605/+0
2021-08-04NEWS: Fix interpunction.Björn Esser1-1/+1
2021-08-04Bump tarball version to 4.4.25 and update NEWS.Björn Esser2-1/+3