summaryrefslogtreecommitdiffstats
path: root/cipher/ChangeLog
blob: 3058881b61d0c22b9398cbc2ad943229fc54312b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
2002-09-17  Werner Koch  <wk@gnupg.org>

	* rndw32.c (SIZEOF_DISK_PERFORMANCE_STRUCT): Increased to 256.

2002-09-12  Stefan Bellon  <sbellon@sbellon.de>

	* rand-internal.h (rndriscos_gather_random): Added prototype.

2002-08-30  Werner Koch  <wk@gnupg.org>

	* random.c: Automagically detect the entropy gatherer when
	this feature is configured.
	* rndegd.c (rndegd_connect_socket): New.  Factored out from ..
	(rndegd_gather_random): here and call it.
	(do_read): Update the counter variables correctly.  This was not a
	problem due to the way EGD works. Bug found by Christian Biere.

2002-08-20  Werner Koch  <wk@gnupg.org>

	* primegen.c (generate_elg_prime): Return all factors for mode 1.
	Bug reported by Bob Mathews.

2002-08-12  Werner Koch  <wk@gnupg.org>

	* cipher.c: Include the DUMMY cipher only when the new ALLOW_DUMMY
	is defined. It should only be defined for hard core debugging.

2002-08-08  David Shaw  <dshaw@jabberwocky.com>

	* Makefile.am, md.c (load_digest_module): Allow switching TIGER on
	and off via configure.

2002-08-07  David Shaw  <dshaw@jabberwocky.com>

	* md.c (md_algo_present): New function to check if a given algo is
	in use for a given MD_HANDLE.

2002-08-04  Werner Koch  <wk@gnupg.org>

	* blowfish.h, cast5.h, des.h: Removed after moving all prototypes to
	* algorithms.h: here. Changed all sources to use this one.
	
2002-08-03  Stefan Bellon  <sbellon@sbellon.de>

	* idea-stub.c (idea_get_info): RISC OS' Norcroft C needs a cast.
	* random.c (getfnc_gather_random): Added RISC OS support.
	* rndriscos.c: Removed dynload code and tidied up a bit.

2002-08-03  Werner Koch  <wk@gnupg.org>

	* rndegd.c (do_read): Handle case when read returns 0 to avoid
	gpg hanging when EGD died.  By Christian Biere.

2002-08-02  Werner Koch  <wk@gnupg.org>

        The big extension removal.
	
	* Makefile.am: Removed all extension stuff.
	* dynload.c: Removed everything except for
	register_cipher_extension.
	(dynload_enum_module_names): New.
	* dynload.h: Removed.
	* random.c (getfnc_gather_random,getfnc_fast_random_poll):
	New. Replaced all dynload functions with these ones.
	* rndunix.c (rndunix_gather_random): Renamed from
	gather_random.  Made global.  Removed all dynload stuff.
	* rndlinux.c (rndlinux_gather_random): Likewise.
	* rndegd.c (rndegd_gather_random): Likewise.
	* rndw32.c (rndw32_gather_random)
	(rndw32_gather_random_fast): Likewise.  Also removed the unsued
	entropy dll code.
	* md.c (new_list_item): Changed return value to indicate whether
	an algorithms was loaded.
	(load_digest_module): Simplified by removing all the dynload code.
	* algorithms.h: New.
	* md5.c (md5_get_info): Made global.  Removed all dynload stuff.
	* rmd160.c (rmd160_get_info): Likewise. 
	* sha1.c (sha1_get_info): Likewise.
	* tiger.c (tiger_get_info): Likewise. Return NULL if we can't use
	this module.
	* idea-stub.c: New.
	* blowfish.h (idea_get_info): Add prototype.
	* cipher.c (setup_cipher_table): Try to load IDEA.
	(load_cipher_modules): Removed all dynload code.
	* pubkey.c (load_pubkey_modules): Removed the dynloading code.

2002-07-25  David Shaw  <dshaw@jabberwocky.com>

	* random.c: "warning" -> "WARNING"

2002-07-02  Werner Koch  <wk@gnupg.org>

	* rndw32.c (slow_gatherer_windowsNT): Use a simple array for the
	disk performance structure and increase it to the size required by
	W2000.

2002-06-29  Werner Koch  <wk@gnupg.org>

	* rndlinux.c: Removed HAVE_LINUX_RANDOM_H conditional because it
	was never used and the configure test did set the wrong macro
	anyway.

2002-05-07  Stefan Bellon  <sbellon@sbellon.de>

	* md.c (md_start_debug): Use EXTSEP_S instead of ".".

2002-04-24  Werner Koch  <wk@gnupg.org>

	* tiger.c (tiger_final): Removed superfluous token pasting operators.
	* md5.c (md5_final): Ditto.

2002-04-22  Stefan Bellon  <sbellon@sbellon.de>

	* rndriscos.c (func_table): Made func a function pointer.
	(init_device): Improved loading of CryptRandom module.

2002-04-18  Werner Koch  <wk@gnupg.org>

	* rndlinux.c, rndegd.c, rndunix.c (func_table): Made func a
	function pointer.  Note that we still need to change the module
	interface to cope with data vs function pointer problems.  Hmmm,
	even dlsym has a problem with this.

2002-04-10  David Shaw  <dshaw@jabberwocky.com>

	* cipher.c (setup_cipher_table, cipher_open, cipher_encrypt,
	cipher_decrypt, dummy_setkey, dummy_encrypt_block,
	dummy_decrypt_block): the dummy cipher should only be built on
	development versions.

2002-04-06  Werner Koch  <wk@gnupg.org>

	* rijndael.c (rijndael_get_info): We do only support a 128 bit
	blocksize so it makes sense to change the algorithm strings to
	AES.
	* cipher.c (string_to_cipher_algo): Map "RIJNDAEL" to "AES".

2002-02-14  Werner Koch  <wk@gnupg.org>

	* random.c (mix_pool): Removed the failsafe stuff again.  It makes
	the code more complicate and may give the path to more bugs.

2002-02-10  Werner Koch  <wk@gnupg.org>

	* random.c (mix_pool): Carry an extra failsafe_digest buffer
	around to make the function more robust.

2002-02-08  Werner Koch  <wk@gnupg.org>

	* random.c (add_randomness): Xor new data into the pool and not
	just copy it.  This avoids any choosen input attacks which are not
	serious in our setting because an outsider won't be able to mix
	data in and even then we keep going with a PRNG.  Thanks to Stefan
	Keller for pointing this out.

2002-01-02  Stefan Bellon  <sbellon@sbellon.de>

	* rndriscos.c [__riscos__]: Updated include file name.

2001-12-21  Werner Koch  <wk@gnupg.org>

	* Makefile.am (DISCLEANFILES): Add construct.c

2001-12-19  Werner Koch  <wk@gnupg.org>

	* rndw32.c [CYGWIN32]: Include winioctl.h.  By Disastry.

2001-11-08  Werner Koch  <wk@gnupg.org>

	* primegen.c (gen_prime): Set 2 high order bits for secret primes.
	* rsa.c (generate): Loop until we find the exact modulus size.
	Changed the exponent to 41.

2001-10-22  Werner Koch  <wk@gnupg.org>

	* Makefile.am: Need to use $(EXEEXT) where approriate.

2001-09-09  Werner Koch  <wk@gnupg.org>

	* rsa.c (rsa_get_info): s/usage/r_usage/ to avoid shadow warnings.

2001-08-24  Werner Koch  <wk@gnupg.org>

	* md.c (md_write): Made buf arg const.

2001-08-22  Werner Koch  <wk@gnupg.org>

	* random.c (fast_random_poll): Don't use gethrtime if it is broken.

2001-08-20  Werner Koch  <wk@gnupg.org>

	Applied patches from Stefan Bellon <sbellon@sbellon.de> to support
	RISC OS.  Nearly all of these patches are identified by the
	__riscos__ macro.
	* blowfish.c, twofish.c: Added pragmas for use with a Norcraft
	compiler. 
	* dynload.c, md5.c, rmd160.c, sha1.c: Minor patches for RISC OS.
	* rndriscos.c: New.
	* rnd-internal.h: Added prototype.
	* random.c (fast_random_poll): Use '#if defined' instead of just
	'defined'; needed for RISC OS.
	* primegen.c (gen_prime): count? are now ints for consistence
	with is_prime().

2001-08-08  Werner Koch  <wk@gnupg.org>

	* rndw32.c (gather_random): Use toolhelp in addition to the NT
	gatherer for Windows2000.  Suggested by Sami Tolvanen.

	* random.c (read_pool): Fixed length check, this used to be one
	byte to strict.  Made an assert out of it because the caller has
	already made sure that only poolsize bytes are requested.
	Reported by Marcus Brinkmann.

2001-07-18  Werner Koch  <wk@gnupg.org>

	* rndlinux.c (gather_random): casted a size_t arg to int so that
	the format string is correct.  Casting is okay here and avoids
	translation changes. 

2001-06-12  Werner Koch  <wk@gnupg.org>

	* cipher.c (string_to_cipher_algo): Use ascii_strcasecmp().
	* md.c (string_to_digest_algo): Ditto.
	* pubkey.c (string_to_pubkey_algo): Ditto.
	* rndw32.c (slow_gatherer_windowsNT): Ditto.  Not really needed
	here but anyway.

2001-04-29  Werner Koch  <wk@gnupg.org>

	* random.c (fast_random_poll): Do not check the return code of
	getrusage.

2001-04-17  Werner Koch  <wk@gnupg.org>

	* rndunix.c: Add a signal.h header to avoid warnings on Solaris 7
	and 8.

2001-04-16  Werner Koch  <wk@gnupg.org>

	* dynload.c [__MINGW32__]: Applied patch from Timo Schulz to make
	it work under W32.  This patches is based on the one from
	Disastry@saiknes.lv

2001-04-06  Werner Koch  <wk@gnupg.org>

	* rijndael.c, des.c, blowfish.c, twofish.c, cast5.c (burn_stack):
	New.  Add wrappers for most functions to be able to call
	burn_stack after the function invocation. This methods seems to be
	the most portable way to zeroise the stack used. It does only work
	on stack frame based machines but it is highly portable and has no
	side effects.  Just setting the automatic variables at the end of
	a function to zero does not work well because the compiler will
	optimize them away - marking them as volatile would be bad for
	performance.
	* md5.c, sha1.c, rmd160.c, tiger.c (burn_stack): Likewise.
	* random.c (burn_stack): New.
	(mix_pool): Use it here to burn the stack of the mixblock function.
	
2001-04-02  Werner Koch  <wk@gnupg.org>

	* primegen.c (generate_elg_prime): I was not initialized for mode
	!= 1.  Freed q at 3 places.  Thanks to  Tommi Komulainen.

2001-03-28  Werner Koch  <wk@gnupg.org>

	* md5.c (md5_final): Fixed calculation of hashed length.  Thanks
	to disastry@saiknes.lv for pointing out that it was horrible wrong
	for more than 512MB of input.
	* sha1.c (sha1_final): Ditto.
	* rmd160.c (rmd160_final): Ditto.
	* tiger.c (tiger_final): Ditto.

2001-03-19  Werner Koch  <wk@gnupg.org>

	* blowfish.c (encrypt,do_encrypt): Changed name to do_encrypt to
	avoid name clahses with an encrypt function in stdlib.h of
	Dynix/PIX.  Thanks to Gene Carter.
	* elgamal.c (encrypt,do_encrypt): Ditto.

2001-03-12  Werner Koch  <wk@gnupg.org>

	* twofish.c (gnupgext_enum_func): Add some static when comnpiled
	as a module.

	* tiger.c (tiger_get_info): Return "TIGER192" and not just
	"TIGER".  By Edwin Woudt.

2001-03-08  Werner Koch  <wk@gnupg.org>

	* random.c: Always include time.h - standard requirement.  Thanks
	to James Troup.

2001-01-18  Werner Koch  <wk@gnupg.org>

	* rndw32.c: Fixed typo and wrong ifdef for VER_PLATFORM* macro

2001-01-12  Werner Koch  <wk@gnupg.org>

	* cipher.c (cipher_encrypt,cipher_encrypt): Use blocksize and
	not 8 for CBC mode (However: we don't use CBS in OpenPGP).

2000-11-22  Werner Koch  <wk@gnupg.org>

	* rndegd.c (gather_random): Fixed default socket to be '=entropy'.
	Thanks to Tomasz Kozlowski.

2000-10-12  Werner Koch  <wk@gnupg.org>

        * rijndael.c: New.
        * cipher.c: Add Rijndael support.

Wed Oct  4 15:50:18 CEST 2000  Werner Koch  <wk@openit.de>

        * sha1.c (transform): Use rol() macro.  Actually this is not needed
        for a newer gcc but there are still aoter compilers.

Thu Sep 14 14:20:38 CEST 2000  Werner Koch  <wk@openit.de>

        * random.c (fast_random_poll): Check ENOSYS for getrusage.
        * rndunix.c:  Add 2 sources for QNX. By Sam Roberts.

Wed Sep 13 18:12:34 CEST 2000  Werner Koch  <wk@openit.de>

        * rsa.c (secret): Speed up by using the CRT.  For a 2k keys this
        is about 3 times faster.
        (stronger_key_check): New but unused code to check the secret key.

Wed Sep  6 17:55:47 CEST 2000  Werner Koch  <wk@openit.de>

        * rsa.c: Changed the comment about the patent.
        * Makefile.am: Included rsa.[ch].
        * pubkey.c: Enabled RSA support.
        (pubkey_get_npkey): Removed RSA workaround.

Fri Aug 25 16:05:38 CEST 2000  Werner Koch  <wk@openit.de>

        * rndlinux.c (open_device): Loose random device checking.
        By Nils Ellmenreich.

        * rndegd.c (gather_random): Name of socket is nom configurable.

Wed Jun 28 11:54:44 CEST 2000  Werner Koch  <wk@>

  * rsa.c, rsa.h: New based on the old module version (only in CVS for now).
  * pubkey.c (setup_pubkey_table): Added commented support for RSA.

Fri Jun  9 10:09:52 CEST 2000  Werner Koch  <wk@openit.de>

  * rndunix.c (waitpid): New. For UTS 2.1.  All by Dave Dykstra.
  (my_popen): Do the FD_CLOEXEC only if it is available
  (start_gatherer): Cope with missing _SC_OPEN_MAX

Sun May 28 13:55:17 CEST 2000  Werner Koch  <wk@openit.de>

  * random.c (read_seed_file): Binary open for DOSish system
  (update_random_seed_file): Ditto.

  * rndw32.c: Add some debuging code enabled by an environment variable.

Tue May 23 09:19:00 CEST 2000  Werner Koch  <wk@openit.de>

	* rndw32.c: Started with alternative code to replace entropy.dll

Thu May 18 11:38:54 CEST 2000  Werner Koch  <wk@openit.de>

	* primegen.c (register_primegen_progress): New.
	* dsa.c (register_pk_dsa_progress): New.
	* elgamal.c (register_pk_elg_progress): New.

Fri Apr 14 19:37:08 CEST 2000  Werner Koch  <wk@openit.de>

	* twofish.c (twofish_get_info): Fixed warning about cast.

Tue Mar 28 14:26:58 CEST 2000  Werner Koch  <wk@openit.de>

	* random.c [MINGW32]: Include process.h for getpid.

Thu Mar  2 15:37:46 CET 2000  Werner Koch  <wk@gnupg.de>

	* random.c (fast_random_poll): Add clock_gettime() as fallback for
	system which support this POSIX.4 fucntion. By Sam Roberts.

	* rndunix.c: Add some more headers for QNX. By Sam Roberts.

	* random.c (read_seed_file): Removed the S_ISLNK test becuase it
	is already covered by !S_ISREG and is not defined in Unixware.
	Reported by Dave Dykstra.

	* sha1.c (sha1_get_info): Removed those stupid double lines. Dave
	is really a good lint.

Wed Feb 23 10:07:57 CET 2000  Werner Koch  <wk@gnupg.de>

	* twofish.c (twofish_get_info): Add some const to the casts.  By Martin
	Kahlert.

Mon Feb 14 14:30:20 CET 2000  Werner Koch  <wk@gnupg.de>

	(update_random_seed_file): Silently ignore update request when pool
	is not filled.

Fri Feb 11 17:44:40 CET 2000  Werner Koch  <wk@gnupg.de>

	* random.c (read_seed_file): New.
	(set_random_seed_file): New.
	(read_pool): Try to read the seeding file.
	(update_random_seed_file): New.

	(read_pool): Do an initial extra seeding when level 2 quality random
	is requested the first time.  This requestes at least POOLSIZE/2 bytes
	of entropy.  Compined with the seeding file this should make normal
	random bytes cheaper and increase the quality of the random bytes
	used for key generation.

	* rndegd.c (gather_random): Shortcut level 0.
	* rndunix.c (gather_random): Ditto.
	* rndw32.c (gather_random): Ditto.

Fri Jan 14 18:32:01 CET 2000  Werner Koch  <wk@gnupg.de>

	* rmd160.c (rmd160_get_info): Moved casting to the left side due to a
	problem with UTS4.3.  Suggested by Dave Dykstra.
	* sha1.c (sha1_get_info): Ditto.
	* tiger.c (tiger_get_info): Ditto.
	* md5.c (md5_get_info): Ditto
	* des.c (des_get_info): Ditto.
	* blowfish.c (blowfish_get_info): Ditto.
	* cast5.c (cast5_get_info): Ditto.
	* twofish.c (twofish_get_info): Ditto.

Thu Jan 13 19:31:58 CET 2000  Werner Koch  <wk@gnupg.de>

	* elgamal.c (wiener_map): New.
	(gen_k): Use a much smaller k.
	(generate): Calculate the qbits using the wiener map and
	choose an x at a size comparable to the one choosen in gen_k

	* random.c (read_pool): Print a more friendly error message in
	cases when too much random is requested in one call.

	* Makefile.am (tiger): Replaced -O1 by -O. Suggested by Alec Habig.

Sat Dec  4 12:30:28 CET 1999  Werner Koch  <wk@gnupg.de>

	* primegen.c (generate_elg_prime): All primes are now generated with
	the lowest random quality level.  Becuase they are public anyway we
	don't need stronger random and by this we do not drain the systems
	entropy so much.

Thu Oct 28 16:08:20 CEST 1999  Werner Koch  <wk@gnupg.de>

	* random.c (fast_random_poll): Check whether RUSAGE_SELF is defined;
	this is not the case for some ESIX and Unixware, although they have
	getrusage().

	* elgamal.c (sign): Hugh found strange code here. Replaced by BUG().

Mon Oct 11 09:24:12 CEST 1999  Werner Koch  <wk@gnupg.de>

	* rndw32.c (gather_random): Handle PCP_SEEDER_TOO_SMALL.

Sat Oct  9 20:34:41 CEST 1999  Werner Koch  <wk@gnupg.de>

	* Makefile.am:	Tweaked module build and removed libtool

Fri Oct  8 20:32:01 CEST 1999  Werner Koch  <wk@gnupg.de>

	* rndw32.c (load_and_init_winseed): Use the Registry to locate the DLL

Mon Oct  4 21:23:04 CEST 1999  Werner Koch  <wk@gnupg.de>

	* md.c (md_reset): Clear finalized; thanks to Ulf Moeller for
	fixing this bug.

Sat Sep 18 12:51:51 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* Makefile.am: Never compile mingw32 as module

Wed Sep 15 14:39:59 CEST 1999  Michael Roth <mroth@nessie.de>

	* des.c: Various speed improvements: One bit pre rotation
	  trick after initial permutation (Richard Outerbridge).
	  Finished test of SSLeay Tripple-DES patterns.

Wed Sep 15 16:22:17 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* rndw32.c: New.

Mon Sep 13 10:51:29 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* bithelp.h: New.
	* rmd160.h, sha1.h, md5.h: Use the rol macro from bithelp.h

Tue Sep  7 16:23:36 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* Makefile.am: Fixed seds for latest egcc. By Ollivier Robert.

Mon Sep  6 19:59:08 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* des.c (selftest): Add some testpattern

Mon Aug 30 20:38:33 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* cipher.c (do_cbc_encrypt): Fixed serious bug occuring when not using
	in place encryption. Pointed out by Frank Stajano.

Mon Jul 26 09:34:46 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* md5.c (md5_final): Fix for a SCO cpp bug.

Thu Jul 15 10:15:35 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* elgamal.c (elg_check_secret_key,elg_encrypt
	elg_decrypt,elg_sign,elg_verify): Sanity check on the args.
	* dsa.c (dsa_check_secret_key,dsa_sign,dsa_verify): Ditto.

	* pubkey.c (disable_pubkey_algo): New.
	(check_pubkey_algo2): Look at disabled algo table.
	* cipher.c (disable_cipher_algo): New.
	(check_cipher_algo): Look at disabled algo table.

Wed Jul  7 13:08:40 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* Makefile.am: Support for libtool.

Fri Jul  2 11:45:54 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* dsa.c (gen_k): Changed algorithm to consume less random bytes
	* elgamal.c (gen_k): Ditto.

	* random.c (random_dump_stats): New.

Thu Jul  1 12:47:31 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* primegen.c, elgamal.c, dsa.c (progess): New and replaced all
	fputc with a call to this function.

Sat Jun 26 12:15:59 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* rndegd.c (do_write): s/ssize_t/int/ due to SunOS 4.1 probs.

	* cipher.c (do_cbc_encrypt, do_cbc_decrypt): New.

	* dynload.c (HAVE_DL_SHL_LOAD): Map hpux API to dlopen (Dave Dykstra).
	* Makefile.am (install-exec-hook): Removed.

Sun May 23 14:20:22 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* cipher.c (setup_cipher_table): Enable Twofish

	* random.c (fast_random_poll): Disable use of times() for mingw32.

Mon May 17 21:54:43 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* dynload.c (register_internal_cipher_extension): Minor init fix.

Tue May  4 15:47:53 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* primegen.c (gen_prime): Readded the Fermat test. Fixed the bug
	that we didn't correct for step when passing the prime to the
	Rabin-Miller test which led to bad performance (Stefan Keller).
	(check_prime): Add a first Fermat test.

Sun Apr 18 10:11:28 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* cipher.c (cipher_setiv): Add ivlen arg, changed all callers.

	* random.c (randomize_buffer): alway use secure memory because
	we can't use m_is_secure() on a statically allocated buffer.

	* twofish.c: Replaced some macros by a loop to reduce text size.
	* Makefile.am (twofish): No more need for sed editing.

Fri Apr  9 12:26:25 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* cipher.c (cipher_open): Reversed the changes for AUTO_CFB.

	* blowfish.c: Dropped the Blowfish 160 mode.
	* cipher.c (cipher_open): Ditto.
	(setup_cipher_table): Ditto.  And removed support of twofish128

Wed Apr  7 20:51:39 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* random.c (get_random_bits): Can now handle requests > POOLSIZE

	* cipher.c (cipher_open): Now uses standard CFB for automode if
	the blocksize is gt 8 (according to rfc2440).

	* twofish.c: Applied Matthew Skala's patches for 256 bit key.

Tue Apr  6 19:58:12 CEST 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* random.c (get_random_bits): Can now handle requests > POOLSIZE

	* cipher.c (cipher_open): Now uses standard CFB for automode if
	the blocksize is gt 8 (according to rfc2440).

Sat Mar 20 11:44:21 CET 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* rndlinux.c (tty_printf) [IS_MODULE]: Removed.

	* rndegd.c (gather_random): Some fixes.

Wed Mar 17 13:09:03 CET 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* rndegd.c (do_read): New.
	(gather_random): Changed the implementation.

Mon Mar  8 20:47:17 CET 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* dynload.c (DLSYM_NEEDS_UNDERSCORE): Renamed.

Fri Feb 26 17:55:41 CET 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* md.c: Nearly a total rewrote.

Wed Feb 24 11:07:27 CET 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* cipher.c (context): Fixed alignment
	* md.c: Ditto.

	* rndegd.c: New

Mon Feb 22 20:04:00 CET 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* rndegd.c: New.

Wed Feb 10 17:15:39 CET 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* Makefile.am: Modules are now figured out by configure
	* construct.c: New. Generated by configure. Changed all modules
	to work with that.
	* sha1.h: Removed.
	* md5.h: Removed.

	* twofish.c: Changed interface to allow Twofish/256

	* rndunix.c (start_gatherer): Die on SIGPIPE.

Wed Jan 20 18:59:49 CET 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* rndunix.c (gather_random): Fix to avoid infinite loop.

Sun Jan 17 11:04:33 CET 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* des.c (is_weak_key): Replace system memcmp due to bugs
	in SunOS's memcmp.
	(des_get_info): Return error on failed selftest.
	* twofish.c (twofish_setkey): Return error on failed selftest or
	invalid keylength.
	* cast5.c (cast_setkey): Ditto.
	* blowfish.c (bf_setkey): Return error on failed selftest.

Tue Jan 12 11:17:18 CET 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* random.c (random_is_faked): New.

	* tiger.c: Only compile if we have the u64 type

Sat Jan  9 16:02:23 CET 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* rndunix.c (gather_random): check for setuid.

	* Makefile.am: Add a way to staically link random modules

Thu Jan  7 18:00:58 CET 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* md.c (md_stop_debug): Do a flush first.
	(md_open): size of buffer now depends on the secure parameter

Sun Jan  3 15:28:44 CET 1999  Werner Koch  <wk@isil.d.shuttle.de>

	* rndunix.c (start_gatherer): Fixed stupid ==/= bug

1998-12-31  Geoff Keating  <geoffk@ozemail.com.au>

	* des.c (is_weak_key): Rewrite loop end condition.

Tue Dec 29 14:41:47 CET 1998  Werner Koch  <wk@isil.d.shuttle.de>

	* random.c: add unistd.h for getpid().
	(RAND_MAX): Fallback value for Sun.

Wed Dec 23 17:12:24 CET 1998  Werner Koch  <wk@isil.d.shuttle.de>

	* md.c (md_copy): Reset debug.

Mon Dec 14 21:18:49 CET 1998  Werner Koch  <wk@isil.d.shuttle.de>

	* random.c (read_random_source): Changed the interface to the
	random gathering function.
	(gather_faked): Use new interface.
	* dynload.c (dynload_getfnc_fast_random_poll): Ditto.
	(dynload_getfnc_gather_random): Ditto.
	* rndlinux.c (gather_random): Ditto.
	* rndunix.c (gather_random): Ditto.

Sat Dec 12 18:40:32 CET 1998  Werner Koch  <wk@isil.d.shuttle.de>

	* dynload.c (SYMBOL_VERSION): New to cope with system which needs
	underscores.

	* rndunix.c: Rewrote large parts

Thu Dec 10 20:15:36 CET 1998  Werner Koch  <wk@isil.d.shuttle.de>

	* dynload.c (load_extension): increased needed verbosity level.

	* random.c (fast_random_poll): Fallback to a default fast random
	poll function.
	(read_random_source): Always use the faked entroy gatherer if no
	gather module is available.
	* rndlinux.c (fast_poll): Removed.
	* rndunix.c (fast_poll): Removed.


Wed Nov 25 12:33:41 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* rand-*.c: Removed.
	* rndlinux.c : New.
	* rndunix.c : New.
	* random.c : Restructured the interface to the gather modules.
	(intialize): Call constructor functions
	(read_radnom_source): Moved to here.
	* dynload.c (dynload_getfnc_gather_random): New.
	(dynload_getfnc_fast_random_poll): New.
	(register_internal_cipher_extension): New.
	(register_cipher_extension): Support of internal modules.

Sun Nov  8 17:44:36 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* rand-unix.c (read_random_source): Removed the assert.

Mon Oct 19 18:34:30 1998  me,,,  (wk@tobold)

	* pubkey.c: Hack to allow us to give some info about RSA keys back.

Thu Oct 15 11:47:57 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* dynload.c: Support for DLD

Wed Oct 14 12:13:07 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* rand-unix.c: Now uses names from configure for /dev/random.

1998-10-10  SL Baur  <steve@altair.xemacs.org>

	* Makefile.am: fix sed -O substitutions to catch -O6, etc.

Tue Oct  6 10:06:32 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* rand-unix.c (HAVE_GETTIMEOFDAY): Fixed (was ..GETTIMEOFTIME :-)
	* rand-dummy.c (HAVE_GETTIMEOFDAY): Ditto.

Mon Sep 28 13:23:09 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* md.c (md_digest): New.
	(md_reset): New.

Wed Sep 23 12:27:02 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* tiger.c (TIGER_CONTEXT): moved "buf", so that it is 64 bit aligned.

Mon Sep 21 06:22:53 1998  Werner Koch  (wk@(none))

	* des.c: Some patches from Michael.

Thu Sep 17 19:00:06 1998  Werner Koch  (wk@(none))

	* des.c : New file from Michael Roth <mroth@nessie.de>

Mon Sep 14 11:10:55 1998  Werner Koch  (wk@(none))

	* blowfish.c (bf_setkey): Niklas Hernaeus patch to detect weak keys.

Mon Sep 14 09:19:25 1998  Werner Koch  (wk@(none))

	* dynload.c (RTLD_NOW): Now defined to 1 if it is undefined.

Mon Sep  7 17:04:33 1998  Werner Koch  (wk@(none))

	* Makefile.am: Fixes to allow a different build directory

Thu Aug  6 17:25:38 1998  Werner Koch,mobil,,,	(wk@tobold)

	* random.c (get_random_byte): Removed and changed all callers
	to use get_random_bits()

Mon Jul 27 10:30:22 1998  Werner Koch  (wk@(none))

	* cipher.c : Support for other blocksizes
	(cipher_get_blocksize): New.
	* twofish.c: New.
	* Makefile.am: Add twofish module.

Mon Jul 13 21:30:52 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* random.c (read_pool): Simple alloc if secure_alloc is not set.
	(get_random_bits): Ditto.

Thu Jul  9 13:01:14 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* dynload.c (load_extension): Function now nbails out if
	the program is run setuid.

Wed Jul  8 18:58:23 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* rmd160.c (rmd160_hash_buffer): New.

Thu Jul  2 10:50:30 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* cipher.c (cipher_open): algos >=100 use standard CFB

Thu Jun 25 11:18:25 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* Makefile.am: Support for extensions

Thu Jun 18 12:09:38 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* random.c (mix_pool): simpler handling for level 0

Mon Jun 15 14:40:48 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* tiger.c: Removed from dist, will reappear as dynload module

Sat Jun 13 14:16:57 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* pubkey.c: Major changes to allow extensions. Changed the inteface
	of all public key ciphers and added the ability to load extensions
	on demand.

	* misc.c: Removed.

Wed Jun 10 07:52:08 1998  Werner Koch,mobil,,,	(wk@tobold)

	* dynload.c: New.
	* cipher.c: Major changes to allow extensions.

Mon Jun  8 22:43:00 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* cipher.c: Major internal chnages to support extensions.
	* blowfish.c (blowfish_get_info): New and made all internal
	functions static, changed heder.
	* cast5.c (cast5_get_info): Likewise.

Mon Jun  8 12:27:52 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* tiger.c (transform): Fix for big endian

	* cipher.c (do_cfb_decrypt): Big endian fix.

Fri May 22 07:30:39 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* md.c (md_get_oid): Add a new one for TIGER.

Thu May 21 13:24:52 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* cipher.c: Add support for a dummy cipher

Thu May 14 15:40:36 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* rmd160.c (transform): fixed sigbus - I should better
	add Christian von Roques's new implemenation of rmd160_write.

Fri May  8 18:07:44 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* rand-internal.h, rand-unix.c, rand-w32.c, rand_dummy.c: New
	* random.c: Moved system specific functions to rand-****.c

Fri May  8 14:01:17 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* random.c (fast_random_poll): add call to gethrtime.

Tue May  5 21:28:55 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* elgamal.c (elg_generate): choosing x was not correct, could
	yield 6 bytes which are not from the random pool, tsss, tsss..

Tue May  5 14:09:06 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* primegen.c (generate_elg_prime): Add arg mode, changed all
	callers and implemented mode 1.

Mon Apr 27 14:41:58 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* cipher.c (cipher_get_keylen): New.

Sun Apr 26 14:44:52 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* tiger.c, tiger.h: New.

Wed Apr  8 14:57:11 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* misc.c (check_pubkey_algo2): New.

Tue Apr  7 18:46:49 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* cipher.c: New
	* misc.c (check_cipher_algo): Moved to cipher.c
	* cast5.c: Moved many functions to cipher.c
	* blowfish.c: Likewise.

Sat Apr  4 19:52:08 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* cast5.c: Implemented and tested.

Wed Apr  1 16:38:27 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* elgamal.c (elg_generate): Faster generation of x in some cases.

Thu Mar 19 13:54:48 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* blowfish.c (blowfish_decode_cfb): changed XOR operation
	(blowfish_encode_cfb): Ditto.

Thu Mar 12 14:04:05 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* sha1.c (transform): Rewrote

	* blowfish.c (encrypt): Unrolled for rounds == 16
	(decrypt): Ditto.

Tue Mar 10 16:32:08 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* rmd160.c (transform): Unrolled the loop.

Tue Mar 10 13:05:14 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* random.c (read_pool): Add pool_balance stuff.
	(get_random_bits): New.

	* elgamal.c (elg_generate): Now uses get_random_bits to generate x.


Tue Mar 10 11:33:51 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* md.c (md_digest_length): New.

Tue Mar 10 11:27:41 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* dsa.c (dsa_verify): Works.

Mon Mar  9 12:59:08 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* dsa.c, dsa.h: Removed some unused code.

Wed Mar  4 10:39:22 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* md.c (md_open): Add call to fast_random_poll.
	blowfish.c (blowfish_setkey): Ditto.

Tue Mar  3 13:32:54 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* rmd160.c (rmd160_mixblock): New.
	* random.c: Restructured to start with a new RNG implementation.
	* random.h: New.

Mon Mar  2 19:21:46 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* gost.c, gost.h: Removed because they did only conatin trash.

Sun Mar  1 16:42:29 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* random.c (fill_buffer): removed error message if n == -1.

Fri Feb 27 16:39:34 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* md.c (md_enable): No init if called twice.

Thu Feb 26 07:57:02 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* primegen.c (generate_elg_prime): Changed the progress printing.
	(gen_prime): Ditto.

Tue Feb 24 12:28:42 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* md5.c, md.5 : Replaced by a modified version of md5.c from
	GNU textutils 1.22.

Wed Feb 18 14:08:30 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* md.c, md.h : New debugging support

Mon Feb 16 10:08:47 1998  Werner Koch  (wk@isil.d.shuttle.de)

	* misc.c (cipher_algo_to_string): New
	(pubkey_algo_to_string): New.
	(digest_algo_to_string): New.



 Copyright 1998, 1999, 2000, 2001 Free Software Foundation, Inc.

 This file is free software; as a special exception the author gives
 unlimited permission to copy and/or distribute it, with or without
 modifications, as long as this notice is preserved.

 This file is distributed in the hope that it will be useful, but
 WITHOUT ANY WARRANTY, to the extent permitted by law; without even the
 implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.