Comment fix.

Rev: nettle/dsa.h:1.7

Updated and expanded section on DSA. Other minor fixes.

Rev: nettle/nettle.texinfo:1.13

Document aes_invert_key, and Camellia.

Rev: nettle/nettle.texinfo:1.12

Spacing fix.

Rev: nettle/ChangeLog:1.99

*** empty log message ***

Rev: nettle/ChangeLog:1.98

* testsuite/camellia-test.c: New tests for camellia_invert_key.
* testsuite/aes-test.c: New tests for aes_invert_key.

Rev: nettle/testsuite/aes-test.c:1.2
Rev: nettle/testsuite/camellia-test.c:1.2

* aes.h (aes_invert_key): Declare it.

* aes-set-decrypt-key.c (aes_invert_key): New function, key
inversion code extracted from aes_set_decrypt_key.
(aes_set_decrypt_key): Use aes_invert_key.

Rev: nettle/ChangeLog:1.97
Rev: nettle/aes-set-decrypt-key.c:1.2
Rev: nettle/aes.h:1.3

Added FIXME comment.

Rev: nettle/cast128.c:1.3

* camellia-set-encrypt-key.c (camellia_setup128): Generate
unmodified subkeys according to the spec. Moved clever combination
of subkeys to camellia_set_encrypt_key.
(camellia_setup256): Likewise.
(camellia_set_encrypt_key): Moved subkey post-processing code
here, and reduce code duplication between 128-bit keys and larger
keys.

* camellia.c: Deleted file, split into several new files...
* camellia-table.c (_camellia_table): New file with the constant
sbox tables.
* camellia-set-encrypt-key.c: New file.
(camellia_setup128): Generate unmodified subkeys according to the
spec. Moved clever combination of subkeys to camellia_set_encrypt_key.
(camellia_setup256): Likewise.

* camellia-set-decrypt-key.c: New file.
(camellia_invert_key): Key inversion function.
(camellia_set_decrypt_key): New key setup function.
* camellia-internal.h: New file.
* camellia-crypt.c (camellia_crypt): New file, new wrapper
function passing the sbox table to _camellia_crypt.
* camellia-crypt-internal.c (_camellia_crypt): New file, with main
encrypt/decrypt function.
* Makefile.in (nettle_SOURCES): Updated list of camellia source files.
(DISTFILES): Added camellia-internal.h.

Rev: nettle/ChangeLog:1.96
Rev: nettle/Makefile.in:1.26
Rev: nettle/camellia-crypt-internal.c:1.1
Rev: nettle/camellia-crypt.c:1.1
Rev: nettle/camellia-internal.h:1.1
Rev: nettle/camellia-set-decrypt-key.c:1.1
Rev: nettle/camellia-set-encrypt-key.c:1.1
Rev: nettle/camellia-table.c:1.1
Rev: nettle/camellia.c:1.5(DEAD)

* camellia-meta.c: Use _NETTLE_CIPHER_SEP_SET_KEY.

* camellia.h (struct camellia_ctx): Replaced flag camellia128 by
expanded key length nkeys.

* camellia.c (camellia_set_encrypt_key): Renamed, from...
(camellia_set_key): ... old name.
(camellia_invert_key): New function.
(camellia_set_decrypt_key): New function, using
camellia_invert_key.
(camellia_crypt): Renamed, from...
(camellia_encrypt): ... old name.
(camellia_decrypt): Deleted, no longer needed. camellia_crypt used
for both encryption and decryption.

Rev: nettle/ChangeLog:1.95
Rev: nettle/camellia-meta.c:1.2
Rev: nettle/camellia.c:1.4
Rev: nettle/camellia.h:1.4

*** empty log message ***

Rev: nettle/ChangeLog:1.94

(_NETTLE_CIPHER_SEP_SET_KEY): New macro.

Rev: nettle/nettle-meta.h:1.7

Removed unnecessary include of memxor.h.

Rev: nettle/dsa-keygen.c:1.9

Fixed spelling in comment.

Rev: nettle/cbc.c:1.2

* camellia.c: Rewrote to use 64-bit type for subkeys and use
64-bit operations throughout. Performance on x86_32, when compiled
with gcc-4.4.4, is reduced by roughly 15%, this should be fixed
later.

* camellia.h (struct camellia_ctx): Use type uint64_t for subkeys.

Rev: nettle/ChangeLog:1.93
Rev: nettle/camellia.c:1.3
Rev: nettle/camellia.h:1.3

Added camellia ciphers.

Rev: nettle/ChangeLog:1.92
Rev: nettle/examples/nettle-benchmark.c:1.8

* aes.h (aes_encrypt, aes_decrypt): Declare ctx argument as const.
Also updated implementation.
* blowfish.h (blowfish_encrypt, blowfish_decrypt): Likewise.
* cast128.h (cast128_encrypt, cast128_decrypt): Likewise.
* serpent.h (serpent_encrypt, serpent_decrypt): Likewise.
* twofish.h (twofish_encrypt, twofish_decrypt): Likewise.

Rev: nettle/ChangeLog:1.91
Rev: nettle/aes-decrypt.c:1.2
Rev: nettle/aes-encrypt.c:1.2
Rev: nettle/aes.h:1.2
Rev: nettle/blowfish.c:1.3
Rev: nettle/blowfish.h:1.3
Rev: nettle/cast128.c:1.2
Rev: nettle/cast128.h:1.2
Rev: nettle/serpent.c:1.2
Rev: nettle/serpent.h:1.2
Rev: nettle/twofish.c:1.2
Rev: nettle/twofish.h:1.2

*** empty log message ***

Rev: nettle/ChangeLog:1.90

(TS_NETTLE_SOURCES): Added camellia-test.c.

Rev: nettle/testsuite/.test-rules.make:1.7
Rev: nettle/testsuite/Makefile.in:1.9

(nettle_camellia128): Declare.
(nettle_camellia192): Likewise.
(nettle_camellia256): Likewise.

Rev: nettle/nettle-meta.h:1.6

* Makefile.in (nettle_SOURCES): Added camellia.c and
camellia-meta.c.
(HEADERS): Added camellia.h.

* camellia-meta.c: New file.

* camellia.h: Rewrote interface to match nettle conventions.

* camellia.c: Converted to nettle conventions.
(camellia_encrypt128, camellia_encrypt256): Unified to new
function...
(camellia_encrypt): ...New function, with a loop doing 6
regular rounds, one FL round and one FLINV round per iteration,
with iteration count depending on the key size.

Rev: nettle/ChangeLog:1.89
Rev: nettle/Makefile.in:1.25
Rev: nettle/camellia-meta.c:1.1
Rev: nettle/camellia.c:1.2
Rev: nettle/camellia.h:1.2

New files, copied from
http://info.isl.ntt.co.jp/crypt/eng/camellia/dl/camellia-LGPL-1.2.0.tar.gz.

Rev: nettle/camellia.c:1.1
Rev: nettle/camellia.h:1.1

New file.

Rev: nettle/testsuite/camellia-test.c:1.1

*** empty log message ***

Rev: nettle/ChangeLog:1.88

Document new conventions for weak key and des
parity checks. Document des_check_parity.

Rev: nettle/NEWS:1.6
Rev: nettle/nettle.texinfo:1.11

(test_weak): Don't check the deleted status attribute.

Rev: nettle/testsuite/des-test.c:1.3

(des_key_sched): Rewrote error checking logic for
the case of non-zero des_check_key.

Rev: nettle/des-compat.c:1.3

Comment fix.

Rev: nettle/des-compat.h:1.2

(des3_set_key): Changed weak key detection logic.
Complete key setup also for weak keys, and don't set the status
attribute.

Rev: nettle/des3.c:1.2

(des_set_key): New iteration logic, to keep key pointer unchanged.
Moved weak key check to the end, and don't set the status
attribute.
(des_encrypt): Ignore status attribute.
(des_decrypt): Likewise.

Rev: nettle/des.c:1.3

(enum des_error): Deleted.
(struct des_ctx): Deleted status attribute.
(struct des3_ctx): Likewise.

Rev: nettle/des.h:1.3

(initial_ctx): Deleted status value.
(blowfish_encrypt): Ignore status attribute.
(blowfish_decrypt): Likewise.
(blowfish_set_key): return result from weak key check, without
setting the status attribute.

Rev: nettle/blowfish.c:1.2

(enum blowfish_error): Deleted.
(struct blowfish_ctx): Deleted status attribute.

Rev: nettle/blowfish.h:1.2

(des_headers): Deleted parity.h.

Rev: nettle/Makefile.in:1.24

*** empty log message ***

Rev: nettle/ChangeLog:1.87

(test_des): New function.
(test_weak): New function.
(test_main): Use test_des and test_weak. Added tests for all the
weak keys. Added some tests with invalid (to be ignored) parity
bits.

Rev: nettle/testsuite/des-test.c:1.2

*** empty log message ***

Rev: nettle/ChangeLog:1.86

(parity_16): New smaller parity table.
(des_check_parity): New function.
(des_fix_parity): Use parity_16.
(des_weak_p): New weak-key detection. Ignores parity bits, and
uses a hash table.
(des_set_key): Deleted parity checking code. Replaced old weak-key
detection code by a call to des_weak_p.

Rev: nettle/des.c:1.2
Rev: nettle/des.h:1.2

*** empty log message ***

Rev: nettle/ChangeLog:1.85

(test_dsa_key): Updated for new name DSA_SHA1_MIN_P_BITS.

Rev: nettle/testsuite/testutils.c:1.9

(dsa_generate_keypair): Use DSA_SHA1_MIN_P_BITS and
DSA_SHA256_MIN_P_BITS.

Rev: nettle/dsa-keygen.c:1.8

(DSA_MIN_P_BITS, DSA_Q_OCTETS, DSA_Q_BITS): Renamed to...
(DSA_SHA1_MIN_P_BITS, DSA_SHA1_Q_OCTETS, DSA_SHA1_Q_BITS): New names.

Rev: nettle/dsa.h:1.6

(dsa_keypair_from_sexp_alist): New argument q_bits.
Renamed parameter limit to p_max_bits.
(dsa_sha1_keypair_from_sexp): Renamed, was dsa_keypair_from_sexp.
Updated to call dsa_keypair_from_sexp_alist with the new argument.
(dsa_sha256_keypair_from_sexp): New function.
(dsa_signature_from_sexp): New argument q_bits.

Rev: nettle/sexp2dsa.c:1.3

(dsa_params_from_der_iterator): Enforce 160-bit limit
on q. Renamed parameter limit to p_max_bits.
(dsa_openssl_private_key_from_der_iterator): Enforce 160-bit limit
on q and x. Renamed parameter limit to p_max_bits.

Rev: nettle/der2dsa.c:1.4

Parameter rename.

Rev: nettle/bignum.h:1.8
Rev: nettle/der-iterator.c:1.2

(test_main): Added test for dsa-sha256.

Rev: nettle/testsuite/dsa-test.c:1.5

*** empty log message ***

Rev: nettle/ChangeLog:1.84

(test_main): Provide expected value of the signature.

Rev: nettle/testsuite/dsa-test.c:1.4

(test_dsa160): Added argument for expected signature.
(test_dsa256): Likewise.

Rev: nettle/testsuite/dsa-keygen-test.c:1.5
Rev: nettle/testsuite/testutils.c:1.8
Rev: nettle/testsuite/testutils.h:1.5

*** empty log message ***

Rev: nettle/ChangeLog:1.83

* examples/random-prime.c (main): Updated for nettle_random_prime
change.
* testsuite/random-prime-test.c (test_main): Likewise.

Rev: nettle/examples/random-prime.c:1.3
Rev: nettle/testsuite/random-prime-test.c:1.2

(test_main): Updated expected signatures.

Rev: nettle/testsuite/rsa-keygen-test.c:1.4

(bignum_random_prime): Deleted function.
(rsa_generate_keypair): Use new nettle_random_prime. Generate
secret factors p and q with the two most significant bits set.

Rev: nettle/rsa-keygen.c:1.8

(dsa_generate_keypair): Updated for changes in nettle_random_prime and
_nettle_generate_pocklington_prime. Invoke progress callback.

Rev: nettle/dsa-keygen.c:1.7

(_nettle_generate_pocklington_prime): New
argument top_bits_set, to optionally generate primes with the two
most significant bits set. Reordered argument list.
(nettle_random_prime): Likewise, added top_bits_set argument.
Invoke progress callback when a prime is generated.

Rev: nettle/bignum-random-prime.c:1.6
Rev: nettle/bignum.h:1.7

*** empty log message ***

Rev: nettle/ChangeLog:1.82

(dsa_generate_keypair): Use _nettle_generate_pocklington_prime.
Deleted old key generation code.

Rev: nettle/dsa-keygen.c:1.6

* bignum-random-prime.c (_nettle_generate_pocklington_prime): Also
return the used r. Updated caller.

Rev: nettle/bignum-random-prime.c:1.5
Rev: nettle/bignum.h:1.6

*** empty log message ***

Rev: nettle/ChangeLog:1.81

* examples/random-prime.c (main): Allow sizes down to 3 bits.

Rev: nettle/examples/random-prime.c:1.2

(_nettle_generate_pocklington_prime): New
function. Rely on mpz_probab_prime_p (for lack of a trial division
function) for trial division.
(nettle_random_prime): Rewritten. Uses the prime table for the
smallest sizes, then trial division using a new set of tables, and
then Maurer's algorithm, calling the new
_nettle_generate_pocklington_prime for the final search.

Rev: nettle/ChangeLog:1.80
Rev: nettle/bignum-random-prime.c:1.4
Rev: nettle/bignum.h:1.5

Comment improvement.

Rev: nettle/dsa-keygen.c:1.5

*** empty log message ***

Rev: nettle/ChangeLog:1.79

(test_main): Updated for dsa testing changes.

Rev: nettle/testsuite/dsa-test.c:1.3

(test_main): Test dsa256.

Rev: nettle/testsuite/dsa-keygen-test.c:1.4

* testsuite/testutils.h (struct nettle_mac): New struct, currently
unused.

* testsuite/testutils.c (test_mac): New function (currently not
used).
(test_dsa): Replaced by two new functions...
(test_dsa160): New function.
(test_dsa256): New function.
(test_dsa_key): New argument q_size.
(DSA_VERIFY): Generalized.

Rev: nettle/testsuite/testutils.c:1.7
Rev: nettle/testsuite/testutils.h:1.4

(dsa_generate_keypair): Rewritten, now generating primes using
Pocklington's theorem. Takes both p_size and q_size as arguments.

Rev: nettle/dsa-keygen.c:1.4
Rev: nettle/dsa.h:1.5

Added documentation for sha224 and sha384.

Rev: nettle/nettle.texinfo:1.10

Added comment describing Pcklington's theorem.

Rev: nettle/bignum-random-prime.c:1.3

(miller_rabin_pocklington): Fixed broken
logic when Miller-rabin succeeds early.

Rev: nettle/ChangeLog:1.78
Rev: nettle/bignum-random-prime.c:1.2

* bignum-next-prime.c: Include stdlib.h, needed for alloca on
freebsd.
* hmac.c: Likewise.

Rev: nettle/ChangeLog:1.77
Rev: nettle/bignum-next-prime.c:1.5
Rev: nettle/hmac.c:1.2

* examples/Makefile.in (SOURCES): Added random-prime.c.

Rev: nettle/examples/Makefile.in:1.8

*** empty log message ***

Rev: nettle/ChangeLog:1.76

* examples/random-prime.c: New program.

Rev: nettle/examples/Makefile.in:1.7
Rev: nettle/examples/random-prime.c:1.1

* testsuite/Makefile.in (TS_NETTLE_SOURCES): Moved
knuth-lfib-test.c, cbc-test.c, ctr-test.c, hmac-test.c here, from
TS_HOGWEED_SOURCES.
(TS_HOGWEED_SOURCES): Added random-prime-test.c.

* testsuite/random-prime-test.c: New test case.

Rev: nettle/testsuite/.test-rules.make:1.6
Rev: nettle/testsuite/Makefile.in:1.8
Rev: nettle/testsuite/random-prime-test.c:1.1

(main): With no command line arguments. exit after dislaying usage
message.

Rev: nettle/examples/next-prime.c:1.4

(simple_random): Free buffer when done.

Rev: nettle/examples/io.c:1.3

* bignum-random.c: Deleted test of HAVE_LIBGMP.
* bignum.c: Likewise.
* sexp2bignum.c: Likewise.

Rev: nettle/sexp2bignum.c:1.2

Added FIXME comment.

Rev: nettle/dsa-keygen.c:1.3

Changed message, say CC is the recommended way to configure the ABI.

Rev: nettle/configure.ac:1.19

* bignum-random.c: Deleted test of HAVE_LIBGMP.
* bignum.c: Likewise.

Rev: nettle/bignum.c:1.3

Deleted test of HAVE_LIBGMP.

Rev: nettle/bignum-random.c:1.3

* Makefile.in (hogweed_SOURCES): Added bignum-random-prime.c.

* bignum-random-prime.c (nettle_random_prime): New file, new
function.

Rev: nettle/ChangeLog:1.75
Rev: nettle/Makefile.in:1.23
Rev: nettle/bignum-random-prime.c:1.1
Rev: nettle/bignum.h:1.4

More on the 2.1 release.

Rev: nettle/NEWS:1.5

*** empty log message ***

Rev: nettle/ChangeLog:1.74

(main): Benchmark sha224.

Rev: nettle/examples/nettle-benchmark.c:1.7

Whitespace cleanup.

Rev: nettle/ChangeLog:1.73

*** empty log message ***

Rev: nettle/ChangeLog:1.72

(DSA_VERIFY): Updated for dsa_sha1_verify rename.
(test_dsa): Check return value from dsa_sha1_sign.

Rev: nettle/testsuite/testutils.c:1.6

* Makefile.in (hogweed_SOURCES): Added dsa-sha1-sign.c,
dsa-sha1-verify.c, dsa-sha256-sign.c, and dsa-sha256-verify.c.

* dsa.h: Updated and added dsa declarations.

* dsa-sha256-verify.c (dsa_sha256_verify_digest): New file, new
function.
(dsa_sha256_verify): New function.
* dsa-sha256-sign.c (dsa_sha256_sign_digest): New file, new
function.
(dsa_sha256_sign): New function.

* dsa-sha1-verify.c (dsa_sha1_verify_digest): New file. Moved and
renamed function, from dsa_verify_digest, rewrote to use
_dsa_verify.
(dsa_sha1_verify): Analogous change, renamed from dsa_verify.
* dsa-sha1-sign.c (dsa_sha1_sign_digest): New file. Moved and
renamed function, from dsa_sign_digest, rewrote to use _dsa_sign,
and added return value.
(dsa_sha1_sign): Analogous change, renamed from dsa_sign.

* dsa-verify.c (_dsa_verify): New general verification function,
for any hash.
* dsa-sign.c (_dsa_sign): New general signing function, for any
hash. Returns success code, like the rsa signture functions.

Rev: nettle/ChangeLog:1.71
Rev: nettle/Makefile.in:1.22
Rev: nettle/dsa-sha1-sign.c:1.1
Rev: nettle/dsa-sha1-verify.c:1.1
Rev: nettle/dsa-sha256-sign.c:1.1
Rev: nettle/dsa-sha256-verify.c:1.1
Rev: nettle/dsa-sign.c:1.3
Rev: nettle/dsa-verify.c:1.3
Rev: nettle/dsa.h:1.4

Typo fix in ABI check.

Rev: nettle/configure.ac:1.18

* configure.ac (ABI): Attempt to use a better, ABI-dependant,
default value for libdir.

* configure.ac (ABI): Detect which ABI the compiler is using.
On x86_64, also check for __arch64__.

Rev: nettle/ChangeLog:1.70
Rev: nettle/configure.ac:1.17

Fixed function name in epilogue.

Rev: nettle/x86/md5-compress.asm:1.3

(EPILOGUE): Use . to refer to current address.

Rev: nettle/ChangeLog:1.69
Rev: nettle/asm.m4:1.2

(ABI): Detect which ABI the compiler is using.
On x86_64, also check for __arch64__.

Rev: nettle/ChangeLog:1.68
Rev: nettle/configure.ac:1.16

(asm_path): For x86_64, check if compiler is generating 32-bit code.

Rev: nettle/ChangeLog:1.67
Rev: nettle/configure.ac:1.15

*** empty log message ***

Rev: nettle/ChangeLog:1.66

Removed redundant ().

Rev: nettle/shadata.c:1.2

(test_main): Rewrote rest of tests to use HMAC_TEST, and added more
tests from Daniel Kahn Gillmor and from RFC 4231.

Rev: nettle/testsuite/hmac-test.c:1.4

* Makefile.in (nettle_SOURCES): Added hmac-sha224.c and hmac-sha384.c.

* hmac.h: Added declarations of hmac-sha224 and hmac-sha384.

* hmac-sha224.c: New file.

Rev: nettle/ChangeLog:1.65
Rev: nettle/Makefile.in:1.21
Rev: nettle/hmac-sha224.c:1.1
Rev: nettle/hmac.h:1.4