| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2016-09-01 | Fix Ed25519 keypair generation | Richard van der Hoff | |
| Ed25519 private keys, it turns out, have 64 bytes, not 32. We were previously generating only 32 bytes (which is all that is required to generate the public key), and then using the public key as the upper 32 bytes when generating the per-message session key. This meant that everything appeared to work, but the security of the private key was severely compromised. By way of fixes: * Use the correct algorithm for generating the Ed25519 private key, and store all 512 bits of it. * Update the account pickle format and refuse to load the old format (since we should consider it compromised). * Bump the library version, and add a function to retrieve the library version, so that applications can verify that they are linked against a fixed version of the library. * Remove the curve25519_{sign, verify} functions which were unused and of dubious quality. | |||
| 2016-06-30 | Make space in the session pickle for chain index | Richard van der Hoff | |
| Keeping track of the chain index is a useful thing to do, but is only required if we've enabled diagnostics. Extend the session pickle format to make a space for it, so that pickles can be transferred between the logging_enabled branch and the master branch without loss of information. Also add some tests for session pickling which explicitly check that we can unpickle both formats of pickle. | |||
| 2016-06-30 | Remove unused 'chain_index' from Ratchet | Richard van der Hoff | |
| This was introduced when I was experimenting with support for logging progress in Olm. That is now relegated to the logging_enabled branch, so this should probably be removed. This also fixes the incompatibility of session pickles from the current master branch with those from olm 0.1.0. | |||
| 2016-05-25 | Remove session_id from group messages | Richard van der Hoff | |
| Putting the session_id inside the packed message body makes it hard to extract so that we can decide which session to use. We don't think there is any advantage to having thes sesion_id protected by the HMACs, so we're going to move it to the JSON framing. | |||
| 2016-05-24 | Separate base64ing from the rest of msg encoding | Richard van der Hoff | |
| Factor the actual message encoding/decoding and encrypting/decrypting out to separate functions from the top-level functions which do the base64-wrangling. This is particularly helpful in the 'outbound' code-path where the offsets required to allow room to base64-encode make the flow hard to see when it's all inline. | |||
| 2016-05-24 | Update megolm_cipher as a global struct | Richard van der Hoff | |
| Initialise megolm_cipher via the preprocessor macro, instead of with a function. | |||
| 2016-05-24 | Fix up some names, and protobuf tags | Richard van der Hoff | |
| Make names (of session_key and message_index) more consistent. Use our own protobuf tags rather than trying to piggyback on the one-to-one structure. | |||
| 2016-05-24 | Implement decrypting inbound group messages | Richard van der Hoff | |
| Includes creation of inbound sessions, etc | |||
| 2016-05-24 | Implement functions to get the state of outbound session | Richard van der Hoff | |
| We need to be able to inspect an outbound session so that we can tell our peer how to set up an inbound session. | |||
| 2016-05-24 | Implement pickling/unpickling for outbound group sessions | Richard van der Hoff | |
| 2016-05-24 | Implementation of an outbound group session | Richard van der Hoff | |
| 2016-05-24 | Implementation of the megolm ratchet | Richard van der Hoff | |
| 2016-05-24 | Factor out pickle_encoding from olm.cpp | Richard van der Hoff | |
| We don't need to have all of the top-level pickling functions in olm.cpp; factor out the utilities to support it to pickle_encoding.cpp (and make sure that they have plain-C bindings). | |||
| 2016-05-24 | Factor out olm_error_to_string to a separate file | Richard van der Hoff | |
| I want to be able to use this functionality from elsewhere, so factor it out to its own file. | |||
| 2016-05-24 | Rewrite _olm_cipher_aes_sha_256 initialisation | Richard van der Hoff | |
| Replace the init-static-var dance with some preprocessor macros | |||
| 2016-05-24 | Remove 'destruct' from cipher_ops | Richard van der Hoff | |
| We never delete a cipher, and the destruct op is empty, so it's a bit pointless | |||
| 2016-05-23 | Prefix for internal symbols | Richard van der Hoff | |
| Give a load of internal symbols "_olm_" prefixes. This better delineates the public and private interfaces in the module, and helps avoid internal symbols leaking out and possibly being abused. | |||
| 2016-05-23 | C bindings for base64 functions | Richard van der Hoff | |
| 2016-05-23 | C binding for olm::unset | Richard van der Hoff | |
| 2016-05-23 | C bindings for pickle functions | Richard van der Hoff | |
| 2016-05-23 | Convert cipher.hh to plain C | Richard van der Hoff | |
| 2016-05-23 | Convert error.hh to plain C | Richard van der Hoff | |
| 2016-05-23 | Give SHA256 functions C bindings | Richard van der Hoff | |
| 2016-05-23 | Rename olm.hh to olm.h | Richard van der Hoff | |
| 2016-05-20 | Remove functions which return strings | Richard van der Hoff | |
| We don't want anything which does dynamic memory allocation in the library. | |||
| 2016-05-16 | Remove vestiges of logging | Richard van der Hoff | |
| Remove the (now non-functional) declarations of olm_set_log_level in the C and js wrappers. | |||
| 2016-05-16 | Remove logging functionality | Richard van der Hoff | |
| Concerns have been raised that including logging functionality makes it harder to audit the implementation to ensure that no secret information is leaked. We are therefore removing it from the master branch. | |||
| 2016-05-16 | translate logging.cpp to C | Richard van der Hoff | |
| 2016-05-16 | Add olm::log_enabled_for | Richard van der Hoff | |
| 2016-04-26 | Fix a bunch of compiler warnings, and turn on warnings. | Richard van der Hoff | |
| 2016-04-26 | Add some logging to help understand what's going on | Richard van der Hoff | |
| 2016-04-26 | Add a basic logging implementation | Richard van der Hoff | |
| 2015-08-20 | Add docstrings for the utility class | Mark Haines | |
| 2015-08-19 | Add docstrings for the Session methods | Mark Haines | |
| 2015-08-19 | Replace hard coded references to the 32-byte key length with a constant, add ↵ | Mark Haines | |
| utilities for copying data to and from fixed sized arrays | |||
| 2015-08-19 | Document that the ciphertext and plaintext may share a buffer when ↵ | Mark Haines | |
| encrypting and decrypting | |||
| 2015-08-19 | Add docstring for the base64 encode/decode methods | Mark Haines | |
| 2015-08-11 | Check that the end of input hasn't been reached when unpickling a list | Mark Haines | |
| 2015-07-24 | Add methods for computing sha256 hashes and validating ed25519 signatures | Mark Haines | |
| 2015-07-16 | Add method getting a session id. Update the python and javascript bindings | Mark Haines | |
| 2015-07-16 | Add versions of olm_session_create_inbound and olm_session_matches_inbound ↵ | Mark Haines | |
| which take the curve25519 identity key of the remote device we think the message is from as an additional argument | |||
| 2015-07-15 | Fix bug in list where the wrong value was copied if an item was inserted at ↵ | Mark Haines | |
| the beinging of the list | |||
| 2015-07-15 | olm_account_last_error and olm_clear_account should take an Account not a ↵ | Mark Haines | |
| Session | |||
| 2015-07-10 | Clear the random buffers once they've been used. Add methods for clearing ↵ | Mark Haines | |
| the account and session object once they've been used | |||
| 2015-07-10 | Version the pickled objects and check for errors when unpickling them | Mark Haines | |
| 2015-07-10 | Output simpler JSON for the account keys, don't sign the JSON but instead ↵ | Mark Haines | |
| provide a olm_account_sign method so that the user of the library can sign the JSON themselves | |||
| 2015-07-09 | Add c bindings for the methods for managing one time keys | Mark Haines | |
| 2015-07-09 | Add methods for generating new one time keys and for tracking which one time ↵ | Mark Haines | |
| keys have been published | |||
| 2015-07-08 | Don't pass a key id when creating a new outbound session | Mark Haines | |
| 2015-07-08 | Change the JSON format for one time keys to include what algorithm they are for | Mark Haines | |
 |
index : libolm | |
| Implementation of the olm and megolm cryptographic ratchets |
| aboutsummaryrefslogtreecommitdiff |