deraadt
11e026e9b2
delete useless test code
10 years ago
tedu
b213b4d39d
now that 5.5 has been released with compatibility for 2b hashes,
switch to generating them by default. prodded by deraadt and sthen
10 years ago
tedu
378adff9c2
1. Drop support for no minor. This variant doesn't exist anymore.
2. Pull up the actual minor processing code into the switch that
parses it.
3. atoi is actually simpler than strtonum in this case, but check the
input beforehand so we don't get unexpected results.
4. Slightly more consistent style between various parse and check and
increment operations on salt.
ok deraadt
10 years ago
jmc
55b1910ad3
tweak previous; ok sthen
10 years ago
tedu
74c23bc915
nibbles aren't enough random, use bytes. does a better job of picking
a free chunk at random and may allow to increase delayed chunk array.
ok otto
10 years ago
sthen
a82252ad47
first cut at documenting the change to malloc doing a partial 'junk' by
default and the new 'j' option to disable this; ok jmc@
10 years ago
tedu
c0d30f0eb0
remove Z option and default to something halfway to J.
we always junk small chunks now, and the first part of pages,
but only after free. J still does the old thing. j disables everything.
Consider experimental as we evaluate performance in the real world.
ok otto
10 years ago
espie
41f1e88953
explain a bit more what's going on for stupid me.
okay otto@
10 years ago
otto
8a0e8854ef
Better, cleaner hash function that computes the same on be and le archs.
Should improve sparc64 and other be archs. ok matthew@ miod@
10 years ago
jmc
c1238dcae0
- one more mallocarray -> reallocarray
- use <>
10 years ago
tedu
07d1cf3ec2
change mallocarray to reallocarray. useful in a few more situations.
malloc can, as always, be emulated via realloc(NULL).
ok deraadt
10 years ago
deraadt
58a64bf376
correct man page section
10 years ago
deraadt
00d28c4faf
Introducing: void *mallocarray(size_t nmemb, size_t size);
Like calloc(), except without the cleared-memory gaurantee
ok beck guenther, discussed for more than a year...
10 years ago
guenther
e004b9b14e
Correctly document the return value of getenv(3)
From Ben Cornett (ben (at) lantern.is)
10 years ago
jmc
b07eaf1c5d
tweak previous;
10 years ago
tedu
fdb6f71674
one small tweak to avoid ever going off the end of a string.
10 years ago
tedu
50bce974c2
improved checking for invalid hashes. from solar designer
10 years ago
deraadt
ce2837fd80
Use somewhat harsher language and better examples; demonstrate that
non-dangerous use functions is difficult.
ok guenther
10 years ago
otto
d487e76537
print pid in error messages; ok reyk@
10 years ago
tedu
659d4a87d0
use char * for strings, saving casts. add return codes to base64 functions
10 years ago
schwarze
87bf6d22d3
Add some missing names to the NAME sections.
For inet(3), go the other way, remove some bogus symlinks.
Found while testing the new makewhatis(8).
ok jmc@
10 years ago
beck
6760fef4ba
put $OpenBSD$ back.. notice by philip.
10 years ago
schwarze
93c318776d
Update Copyright notice; ok otto@ beck@ deraadt@.
This is merely a by-product of figuring out the amount of phk@ code
contained herein; i'm not planning to hack on this file.
10 years ago
beck
c707ba23e7
I have discussed these licenses with Poul-Henning Kamp and he has agreed to
this license change. We will remember that we all still like beer.
10 years ago
beck
241e064849
Poul-Henning Kamp informed me he is allright with this licensing change.
10 years ago
tedu
ea175c36fd
oops, merge error
10 years ago
tedu
edb424679c
clear stack variables, suggested by djm
10 years ago
naddy
32386fdf7d
Remove the MD4 functions.
"A collision attack published in 2007 can find collisions for full
MD4 in less than two hash operations."
ok deraadt@, man pages ok jmc@
10 years ago
tedu
c830a7ee52
some improvements suggested by djm.
use better constant for salt size.
always copy ":" to gerror, in case somebody is dumb enough to overwrite it
timingsafe_bcmp before somebody whines about strcmp
10 years ago
tedu
521978eee8
two functions don't need to be exported
10 years ago
tedu
5ca97b2032
minimal change to implementation of bcrypt to not require static globals.
add some friendlier functions.
move the classic static data api into wrapper functions.
a few more changes to come...
10 years ago
tedu
661d769f4e
remove the never used bm string functions
10 years ago
tedu
5d4103f5b3
switch to shorter ISC license. this was ok with Niels Provos.
10 years ago
tedu
2a80bbb144
consolidate the base64 code in one place, and remove inadequate test code
10 years ago
tedu
3beb8e286a
right or wrong, bcrypt() is declared in pwd.h, not unistd.h
10 years ago
miod
7766679fe4
Retire hp300, mvme68k and mvme88k ports. These ports have no users, keeping
this hardware alive is becoming increasingly difficult, and I should heed the
message sent by the three disks which have died on me over the last few days.
Noone sane will mourn these ports anyway. So long, and thanks for the fish.
10 years ago
guenther
5ebaeabad3
lint is dead (long live the lint!), so stop using it as a cpp conditional
(namespace pollution!) or talking about its opinion on code.
ok krw@
10 years ago
tedu
0b9e1f8234
solar's testsuite revealed insufficient validation of invalid input hashes.
add a more complete check for the rounds parameter. ok deraadt
10 years ago
schwarze
0f060ca5c4
in HISTORY, say where this actually came from;
ok deraadt@ bentley@
10 years ago
tedu
d1419f7b10
remove redundant test
10 years ago
tedu
ddd68ca1c6
sticking strlen into a char leads to wraparound at 256. fix this and
introduce a new 'b' hash minor. still generate 'a' minors for now.
reported by solar designer. diff by some combination of solar and jca.
ok deraadt
10 years ago
stsp
8c495fa1f9
Remove unnecessary stdio.h include.
Patch by Jean-Philippe Ouellet ; ok krw@
10 years ago
jmc
8d7315b175
add explicit_bzero to NAME;
10 years ago
tedu
2beb8f104d
add explicit_bzero to libc. implementation subject to change, but start
the ball rolling. ok deraadt.
10 years ago
deraadt
425e578efb
Ouch... recommend arc4random, not random.
spotted by tedu
10 years ago
schwarze
fbd81370eb
obvious .Pa fixes; found with mandocdb(8)
10 years ago
schwarze
938b39d868
Fix an obvious .Fn/.Fa typo, found while testing mandocdb(8).
10 years ago
schwarze
7227c1c1df
Usually, you don't want macros in the .Nd line, so remove instances of .Tn
marking up words that are not trademarks (ASCII, I/O, NFS, TCP, TELNET).
While here, remove .Tn markup from the same words in the body
of these pages, too.
10 years ago
schwarze
e2b8a435dc
Punctuation after macro arguments needs to be in a separate argument.
Found while testing mandocdb(8).
10 years ago
tedu
9bdaa18357
calling HashFinal with a null digest should crash, not be silently ignored
10 years ago