Commit Graph

253 Commits

Author SHA1 Message Date
Zi Lin
68e8f62107 client update. Trusted CAFile should be optional 2015-05-08 17:03:11 -07:00
Nick Sullivan
5c90a3a83f Merge pull request #52 from cloudflare/kyle/cleanups
goimports and go vet cleanups.
2015-05-07 17:08:54 -07:00
Kyle Isom
923804458d goimports and go vet cleanups. 2015-05-07 15:35:07 -07:00
Kyle Isom
4ecdcd8614 Merge pull request #50 from Bren2010/patch05
Patches for Bugs & HMAC Malleability
2015-05-07 14:42:59 -07:00
Brendan Mc
ef80162f14 Style changes 2015-05-07 13:51:00 -07:00
Brendan Mc
935b929dd5 Return to idiomatic style & Backwards compatible left&right owners 2015-05-04 19:05:19 -07:00
Brendan Mc
7e08548caf Patched HMAC vulnerability. 2015-05-01 16:46:57 -07:00
Brendan Mc
9f0c4e9e28 Fixed empty list bug & lowered disk thrashing in core_test 2015-05-01 16:11:33 -07:00
Brendan Mc
e61103147c Minimized global state and made user type an option. 2015-05-01 16:10:55 -07:00
Brendan Mc
c3c0e2182b Removed AES user type and reformatted more code. 2015-04-28 16:24:58 -07:00
Kyle Isom
64de12d368 Merge pull request #49 from Bren2010/patch03
Patches & Cleaning
2015-04-24 17:06:39 -07:00
Brendan Mc
e90713a370 Cleaned up; Patched identity point & invalid curve attacks..
- Update README.md
- Set read-only and write-only channels.
- Reorganized code.
- Set Content-Type and HSTS on index
- House keeping in ecdh.go and symcrypt.go
- Fixed bug; user changes weren't being saved.
2015-04-24 16:55:06 -07:00
Kyle Isom
eccf922250 Merge pull request #47 from cloudflare/nick/rsa
Default to RSA
2015-04-24 16:47:41 -07:00
Nick Sullivan
6abea0f3f6 Default to RSA
Because of potential vulnerabilities in the ECDH library, all new
accounts should default to RSA.
2015-04-24 16:25:46 -07:00
Nick Sullivan
ec27ee1fbb Merge pull request #46 from cloudflare/zi/simple-client
A simple client package for redoctober
2015-04-24 15:25:57 -07:00
Zi Lin
4702aab061 A simple client package for redoctober
- Generalize core.status to core.responseData
- Export core request types so the client can marshal/unmarshal
requests/responses
- Tested with a test script against a local redoctober server
2015-04-21 15:55:03 -07:00
Kyle Isom
1df27d72f7 Merge pull request #41 from cloudflare/nick/admin
Let encrypt and decrypt be called by non-admins.
2015-04-13 14:39:32 -07:00
Nick Sullivan
5deefb26c5 Let encrypt and decrypt be called by non-admins. 2015-04-13 12:51:02 -07:00
Nick Sullivan
2f4e7fed67 Merge pull request #40 from cloudflare/nick/hg
Move from code.google.com to golang.org
2015-04-10 12:24:49 -07:00
Nick Sullivan
b0e133e266 Move from code.google.com to golang.org 2015-04-10 12:22:18 -07:00
Nick Sullivan
735d6878ad Merge pull request #39 from cloudflare/nick/ui
Add new features to UI
2015-04-10 11:23:54 -07:00
Nick Sullivan
bb80f777b2 Add new features to UI
- Delegate restrictions
- Encryption labels
2015-04-09 18:50:30 -07:00
Nick Sullivan
4f3bab44ae Merge pull request #38 from cloudflare/nick/delegationmodel
Changes to delegation model
2015-04-09 17:17:12 -07:00
Nick Sullivan
8e910c2035 Changes to delegation model
- decryption can happen by non-admins
- encrypted files can be given labels
- delegation can limit decryption to specific users and labels
2015-04-09 17:15:44 -07:00
Nick Sullivan
e24e3f3244 Merge pull request #33 from cloudflare/nick/splitauthority
Add support for left/right groups
2015-02-10 09:48:17 -08:00
Nick Sullivan
3ab7fe305a Update travis for the modern age 2015-02-09 19:00:54 -08:00
Nick Sullivan
8c21db7ba4 Add support for left/right groups
LeftOwners and RightOwners can now be used as either disjoint
or overlapping sets of users for encrypting a message. Default
behavior is to set them to Owners given a non-empty Owners set.

One member from each group are required to decrypt the message.
2015-02-09 18:51:33 -08:00
Nick Sullivan
c372a02990 Merge pull request #32 from kisom/kyle/show-delegates
Decrypt returns the list of users used for delegation
2014-09-14 20:57:25 -07:00
Kyle Isom
91cd67f267 Decrypt returns the list of users used for delegation
When decrypting a chunk of data, red october will now report the users
whose keys were used in the decryption.
2014-09-14 19:13:37 -07:00
John Graham-Cumming
886bd0d623 Merge pull request #31 from streeter/patch-1
Add some commas for readability
2014-07-08 19:35:50 +01:00
Chris Streeter
2f7dce12c7 Add some commas for readability 2014-07-08 11:04:34 -07:00
Albert Strasheim
95e4a88036 Update README.md for embedded index.html. Add index.html example. 2014-03-02 09:19:08 -08:00
Nick Sullivan
fe77e044a3 Merge pull request #26 from cloudflare/cleanup2
Allow index.html to be overridden again.
2014-03-01 12:17:03 -08:00
Nick Sullivan
8fa387dcaa Merge pull request #28 from grittygrease/master
Merge pull request #1 from grittygrease/server-reload-fix
2014-03-01 12:15:24 -08:00
Nick Sullivan
322fdb5829 Fix bad formatting. 2014-03-01 12:13:48 -08:00
Nick Sullivan
f2d6851c22 Merge pull request #1 from grittygrease/server-reload-fix
Add support for unmarshalling ECC passvault
2014-03-01 12:05:13 -08:00
Nick Sullivan
21b4c55a92 Merge pull request #27 from grittygrease/server-reload-fix
Add support for unmarshalling ECC passvault
2014-03-01 11:59:39 -08:00
Nick Sullivan
522f2f23b9 Add support for unmarshalling ECC passvault
- Minor readme fixes
- Add structure for EC Public key unmarshal
2014-03-01 11:55:10 -08:00
Albert Strasheim
b31541d534 Allow index.html to be overridden again. 2014-03-01 10:54:46 -08:00
John Graham-Cumming
1a0f762b70 Merge pull request #25 from cloudflare/cleanup1
Deprecate -static parameter. Embed HTML instead.
2014-03-01 18:24:30 +00:00
Albert Strasheim
d9c8ab3ef8 Deprecate -static parameter. Embed HTML instead. 2014-03-01 09:32:51 -08:00
Nick Sullivan
cd72cb6ed4 Merge pull request #21 from ewalk153/patch-1
corrected typo in instructions for "run the server"
2014-02-05 21:16:31 -08:00
Nick Sullivan
a52e56ab54 Merge pull request #22 from kisom/ecdsa
Add ECC support
2014-01-16 14:14:06 -08:00
Kyle
de5b1817c7 SHA256 the ECDH shared key
This ensures the shared key is a more uniform distribution than just
taking the bytes from the shared X.
2014-01-10 16:27:14 -07:00
Nick Sullivan
f88722f3ee Add a step to get "go vet" in travis.ci build 2014-01-10 11:43:38 -08:00
Nick Sullivan
f243f78b7c Update travis.ci to use Go tip 2014-01-10 11:22:28 -08:00
Kyle
1916f385ed Move {En,De}cryptCBC and MakeRandom to symcrypt.
The symcrypt package now contains common secret-key code that is
redefined in a number of packages.
2014-01-10 03:58:43 -07:00
Kyle
a696c85bba Cleanups based on feedback from pull request. 2014-01-10 03:09:55 -07:00
Kyle
46b93b7fba Update core_test to check for DefaultRecordType.
In the passvault, the default type of public key cryptography is
selected via a variable. The core test has been changed where it relies
on RSA specifically to check for the default record type.
2014-01-09 19:23:44 -07:00
Kyle
4e4ac735ef Add ECCRecord support to keycache.
This commit adds ECC cases to functions checking for RSA records.
Additionally, the rsaEncryptedKey variable is changed to pubEncryptedKey
to reflect a general use of public key crypto.
2014-01-09 19:22:09 -07:00