Zi Lin
68e8f62107
client update. Trusted CAFile should be optional
2015-05-08 17:03:11 -07:00
Nick Sullivan
5c90a3a83f
Merge pull request #52 from cloudflare/kyle/cleanups
...
goimports and go vet cleanups.
2015-05-07 17:08:54 -07:00
Kyle Isom
923804458d
goimports and go vet cleanups.
2015-05-07 15:35:07 -07:00
Kyle Isom
4ecdcd8614
Merge pull request #50 from Bren2010/patch05
...
Patches for Bugs & HMAC Malleability
2015-05-07 14:42:59 -07:00
Brendan Mc
ef80162f14
Style changes
2015-05-07 13:51:00 -07:00
Brendan Mc
935b929dd5
Return to idiomatic style & Backwards compatible left&right owners
2015-05-04 19:05:19 -07:00
Brendan Mc
7e08548caf
Patched HMAC vulnerability.
2015-05-01 16:46:57 -07:00
Brendan Mc
9f0c4e9e28
Fixed empty list bug & lowered disk thrashing in core_test
2015-05-01 16:11:33 -07:00
Brendan Mc
e61103147c
Minimized global state and made user type an option.
2015-05-01 16:10:55 -07:00
Brendan Mc
c3c0e2182b
Removed AES user type and reformatted more code.
2015-04-28 16:24:58 -07:00
Kyle Isom
64de12d368
Merge pull request #49 from Bren2010/patch03
...
Patches & Cleaning
2015-04-24 17:06:39 -07:00
Brendan Mc
e90713a370
Cleaned up; Patched identity point & invalid curve attacks..
...
- Update README.md
- Set read-only and write-only channels.
- Reorganized code.
- Set Content-Type and HSTS on index
- House keeping in ecdh.go and symcrypt.go
- Fixed bug; user changes weren't being saved.
2015-04-24 16:55:06 -07:00
Kyle Isom
eccf922250
Merge pull request #47 from cloudflare/nick/rsa
...
Default to RSA
2015-04-24 16:47:41 -07:00
Nick Sullivan
6abea0f3f6
Default to RSA
...
Because of potential vulnerabilities in the ECDH library, all new
accounts should default to RSA.
2015-04-24 16:25:46 -07:00
Nick Sullivan
ec27ee1fbb
Merge pull request #46 from cloudflare/zi/simple-client
...
A simple client package for redoctober
2015-04-24 15:25:57 -07:00
Zi Lin
4702aab061
A simple client package for redoctober
...
- Generalize core.status to core.responseData
- Export core request types so the client can marshal/unmarshal
requests/responses
- Tested with a test script against a local redoctober server
2015-04-21 15:55:03 -07:00
Kyle Isom
1df27d72f7
Merge pull request #41 from cloudflare/nick/admin
...
Let encrypt and decrypt be called by non-admins.
2015-04-13 14:39:32 -07:00
Nick Sullivan
5deefb26c5
Let encrypt and decrypt be called by non-admins.
2015-04-13 12:51:02 -07:00
Nick Sullivan
2f4e7fed67
Merge pull request #40 from cloudflare/nick/hg
...
Move from code.google.com to golang.org
2015-04-10 12:24:49 -07:00
Nick Sullivan
b0e133e266
Move from code.google.com to golang.org
2015-04-10 12:22:18 -07:00
Nick Sullivan
735d6878ad
Merge pull request #39 from cloudflare/nick/ui
...
Add new features to UI
2015-04-10 11:23:54 -07:00
Nick Sullivan
bb80f777b2
Add new features to UI
...
- Delegate restrictions
- Encryption labels
2015-04-09 18:50:30 -07:00
Nick Sullivan
4f3bab44ae
Merge pull request #38 from cloudflare/nick/delegationmodel
...
Changes to delegation model
2015-04-09 17:17:12 -07:00
Nick Sullivan
8e910c2035
Changes to delegation model
...
- decryption can happen by non-admins
- encrypted files can be given labels
- delegation can limit decryption to specific users and labels
2015-04-09 17:15:44 -07:00
Nick Sullivan
e24e3f3244
Merge pull request #33 from cloudflare/nick/splitauthority
...
Add support for left/right groups
2015-02-10 09:48:17 -08:00
Nick Sullivan
3ab7fe305a
Update travis for the modern age
2015-02-09 19:00:54 -08:00
Nick Sullivan
8c21db7ba4
Add support for left/right groups
...
LeftOwners and RightOwners can now be used as either disjoint
or overlapping sets of users for encrypting a message. Default
behavior is to set them to Owners given a non-empty Owners set.
One member from each group are required to decrypt the message.
2015-02-09 18:51:33 -08:00
Nick Sullivan
c372a02990
Merge pull request #32 from kisom/kyle/show-delegates
...
Decrypt returns the list of users used for delegation
2014-09-14 20:57:25 -07:00
Kyle Isom
91cd67f267
Decrypt returns the list of users used for delegation
...
When decrypting a chunk of data, red october will now report the users
whose keys were used in the decryption.
2014-09-14 19:13:37 -07:00
John Graham-Cumming
886bd0d623
Merge pull request #31 from streeter/patch-1
...
Add some commas for readability
2014-07-08 19:35:50 +01:00
Chris Streeter
2f7dce12c7
Add some commas for readability
2014-07-08 11:04:34 -07:00
Albert Strasheim
95e4a88036
Update README.md for embedded index.html. Add index.html example.
2014-03-02 09:19:08 -08:00
Nick Sullivan
fe77e044a3
Merge pull request #26 from cloudflare/cleanup2
...
Allow index.html to be overridden again.
2014-03-01 12:17:03 -08:00
Nick Sullivan
8fa387dcaa
Merge pull request #28 from grittygrease/master
...
Merge pull request #1 from grittygrease/server-reload-fix
2014-03-01 12:15:24 -08:00
Nick Sullivan
322fdb5829
Fix bad formatting.
2014-03-01 12:13:48 -08:00
Nick Sullivan
f2d6851c22
Merge pull request #1 from grittygrease/server-reload-fix
...
Add support for unmarshalling ECC passvault
2014-03-01 12:05:13 -08:00
Nick Sullivan
21b4c55a92
Merge pull request #27 from grittygrease/server-reload-fix
...
Add support for unmarshalling ECC passvault
2014-03-01 11:59:39 -08:00
Nick Sullivan
522f2f23b9
Add support for unmarshalling ECC passvault
...
- Minor readme fixes
- Add structure for EC Public key unmarshal
2014-03-01 11:55:10 -08:00
Albert Strasheim
b31541d534
Allow index.html to be overridden again.
2014-03-01 10:54:46 -08:00
John Graham-Cumming
1a0f762b70
Merge pull request #25 from cloudflare/cleanup1
...
Deprecate -static parameter. Embed HTML instead.
2014-03-01 18:24:30 +00:00
Albert Strasheim
d9c8ab3ef8
Deprecate -static parameter. Embed HTML instead.
2014-03-01 09:32:51 -08:00
Nick Sullivan
cd72cb6ed4
Merge pull request #21 from ewalk153/patch-1
...
corrected typo in instructions for "run the server"
2014-02-05 21:16:31 -08:00
Nick Sullivan
a52e56ab54
Merge pull request #22 from kisom/ecdsa
...
Add ECC support
2014-01-16 14:14:06 -08:00
Kyle
de5b1817c7
SHA256 the ECDH shared key
...
This ensures the shared key is a more uniform distribution than just
taking the bytes from the shared X.
2014-01-10 16:27:14 -07:00
Nick Sullivan
f88722f3ee
Add a step to get "go vet" in travis.ci build
2014-01-10 11:43:38 -08:00
Nick Sullivan
f243f78b7c
Update travis.ci to use Go tip
2014-01-10 11:22:28 -08:00
Kyle
1916f385ed
Move {En,De}cryptCBC and MakeRandom to symcrypt.
...
The symcrypt package now contains common secret-key code that is
redefined in a number of packages.
2014-01-10 03:58:43 -07:00
Kyle
a696c85bba
Cleanups based on feedback from pull request.
2014-01-10 03:09:55 -07:00
Kyle
46b93b7fba
Update core_test to check for DefaultRecordType.
...
In the passvault, the default type of public key cryptography is
selected via a variable. The core test has been changed where it relies
on RSA specifically to check for the default record type.
2014-01-09 19:23:44 -07:00
Kyle
4e4ac735ef
Add ECCRecord support to keycache.
...
This commit adds ECC cases to functions checking for RSA records.
Additionally, the rsaEncryptedKey variable is changed to pubEncryptedKey
to reflect a general use of public key crypto.
2014-01-09 19:22:09 -07:00