summaryrefslogtreecommitdiff
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* lib: Harden crypto unit testsDimitri Staessens2 days3-5/+103
* irmd: Fix OAP re-key header encodeDimitri Staessens2 days4-9/+27
* lib: Reject re-key to a live epochDimitri Staessens2 days2-12/+177
* build: Fix OpenSSL version check for PQCDimitri Staessens2 days9-12/+10
* build: Make re-key watermark configurableDimitri Staessens12 days2-51/+8
* lib: Wipe unpacked session key after copyDimitri Staessens12 days1-0/+4
* oap: Rename kex_config loaders to sec_configDimitri Staessens12 days8-130/+130
* irmd: Harden OAP handshake and add cert-less re-keyDimitri Staessens12 days11-239/+1334
* irmd: Reject unsupported OAP kex and cipherDimitri Staessens12 days1-2/+7
* lib: Bound crc_check against short packetsDimitri Staessens12 days1-2/+8
* irmd: Complete bidirectional flow re-keyingDimitri Staessens12 days9-261/+1111
* lib: Add constant-time comparison helperDimitri Staessens12 days1-0/+19
* lib: Group sec_config authentication fieldsDimitri Staessens12 days6-26/+26
* config: Rename enc.conf to sec.confDimitri Staessens12 days6-27/+27
* lib: Harden OpenSSL crypto backendDimitri Staessens12 days2-69/+99
* lib: Loop getrandom on short reads and EINTRDimitri Staessens12 days1-1/+17
* ipcpd: Use hash_mix64 for pft keysDimitri Staessens12 days6-32/+7
* lib: Add MurmurHash3 hash_mix64 for hash tablesDimitri Staessens12 days2-0/+50
* irmd: Deliver flow re-keyingDimitri Staessens12 days11-106/+1269
* ipcpd: Add flow-update relayDimitri Staessens12 days14-7/+483
* lib: Harden symmetric-key rotationDimitri Staessens12 days12-523/+2752
* irmd: Fail OAP config load on read errorsDimitri Staessens12 days2-4/+15
* irmd: Bound the OAP replay cacheDimitri Staessens12 days3-54/+263
* irmd: Reject OAP peer crt with unusable CNDimitri Staessens12 days4-43/+100
* irmd: Add issuer and digest pinning to OAPDimitri Staessens12 days16-45/+654
* irmd: Specify peer authentication contractDimitri Staessens12 days9-12/+449
* lib: Fix SSM reclaim-orphans testDimitri Staessens12 days1-1/+9
* ipcpd: Refactor dt statsDimitri Staessens2026-06-031-104/+47
* lib: Reclaim aged leaked ssm pool blocksDimitri Staessens2026-06-032-8/+34
* lib: Fix overflow in ssm_flow_set_notifyDimitri Staessens2026-06-031-5/+13
* lib: Send stream FIN in the windowDimitri Staessens2026-06-011-0/+16
* lib: Fix missing newlines in hash.cDimitri Staessens2026-06-011-0/+2
* lib: Fix FRCT seqno leak on rxm alloc failureDimitri Staessens2026-06-011-41/+50
* lib: Fix double pool_remove on tx-path failureDimitri Staessens2026-06-011-6/+10
* ipcpd: Fully gate fa/dt RIB ops on IPCP_FLOW_STATStestingDimitri Staessens2026-05-272-38/+20
* ipcpd: Drain mainloop before component shutdownDimitri Staessens2026-05-272-3/+4
* ipcpd: Close dt stat_used race vs rib readdirDimitri Staessens2026-05-271-4/+8
* irmd: Reorder init/finiDimitri Staessens2026-05-271-10/+19
* ipcpd: Fix eth double-release in MGMT rx pathDimitri Staessens2026-05-271-2/+2
* lib: Fix mixed declarations in hash.cDimitri Staessens2026-05-271-3/+4
* lib: Add FIN and receive-side linger for msg deallocDimitri Staessens2026-05-222-18/+72
* lib: Allow up to two TLPs per recovery episodeDimitri Staessens2026-05-221-8/+22
* lib: Further align FRCP with TCP RFCsDimitri Staessens2026-05-221-43/+89
* lib: Set a timeout on FRCT control packetsDimitri Staessens2026-05-222-17/+130
* lib: Add tail loss probe (TLP) to FRCPDimitri Staessens2026-05-221-21/+162
* lib: Fix underrun in activity timerDimitri Staessens2026-05-221-22/+50
* lib: Skip DRF rebase on same-epoch retransmitDimitri Staessens2026-05-201-2/+24
* lib: Free secure memory on process exitDimitri Staessens2026-05-202-4/+9
* lib: Update FRCP implementationDimitri Staessens2026-05-2020-1401/+4704
* lib: Use push/pop for ssm_pk_buff opsDimitri Staessens2026-05-207-29/+29