- da852b0 Resolve issue 37 by always using BE byte ordering of the RTCP trailer. Note, this commit will break backwards compatibility of RTCP protection when an AEAD profile is used. by jfigus · 9 years ago
- 23c7c24 Merge pull request #136 from fancycode/unprotect_empty_payload by John Foley · 9 years ago
- 8494490 Add static qualifier to srtp_stream_free(). Allow compiler optimization to decide if this should be inlined. by jfigus · 9 years ago
- dae5325 Allow empty payloads when unprotecting. by Joachim Bauch · 9 years ago
- 985769a Release memory for custom header extension encryption kdf. by Joachim Bauch · 9 years ago
- f3965b4 Move code to release partially allocated stream to own function. by Joachim Bauch · 9 years ago
- fb0bd87 Fix build breakage due to last PR. by jfigus · 9 years ago
- ce37ef6 Merge pull request #128 from fancycode/header_extensions_encryption by John Foley · 9 years ago
- da33987 Decrypt headers after payload has been decrypted (and authenticated). by Joachim Bauch · 9 years ago
- c1fc2ba Prevent overflows when encrypting extensions headers. by Joachim Bauch · 9 years ago
- 102da17 Fix potential memleak introduced with srtp_update by Pascal Bühler · 9 years ago
- e0fb3df RTCP index should not be reset when updating / rekeying by Pascal Bühler · 9 years ago
- fa1e8c2 Implement header extensions encryption for packets encrypted with GCM ciphers. by Joachim Bauch · 9 years ago
- 2e95530 Allow zero payload packets to pass bounds check. by jfigus · 9 years ago
- 49848d1 Fix error handling and clean-up compiler warning in recently added stream update logic. by jfigus · 9 years ago
- 0380bf4 Check length of encrypted payload length of packet prior to encrypting to prevent overrun when hdr->cc contains malformed data. by jfigus · 9 years ago
- c6d347f Merge pull request #123 from pabuhler/srtp_rekey by John Foley · 9 years ago
- 99a7482 Support header extensions encryption (RFC 6904). by Joachim Bauch · 9 years ago
- 3444c4b Update too strict bounds checks introduced in 2583150. by Joachim Bauch · 9 years ago
- 356f1cd Refactor srtp_update_stream based on code review by Pascal Bühler · 9 years ago
- bd3112a Add srtp_update functions by Pascal Bühler · 9 years ago
- 2583150 Prevent potential DoS attack due to lack of bounds checking on RTP header CSRC count and extension header length. Credit goes to Randell Jesup and the Firefox team for reporting this issue. by jfigus · 9 years ago
- 3c56180 Merge remote-tracking branch 'upstream/master' by persmule · 9 years ago
- bfec1cd * remove const-correctness on iv-related variables, since aes_gcm_ossl needs iv to be writable. by persmule · 9 years ago
- 9bdcfc7 Prevent buffer overflow when clearing srtp_kdf_t by Pascal Bühler · 9 years ago
- 8301c36 Clear 'session' if 'srtp_create' fails. by Joachim Bauch · 9 years ago
- 038d2cf Add support for using OpenSSL SRTP KDF algorithm. This work was originally done by Barry Fussell, but has been adapted to the latest libsrtp. Added new configure option called --enable-openssl-kdf to enable this feature. Also added new configure option to specify the location of the OpenSSL directory (--with-openssl-dir). Lastly, this commit updates config_in.h (via autoheader). by jfigus · 9 years ago
- 7d67ce5 Sync latest from master by jfigus · 9 years ago
- 25a0e6c Added explicit casts, fixed compiler warnings on MSVC. by Joachim Bauch · 9 years ago
- 724bb29 Fix merge damage. by jfigus · 10 years ago
- 72b1a81 Merge lastest from master. by jfigus · 10 years ago
- 557a787 Additional header check from Chromium. by Joachim Bauch · 10 years ago
- 226ec56 Finish refactoring of cipher.h API. by jfigus · 10 years ago
- 0d99b71 More refactoring of internal cipher API. Eliminate usage of void* in set_iv function. by jfigus · 10 years ago
- 3f93c3c More refactoring of internal cipher API. by jfigus · 10 years ago
- 2964a15 Refactor cipher encrypt API. by jfigus · 10 years ago
- de8deb3 Rename replay functions to comply with library name. by jfigus · 10 years ago
- 02d6f03 Rename error functions to comply with library name. by jfigus · 10 years ago
- 92736bc Rename crypto kernel functions to comply with library name. by jfigus · 10 years ago
- a6cf208 Remove support for --enable-kernel-linux option. by jfigus · 10 years ago
- 67b9c73 Rename crypto type defines. Removed unused defines and also removed some obsolete unit test code in srtp_driver. by jfigus · 10 years ago
- c7cdc9a Rename key limit functions to comply with library name. by jfigus · 10 years ago
- 9a84043 Rename cipher functions to comply with library name. by jfigus · 10 years ago
- 8f66972 Rename auth functions to comply with library name. by jfigus · 10 years ago
- ed755f5 Rename alloc functions to comply with library name. by jfigus · 10 years ago
- 46d6b47 Refactor debug API so app layer doesn't need to include crypto_kernel.h. Removed unused hex utils from libsrtp.a and moved them to the app layer. by jfigus · 10 years ago
- 267956d Remove obsoleted xfm.h. Remove doxygen directive for non-public defines. Add null/null policy helper to be used with rtpw. by jfigus · 10 years ago
- c5887e7 Continue the effort to rename API entry points so that all functions, structs, and defines begin with srtp_. by jfigus · 10 years ago
- 857009c Rename all public functions, types, and defines to begin with srtp_ prefix to comply with modern library coding convention. by jfigus · 10 years ago
- a9ac898 Begin header file refactoring. This is a work-in-progress. by jfigus · 10 years ago
- d4e3eec Declare as const char when use of literal strings by Christian Oien · 10 years ago
- b2edbef Return 0 when the version string can not be properly parsed. by jfigus · 10 years ago
- f62b64d Add support to return the library version number and string via the API. by jfigus · 10 years ago
- 6cffe24 Remove config.h from public headers and include it in non-header files instead by Teerapap Changwichukarn · 10 years ago
- 241fec3 Add srtp_set_user_data() and srtp_get_user_data() functions. by Iñaki Baz Castillo · 10 years ago
- e896bf7 Validate passed in signed length value (again) by Travis Cross · 10 years ago
- 73e3093 Moved packet length sanity check until after we've derived the expected tag length based on the session context. This resolves the compiler warning due to tag_len being used uninitialized. by jfigus · 10 years ago
- 3184400 Use `unsigned int` internally for `pkt_octet_len` by Travis Cross · 10 years ago
- 444a544 Validate passed in signed length value by Travis Cross · 10 years ago
- 1b8b1e7 Say `unsigned int` rather than `unsigned` by Travis Cross · 10 years ago
- dee3ee8 Simplify calculation of encrypted octet length by Travis Cross · 10 years ago
- 7d4c103 Fix cast to include entire expression by Travis Cross · 10 years ago
- 83439f7 Fix calculation of RTP/SRTP packet end address by Travis Cross · 10 years ago
- 8ba46eb Avoid buffer-overflow on short RTCP/SRTCP packets by Travis Cross · 10 years ago
- 3600c27 Avoid buffer over-read on null cipher AEAD by Travis Cross · 10 years ago
- fe36761 Prevent buffer overflow from untrusted RTP/SRTP lengths by Travis Cross · 10 years ago
- c13c100 Add support for 16-byte auth tag for AES GCM mode. by jfigus · 10 years ago
- 8719f95 This commit resolves issue #46. The GCM mode was using the wrong master SALT length. The master SALT should be 96 bits instead of 112 bits. Note, GCM mode uses the legacy CTR mode for the KDF. The legagacy CTR mode cipher implementations assume a 112 bit SALT. Changes to the cipher abstraction layer API are required to provide the ability to specify the SALT length. For now this commit modifies the SRTP layer to ensure the SALT is zero-appended before initializing the KDF. This commit also provides public definitions for the GCM cipher suite master key sizes to avoid confusion for application developers. by jfigus · 10 years ago
- 367d5d3 - fixed read of memory out of 'seq' variable bounds by Dmitry Sobinov · 10 years ago
- ffa134d Sync latest changes from master. by jfigus · 11 years ago
- 8c36da2 Add support for [draft-ietf-avtcore-srtp-aes-gcm-07] by jfigus · 11 years ago
- 7882dd9 Add AES-GCM crypto engine that leverages OpenSSL. by jfigus · 11 years ago
- 0acbb03 Undo the changes to the RTCP profile helper function. The prior commit was not compliant with RFC 3711. by jfigus · 11 years ago
- 8e47faf Fix 32-bit tag policies to use correct profile. by jfigus · 11 years ago
- 8884f4d Remove double-invocations to prevent buffer-overflow vulnerability. by jfigus · 11 years ago
- 4986a36 Security fix to not ignore of RTCP encryption, if required by TV Sriram · 11 years ago
- c0f1f1b Call debug_print for key and salt values separately, for both SRTP and SRTCP, by Jonathan Lennox · 12 years ago
- e2774db Fix inline functions when compiling as C99. by Jonathan Lennox · 13 years ago
- 23dc1e2 Patch from Jaap Keuter: by Jonathan Lennox · 14 years ago
- 20505b3 Fix memory corruption if the first stream in a session is removed. (Bug by Jonathan Lennox · 14 years ago
- f433241 Check cipher->type->id to determine whether a cipher is AES_ICM, rather than by Jonathan Lennox · 14 years ago
- 5df951a Add AES-256 support. by Jonathan Lennox · 14 years ago
- 1c93fd7 Call cipher_set_iv, rather than aes_icm_set_iv, when setting IV for by Jonathan Lennox · 14 years ago
- 953f46f Don't hard-code aes_icm cipher in SRTP KDF; instead, fetch cipher from crypto_kernel. by Jonathan Lennox · 14 years ago
- dcee5c6 Add allow_repeat_tx parameter to srtp_policy_t, allowing a sender to perform by Jonathan Lennox · 14 years ago
- a1242f8 Add support for user-selectable srtp window size, as a parameter in srtp_policy_t. by Jonathan Lennox · 14 years ago
- d8d5cd0 Update references to Internet-Drafts to refer to their published RFCs instead. by Jonathan Lennox · 14 years ago
- 5ae7633 Add srtp_shutdown function, to free state associcated with libsrtp. by Jonathan Lennox · 14 years ago
- 79870d6 initial EKT work by David McGrew · 17 years ago
- bb07732 fixed some nits and compiler warnings by David McGrew · 18 years ago
- 17127da works on vc7++, cuurently an exe target, must point project to openssl. Copy config.h_win32vc7 to config.h by Derek MacDonald · 18 years ago
- 3c45e0c created private header file, moved config.h from srtp.h by David McGrew · 18 years ago
- 0cb86ee adding dtls-srtp support functions by David McGrew · 18 years ago
- 576e148 adding srtp_stream_init_keys() function by David McGrew · 18 years ago
- c4fc00b unsigned consistency changes for portability by David McGrew · 18 years ago
- 7629bf2 updating dates by David McGrew · 18 years ago
- 9c70f29 fixed SRTCP authentication, added SRTCP test, improved rdb_t tests by David McGrew · 18 years ago
- c34f740 fixing srtcp_protect() direction check by David McGrew · 18 years ago
- f15808a moving srtp_get_stream() prototype to .h file by David McGrew · 19 years ago
- a854688 fixed rtpw policy-setting, added policy functions by David McGrew · 19 years ago