- c13c100 Add support for 16-byte auth tag for AES GCM mode. by jfigus · 11 years ago
- 8719f95 This commit resolves issue #46. The GCM mode was using the wrong master SALT length. The master SALT should be 96 bits instead of 112 bits. Note, GCM mode uses the legacy CTR mode for the KDF. The legagacy CTR mode cipher implementations assume a 112 bit SALT. Changes to the cipher abstraction layer API are required to provide the ability to specify the SALT length. For now this commit modifies the SRTP layer to ensure the SALT is zero-appended before initializing the KDF. This commit also provides public definitions for the GCM cipher suite master key sizes to avoid confusion for application developers. by jfigus · 11 years ago
- 367d5d3 - fixed read of memory out of 'seq' variable bounds by Dmitry Sobinov · 11 years ago
- ffa134d Sync latest changes from master. by jfigus · 11 years ago
- 8c36da2 Add support for [draft-ietf-avtcore-srtp-aes-gcm-07] by jfigus · 11 years ago
- 7882dd9 Add AES-GCM crypto engine that leverages OpenSSL. by jfigus · 11 years ago
- 0acbb03 Undo the changes to the RTCP profile helper function. The prior commit was not compliant with RFC 3711. by jfigus · 11 years ago
- 8e47faf Fix 32-bit tag policies to use correct profile. by jfigus · 11 years ago
- 8884f4d Remove double-invocations to prevent buffer-overflow vulnerability. by jfigus · 11 years ago
- 4986a36 Security fix to not ignore of RTCP encryption, if required by TV Sriram · 12 years ago
- c0f1f1b Call debug_print for key and salt values separately, for both SRTP and SRTCP, by Jonathan Lennox · 13 years ago
- e2774db Fix inline functions when compiling as C99. by Jonathan Lennox · 13 years ago
- 23dc1e2 Patch from Jaap Keuter: by Jonathan Lennox · 14 years ago
- 20505b3 Fix memory corruption if the first stream in a session is removed. (Bug by Jonathan Lennox · 14 years ago
- f433241 Check cipher->type->id to determine whether a cipher is AES_ICM, rather than by Jonathan Lennox · 14 years ago
- 5df951a Add AES-256 support. by Jonathan Lennox · 14 years ago
- 1c93fd7 Call cipher_set_iv, rather than aes_icm_set_iv, when setting IV for by Jonathan Lennox · 14 years ago
- 953f46f Don't hard-code aes_icm cipher in SRTP KDF; instead, fetch cipher from crypto_kernel. by Jonathan Lennox · 14 years ago
- dcee5c6 Add allow_repeat_tx parameter to srtp_policy_t, allowing a sender to perform by Jonathan Lennox · 14 years ago
- a1242f8 Add support for user-selectable srtp window size, as a parameter in srtp_policy_t. by Jonathan Lennox · 14 years ago
- d8d5cd0 Update references to Internet-Drafts to refer to their published RFCs instead. by Jonathan Lennox · 14 years ago
- 5ae7633 Add srtp_shutdown function, to free state associcated with libsrtp. by Jonathan Lennox · 14 years ago
- 79870d6 initial EKT work by David McGrew · 17 years ago
- bb07732 fixed some nits and compiler warnings by David McGrew · 18 years ago
- 17127da works on vc7++, cuurently an exe target, must point project to openssl. Copy config.h_win32vc7 to config.h by Derek MacDonald · 18 years ago
- 3c45e0c created private header file, moved config.h from srtp.h by David McGrew · 18 years ago
- 0cb86ee adding dtls-srtp support functions by David McGrew · 18 years ago
- 576e148 adding srtp_stream_init_keys() function by David McGrew · 18 years ago
- c4fc00b unsigned consistency changes for portability by David McGrew · 18 years ago
- 7629bf2 updating dates by David McGrew · 18 years ago
- 9c70f29 fixed SRTCP authentication, added SRTCP test, improved rdb_t tests by David McGrew · 19 years ago
- c34f740 fixing srtcp_protect() direction check by David McGrew · 19 years ago
- f15808a moving srtp_get_stream() prototype to .h file by David McGrew · 19 years ago
- a854688 fixed rtpw policy-setting, added policy functions by David McGrew · 19 years ago
- 1482930 corrected header extension handling by David McGrew · 19 years ago
- 0c324cb (srtp_unprotect): Revert replay part of previous commit - RFC 3711 mandates that replay check be done first. But do keep key limit check after authentication step. by Marcus Sundberg · 19 years ago
- fc4d138 (srtp_unprotect): If authentication services are enabled we verify authentication first of all. Only if authentication succeeds do we check the replay database, and if that validates we proceed with key limit check and decryption. by Marcus Sundberg · 19 years ago
- 7627bc5 Rename octet union member -> v8 for consistency. by Marcus Sundberg · 19 years ago
- 67398e6 (srtp_add_stream): Sanity check arguments before doing anything. by Marcus Sundberg · 19 years ago
- 735eb4f Avoid include standard C headers if SRTP_KERNEL is defined. by Marcus Sundberg · 19 years ago
- e4e34f9 Add includes for ntoh*/hton*. by Marcus Sundberg · 19 years ago
- 410faaa Replace octet_t with uint8_t. by Marcus Sundberg · 19 years ago
- 811e144 lo32() -> low32() (typo) by Randell Jesup · 19 years ago
- 89fb7ea Fixed bswap_32, bswap_64 (#defines were a little off) by David McGrew · 19 years ago
- fec49dd continuing merge from jesup, several minor fixes by David McGrew · 19 years ago
- 235513a Initial revision by Cullen Jennings · 19 years ago