1. c13c100 Add support for 16-byte auth tag for AES GCM mode. by jfigus · 11 years ago
  2. 8719f95 This commit resolves issue #46. The GCM mode was using the wrong master SALT length. The master SALT should be 96 bits instead of 112 bits. Note, GCM mode uses the legacy CTR mode for the KDF. The legagacy CTR mode cipher implementations assume a 112 bit SALT. Changes to the cipher abstraction layer API are required to provide the ability to specify the SALT length. For now this commit modifies the SRTP layer to ensure the SALT is zero-appended before initializing the KDF. This commit also provides public definitions for the GCM cipher suite master key sizes to avoid confusion for application developers. by jfigus · 11 years ago
  3. 367d5d3 - fixed read of memory out of 'seq' variable bounds by Dmitry Sobinov · 11 years ago
  4. ffa134d Sync latest changes from master. by jfigus · 11 years ago
  5. 8c36da2 Add support for [draft-ietf-avtcore-srtp-aes-gcm-07] by jfigus · 11 years ago
  6. 7882dd9 Add AES-GCM crypto engine that leverages OpenSSL. by jfigus · 11 years ago
  7. 0acbb03 Undo the changes to the RTCP profile helper function. The prior commit was not compliant with RFC 3711. by jfigus · 11 years ago
  8. 8e47faf Fix 32-bit tag policies to use correct profile. by jfigus · 11 years ago
  9. 8884f4d Remove double-invocations to prevent buffer-overflow vulnerability. by jfigus · 11 years ago
  10. 4986a36 Security fix to not ignore of RTCP encryption, if required by TV Sriram · 12 years ago
  11. c0f1f1b Call debug_print for key and salt values separately, for both SRTP and SRTCP, by Jonathan Lennox · 13 years ago
  12. e2774db Fix inline functions when compiling as C99. by Jonathan Lennox · 13 years ago
  13. 23dc1e2 Patch from Jaap Keuter: by Jonathan Lennox · 14 years ago
  14. 20505b3 Fix memory corruption if the first stream in a session is removed. (Bug by Jonathan Lennox · 14 years ago
  15. f433241 Check cipher->type->id to determine whether a cipher is AES_ICM, rather than by Jonathan Lennox · 14 years ago
  16. 5df951a Add AES-256 support. by Jonathan Lennox · 14 years ago
  17. 1c93fd7 Call cipher_set_iv, rather than aes_icm_set_iv, when setting IV for by Jonathan Lennox · 14 years ago
  18. 953f46f Don't hard-code aes_icm cipher in SRTP KDF; instead, fetch cipher from crypto_kernel. by Jonathan Lennox · 14 years ago
  19. dcee5c6 Add allow_repeat_tx parameter to srtp_policy_t, allowing a sender to perform by Jonathan Lennox · 14 years ago
  20. a1242f8 Add support for user-selectable srtp window size, as a parameter in srtp_policy_t. by Jonathan Lennox · 14 years ago
  21. d8d5cd0 Update references to Internet-Drafts to refer to their published RFCs instead. by Jonathan Lennox · 14 years ago
  22. 5ae7633 Add srtp_shutdown function, to free state associcated with libsrtp. by Jonathan Lennox · 14 years ago
  23. 79870d6 initial EKT work by David McGrew · 17 years ago
  24. bb07732 fixed some nits and compiler warnings by David McGrew · 18 years ago
  25. 17127da works on vc7++, cuurently an exe target, must point project to openssl. Copy config.h_win32vc7 to config.h by Derek MacDonald · 18 years ago
  26. 3c45e0c created private header file, moved config.h from srtp.h by David McGrew · 18 years ago
  27. 0cb86ee adding dtls-srtp support functions by David McGrew · 18 years ago
  28. 576e148 adding srtp_stream_init_keys() function by David McGrew · 18 years ago
  29. c4fc00b unsigned consistency changes for portability by David McGrew · 18 years ago
  30. 7629bf2 updating dates by David McGrew · 18 years ago
  31. 9c70f29 fixed SRTCP authentication, added SRTCP test, improved rdb_t tests by David McGrew · 19 years ago
  32. c34f740 fixing srtcp_protect() direction check by David McGrew · 19 years ago
  33. f15808a moving srtp_get_stream() prototype to .h file by David McGrew · 19 years ago
  34. a854688 fixed rtpw policy-setting, added policy functions by David McGrew · 19 years ago
  35. 1482930 corrected header extension handling by David McGrew · 19 years ago
  36. 0c324cb (srtp_unprotect): Revert replay part of previous commit - RFC 3711 mandates that replay check be done first. But do keep key limit check after authentication step. by Marcus Sundberg · 19 years ago
  37. fc4d138 (srtp_unprotect): If authentication services are enabled we verify authentication first of all. Only if authentication succeeds do we check the replay database, and if that validates we proceed with key limit check and decryption. by Marcus Sundberg · 19 years ago
  38. 7627bc5 Rename octet union member -> v8 for consistency. by Marcus Sundberg · 19 years ago
  39. 67398e6 (srtp_add_stream): Sanity check arguments before doing anything. by Marcus Sundberg · 19 years ago
  40. 735eb4f Avoid include standard C headers if SRTP_KERNEL is defined. by Marcus Sundberg · 19 years ago
  41. e4e34f9 Add includes for ntoh*/hton*. by Marcus Sundberg · 19 years ago
  42. 410faaa Replace octet_t with uint8_t. by Marcus Sundberg · 19 years ago
  43. 811e144 lo32() -> low32() (typo) by Randell Jesup · 19 years ago
  44. 89fb7ea Fixed bswap_32, bswap_64 (#defines were a little off) by David McGrew · 19 years ago
  45. fec49dd continuing merge from jesup, several minor fixes by David McGrew · 19 years ago
  46. 235513a Initial revision by Cullen Jennings · 19 years ago