strongswan/scripts/.gitignore

aes-test
bin2array
bin2sql
crypt_burn
dh_speed
dnssec
fetch
hash_burn
id2sql
key2keyid
keyid2sql
malloc_speed
oid2der
pubkey_speed
settings-test
thread_analysis
tls_test
timeattack
Added scripts/aes-test to .gitignore 2013-08-28 20:52:30 +00:00			`aes-test`
added .gitignore files, ready for the switch 2009-04-30 07:42:30 +00:00			`bin2array`
			`bin2sql`
scripts: Ignore settings-test script 2014-05-20 16:56:43 +00:00			`crypt_burn`
			`dh_speed`
			`dnssec`
			`fetch`
			`hash_burn`
added .gitignore files, ready for the switch 2009-04-30 07:42:30 +00:00			`id2sql`
			`key2keyid`
			`keyid2sql`
scripts: Ignore settings-test script 2014-05-20 16:56:43 +00:00			`malloc_speed`
Added command line tool for OID to DER conversion function 2010-12-14 13:49:17 +00:00			`oid2der`
moved publickey speed test to a standalone program This reverts commit 08874d6ae29745de264f269b15afbbf6cd5acaad. 2009-06-10 14:10:46 +00:00			`pubkey_speed`
scripts: Ignore settings-test script 2014-05-20 16:56:43 +00:00			`settings-test`
			`thread_analysis`
Implemented a TLS utility to test on any TLS secured TCP connection 2010-08-25 10:57:13 +00:00			`tls_test`
scripts: Add a tool that tries to guess MAC/ICV values using validation times This tool shows that it is trivial to re-construct the value memcmp() compares against by just measuring the time the non-time-constant memcmp() requires to fail. It also shows that even when running without any network latencies it gets very difficult to reconstruct MAC/ICV values, as the time variances due to the crypto routines are large enough that it gets difficult to measure the time that memcmp() actually requires after computing the MAC. However, the faster/time constant an algorithm is, the more likely is a successful attack. When using AES-NI, it is possible to reconstruct (parts of) a valid MAC with this tool, for example with AES-GCM. While this is all theoretical, and way more difficult to exploit with network jitter, it nonetheless shows that we should replace any use of memcmp/memeq() with a constant-time alternative in all sensitive places. 2015-04-11 12:59:22 +00:00			`timeattack`