Martin Willi
39e1ddec2e
scripts: Add a tool that tries to guess MAC/ICV values using validation times
...
This tool shows that it is trivial to re-construct the value memcmp() compares
against by just measuring the time the non-time-constant memcmp() requires to
fail.
It also shows that even when running without any network latencies it gets
very difficult to reconstruct MAC/ICV values, as the time variances due to the
crypto routines are large enough that it gets difficult to measure the time
that memcmp() actually requires after computing the MAC.
However, the faster/time constant an algorithm is, the more likely is a
successful attack. When using AES-NI, it is possible to reconstruct (parts of)
a valid MAC with this tool, for example with AES-GCM.
While this is all theoretical, and way more difficult to exploit with network
jitter, it nonetheless shows that we should replace any use of memcmp/memeq()
with a constant-time alternative in all sensitive places.
2015-04-14 11:51:54 +02:00
Tobias Brunner
5b64c04046
scripts: Add test script for settings_t
2014-05-15 12:03:07 +02:00
Tobias Brunner
8972c72237
aes-test: Add script to test AES implementations according to AESAVS/GCMVS
2013-08-24 16:22:51 +02:00
Martin Willi
3b6d8855e8
scripts: link against librt only if required
...
With glibc, this seems to be the case for 2.17 and older versions only.
2013-08-08 09:12:52 +02:00
Martin Willi
62e1c80803
scripts: link malloc_speed against librt
2013-08-08 09:09:00 +02:00
Martin Willi
19cb07b890
automake: replace INCLUDES by AM_CPPFLAGS
...
INCLUDES are now deprecated and throw warnings when using automake 1.13.
We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and
defines are passed to AM_CPPFLAGS only.
2013-07-18 14:59:19 +02:00
Martin Willi
40f2a5306a
scripts: add a simple test utility to do some malloc() benchmarking/profiling
2013-05-06 15:15:24 +02:00
Reto Guadagnini
d786cbda5c
Implemented the resolver test script "dnssec"
2013-02-19 11:57:21 +01:00
Martin Willi
8217c099ce
Add a tool to burn hashers
2012-07-17 17:32:08 +02:00
Martin Willi
4ae7f7d13e
Use spaces in Makefile.am identation, autotools don't like tabs
2011-05-20 10:09:09 +02:00
Martin Willi
a8a7a31700
Added simple fetcher tool to test fetcher implementations
2011-01-17 18:19:59 +01:00
Martin Willi
7240e2266c
Added command line tool for OID to DER conversion function
2011-01-05 16:46:02 +01:00
Tobias Brunner
3f9ba3be66
Conditional exclusion of tls_test script completed.
2010-09-09 13:21:38 +02:00
Tobias Brunner
6d4ae46768
Fixed typo.
2010-09-09 13:21:38 +02:00
Martin Willi
00755453e3
Build tls_test script only if TLS stack is enabled
2010-09-07 10:21:44 +02:00
Martin Willi
f1a74a3cab
Implemented a TLS utility to test on any TLS secured TCP connection
2010-08-25 12:57:13 +02:00
Martin Willi
37e52c3fbf
Added a crypto transform stress test for profiling
2010-08-19 19:05:14 +02:00
Martin Willi
8f01815143
Build dedicated plugin lists for each strongSwan component
2010-08-12 14:46:57 +02:00
Tobias Brunner
257e27df07
Fixing out-of-tree build after adding dependency to config.status.
2010-04-29 13:29:53 +02:00
Martin Willi
b0e789035c
Users of PLUGINS depend on config.status, rebuilding them if plugin configuration is updated
2010-04-29 11:28:27 +02:00
Martin Willi
356b2b2780
pass NULL to library_init() to load settings from default file
2009-09-10 18:52:42 +02:00
Martin Willi
5b03a350fc
use NULL to load plugins from default plugin directory
2009-09-10 18:52:42 +02:00
Martin Willi
0df451bc07
use ./configured plugins in keyid scripts
2009-08-26 11:23:55 +02:00
Martin Willi
a4caeac76e
moved publickey speed test to a standalone program
...
This reverts commit 08874d6ae2
.
2009-06-10 16:25:32 +02:00
Martin Willi
3e3de01b28
moved Diffie-Hellman speed test to a standalone program
...
This reverts commit 1e6050bfae
.
2009-06-10 14:58:58 +02:00
Martin Willi
be0a03be64
set default CFLAGS globally, including -Wno-format
2009-04-27 11:34:07 +00:00
Andreas Steffen
faf0e41801
suppress format warnings in the scripts directory
2009-04-21 19:51:48 +00:00
Andreas Steffen
1a4d27c854
added thread_analysis tool
2008-09-01 11:19:07 +00:00
Andreas Steffen
f5a0d968fc
added keyid2sql helper script
2008-07-29 19:46:39 +00:00
Andreas Steffen
1b7db64f6f
configure plugin path in scripts
2008-06-29 14:43:50 +00:00
Andreas Steffen
39b7780df9
created scripts/Makefile.am
2008-06-29 13:57:00 +00:00