summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* lib: Fix locking on flow readDimitri Staessens5 days1-9/+13
* lib: Prefer writers on the proc flow lockDimitri Staessens5 days1-4/+18
* lib: Clean up on cancelled blocking readDimitri Staessens5 days2-4/+20
* lib: Separate rekey replay from epoch conflictDimitri Staessens5 days3-16/+42
* irmd: Move AUTH test macros to OAP common.hDimitri Staessens5 days3-25/+23
* irmd: Test OAP KEM re-key floorDimitri Staessens5 days1-0/+126
* irmd: Expand and parametrize OAP testsDimitri Staessens5 days4-182/+554
* lib: Harden crypto unit testsDimitri Staessens5 days3-5/+103
* irmd: Fix OAP re-key header encodeDimitri Staessens5 days4-9/+27
* lib: Reject re-key to a live epochDimitri Staessens5 days2-12/+177
* build: Fix OpenSSL version check for PQCDimitri Staessens5 days10-46/+27
* build: Make re-key watermark configurableDimitri Staessens2026-06-293-52/+11
* lib: Wipe unpacked session key after copyDimitri Staessens2026-06-291-0/+4
* oap: Rename kex_config loaders to sec_configDimitri Staessens2026-06-298-130/+130
* irmd: Harden OAP handshake and add cert-less re-keyDimitri Staessens2026-06-2911-239/+1334
* irmd: Reject unsupported OAP kex and cipherDimitri Staessens2026-06-291-2/+7
* lib: Bound crc_check against short packetsDimitri Staessens2026-06-291-2/+8
* irmd: Complete bidirectional flow re-keyingDimitri Staessens2026-06-2910-262/+1113
* lib: Add constant-time comparison helperDimitri Staessens2026-06-292-2/+25
* lib: Group sec_config authentication fieldsDimitri Staessens2026-06-297-28/+30
* config: Rename enc.conf to sec.confDimitri Staessens2026-06-299-43/+38
* lib: Harden OpenSSL crypto backendDimitri Staessens2026-06-292-69/+99
* lib: Guard logging against thread cancellationDimitri Staessens2026-06-291-0/+7
* lib: Loop getrandom on short reads and EINTRDimitri Staessens2026-06-291-1/+17
* ipcpd: Use hash_mix64 for pft keysDimitri Staessens2026-06-296-32/+7
* lib: Add MurmurHash3 hash_mix64 for hash tablesDimitri Staessens2026-06-293-0/+53
* irmd: Deliver flow re-keyingDimitri Staessens2026-06-2914-114/+1285
* ipcpd: Add flow-update relayDimitri Staessens2026-06-2917-7/+503
* lib: Harden symmetric-key rotationDimitri Staessens2026-06-2919-534/+2996
* irmd: Fail OAP config load on read errorsDimitri Staessens2026-06-293-4/+21
* irmd: Bound the OAP replay cacheDimitri Staessens2026-06-294-54/+265
* irmd: Reject OAP peer crt with unusable CNDimitri Staessens2026-06-295-43/+120
* irmd: Add issuer and digest pinning to OAPDimitri Staessens2026-06-2919-46/+699
* irmd: Specify peer authentication contractDimitri Staessens2026-06-2912-14/+477
* lib: Fix SSM reclaim-orphans testDimitri Staessens2026-06-291-1/+9
* ipcpd: Refactor dt statsDimitri Staessens2026-06-031-104/+47
* lib: Reclaim aged leaked ssm pool blocksDimitri Staessens2026-06-033-8/+36
* lib: Fix overflow in ssm_flow_set_notifyDimitri Staessens2026-06-031-5/+13
* lib: Decouple rbuff size from RQ sizeDimitri Staessens2026-06-031-12/+2
* lib: Send stream FIN in the windowDimitri Staessens2026-06-011-0/+16
* lib: Fix missing newlines in hash.cDimitri Staessens2026-06-011-0/+2
* lib: Fix FRCT seqno leak on rxm alloc failureDimitri Staessens2026-06-011-41/+50
* lib: Fix double pool_remove on tx-path failureDimitri Staessens2026-06-011-6/+10
* ipcpd: Fully gate fa/dt RIB ops on IPCP_FLOW_STATStestingDimitri Staessens2026-05-273-40/+27
* ipcpd: Drain mainloop before component shutdownDimitri Staessens2026-05-272-3/+4
* ipcpd: Close dt stat_used race vs rib readdirDimitri Staessens2026-05-271-4/+8
* irmd: Reorder init/finiDimitri Staessens2026-05-271-10/+19
* ipcpd: Fix eth double-release in MGMT rx pathDimitri Staessens2026-05-271-2/+2
* lib: Fix mixed declarations in hash.cDimitri Staessens2026-05-271-3/+4
* lib: Add FIN and receive-side linger for msg deallocDimitri Staessens2026-05-222-18/+72