Jeff Mitchell
ef00a69f11
Add ChaCha20-Poly1305 support to transit ( #3975 )
2018-02-14 11:59:46 -05:00
Jeff Mitchell
3ce120e0f9
Add transaction-like behavior for Transit persists. ( #3959 )
2018-02-12 17:27:28 -05:00
Jeff Mitchell
313844f306
Remove package level variables from transit policy test, makes it easier to parallelize later and less magical
2018-02-12 11:04:58 -05:00
Jeff Mitchell
63efb0e111
Some vet fixes
2018-02-04 20:37:57 -05:00
Brian Kassouf
8142b42d95
Add context to storage backends and wire it through a lot of places ( #3817 )
2018-01-19 01:44:44 -05:00
Brian Kassouf
13b776e8e6
Fix plaintext backup in transit ( #3692 )
2017-12-15 09:08:28 -05:00
Vishal Nayak
c38f9884ce
Transit: backup/restore ( #3637 )
2017-12-14 12:51:50 -05:00
Vishal Nayak
18311d253d
Transit: Refactor internal representation of key entry map ( #3652 )
...
* convert internal map to index by string
* Add upgrade test for internal key entry map
* address review feedback
2017-12-06 18:24:00 -05:00
Vishal Nayak
ced60dbc0c
Encrypt/Decrypt/Sign/Verify using RSA in Transit backend ( #3489 )
...
* encrypt/decrypt/sign/verify RSA
* update path-help and doc
* Fix the bug which was breaking convergent encryption
* support both 2048 and 4096
* update doc to contain both 2048 and 4096
* Add test for encrypt, decrypt and rotate on RSA keys
* Support exporting RSA keys
* Add sign and verify test steps
* Remove 'RSA' from PEM header
* use the default salt length
* Add 'RSA' to PEM header since openssl is expecting that
* export rsa keys as signing-key as well
* Comment the reasoning behind the PEM headers
* remove comment
* update comment
* Parameterize hashing for RSA signing and verification
* Added test steps to check hash algo choice for RSA sign/verify
* fix test by using 'prehashed'
2017-11-03 10:45:53 -04:00
Jeff Mitchell
87e98dce23
Check input size to avoid a panic ( #3521 )
2017-11-02 16:40:52 -05:00
Vishal Nayak
a5e0e42b6a
return the actual error for base64 decoding failure ( #3397 )
2017-10-20 11:21:45 -04:00
Jeff Mitchell
8b9c24807e
Fix typo in transit error
2017-09-13 11:05:57 -04:00
Chris Hoffman
c6f9dbdf46
properly unlock policy when returning key setting errors ( #2974 )
2017-07-05 11:47:15 -04:00
Jeff Mitchell
bca213cf6d
Add ability to specify encryption key version in transit ( #2821 )
2017-06-06 16:02:54 -04:00
Jeff Mitchell
a52fae256a
ed25519 support in transit ( #2778 )
2017-06-05 15:00:39 -04:00
Ben Gadbois
f80c851681
Fixing printf (and similar) issues ( #2666 )
2017-05-01 23:34:10 -04:00
Jeff Mitchell
8acbdefdf2
More porting from rep ( #2388 )
...
* More porting from rep
* Address review feedback
2017-02-16 16:29:30 -05:00
Chris Hoffman
43bae79d01
Adding support for exportable transit keys ( #2133 )
2017-01-23 11:04:43 -05:00
vishalnayak
484f8993c5
Remove the methods introduced to make the tests work from its older package
2016-10-26 20:03:51 -04:00
vishalnayak
2ac019a9c5
Move policy test to keysutil package
2016-10-26 19:57:28 -04:00
vishalnayak
b30d5f5c57
Pulled out transit's lock manager and policy structs into a helper
2016-10-26 19:52:31 -04:00
