aboutsummaryrefslogtreecommitdiffstats
path: root/src/main/java/eu/siacs/conversations/utils/CryptoHelper.java (unfollow)
Commit message (Collapse)AuthorFilesLines
2015-08-11Merge tag '1.5.2' into trz/rebaselookshe1-0/+5
2015-03-07disable all really weak cipher suitesBoris Wachtmeister1-0/+16
With #959 all ciphers of the platform were enabled, but this also includes several suites that are considered as very weak, even down to NULL- and anon-ciphers which disable completely disable encryption and/or authentication. Especially the anon-ciphers could be easily used for a mitm-attack. To remove all weak ciphers a blacklist with patterns of cipher-names was added to Config.java. The blacklist is based on the "mandatory discards" that Mozilla suggests to not use for TLS-servers because they are weak or known to be broken. https://wiki.mozilla.org/Security/Server_Side_TLS#Mandatory_discards
2015-02-02Use platform ciphers as well, just prefer oursSam Whited1-5/+7
2015-02-02don't disable any ciphersiNPUTmice1-3/+4
2015-01-14Harden the TLS connection cipher suitesSam Whited1-5/+16
2014-11-15Don't escape passwords in SASLSam Whited1-1/+1
Fixes #671
2014-11-16parse otr-fingerprint in qr codes and nfc. include otr fingerprint in ↵iNPUTmice1-0/+9
shareable uri where ever possible
2014-11-15Cache SCRAM-SHA-1 keys for current sessionSam Whited1-0/+4
2014-11-14Add SCRAM-SHA1 supportSam Whited1-2/+29
Factor out GS2 tokanization into own class Add authentication exception class Fixes #71
2014-11-12Refactor authentication codeSam Whited1-59/+1
2014-10-22Make conversations the root projectSam Whited1-0/+0