aboutsummaryrefslogtreecommitdiffstats
path: root/src/main/java/eu/siacs/conversations/utils/CryptoHelper.java (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Adapt prettifyFingerprint() to axolotl FP sizesAndreas Straub2015-07-071-5/+4
|
* fixed #1039Daniel Gultsch2015-04-251-0/+3
|
* disable all really weak cipher suitesBoris Wachtmeister2015-03-071-0/+16
| | | | | | | | | | | | | | With #959 all ciphers of the platform were enabled, but this also includes several suites that are considered as very weak, even down to NULL- and anon-ciphers which disable completely disable encryption and/or authentication. Especially the anon-ciphers could be easily used for a mitm-attack. To remove all weak ciphers a blacklist with patterns of cipher-names was added to Config.java. The blacklist is based on the "mandatory discards" that Mozilla suggests to not use for TLS-servers because they are weak or known to be broken. https://wiki.mozilla.org/Security/Server_Side_TLS#Mandatory_discards
* Use platform ciphers as well, just prefer oursSam Whited2015-02-021-5/+7
|
* don't disable any ciphersiNPUTmice2015-02-021-3/+4
|
* Harden the TLS connection cipher suitesSam Whited2015-01-141-5/+16
|
* Don't escape passwords in SASLSam Whited2014-11-151-1/+1
| | | | Fixes #671
* parse otr-fingerprint in qr codes and nfc. include otr fingerprint in ↵iNPUTmice2014-11-161-0/+9
| | | | shareable uri where ever possible
* Cache SCRAM-SHA-1 keys for current sessionSam Whited2014-11-151-0/+4
|
* Add SCRAM-SHA1 supportSam Whited2014-11-141-2/+29
| | | | | | | Factor out GS2 tokanization into own class Add authentication exception class Fixes #71
* Refactor authentication codeSam Whited2014-11-121-59/+1
|
* Make conversations the root projectSam Whited2014-10-221-0/+112