changes
1 CryptKit change log 2 3 CryptKit-8 4 -- Added prototypes for NSFEEPublicKey convenience methods to NSCryptors.h 5 6 CryptKit-9 7 * Alpha version to dreece and crandall 13 Aug 1996 8 * FEE_KEY_VERSION 3, FEE_KEYSTRING_VERSION 1 9 10 CryptKit-10 11 -- Added KeyStringFormat.doc 12 -- Deleted -publicKeyData, keyWithPublicKeyData (public keys now always 13 represented as strings) 14 -- Beefed up range and validity checking in: 15 -- hexstr_to_giant() 16 -- new_hexstr_from_key() 17 -- +keyWithPublicKeyString 18 -- Added check for valid_hexstr() and NULL hexstr_to_key() in 19 +digitalSignatureWithDataRepresentation 20 -- Added and enforced MAX_UNAME_LENGTH 21 -- added key_equal(_plus, other->_plus) to -[NSFEEPublicKey isEqual:] 22 -- last version with NSGiantIntegers.m, utilities.m, NSFastEllipticCurve.m 23 as ObjC files 24 25 CryptKit-11 26 * FEE_KEYSTRING_VERSION = 2 27 FEE_KEYSTRING_VERSION_MIN = 1 28 -- Major rewrite of all top-level classes; ported bulk of logic to 29 portable C code. ObjC API (in NSCryptors.h, NSDESCryptor.h) unchanged. 30 31 CryptKit-12 32 * Alpha version sent to REC 6 Sep 1996 and to dreece 12 Sep 96 33 -- Added platform.[ch] 34 -- Fixed (b<n), (sign<0) case in gmersennemod() to allow for arbitrary n. 35 -- Added feeHashReinit() to feeHash.[hc]. 36 -- Rewrote feeGenPrivate(). Hashes password and pads to (size of curve 37 order)++, then takes result mod curve order. 38 -- Added set_priv_key_data(), and removed its function from 39 new_public_with_key(); deleted new_public_with_key(). 40 -- Initial changes for compiling on NT. 41 42 CryptKit-13 43 * Sent to REC for testing 1 Oct 96 44 -- first version to be (more or less) fully functional on NT 45 -- tolerate non-hex leading and trailing characters in public key string 46 -- Fixed --size underflow bug in normal_subg() 47 -- Added enc64 routines 48 49 CryptKit-14 50 * First version to compile & run OK on OpenStep/NT 51 * Alpha version sent to dreece (17 Oct 96) and Avie (18 Oct 96) 52 -- Added class names to CryptKit.def (was CryptKit.def.src - no longer 53 builds C-only DLL from win.mak!) 54 -- Updated to 4.1 pb_makefiles 55 -- misc. Makefile tweaks to compile on NT 56 -- Misc. tweaks for warning-free compile on NT 57 -- ifdef'd out DllMain() 58 59 CryptKit-15 60 * First integration into cryptdev master tree, 12 Nov 1996 61 * CFILE_VERSION = CFILE_MIN_VERSION = 1 62 -- Added feeCipherFile and NSCipherFile 63 -- Added sigSigner out param to feePubKeyVerifySignature() 64 -- Made enc64, dec64 more robust and more Microsoft-tolerant 65 -- feeGenPrivate() returns error if private key data too short 66 67 CryptKit-16 68 * Integrated into cryptdev master tree, 20 Dec 1996 69 * Sent to J. Landwehr with first NT version of ICE 20 Dec 1996 70 * COMMON_PUBLIC_KEY_STRING_VERSION = 2 71 * COMMON_FEE_SIG_VERSION 72 * Major changes to keystring and signature format, compatible with 73 JavaFEE-4 and backwards compatible with older CryptKit keys and 74 signatures. 75 * Verfified to work with ICE (JavaDemo-4) running on an NT server 76 -- Added debugging code to DES.c, MD5.c 77 -- Added mersennePrimes[24..26] 78 -- Newlines optional in dec64() and isValidEnc64(). 79 -- Added byteRep support to utilities.c 80 81 CryptKit-17 82 -- New curveParams mechanism, with IEEE-approved curve parameters 83 -- Old curve param 'a' is 'c'; new params b, c, x1OrderPlus x1OrderMinus 84 -- This version doesn't *use* the new curve params in elliptic algebra; 85 it's an interim version for testing. DVT suite (ckutils/cktest) still 86 works at depths 0 thru 4. 87 -- NO API CHANGES since CryptKit-16. 88 -- key strings and signatures still compatible with CryptKit-16 and 89 JavaFEE-4 90 -- Deleted mersennePrimes[], set_crypt_params(), new_public_com(), 91 key_copy() 92 -- Most fields in keystruct now superceded by curveParams *cp 93 -- Added setGiantSize() kludge, replaces weird call to borrowGiant(*exp) 94 in set_crypt_params() 95 -- Added copyGiant(), giant_to_int() 96 -- Removed a bunch of dead files from project 97 -- Removed *_to_hexstr() from utilities.c 98 -- Fixed "pad too short bug" in small depth cases in feePubKeyCreatePad() 99 100 CryptKit-18 101 * Integrated into cryptdev master tree, 31 Jan 1997 102 * Completely broke backward compatibility with old key strings and 103 signatures. 104 * FEE_SIG_VERSION = 3 105 * PUBLIC_KEY_STRING_VERSION = 3 106 * Old 2:1 FEED renamed feeFEEDExp (feeFEEDExp.c, names start with 107 feeFEEDExp). New 1:1 FEE is feeFEED.c. A #define in feeFEED.h redirects 108 client's feeFEED calls to feeFEEDexp 109 -- New elliptic math using all curveParams fields 110 -- Cleaned up all which_curve/twist code to use CURVE_MINUS/CURVE_PLUS 111 -- plus curves now used exclusively except for in FEED decrypt, which 112 uses both curves 113 -- Moved all byteRep code from utilities.c to byteRep.c. 114 -- Added curveOrderJustify(), use it to trim private key data and 115 signature random data to [2, curveOrder] 116 -- curveParams[4] now has full parameters 117 -- ENGINE_127_BITS version, with hard-coded 127 bit elliptic() in 118 engineNSA127.c, no longer builds - obsolete (hopefully) 119 -- Fixed negation bug in gmersennemod() (a long-standing FEE bug) 120 -- Fixed n[words-1] == 0 bug in extractbits() (ditto) 121 -- Added keyWithPrivateString:depth:usageName: to NSFEEPublicKey 122 -- Deleted obsolete #defines from NSFastEllipticCurve.c, including those 123 for signature_compare() 124 -- Added FEE_PROFILE logic 125 -- Now have unified giant-to-byteRep mechanism via serializeGiant and 126 deserializeGiant. Deleted canonicalize_ints(), canonicalize_shorts(), 127 giant_cleanse(), data_to_giant() 128 -- Removed all *_to_hexstr and hexstr_to* code 129 130 CryptKit-19 131 * First version known to be bit-for-bit compatible with JavaFEE. 132 keys, signatures, ciphertext, and cipherfiles. Tested against 133 JavaFEE-5. 134 * Integrated in cryptdev master 13 Feb 1997. 135 -- Broke backward compatibility with CipherFiles. CFILE_VERSION = 1. 136 -- First working 1:1 FEED, in feeFEED.c. Old 2:1 FEED, now in feeFEEDExp.c, 137 unchanged. 138 -- Fixed zero bug in gcompg(). 139 -- CipherFile uses portable byte rep; added CFE_FEED and CFE_FEEDExp types 140 -- New optimized numer_plus(), denom_double(), and numer_times() 141 -- Added maxShorts and minBytes to curveParams 142 -- Added explicit SIGN_PLUS, SIGN_MINUS as 's' arg to elliptic_add() 143 -- newGiant() no longer modifies CurrentMaxShorts or giant stack 144 -- Added FEE_DEPTH_192_M529891 145 -- Added feeFEEDCipherTextSize(), feeFEEDExpCipherTextSize() 146 -- Fixed platform dependencies in MD5.c 147 -- All borrowGiant() calls in NSFastEllipticCurve,c specify explicit 148 giant size (usually curveParams.maxShorts) 149 -- #ifdef'd out matric math routines in NSGiantIntegers.c 150 -- Added FEE_DEPTH_192_M529891 151 -- CurveParams.c now assumes all fields have valid giants 152 -- feeCipherfile now has four encrTypes - CFE_PublicDES, CFE_RandDES, 153 CFE_FEED, CFE_FEEDExp 154 155 CryptKit-20 156 * Integrated in cryptdev master 20 Feb 1997. 157 -- CipherFile - was {key1,key2}, is {sendPubKey,otherKey} 158 -- Broke out common defines into CipherFileTypes.h 159 -- NSCipher returns nil properly on otherKeyData, sigSata, sendPubKeyData 160 -- Added enc64WithLines; dec64 ignores all whitespace 161 -- Broke out encrType-specific functions in CipherFile{FEED,DES} 162 163 CryptKit-21 164 * Integrated in cryptdev master 7 Mar 1997. 165 * Sent to REC 7 Mar 1997. 166 -- Added curve depth = 3; q=40, k=213 167 -- cleaned up CryptKit.h, NSCryptors.h 168 -- updated Makefile for backup purposes 169 -- Moved NSFEEPublicKey interface into its own file 170 -- Added mulgTime profiling stat 171 -- Deleted len = par->minBytes kludge from make_pad() 172 -- was iszero(); is isZero() 173 -- made bitlen() assertion conditional on FEE_DEBUG 174 -- Trimmed plainBlockSize by one byte if q mod 8 = 0 in feeFEED, 175 feeFEEEDExp. This is an incompatible change! But I don't think anyone 176 was using the last version.... 177 178 CryptKit-22 179 * Integrated into cryptdev master 31 Mar 1997 180 -- New NSMD5Hash class 181 -- Rewrote NSDESCryptor using feeDES 182 -- NSDataDigester was interface, is protocol 183 -- Deleted digestObjectsWithKeys method from NSDataDigester 184 -- Deleted NSRequestConcreteImplementation from NSDESCryptor and 185 NSRandomNumberGenerator 186 -- Rewrote NSRandomNumberGenerator using feeRandom 187 -- Cleaned up misc. #ifdefs and stale code 188 -- Put DES per-instance variables in struct _desInst 189 -- Fixed memory leaks in feePubKeyCreateKeyString(), feeFEED.c 190 -- Removed ANSI C headers from Public Header; framework is now strictly 191 ObjC 192 193 CryptKit-23 194 * Integrated into cryptdev master 1 May 1997 195 * Associated with ComDemo announcement 1 May 1997 196 -- No functional changes, only debugging printfs 197 198 CryptKit-24 199 * Integrated into cryptdev master 11 June 1997 200 -- Mods to build on Mac CodeWarrior 201 -- was #import, is #include 202 -- mods to platform.[ch] 203 -- lots of compiler warning fixes, mainly due to MW's inability to 204 implicitly cast unsigned char * to char * 205 206 CryptKit-25 207 * Integrated into cryptdev master 18 June 1997 208 -- New divg_via_recip(), modg_via_recip(), make_recip() 209 -- new per-curveParams fields x1OrderPlusRecip and lesserX1OrderRecip 210 -- Added lesserX1OrderJustify(), x1OrderPlusJustify(), binvg_cp() 211 -- Added new multiple stack borrowGiant() mechanism 212 -- All calls to borrowGiant() and newGiant() explicitly pass needed size; 213 no more borrowGiant(0) 214 -- Deleted old (i.e., obsolete and/or debugging) code from 215 NSGiantIntegers.c and NSFastEllipticCurve.c 216 -- Added description of FEED and FEEDExp ciphertext to ByteRep.doc 217 -- Marked KeyStringFormat.doc as obsolete 218 219 CryptKit-26 220 -- Implemented ECDSA in feeECDSA.[ch] 221 -- Added binvg_orderPlus(), x1OrderPlusMod() 222 -- Added generic signature encode/decode to byteRep.[ch]