Nikos Mavrogiannopoulos

Added support for TLS Application Layer Protocol Negotiation (ALPN)

6

This patch adds support for ALPN, based on draft-ietf-tls-applayerprotoneg-04. It adds the new keywords 'ALPNtable' and 'prefer'. The latter accepts the values 'sni' or 'alpn'. Signed-off-by: Nikos Mavrogiannopoulos [email protected]

Linux random number generator updates

19

This includes the POSIX interface getentropy, that is simpler to use than getrandom, and in practice it is available for as long as getrandom is available in glibc, in addition...

Expand the Tux ECB image example

1

While cryptographers familiar with Linux know the image and can imagine the original and how it looks in ECB, many who start their path may not fully imagine that process....

As mentioned in the training material CVSS has some issues, and in practice it results to a large list of vulnerabilities that need to be addressed even though if it...

Updated the digital signatures section for FIPS 186-5

1

This removes DSA, that is today a legacy algorithm not part of the FIPS 186-5 (DSS) standard. It adds EdDSA and mentions FIPS 186-5 as a google search for DSS...

This question was not clear to me. I assumed it referred to an equality check.

This includes the C interfaces that exist to overwrite sensitive data from memory such as explicit_bzero. As this is a common mistake not to overwrite the data, I think listing...

Updates on quantum-safe cryptography section

1

Updated the section to include the currently available quantum safe algorithms from NIST competition. Updated the paragraph on AES to tone down the message on its vulnerability following: * NIST...