Home
last modified time | relevance | path

Searched refs:ciphers (Results 1 – 25 of 112) sorted by relevance

12345

/freebsd-12.1/crypto/openssl/doc/man3/
H A DSSL_CTX_set_cipher_list.pod23 SSL_CTX_set_cipher_list() sets the list of available ciphers (TLSv1.2 and below)
25 in L<ciphers(1)>. The list of ciphers is inherited by all
29 SSL_set_cipher_list() sets the list of ciphers (TLSv1.2 and below) only for
61 on details of the library configuration (ciphers compiled in). Thus no
63 corresponding ciphers are not compiled in or because they are mistyped,
70 additional restrictions apply. All ciphers have additional requirements.
71 ADH ciphers don't need a certificate, but DH-parameters must have been set.
72 All other ciphers need a corresponding certificate and key.
79 DSA ciphers always use DH key exchange and therefore need DH-parameters
83 client only supports export RSA ciphers with an asymmetric key length
[all …]
H A DSSL_get_ciphers.pod31 sorted by preference. If B<ssl> is NULL or no ciphers are available, NULL
40 SRP and PSK ciphers are only enabled if the appropriate callbacks or settings
42 The list of ciphers that would be sent in a ClientHello can differ from
43 the list of ciphers that would be acceptable when acting as a server.
44 For example, additional ciphers may be usable by a server if there is
45 a gap in the list of supported protocols, and some ciphers may not be
47 If B<ssl> is NULL or no ciphers are available, NULL is returned.
50 list received from the client on B<ssl>. If B<ssl> is NULL, no ciphers are
62 listed for B<ssl> with B<priority>. If B<ssl> is NULL, no ciphers are
63 available, or there are less ciphers than B<priority> available, NULL
[all …]
H A DOpenSSL_add_all_algorithms.pod24 OpenSSL keeps an internal table of digest algorithms and ciphers. It uses
25 this table to lookup ciphers via functions such as EVP_get_cipher_byname().
30 ciphers).
35 In versions prior to 1.1.0 EVP_cleanup() removed all ciphers and digests from
H A DSSL_library_init.pod18 SSL_library_init() registers the available SSL/TLS ciphers and digests.
30 SSL_library_init() adds ciphers and digests used directly and indirectly by
H A DEVP_aes.pod104 some undocumented ctrl functions. These ciphers do not conform to the EVP AEAD
115 some undocumented ctrl functions. These ciphers do not conform to the EVP AEAD
129 (GCM) and OCB Mode respectively. These ciphers require additional control
H A DEVP_EncryptInit.pod124 symmetric ciphers.
221 for all ciphers. Note: although EVP_CIPHER_key_length() is fixed for a
223 for variable key length ciphers.
232 B<EVP_MAX_IV_LENGTH> is the maximum IV length for all ciphers.
237 length for all ciphers.
327 Refer to L<SEE ALSO> for the full list of ciphers available through the EVP
465 Where possible the B<EVP> interface to symmetric ciphers should be used in
500 ciphers with default key lengths. If custom ciphers exceed these values the
506 for certain common S/MIME ciphers (RC2, DES, triple DES) in CBC mode.
620 Supported ciphers are listed in:
H A DSSL_CTX_set_options.pod67 Don't prefer ECDHE-ECDSA ciphers when the client appears to be Safari on OS X.
68 OS X 10.8..10.8.3 has broken support for ECDHE-ECDSA ciphers.
73 vulnerability affecting CBC ciphers, which cannot be handled by some
75 using other ciphers.
214 ChaCha20-Poly1305 ciphers to the top of the server cipher list if a
218 ciphers. Requires B<SSL_OP_CIPHER_SERVER_PREFERENCE>.
/freebsd-12.1/crypto/openssl/crypto/engine/
H A Dtb_cipher.c26 if (e->ciphers) { in ENGINE_register_ciphers()
28 int num_nids = e->ciphers(e, NULL, &nids, 0); in ENGINE_register_ciphers()
47 if (e->ciphers) { in ENGINE_set_default_ciphers()
49 int num_nids = e->ciphers(e, NULL, &nids, 0); in ENGINE_set_default_ciphers()
83 return e->ciphers; in ENGINE_get_ciphers()
89 e->ciphers = f; in ENGINE_set_ciphers()
H A DREADME35 The latter is more generally used because it also allows ciphers/digests to be
44 such ciphers is via entirely distinct API calls that didn't exist before.
50 ciphers simultaneously registers cipher *types* and cipher *implementations* -
52 hooking in ENGINEs is that multiple ENGINEs may implement the same ciphers. The
53 solution is necessarily that ENGINE-provided ciphers simply are not registered,
54 stored, or exposed to the caller in the same manner as existing ciphers. This is
87 turn out to be degenerate forms of the same thing. The EVP storage of ciphers,
175 code despite the fact the application may use only ciphers, for example). This
H A Deng_list.c264 dest->ciphers = src->ciphers; in engine_cpy()
/freebsd-12.1/crypto/openssl/doc/man1/
H A Dciphers.pod5 openssl-ciphers,
6 ciphers - SSL cipher display and cipher list tool
10 B<openssl> B<ciphers>
53 On a server the list of supported ciphers might also exclude other ciphers
216 ciphers.
723 Verbose listing of all OpenSSL ciphers including NULL ciphers:
725 openssl ciphers -v 'ALL:eNULL'
735 openssl ciphers -v 'ALL:!aNULL'
737 Include only 3DES ciphers and then place RSA ciphers last:
739 openssl ciphers -v '3DES:+RSA'
[all …]
H A Denc.pod12 [B<-ciphers>]
47 using various block and stream ciphers using keys based on passwords
59 =item B<-ciphers>
61 List all supported ciphers.
205 engine-provided ciphers, because this form is processed before the
207 Use the B<list> command to get a list of supported ciphers.
216 When the enc command lists supported ciphers, ciphers provided by engines,
244 All RC2 ciphers have the same key and effective key length.
250 Note that some of these ciphers can be disabled at compile time
253 the B<-ciphers> option (that is B<openssl enc -ciphers>) produces a
[all …]
/freebsd-12.1/crypto/openssh/regress/
H A Dssh-com.sh90 ciphers="3des-cbc"
94 ciphers="$ciphers cast128-cbc"
98 ciphers="$ciphers aes128-cbc cast128-cbc"
104 for c in $ciphers; do
H A DMakefile33 try-ciphers \
92 INTEROP_TESTS= putty-transfer putty-ciphers putty-kex conch-ciphers
/freebsd-12.1/sys/net80211/
H A Dieee80211_crypto.c58 static const struct ieee80211_cipher *ciphers[IEEE80211_CIPHER_MAX]; variable
146 ciphers[IEEE80211_CIPHER_NONE] = &ieee80211_cipher_none; in ieee80211_crypto_attach()
202 if (ciphers[cip->ic_cipher] != NULL && ciphers[cip->ic_cipher] != cip) { in ieee80211_crypto_register()
207 ciphers[cip->ic_cipher] = cip; in ieee80211_crypto_register()
221 if (ciphers[cip->ic_cipher] != NULL && ciphers[cip->ic_cipher] != cip) { in ieee80211_crypto_unregister()
228 ciphers[cip->ic_cipher] = NULL; in ieee80211_crypto_unregister()
234 return cipher < IEEE80211_CIPHER_MAX && ciphers[cipher] != NULL; in ieee80211_crypto_available()
286 cip = ciphers[cipher]; in ieee80211_crypto_newkey()
303 cip = ciphers[cipher]; in ieee80211_crypto_newkey()
/freebsd-12.1/contrib/wpa/src/common/
H A Dwpa_common.c2346 if (ciphers & WPA_CIPHER_CCMP) { in rsn_cipher_put_suites()
2350 if (ciphers & WPA_CIPHER_GCMP) { in rsn_cipher_put_suites()
2354 if (ciphers & WPA_CIPHER_TKIP) { in rsn_cipher_put_suites()
2358 if (ciphers & WPA_CIPHER_NONE) { in rsn_cipher_put_suites()
2371 if (ciphers & WPA_CIPHER_CCMP) { in wpa_cipher_put_suites()
2394 if (ciphers & WPA_CIPHER_CCMP) in wpa_pick_pairwise_cipher()
2396 if (ciphers & WPA_CIPHER_GCMP) in wpa_pick_pairwise_cipher()
2398 if (ciphers & WPA_CIPHER_TKIP) in wpa_pick_pairwise_cipher()
2412 if (ciphers & WPA_CIPHER_CCMP) in wpa_pick_group_cipher()
2414 if (ciphers & WPA_CIPHER_GCMP) in wpa_pick_group_cipher()
[all …]
H A Dwpa_common.h481 int rsn_cipher_put_suites(u8 *pos, int ciphers);
482 int wpa_cipher_put_suites(u8 *pos, int ciphers);
483 int wpa_pick_pairwise_cipher(int ciphers, int none_allowed);
484 int wpa_pick_group_cipher(int ciphers);
486 int wpa_write_ciphers(char *start, char *end, int ciphers, const char *delim);
/freebsd-12.1/crypto/openssl/apps/
H A Dciphers.c97 char *ciphers = NULL, *prog, *convert = NULL, *ciphersuites = NULL; in ciphers_main() local
168 ciphers = *argv; in ciphers_main()
200 if (ciphers != NULL) { in ciphers_main()
201 if (!SSL_CTX_set_cipher_list(ctx, ciphers)) { in ciphers_main()
/freebsd-12.1/secure/usr.bin/openssl/
H A DMakefile.man5 MAN+= ciphers.1
53 MLINKS+= ciphers.1 openssl-ciphers.1
/freebsd-12.1/crypto/heimdal/lib/hx509/
H A Dcrypto.c2306 static const struct hx509cipher ciphers[] = { variable
2386 for (i = 0; i < sizeof(ciphers)/sizeof(ciphers[0]); i++) in find_cipher_by_oid()
2387 if (der_heim_oid_cmp(oid, ciphers[i].oid) == 0) in find_cipher_by_oid()
2388 return &ciphers[i]; in find_cipher_by_oid()
2398 for (i = 0; i < sizeof(ciphers)/sizeof(ciphers[0]); i++) in find_cipher_by_name()
2399 if (strcasecmp(name, ciphers[i].name) == 0) in find_cipher_by_name()
2400 return &ciphers[i]; in find_cipher_by_name()
3250 for (i = 0; i < sizeof(ciphers)/sizeof(ciphers[0]); i++) { in hx509_crypto_available()
3252 if (ciphers[i].flags & CIPHER_WEAK) in hx509_crypto_available()
3254 if (ciphers[i].ai_func == NULL) in hx509_crypto_available()
[all …]
/freebsd-12.1/contrib/wpa/src/crypto/
H A Dtls_openssl.c956 const char *ciphers; in tls_init() local
1103 ciphers); in tls_init()
2991 ciphers = openssl_ciphers; in tls_set_conn_flags()
3000 const char *ciphers = in tls_set_conn_flags() local
3008 ciphers = openssl_ciphers; in tls_set_conn_flags()
4458 u8 *ciphers) in tls_connection_set_cipher_list() argument
4471 c = ciphers; in tls_connection_set_cipher_list()
4904 const char *ciphers; in tls_connection_set_params() local
5030 if (ciphers && os_strcmp(ciphers, "SUITEB192") == 0) { in tls_connection_set_params()
5038 if (ciphers && SSL_set_cipher_list(conn->ssl, ciphers) != 1) { in tls_connection_set_params()
[all …]
H A Dtls_wolfssl.c196 const char *ciphers; in tls_init() local
243 ciphers = conf->openssl_ciphers; in tls_init()
245 ciphers = "ALL"; in tls_init()
246 if (wolfSSL_CTX_set_cipher_list(ssl_ctx, ciphers) != 1) { in tls_init()
249 ciphers); in tls_init()
1808 u8 *ciphers) in tls_connection_set_cipher_list() argument
1814 if (!conn || !conn->ssl || !ciphers) in tls_connection_set_cipher_list()
1821 c = ciphers; in tls_connection_set_cipher_list()
/freebsd-12.1/crypto/openssh/
H A Dcipher.c83 static const struct sshcipher ciphers[] = { variable
124 for (c = ciphers; c->name != NULL; c++) { in cipher_alg_list()
196 for (c = ciphers; c->name != NULL; c++) in cipher_by_name()
/freebsd-12.1/contrib/wpa/src/eap_peer/
H A Deap_fast.c1446 u8 ciphers[7]; in eap_fast_set_provisioning_ciphers() local
1452 ciphers[count++] = TLS_CIPHER_ANON_DH_AES128_SHA; in eap_fast_set_provisioning_ciphers()
1458 ciphers[count++] = TLS_CIPHER_RSA_DHE_AES256_SHA; in eap_fast_set_provisioning_ciphers()
1459 ciphers[count++] = TLS_CIPHER_RSA_DHE_AES128_SHA; in eap_fast_set_provisioning_ciphers()
1460 ciphers[count++] = TLS_CIPHER_AES256_SHA; in eap_fast_set_provisioning_ciphers()
1461 ciphers[count++] = TLS_CIPHER_AES128_SHA; in eap_fast_set_provisioning_ciphers()
1462 ciphers[count++] = TLS_CIPHER_RC4_SHA; in eap_fast_set_provisioning_ciphers()
1465 ciphers[count++] = TLS_CIPHER_NONE; in eap_fast_set_provisioning_ciphers()
1468 ciphers)) { in eap_fast_set_provisioning_ciphers()
/freebsd-12.1/contrib/wpa/src/ap/
H A Dwpa_auth_ie.c539 int ciphers, key_mgmt, res, version; in wpa_validate_wpa_ie() local
750 ciphers = data.pairwise_cipher & wpa_auth->conf.rsn_pairwise; in wpa_validate_wpa_ie()
752 ciphers = data.pairwise_cipher & wpa_auth->conf.wpa_pairwise; in wpa_validate_wpa_ie()
753 if (!ciphers) { in wpa_validate_wpa_ie()
805 if (sm->mgmt_frame_prot && (ciphers & WPA_CIPHER_TKIP)) { in wpa_validate_wpa_ie()
851 sm->pairwise = wpa_pick_pairwise_cipher(ciphers, 0); in wpa_validate_wpa_ie()

12345