Home
last modified time | relevance | path

Searched refs:ciphers (Results 1 – 25 of 116) sorted by relevance

12345

/freebsd-13.1/crypto/openssl/doc/man3/
H A DSSL_CTX_set_cipher_list.pod23 SSL_CTX_set_cipher_list() sets the list of available ciphers (TLSv1.2 and below)
25 in L<ciphers(1)>. The list of ciphers is inherited by all
29 SSL_set_cipher_list() sets the list of ciphers (TLSv1.2 and below) only for
61 on details of the library configuration (ciphers compiled in). Thus no
63 corresponding ciphers are not compiled in or because they are mistyped,
70 additional restrictions apply. All ciphers have additional requirements.
71 ADH ciphers don't need a certificate, but DH-parameters must have been set.
72 All other ciphers need a corresponding certificate and key.
79 DSA ciphers always use DH key exchange and therefore need DH-parameters
83 client only supports export RSA ciphers with an asymmetric key length
[all …]
H A DSSL_get_ciphers.pod31 sorted by preference. If B<ssl> is NULL or no ciphers are available, NULL
40 SRP and PSK ciphers are only enabled if the appropriate callbacks or settings
42 The list of ciphers that would be sent in a ClientHello can differ from
43 the list of ciphers that would be acceptable when acting as a server.
44 For example, additional ciphers may be usable by a server if there is
45 a gap in the list of supported protocols, and some ciphers may not be
47 If B<ssl> is NULL or no ciphers are available, NULL is returned.
50 list received from the client on B<ssl>. If B<ssl> is NULL, no ciphers are
62 listed for B<ssl> with B<priority>. If B<ssl> is NULL, no ciphers are
63 available, or there are less ciphers than B<priority> available, NULL
[all …]
H A DOpenSSL_add_all_algorithms.pod24 OpenSSL keeps an internal table of digest algorithms and ciphers. It uses
25 this table to lookup ciphers via functions such as EVP_get_cipher_byname().
30 ciphers).
35 In versions prior to 1.1.0 EVP_cleanup() removed all ciphers and digests from
H A DSSL_library_init.pod18 SSL_library_init() registers the available SSL/TLS ciphers and digests.
30 SSL_library_init() adds ciphers and digests used directly and indirectly by
H A DEVP_aes.pod104 some undocumented ctrl functions. These ciphers do not conform to the EVP AEAD
115 some undocumented ctrl functions. These ciphers do not conform to the EVP AEAD
129 (GCM) and OCB Mode respectively. These ciphers require additional control
H A DEVP_EncryptInit.pod124 symmetric ciphers.
150 For most ciphers and modes, the amount of data written can be anything
154 For stream ciphers, the amount of data written can be anything from zero
226 for all ciphers. Note: although EVP_CIPHER_key_length() is fixed for a
228 for variable key length ciphers.
237 B<EVP_MAX_IV_LENGTH> is the maximum IV length for all ciphers.
242 length for all ciphers.
472 Where possible the B<EVP> interface to symmetric ciphers should be used in
516 ciphers with default key lengths. If custom ciphers exceed these values the
522 for certain common S/MIME ciphers (RC2, DES, triple DES) in CBC mode.
[all …]
/freebsd-13.1/crypto/openssl/crypto/engine/
H A Dtb_cipher.c26 if (e->ciphers) { in ENGINE_register_ciphers()
28 int num_nids = e->ciphers(e, NULL, &nids, 0); in ENGINE_register_ciphers()
47 if (e->ciphers) { in ENGINE_set_default_ciphers()
49 int num_nids = e->ciphers(e, NULL, &nids, 0); in ENGINE_set_default_ciphers()
83 return e->ciphers; in ENGINE_get_ciphers()
89 e->ciphers = f; in ENGINE_set_ciphers()
H A DREADME35 The latter is more generally used because it also allows ciphers/digests to be
44 such ciphers is via entirely distinct API calls that didn't exist before.
50 ciphers simultaneously registers cipher *types* and cipher *implementations* -
52 hooking in ENGINEs is that multiple ENGINEs may implement the same ciphers. The
53 solution is necessarily that ENGINE-provided ciphers simply are not registered,
54 stored, or exposed to the caller in the same manner as existing ciphers. This is
87 turn out to be degenerate forms of the same thing. The EVP storage of ciphers,
175 code despite the fact the application may use only ciphers, for example). This
/freebsd-13.1/crypto/openssh/regress/
H A Dssh-com.sh90 ciphers="3des-cbc"
94 ciphers="$ciphers cast128-cbc"
98 ciphers="$ciphers aes128-cbc cast128-cbc"
104 for c in $ciphers; do
H A DMakefile39 try-ciphers \
104 INTEROP_TESTS= putty-transfer putty-ciphers putty-kex conch-ciphers
/freebsd-13.1/crypto/openssl/doc/man1/
H A Dciphers.pod5 openssl-ciphers,
6 ciphers - SSL cipher display and cipher list tool
10 B<openssl> B<ciphers>
53 On a server the list of supported ciphers might also exclude other ciphers
216 ciphers.
723 Verbose listing of all OpenSSL ciphers including NULL ciphers:
725 openssl ciphers -v 'ALL:eNULL'
735 openssl ciphers -v 'ALL:!aNULL'
737 Include only 3DES ciphers and then place RSA ciphers last:
739 openssl ciphers -v '3DES:+RSA'
[all …]
H A Denc.pod13 [B<-ciphers>]
48 using various block and stream ciphers using keys based on passwords
62 List all supported ciphers.
64 =item B<-ciphers>
66 Alias of -list to display all supported ciphers.
212 Use the B<list> command to get a list of supported ciphers.
221 When the enc command lists supported ciphers, ciphers provided by engines,
249 All RC2 ciphers have the same key and effective key length.
255 Note that some of these ciphers can be disabled at compile time
258 the B<-ciphers> option (that is B<openssl enc -ciphers>) produces a
[all …]
H A Ds_time.pod139 L<ciphers(1)> for more information.
147 L<ciphers(1)> for more information. The format for this list is a simple
166 which both client and server can agree, see the L<ciphers(1)> command
201 L<s_client(1)>, L<s_server(1)>, L<ciphers(1)>
/freebsd-13.1/sys/net80211/
H A Dieee80211_crypto.c58 static const struct ieee80211_cipher *ciphers[IEEE80211_CIPHER_MAX]; variable
146 ciphers[IEEE80211_CIPHER_NONE] = &ieee80211_cipher_none; in ieee80211_crypto_attach()
202 if (ciphers[cip->ic_cipher] != NULL && ciphers[cip->ic_cipher] != cip) { in ieee80211_crypto_register()
207 ciphers[cip->ic_cipher] = cip; in ieee80211_crypto_register()
221 if (ciphers[cip->ic_cipher] != NULL && ciphers[cip->ic_cipher] != cip) { in ieee80211_crypto_unregister()
228 ciphers[cip->ic_cipher] = NULL; in ieee80211_crypto_unregister()
234 return cipher < IEEE80211_CIPHER_MAX && ciphers[cipher] != NULL; in ieee80211_crypto_available()
286 cip = ciphers[cipher]; in ieee80211_crypto_newkey()
303 cip = ciphers[cipher]; in ieee80211_crypto_newkey()
/freebsd-13.1/crypto/openssl/apps/
H A Dciphers.c97 char *ciphers = NULL, *prog, *convert = NULL, *ciphersuites = NULL; in ciphers_main() local
168 ciphers = *argv; in ciphers_main()
201 if (ciphers != NULL) { in ciphers_main()
202 if (!SSL_CTX_set_cipher_list(ctx, ciphers)) { in ciphers_main()
H A Dprogs.pl81 ciphers => "sock",
/freebsd-13.1/contrib/wpa/src/common/
H A Dwpa_common.c2705 if (ciphers & WPA_CIPHER_CCMP) { in rsn_cipher_put_suites()
2709 if (ciphers & WPA_CIPHER_GCMP) { in rsn_cipher_put_suites()
2713 if (ciphers & WPA_CIPHER_TKIP) { in rsn_cipher_put_suites()
2717 if (ciphers & WPA_CIPHER_NONE) { in rsn_cipher_put_suites()
2730 if (ciphers & WPA_CIPHER_CCMP) { in wpa_cipher_put_suites()
2753 if (ciphers & WPA_CIPHER_CCMP) in wpa_pick_pairwise_cipher()
2755 if (ciphers & WPA_CIPHER_GCMP) in wpa_pick_pairwise_cipher()
2757 if (ciphers & WPA_CIPHER_TKIP) in wpa_pick_pairwise_cipher()
2771 if (ciphers & WPA_CIPHER_CCMP) in wpa_pick_group_cipher()
2773 if (ciphers & WPA_CIPHER_GCMP) in wpa_pick_group_cipher()
[all …]
H A Dwpa_common.h628 int rsn_cipher_put_suites(u8 *pos, int ciphers);
629 int wpa_cipher_put_suites(u8 *pos, int ciphers);
630 int wpa_pick_pairwise_cipher(int ciphers, int none_allowed);
631 int wpa_pick_group_cipher(int ciphers);
633 int wpa_write_ciphers(char *start, char *end, int ciphers, const char *delim);
/freebsd-13.1/secure/usr.bin/openssl/
H A DMakefile.man5 MAN+= ciphers.1
54 MLINKS+= ciphers.1 openssl-ciphers.1
/freebsd-13.1/crypto/heimdal/lib/hx509/
H A Dcrypto.c2306 static const struct hx509cipher ciphers[] = { variable
2386 for (i = 0; i < sizeof(ciphers)/sizeof(ciphers[0]); i++) in find_cipher_by_oid()
2387 if (der_heim_oid_cmp(oid, ciphers[i].oid) == 0) in find_cipher_by_oid()
2388 return &ciphers[i]; in find_cipher_by_oid()
2398 for (i = 0; i < sizeof(ciphers)/sizeof(ciphers[0]); i++) in find_cipher_by_name()
2399 if (strcasecmp(name, ciphers[i].name) == 0) in find_cipher_by_name()
2400 return &ciphers[i]; in find_cipher_by_name()
3250 for (i = 0; i < sizeof(ciphers)/sizeof(ciphers[0]); i++) { in hx509_crypto_available()
3252 if (ciphers[i].flags & CIPHER_WEAK) in hx509_crypto_available()
3254 if (ciphers[i].ai_func == NULL) in hx509_crypto_available()
[all …]
/freebsd-13.1/crypto/openssh/
H A Dcipher.c86 static const struct sshcipher ciphers[] = { variable
125 for (c = ciphers; c->name != NULL; c++) { in cipher_alg_list()
208 for (c = ciphers; c->name != NULL; c++) in cipher_by_name()
/freebsd-13.1/contrib/wpa/src/crypto/
H A Dtls_openssl.c957 const char *ciphers; in tls_init() local
1110 ciphers); in tls_init()
3059 ciphers = openssl_ciphers; in tls_set_conn_flags()
3068 const char *ciphers = in tls_set_conn_flags() local
3076 ciphers = openssl_ciphers; in tls_set_conn_flags()
4617 u8 *ciphers) in tls_connection_set_cipher_list() argument
4630 c = ciphers; in tls_connection_set_cipher_list()
5098 const char *ciphers; in tls_connection_set_params() local
5236 if (ciphers && os_strcmp(ciphers, "SUITEB192") == 0) { in tls_connection_set_params()
5244 if (ciphers && SSL_set_cipher_list(conn->ssl, ciphers) != 1) { in tls_connection_set_params()
[all …]
/freebsd-13.1/contrib/wpa/src/eap_peer/
H A Deap_fast.c1466 u8 ciphers[7]; in eap_fast_set_provisioning_ciphers() local
1472 ciphers[count++] = TLS_CIPHER_ANON_DH_AES128_SHA; in eap_fast_set_provisioning_ciphers()
1478 ciphers[count++] = TLS_CIPHER_RSA_DHE_AES256_SHA; in eap_fast_set_provisioning_ciphers()
1479 ciphers[count++] = TLS_CIPHER_RSA_DHE_AES128_SHA; in eap_fast_set_provisioning_ciphers()
1480 ciphers[count++] = TLS_CIPHER_AES256_SHA; in eap_fast_set_provisioning_ciphers()
1481 ciphers[count++] = TLS_CIPHER_AES128_SHA; in eap_fast_set_provisioning_ciphers()
1482 ciphers[count++] = TLS_CIPHER_RC4_SHA; in eap_fast_set_provisioning_ciphers()
1485 ciphers[count++] = TLS_CIPHER_NONE; in eap_fast_set_provisioning_ciphers()
1488 ciphers)) { in eap_fast_set_provisioning_ciphers()
/freebsd-13.1/crypto/openssl/ssl/statem/
H A Dstatem_srvr.c1622 STACK_OF(SSL_CIPHER) *ciphers = NULL; in tls_early_post_process_client_hello()
1776 ssl3_choose_cipher(s, ciphers, SSL_get_ciphers(s)); in tls_early_post_process_client_hello()
1864 for (i = 0; i < sk_SSL_CIPHER_num(ciphers); i++) { in tls_early_post_process_client_hello()
1865 c = sk_SSL_CIPHER_value(ciphers, i); in tls_early_post_process_client_hello()
1949 s->peer_ciphers = ciphers; in tls_early_post_process_client_hello()
1952 ciphers = NULL; in tls_early_post_process_client_hello()
2074 s->peer_ciphers = ciphers; in tls_early_post_process_client_hello()
2075 if (ciphers == NULL) { in tls_early_post_process_client_hello()
2081 ciphers = NULL; in tls_early_post_process_client_hello()
2096 sk_SSL_CIPHER_free(ciphers); in tls_early_post_process_client_hello()
[all …]
/freebsd-13.1/contrib/wpa/src/ap/
H A Dwpa_auth_ie.c595 int ciphers, key_mgmt, res, version; in wpa_validate_wpa_ie() local
802 ciphers = data.pairwise_cipher & wpa_auth->conf.rsn_pairwise; in wpa_validate_wpa_ie()
804 ciphers = data.pairwise_cipher & wpa_auth->conf.wpa_pairwise; in wpa_validate_wpa_ie()
805 if (!ciphers) { in wpa_validate_wpa_ie()
868 if (sm->mgmt_frame_prot && (ciphers & WPA_CIPHER_TKIP)) { in wpa_validate_wpa_ie()
912 sm->pairwise = wpa_pick_pairwise_cipher(ciphers, 0); in wpa_validate_wpa_ie()

12345