6 Commits

Author	SHA1	Message	Date
akwizgran	5d46d3a4b4	AuthenticatedCipher interface isn't needed outside crypto package.	2015-01-09 13:06:44 +00:00
akwizgran	4e57029d98	Use constant-time GCM multiplier.	2015-01-06 19:30:11 +00:00
akwizgran	358166bc12	Don't try to erase secrets from memory. ... 1. The things we're really trying to protect - contact identities, message contents, etc - can't be erased from memory because they're encapsulated inside objects we don't control. 2. Long-term secrets can't be protected by erasing them from memory because they're stored in the database and the database key has to be held in memory whenever the app's running. 3. If the runtime uses a compacting garbage collector then we have no way to ensure an object is erased from memory. 4. Trying to erase secrets from memory makes the code more complex. Conclusion: Let's not try to protect secrets from an attacker who can read arbitrary memory locations.	2014-12-29 21:08:27 +00:00
akwizgran	7b8181e309	Massive refactoring to merge handling of simplex and duplex connections.	2014-11-04 16:51:25 +00:00
akwizgran	b24f153704	Renamed a load of things from 'connection' to 'stream'.	2014-10-08 16:21:55 +01:00
akwizgran	832476412c	Changed the root package from net.sf.briar to org.briarproject.	2014-01-08 16:18:30 +00:00