http://hg.omfa.de/prosody-hg/ en-us util-src/crypto.c revision history http://hg.omfa.de/prosody-hg/log/d975d280baec/util-src/crypto.c Matthew Wild <mwild1@gmail.com> Mon, 25 May 2026 19:01:23 +0100 http://hg.omfa.de/prosody-hg/log/25beb66fab38/util-src/crypto.c
Tha Lua 5.1 buffer API was frustrating to work with. luaL_prepbuffer() only
allocates LUAL_BUFFERSIZE - there is no way to request a specific size.
LUAL_BUFFERSIZE is set to BUFSIZ by default, which is generally 8192 bytes on
Linux, however it may vary between platforms.

The variation means this buffer could potentially overflow (small BUFSIZ with
large signature).

The Lua 5.2+ buffer API enables requesting a specific buffer size, so that's
what we do now.]]> Matthew Wild <mwild1@gmail.com> Mon, 25 May 2026 15:11:47 +0100 http://hg.omfa.de/prosody-hg/log/af87d31dcae4/util-src/crypto.c
lua_tostring() returns NULL if the specified value is missing or can't become
a string. luaL_checkstring() will raise an error.

We prefer the latter behaviour, otherwise we end up passing NULL to OpenSSL.]]> Matthew Wild <mwild1@gmail.com> Mon, 25 May 2026 14:51:15 +0100 http://hg.omfa.de/prosody-hg/log/fbfc06c5f3a8/util-src/crypto.c
Apparently this used to compile, but when disabling deprecated APIs in openssl
it requires an explicit include (which makes sense, per the docs).]]> Matthew Wild <mwild1@gmail.com> Mon, 15 Dec 2025 12:14:27 +0000 http://hg.omfa.de/prosody-hg/log/fb970df95374/util-src/crypto.c
pkey_meth_derive: to derive a shared symmetric key from two ECC keys
pkey_meth_public_raw: to get the raw form of the public key
import_public_ec_raw: to import the raw form of the public key
generate_p256_keypair: key generation for the P-256 curve]]> Stephen Paul Weber <singpolyma@singpolyma.net> Tue, 29 Oct 2024 09:15:50 -0500 http://hg.omfa.de/prosody-hg/log/a187600ec7d6/util-src/crypto.c Kim Alvefur <zash@zash.se> Fri, 17 Mar 2023 18:03:07 +0100 http://hg.omfa.de/prosody-hg/log/0ed24f48b6a6/util-src/crypto.c
With `gcc-12 -Wstrict-prototypes` the following warning is shown:

crypto.c:43:13: warning: function declaration isn't a prototype [-Wstrict-prototypes]
43 | static BIO* new_memory_BIO() {
| ^~~~~~~~~~~~~~]]> Kim Alvefur <zash@zash.se> Tue, 31 Jan 2023 16:27:55 +0100 http://hg.omfa.de/prosody-hg/log/d3ae47d8a7a7/util-src/crypto.c
This is required by PASETO v3.local]]> Matthew Wild <mwild1@gmail.com> Fri, 13 Jan 2023 14:34:10 +0000 http://hg.omfa.de/prosody-hg/log/445f7bd6ffc4/util-src/crypto.c
This fixes the signature parsing and building to work correctly. Sometimes
a signature was one or two bytes too short, and needed to be padded. OpenSSL
can do this for us.]]> Matthew Wild <mwild1@gmail.com> Thu, 29 Sep 2022 23:15:39 +0100 http://hg.omfa.de/prosody-hg/log/5dd00f806e32/util-src/crypto.c
In Lua 5.3 LUAL_BUFFERSIZE is a macro computed from sizeof and is thus
not known at pre-processing time, so this does not work.

Since Lua 5.1 is no longer supported, we can use luaL_prepbuffsize()
which is available from Lua 5.2]]> Kim Alvefur <zash@zash.se> Mon, 11 Jul 2022 17:11:38 +0200 http://hg.omfa.de/prosody-hg/log/82bca7191f13/util-src/crypto.c
Removes assumption that LUAL_BUFFERSIZE is known at pre-processing time,
which it is not in Lua 5.3 and 5.4, where it is a computed macro based
on sizeof.

Allocation of stack space is safer and faster, no need to worry about
luaL_prepbuffer failing to allocate memory and skipping free()]]> Kim Alvefur <zash@zash.se> Mon, 11 Jul 2022 17:01:55 +0200 http://hg.omfa.de/prosody-hg/log/f63176781940/util-src/crypto.c Matthew Wild <mwild1@gmail.com> Sat, 02 Jul 2022 14:59:52 +0100 http://hg.omfa.de/prosody-hg/log/999663b4e39d/util-src/crypto.c Matthew Wild <mwild1@gmail.com> Sat, 02 Jul 2022 11:51:24 +0100 http://hg.omfa.de/prosody-hg/log/916871447b2f/util-src/crypto.c
These are used by the RS*** and PS*** family of JOSE algorithms (e.g. in JWTs)]]> Matthew Wild <mwild1@gmail.com> Sat, 02 Jul 2022 11:50:56 +0100 http://hg.omfa.de/prosody-hg/log/7c5afbdcbc77/util-src/crypto.c
Specifically, ED25519 key generation/import/export, sign/verify operations,
and AES encrypt/decrypt.]]> Matthew Wild <mwild1@gmail.com> Fri, 24 Jun 2022 16:56:16 +0100