soledad.git - [soledad]

Age	Commit message (Collapse)	Author
2017-07-18	[refactor] move preamble module to common	Victor Shyba
	This move allows server to use it on #8868 as described in #8890 -- Relates: #8890
2017-07-18	[refactor] move preamble to a new module	Victor Shyba
	Extracted preamble code for making space to #8890 changes. -- Related: #8890
2017-07-08	[feat] use OpenSSL backend for scrypt if available	Kali Kaneko
	This needs OpenSSL >= 1.1, otherwise it will keep using the scrypt dependency. We should think about deprecating scrypt as a dependency when we can be sure that the adoption of libssl 1.1 is wide enough. I think that at some point (soledad 0.11 or so) we can drop the scrypt dependency, which was being somehow problematic at times (the _scrypt.so was not appearing when installing with pip, needed workarounds). From that moment on, we can raise an error if an old libssl is found and no scrypt can be imported - leaving that to the user/packager. In debian stretch and afterwards, you can get that version by installing libssl-dev - Related: #8472
2017-07-07	[test] mark tests that depend on couchdb server	drebs

2017-05-08	[refactor] _database -> _db	Victor Shyba

2017-05-04	[refactor] improve readability on _document	Victor Shyba

2017-05-01	[refactor] create client _database module	drebs

2017-05-01	[feat] add attachments api	drebs

2017-04-04	[feature] incremental decrypter	Victor Shyba

2017-04-04	[feature] ascii armor disable option	Victor Shyba

2017-04-04	[bug] fix loose ends on _crypto and tests	Victor Shyba

2017-03-23	[feature] generate recovery code	Anike Arni
	with @tayane
2017-03-17	[test] Prepare tests for python3 compatibility	efkin

2017-03-09	[bug] secrets version defaults to v1	Tulio Casagrande

2017-03-09	[bug] add default version when decrypting secrets	Tulio Casagrande
	Resolves: https://0xacab.org/leap/soledad/issues/8788
2017-02-25	[refactor] pass soledad object to client secrets api	drebs
	In order to be able to change passphrase, token and offline status of soledad from the bitmask client api, the secrets api also has to be able to use up-to-date values when encrypting/decrypting secrets and uploading/downloading them to the server. This commit makes public some soledad attributes that were previously "private" (i.e. used to start with "_" and were not meant to be accessed from outside), and passes the whole soledad object to the client secrets api. This makes the code cleaner and also allows for always getting newest values of soledad attributes.
2017-02-16	[style] add deprecation warning on legacy decoder	Victor Shyba

2017-02-16	[feature] add doc size to preamble	Victor Shyba
	That's necessary for blobs-io. Current code includes backwards compatibility branching and tests, which shall be removed on next releases.
2017-02-15	[tests] add tests for preamble encoding	Victor Shyba

2017-02-09	[refactor] remove leftover code from previous wsgi auth	drebs

2017-02-09	[feat] use twisted web http auth and creds	drebs

2017-02-09	[test] move client secrets tests to its own file	drebs

2017-02-09	[bug] use derived key for local storage	drebs

2017-02-09	[refactor] improve secrets generation and storage code	drebs

2016-12-12	[feature] Change CTR to GCM on secrets.py	Victor Shyba
	Current implementation can allow tampering and the CTR->GCM exchange can help to avoid it. This commits also alters a behaviour where we moved ahead after failing to decrypt a recovery document. IMHO we can't move ahead as this is a fatal error. Signed-off-by: Victor Shyba <victor1984@riseup.net>
2016-12-12	[feature] Add retro compat on secrets.py ciphers	Victor Shyba
	Integrated the secrets's JSON key that specifies ciphers into _crypto and added optional GCM. Also added a test to check if both cipher types can be imported. Resolves: #8680 Signed-off-by: Victor Shyba <victor1984@riseup.net>
2016-12-12	[feature] use GCM instead of CTR+HMAC	Victor Shyba
	Resolves: #8668 - client: substitute usage of CTR mode + HMAC by GCM cipher mode Signed-off-by: Victor Shyba <victor1984@riseup.net>
2016-12-12	[refactor] improve blob signature magic usage	Victor Shyba
	Our magic value wasn't being used and were represented as a string. Refactored it to a constant, increased it's size to 2 bytes and optimzed is_symmetrically_encrypted to look for the magic and symmetrically encrypted flag under base64 encoding. Most file types will use this feature to help identifying themselves, so it got refactored to serve the purpose it was created.
2016-12-12	[refactor] introduces a GenericWriter	Victor Shyba
	AESWriter and HMACWriter are just applying hmac or aes into a flow of data. Abstracted the application of those operations into a super class and highlighted just the difference on each implementation.
2016-12-12	[refactor] simplify _crypto	Victor Shyba
	After adding the streaming decrypt, some classes were doing almost the same thing. Unified them. Also fixed some module level variables to upper case and some class name to camel case.
2016-12-12	[feature] make _crypto stream on decryption	Victor Shyba
	We are already doing this on encryption, now we can stream also from decryption. This unblocks the reactor and will be valuable for blobs-io.
2016-12-12	[feature] delimit preamble from ciphertext	Victor Shyba
	We now encode preamble and ciphertext+hmac in two distinct payloads separated by a space. This allows metadata to be extracted and used before decoding the whole document. It also introduces a single packer for packing and unpacking of data instead of reads and writes. Downside: doc_id and rev are limited to 255 chars now.
2016-12-12	[refactor] Hide IV, simplify some calls	Victor Shyba
	IV was being set during tests and this required some defensive coding to avoid IV being set in production. This commits makes the test use the generated IV and "hides" it using a read-only property to let it clear this should never happen. Also refactored out some parameters that are generated automatically to reduce some lines of code and enhance readability.
2016-12-12	[tests] migrate pytest to trial	Victor Shyba
	test_deprecated_crypto was using pytest, which unfortunately doesnt work when mixed with trial. Migrated back. Also added norecursedirs option back, as it is necessary for parallel testing mode.
2016-12-12	[test] add test for deprecated crypto format update	drebs

2016-12-12	[style] fix pep8 and confs	Victor Shyba
	Fixes setup.cfg, adding current exclude rules, simplified tox.ini to use setup.cfg and fixed all.
2016-12-12	[tests] adapt tests	Kali Kaneko

2016-12-12	[feature] blob encryptor / decryptor	Kali Kaneko

2016-12-12	[refactor] remove encryption pool	Kali Kaneko

2016-09-30	[test] use pytest tmpdir fixture in all tests	drebs
	Tests that were imported from u1db or created on top of that structure were leaving temporary directories behind. This could cause problems in test servers, either by filling the partition or by extrapolating the maximum amount of files in a directory. This commit replaces all usages of temporary directories in the old test structure by pytest tmpdir fixture, which properly cares for removing temporary directories.
2016-07-12	[test] refactor test files	drebs

2016-07-12	[refactor] make u1db connection pool args explicit	drebs

2016-07-12	[test] properly close dbpool on async test	drebs

2016-07-12	[test] toxify tests	drebs
	- move tests to root directory - split tests in different subdirectories - setup a small package with common test dependencies in /testing/test_soledad - add tox.ini that will: - install the test_soledad package and other test dependencies - install soledad common, client, server from the repository - run tests contianed in /testing/tests directory using pytest This commit also removes all oauth code from tests, as we have removed the u1db dependency (by importing it into the repo and naming it l2db) and don't neet oauth at all right now.