| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 2025-10-03 | Bump windows-sys version to latest | David Lönnhager | 1 | -4/+0 | |
| This also refactors and documents some code | |||||
| 2025-09-23 | Document why `rand` can't be upgraded in `talpid-tunnel-config-client` | Markus Pettersson | 1 | -0/+1 | |
| 2025-09-09 | Replace libc with nix in ttcc | Joakim Hulthe | 2 | -24/+7 | |
| 2025-07-10 | Run `cargo fmt` | Sebastian Holmin | 2 | -4/+4 | |
| 2025-07-09 | Put the `tonic::Status` in a Box to make the error type smaller | Sebastian Holmin | 1 | -2/+4 | |
| 2025-05-14 | Log how long time it takes to generate quantum-resistant secrets | Linus Färnstrand | 1 | -1/+6 | |
| 2025-05-14 | Hide algorithm name constant | Linus Färnstrand | 3 | -6/+14 | |
| 2025-05-14 | Use HQC-256 instead of Classic McEliece in quantum-resistant handshake | Linus Färnstrand | 6 | -165/+114 | |
| 2025-05-14 | Update ephemeral peer proto definition to prepare for HQC-256 | Linus Färnstrand | 1 | -3/+4 | |
| 2025-02-25 | Add safety comment to talpid_tunnel_config_client::socket | Joakim Hulthe | 1 | -7/+11 | |
| 2025-02-03 | Set correct DAITA platform on Windows | David Lönnhager | 2 | -2/+2 | |
| 2025-01-24 | Change temporary `DaitaPlatform` for windows to `LinuxWgGo` | Sebastian Holmin | 1 | -1/+1 | |
| 2025-01-24 | Log DAITA v2 request | David Lönnhager | 1 | -4/+8 | |
| 2025-01-24 | Enable DAITA v2 for Windows via wireguard-go | David Lönnhager | 1 | -27/+9 | |
| 2025-01-21 | Restart mceliece keygen worker if it stops | Joakim Hulthe | 1 | -8/+26 | |
| 2025-01-09 | Remove unnecessary pub | Sebastian Holmin | 1 | -1/+1 | |
| 2025-01-09 | Do not expose the key pair receiver publicly | Sebastian Holmin | 1 | -7/+6 | |
| 2025-01-09 | Add panic note to docstring | Sebastian Holmin | 1 | -0/+4 | |
| 2025-01-09 | Fix expect message | Sebastian Holmin | 1 | -1/+1 | |
| 2025-01-09 | Fix panic on capacity=1 | Sebastian Holmin | 1 | -14/+24 | |
| As `tokio::sync::mpsc` doesn't allow capacity to be zero, we cannot support buffering only one key pair if we generate it before sending. To get around this we use `reserve` to wait for capacity before generating the key. | |||||
| 2025-01-09 | Make `KEY_PAIR` private and expose it by a fn | Sebastian Holmin | 1 | -3/+11 | |
| 2025-01-09 | Spawn key pair worker on launch | Sebastian Holmin | 2 | -4/+4 | |
| 2025-01-09 | Update documentation | Sebastian Holmin | 1 | -5/+13 | |
| 2025-01-09 | Generate McEliece key pairs in separate thread | Sebastian Holmin | 1 | -5/+27 | |
| 2024-12-27 | Use DAITAv2 on iOS | Emīls | 1 | -9/+9 | |
| 2024-12-20 | Fix byte counting in socket sniffer | Sebastian Holmin | 1 | -3/+4 | |
| 2024-12-20 | Move SocketSniffer to separate module | Sebastian Holmin | 1 | -52/+58 | |
| 2024-12-20 | Remove unused `futures` dep | Sebastian Holmin | 1 | -1/+0 | |
| 2024-12-20 | Log data usage for tunnel config client | Sebastian Holmin | 1 | -5/+73 | |
| 2024-12-19 | Use IAN TCP connection for ephemeral peer exchange | Emīls | 1 | -3/+3 | |
| 2024-12-12 | Use dynamic DAITA machines in wireguard-go | David Lönnhager | 1 | -32/+40 | |
| Co-authored-by: Markus Pettersson <markus.pettersson@mullvad.net> | |||||
| 2024-12-12 | Add support for DAITA v2 to talpid tunnel config client | David Lönnhager | 3 | -5/+98 | |
| Co-authored-by: Markus Pettersson <markus.pettersson@mullvad.net> | |||||
| 2024-10-17 | Document relationship between ephemeral peer MTU fixes | Linus Färnstrand | 1 | -0/+5 | |
| 2024-10-17 | Clean up relay config client creation code | Linus Färnstrand | 1 | -6/+9 | |
| 2024-10-17 | Improve documentation on classic mceliece threading | Linus Färnstrand | 1 | -3/+5 | |
| 2024-10-17 | Move higher level function to above lower level function | Linus Färnstrand | 1 | -21/+21 | |
| 2024-10-17 | Refactor post_quantum_secrets to not take an enable-bool | Linus Färnstrand | 1 | -32/+30 | |
| 2024-10-15 | Split out Classic McEliece code in tuncfg-server example | Linus Färnstrand | 1 | -7/+16 | |
| 2024-10-15 | Replace pqc_kyber with ml-kem | Linus Färnstrand | 6 | -56/+102 | |
| Upgrading one of the key encapsulation mechanism algorithms we use for quantum-resistant tunnels from Kyber (draft) to ML-KEM (standardized FIPS 203) | |||||
| 2024-09-25 | Upgrade `tonic` to 0.12 and `prost` to 0.13 | Sebastian Holmin | 2 | -0/+5 | |
| Upgrading `tonic` is a prerequisite to later on upgrading `hyper` to version 1.0. As of version 1.0, `hyper` no longer uses `tokio`s `AsyncWriter` and `AsyncReader` traits, instead defining its own versions, see <https://github.com/hyperium/hyper/issues/3110>. As tonic `0.12` is updated to use the `hyper 1.0` ecosystem, it changed some of its trait-bounds to the new `hyper` traits. The `hyper-utils` crate provides the wrapper `TokioIo`, which converts between the two. `prost` had to be upgraded as well, for compatibility. | |||||
| 2024-09-24 | Move ephemeral negotiation to own module | David Lönnhager | 2 | -3/+3 | |
| 2024-09-24 | Lower MTU during ephemeral peer negotiation on Windows | David Lönnhager | 2 | -57/+95 | |
| 2024-09-24 | Do not set IP_USER_MTU on on tunnel config socket | David Lönnhager | 1 | -46/+7 | |
| 2024-09-02 | Fix a lingering panic by using a stricter type | Max Zettlmeißl | 2 | -6/+6 | |
| The functions `request_ephemeral_peer` and consecutively `new_client` accepted an `IpAddr`, but due to only ever preparing a v4 socket this lead to panic due to an `EAFNOSUPPORT` error if an IPv6 was provided. It would also have made sense to change `new_client` to create either an IPv4 or IPv6 socket depending on the type of the address, but the tuncfg service is currently not accepting IPv6 connections, therefore this was the cleaner change. | |||||
| 2024-07-23 | Only accept an IPv4 as valid first argument | Max Zettlmeißl | 1 | -2/+2 | |
| While `request_ephemeral_peer` accepts a generic `IpAddr`, the function `new_client` used within forces an `Ipv4Addr`. In the long run it would be best to change the library to support IPv6 (provided that the tunnel configuration service listens to an IPv6) or to change the signature of `request_ephemeral_peer` to expect an IPv4. | |||||
| 2024-07-23 | Improve variable names, comments and error messages | Max Zettlmeißl | 1 | -10/+16 | |
| Briefly explain the usage. Make it clearer that the program does not work with an IPv6. Remove the somewhat confusing usage of `trim`. The IP is not trimmed either and it would only protect from a purposefully wrong argument (With quoted or escaped spaces.) Explain what the boolean parameters stand for. Explain why the PSK has to be printed with `fmt::Debug`. | |||||
| 2024-07-23 | Output the unwrapped Base64 encoded pre-shared key | Max Zettlmeißl | 1 | -1/+1 | |
| 2024-07-17 | Add a Rust FFI, Disable sandboxing for scripts | Bug Magnet | 6 | -567/+0 | |
| 2024-07-11 | Document that it is round3 of the Kyber KEM we are using | Linus Färnstrand | 3 | -1/+5 | |
| 2024-06-24 | Run `cargo +nightly fmt` | Sebastian Holmin | 2 | -7/+9 | |
 |
index : mullvadvpn | |
| The Mullvad VPN client app for desktop and mobile |
| summaryrefslogtreecommitdiffhomepage |