Commit Graph

  • 199ee456b1 Summarize how to improve MBEDTLS_PSA_CRYPTO_CLIENT Gilles Peskine 2023-02-08 12:35:19 +01:00
  • 58e935fc6b add a missing Gilles Peskine 2023-02-08 12:07:12 +01:00
  • 0de0d863b6 Rebase code to restore reco-delay and fix some style issues Xiaokang Qian 2023-02-08 06:04:50 +00:00
  • 303829709d compat.sh: simplify code of iterating on VERIFY for PSK tests Yanray Wang 2023-02-08 12:38:31 +08:00
  • 8dc4ce76c7 Fix various coding style and comment issues Xiaokang Qian 2023-02-07 10:49:50 +00:00
  • 6b980011e5 Replace session_negotiate->ciphersuite with handshake->ciphersuite_info->id Xiaokang Qian 2023-02-07 03:17:45 +00:00
  • 53c4c27d35 Update the comment of ciphersuite check for early data Xiaokang Qian 2023-02-07 02:42:01 +00:00
  • 64bc9bc33d Add comments to describe the early data behavior-encrypt/rejected... Xiaokang Qian 2023-02-07 02:32:23 +00:00
  • e04afdc44f Refine the condition of whether re-generate early keys Xiaokang Qian 2023-02-07 02:19:42 +00:00
  • eb31cbc791 Share the hash check code between ticket and external psk Xiaokang Qian 2023-02-07 02:08:56 +00:00
  • 4ef8ba2938 Assign the ciphersuite in finalize_hrr{server_hello} Xiaokang Qian 2023-02-06 11:06:16 +00:00
  • bb883244aa Remove useless comments of outbound switch Xiaokang Qian 2023-02-06 10:46:35 +00:00
  • 02f5e14073 Combine the alert check of selected_id and ciphercuite Xiaokang Qian 2023-02-06 10:44:17 +00:00
  • 934ce6f6a9 Rename the finalize_client{server}_hello() Xiaokang Qian 2023-02-06 10:23:04 +00:00
  • ac4c625dea Add hash check of ciphersuite for ticket psk Xiaokang Qian 2023-02-06 10:15:00 +00:00
  • 6be8290aba Change to CCS after client hello only if we offer early data Xiaokang Qian 2023-02-03 06:04:43 +00:00
  • 7179f810f1 Restore the empty lines Xiaokang Qian 2023-02-03 03:38:44 +00:00
  • b58462157e Refine the ciphersuite and select id check for early data Xiaokang Qian 2023-02-02 08:12:20 +00:00
  • 44051f6376 Refine the state change after write client hello Xiaokang Qian 2023-02-02 06:57:26 +00:00
  • 7892b6caad Refine the comment about generating early secrects in post server hello Xiaokang Qian 2023-02-02 06:05:48 +00:00
  • bd0ab06d50 Skip CCS once we proposed early data even it is rejected Xiaokang Qian 2023-02-02 05:56:30 +00:00
  • f6d8fd3d6b Improve the coding style of new lines Xiaokang Qian 2023-02-02 02:46:26 +00:00
  • 79f77528f5 Move state change to finalize client hello Xiaokang Qian 2023-01-28 10:35:29 +00:00
  • 3f616c2493 Move selected_identity zero check to post_server_hello Xiaokang Qian 2023-01-12 03:36:31 +00:00
  • 1d8e86ce00 Get hash_alg by mbedtls_psa_translate_md Xiaokang Qian 2023-01-12 03:28:18 +00:00
  • ea28a78384 Revert new field and check ciphersuite match when resume by exist info_id Xiaokang Qian 2023-01-12 03:18:31 +00:00
  • 4224244883 Improve coding styles and add comments Xiaokang Qian 2023-01-12 02:26:17 +00:00
  • 33ff868dca Fix various errors Xiaokang Qian 2023-01-10 06:32:12 +00:00
  • 43a83f247c Move the place where call set_outbound_transform to switch handshake key Xiaokang Qian 2023-01-06 06:02:54 +00:00
  • 907461319a Fix compile error and warnings Xiaokang Qian 2023-01-06 05:54:59 +00:00
  • f10f474981 Check server selected cipher suite indicating a Hash associated with the PSK Xiaokang Qian 2023-01-06 03:43:56 +00:00
  • 592021aceb Add CCS after client hello in case of early data and comp mode Xiaokang Qian 2023-01-04 10:47:05 +00:00
  • 303f82c5b9 Skip generating early secrets in some cases Xiaokang Qian 2023-01-04 08:43:46 +00:00
  • b46275c7ec Add TLS1_3 guard to finalize_write_client_hello() to fix compile issue Xiaokang Qian 2023-01-04 07:38:50 +00:00
  • 2a674937dd Pend a illeagal allert when selected_identity isn't 0 Xiaokang Qian 2023-01-04 03:15:09 +00:00
  • 5b410075cf Remove useless comments about handshake messages for TLS13 Xiaokang Qian 2023-01-03 10:31:15 +00:00
  • 126929f825 Move early keys generation into mbedtls_ssl_tls13_finalize_write_client_hello Xiaokang Qian 2023-01-03 10:29:41 +00:00
  • 19d4416a45 Refine code to remove finalize_write_end_of_early_data() Xiaokang Qian 2023-01-03 03:39:50 +00:00
  • 7094f66879 Remove useless duplicted mbedtls_ssl_tls13_ticket_get_psk Xiaokang Qian 2022-12-19 07:35:40 +00:00
  • 854db28bb7 Set hs_psk,ciphercuit_info and kex mode when writing pre-share key Xiaokang Qian 2022-12-19 07:31:27 +00:00
  • 57a138d5c3 Update message log for end of early data test cases Xiaokang Qian 2022-12-19 06:40:47 +00:00
  • 742578ca2c Remove end_of_early_data_coordinate() to align with exist style Xiaokang Qian 2022-12-19 06:34:44 +00:00
  • bc75bc0c3a Switch to MBEDTLS_SSL_END_OF_EARLY_DATA as needed Xiaokang Qian 2022-12-19 06:16:42 +00:00
  • c81a15a019 Change the comment format of end_of_early_data Xiaokang Qian 2022-12-19 02:43:33 +00:00
  • 7ed30e59af Fix the issue that gnutls server doesn't support packet Xiaokang Qian 2022-12-16 08:32:02 +00:00
  • 8804e6d0ac Put kex_exchange_mode in the guard of TLS13 Xiaokang Qian 2022-12-15 15:27:26 +00:00
  • 94dd1dd6fa Update test case to indicate parsing of end of early data Xiaokang Qian 2022-12-15 15:13:04 +00:00
  • da8402dde6 Switch outbound back to handshake key after end_of_early_data Xiaokang Qian 2022-12-15 14:55:35 +00:00
  • bf09376bda Remove useless prepare_write_end_of_early_data Xiaokang Qian 2022-12-15 14:53:03 +00:00
  • df6f52e2b2 Generate early key and switch outbound key to it after write client hello Xiaokang Qian 2022-12-15 14:42:45 +00:00
  • d05ac5dfce Add extern apis mbedtls_ticket_get_psk. Xiaokang Qian 2022-12-15 14:38:29 +00:00
  • 32af4fbbdb Set ciphersuite info and kex mode in set_session in re-connection Xiaokang Qian 2022-12-15 14:05:55 +00:00
  • 34aab55aa7 Add prepare function to switch transform to early keys Xiaokang Qian 2022-12-09 08:05:53 +00:00
  • 125afcb060 Add end-of-early-data write Xiaokang Qian 2022-10-28 06:04:06 +00:00
  • 837e9cfc77 fix wrong typo Jerry Yu 2023-02-08 10:57:23 +08:00
  • acbeb7fa30 code_style.py: Add helpers to print warning and skipped files Pengyu Lv 2023-02-06 14:27:30 +08:00
  • 8c6325cc8e code_style.py: Apply exclusions to the file list Pengyu Lv 2023-02-06 14:29:02 +08:00
  • a6779287e8 Style. Pol Henarejos 2023-02-08 00:50:04 +01:00
  • 3dafc6c3b3 pkcs7: Drop support for signature in contentInfo of signed data Nick Child 2023-02-07 19:59:58 +00:00
  • fad34a4f10 Support all legacy algorithms in PSA Gilles Peskine 2023-02-07 20:37:56 +01:00
  • a391a9e472 Bad merge. These tests are not used. Pol Henarejos 2023-02-07 20:05:31 +01:00
  • 4e747337ee Merge branch 'development' into sha3 Pol Henarejos 2023-02-07 19:55:31 +01:00
  • 5b16e9eabc pk_wrap: keep ECDSA_C for ECP_RESTARTABLE contexts Valerio Setti 2023-02-07 08:08:53 +01:00
  • 7dcdc132d5 Change SHA256_C to HAS_ALG_SHA256_VIA[..] in x509 tests Andrzej Kurek 2023-01-09 06:13:16 -05:00
  • dae916b05f X.509: Add length consistency checks to x509_get_other_name() Hanno Becker 2019-09-13 14:21:13 +01:00
  • 2a15a0c868 X.509: Remove red'n bounds checks and zeroiz'n in OtherName parsing Hanno Becker 2019-09-13 14:19:03 +01:00
  • 5d82c3b99c X.509: Improve negative testing for SubjectAltName parsing Hanno Becker 2019-09-13 12:26:04 +01:00
  • dc0e8b92f8 Add a ChangeLog entry Hanno Becker 2019-09-13 12:28:57 +01:00
  • db305ff42e X.509: Improve negative testing for SubjectAltName parsing Hanno Becker 2019-09-13 12:26:04 +01:00
  • ae8f8c435c Fix X.509 SAN parsing Hanno Becker 2019-09-13 12:24:56 +01:00
  • bfe79030a9 Merge pull request #7021 from lpy4105/issue/backport-do-not-run-x86-tests-on-arm64 Gilles Peskine 2023-02-07 10:26:16 +01:00
  • a0c806aac1 Merge pull request #7003 from lpy4105/issue/do-not-run-x86-tests-on-arm64 Gilles Peskine 2023-02-07 10:26:10 +01:00
  • d6bb16a5b8 Merge pull request #6976 from davidhorstmann-arm/2.28-c-build-helper-improvements Gilles Peskine 2023-02-07 10:26:03 +01:00
  • 4c77601832 Merge pull request #6975 from davidhorstmann-arm/c-build-helper-improvements Gilles Peskine 2023-02-07 10:25:59 +01:00
  • b3b85ddf4a Disable macro conflict check Jerry Yu 2023-01-30 15:22:12 +08:00
  • e908c57f95 Disable clang tests Jerry Yu 2023-01-13 21:37:11 +08:00
  • 32f977e820 Add arm64 tests on travis ci Jerry Yu 2023-01-11 22:48:51 +08:00
  • e51eddce38 disable aesce when ASM not available Jerry Yu 2023-01-11 14:16:08 +08:00
  • 2bb3d8101f Add en(de)crypt routine Jerry Yu 2023-01-10 17:38:26 +08:00
  • e096da1af6 Add inverse key function Jerry Yu 2023-01-10 17:07:01 +08:00
  • 3f2fb71072 Add key expansion for encrypt Jerry Yu 2023-01-10 17:05:42 +08:00
  • b95c776c43 Add linux runtime detection Jerry Yu 2023-01-10 16:59:51 +08:00
  • 49231319fd Add empty aesce files Jerry Yu 2023-01-10 16:57:21 +08:00
  • 2fddfd7f8f Add AESCE confige options Jerry Yu 2023-01-10 16:32:03 +08:00
  • 3f9961bfca compat.sh: remove G_CLIENT_PRIO as it's not used Yanray Wang 2023-02-07 16:34:28 +08:00
  • a89c4d51f7 compat.sh: display "no" even if $VERIFY=YES for PSK test cases Yanray Wang 2023-02-07 12:13:49 +08:00
  • 5d646e705d compat.sh: do not filter PSK ciphersuites for GnuTLS if $VERIFY=YES Yanray Wang 2023-02-07 11:29:11 +08:00
  • c66a46f734 compat.sh: remove check_openssl_server_bug Yanray Wang 2023-02-07 10:51:56 +08:00
  • 35c0eadf0f compat.sh: avoid running duplicate test cases for PSK Yanray Wang 2023-02-07 10:41:04 +08:00
  • dae7057e1f compat.sh: ignore $VERIFY in PSK TYPE Yanray Wang 2023-02-06 18:08:54 +08:00
  • 041c8c10f9 Add std PRI macro for printing milliseconds Jerry Yu 2023-02-03 13:15:09 +08:00
  • 1cdddacc62 pk_wrap: use proper macros for sign and verify Valerio Setti 2023-02-02 13:55:57 +01:00
  • 5c593af271 pk_wrap: fix comment on closing #endif Valerio Setti 2023-02-02 12:21:18 +01:00
  • 0568decc0c ecdsa: add comment for ecdsa_context Valerio Setti 2023-02-02 12:05:41 +01:00
  • 24138d9f83 pk_wrap: re-use identical functions for eckey and ecdsa when possible Valerio Setti 2023-01-27 14:24:09 +01:00
  • 7ca1318256 pk: add new symbol for generic ECDSA capability Valerio Setti 2023-01-27 13:22:42 +01:00
  • bf74f52920 test: add a comment specifying why restartable cannot be tested Valerio Setti 2023-01-27 12:37:41 +01:00
  • 9e30dd882d removing a leftover printf from debug Valerio Setti 2023-01-27 12:37:09 +01:00
  • 4836374088 test: ECDSA driver only: fixing disparities in tests Valerio Setti 2023-01-26 16:53:01 +01:00
  • ab363d9fe1 pk/pk_wrap: replace ECDSA_C with generic ECDSA capabilities' defines Valerio Setti 2023-01-26 14:31:54 +01:00