Commit Graph

  • 4d6070ca6d Merge pull request #5778 from mpg/doc-allowed-pks-2.28 Gilles Peskine 2022-04-28 18:13:52 +02:00
  • 94e371af91 Update mbedtls_pk_wrap_as_opaque() usage in SSL client2 & server2 Neil Armstrong 2022-04-22 13:58:05 +02:00
  • 95974974d2 Update mbedtls_pk_wrap_as_opaque() usage in PK & X509write tests Neil Armstrong 2022-04-22 13:57:44 +02:00
  • a1fc18fa55 Change mbedtls_pk_wrap_as_opaque() signature to specify alg, usage and key_enrollment_algorithm Neil Armstrong 2022-04-22 13:57:14 +02:00
  • 8855e36030 Merge pull request #5674 from superna9999/5668-abstract-tls-mode-cleanup Gilles Peskine 2022-04-28 12:33:38 +02:00
  • 8a4b7fd7c3 Optimize code Przemek Stekiel 2022-04-28 09:22:22 +02:00
  • ad47487e25 Merge pull request #5742 from superna9999/5669-review-test-incompatible-psa Manuel Pégourié-Gonnard 2022-04-28 09:57:13 +02:00
  • ab452cc257 fix name issue Jerry Yu 2022-04-28 15:27:08 +08:00
  • 8abcee9290 Fix typos Przemek Stekiel 2022-04-28 09:16:28 +02:00
  • bc3cfed43e check_config.h: Add MBEDTLS_MD_C dependency MBEDTLS_PKCS12_C, MBEDTLS_PKCS1_V15, MBEDTLS_PKCS1_V21, MBEDTLS_PK_C Przemek Stekiel 2022-04-27 14:19:19 +02:00
  • 6aadf0b44f mbedtls_config.h: update dependencies for MBEDTLS_MD_C Przemek Stekiel 2022-04-27 14:46:52 +02:00
  • 2230e6c06d Simplify PSA transform->ivlen set in ssl_tls12_populate_transform() Neil Armstrong 2022-04-27 10:36:14 +02:00
  • 3bf040ed70 Reorganize PSA/!PSA code in mbedtls_ssl_ticket_setup() Neil Armstrong 2022-04-27 10:35:24 +02:00
  • 301711e96e Simplify mbedtls_ssl_get_base_mode Gilles Peskine 2022-04-26 16:57:05 +02:00
  • e108d987ea Simplify mbedtls_ssl_get_mode Gilles Peskine 2022-04-26 16:50:40 +02:00
  • 98136b14e0 Fixup and update comment of disabled USE_PSA_CRYPTO test check in all.sh Neil Armstrong 2022-04-27 10:00:42 +02:00
  • efffd6410a Note that MBEDTLS_CONFIG_FILE can't be defined inside the config file Gilles Peskine 2022-04-26 18:13:01 +02:00
  • 238f976ad1 Note that MBEDTLS_CONFIG_FILE can't be defined inside the config file Gilles Peskine 2022-04-26 18:13:01 +02:00
  • 8290976801 Fix references to mbedtls_config.h Gilles Peskine 2022-04-26 18:10:11 +02:00
  • 1c9eb722fd Update PSA specific comment in pk_rsa_verify_ext_test_vec() Neil Armstrong 2022-04-25 14:38:18 +02:00
  • cef55dbd6a ssl-opt: add state check Jerry Yu 2022-04-23 11:02:05 +08:00
  • 4d3841a4d1 fix various issues Jerry Yu 2022-04-16 12:37:19 +08:00
  • cba64af50d TLS1.3: add writing encrypted extensions Xiaofei Bai 2022-02-15 10:00:56 +00:00
  • 2b28e4ecee Clarify wording of documentation Manuel Pégourié-Gonnard 2022-04-25 10:12:01 +02:00
  • c61543dc71 Adapt ChangeLog Hanno Becker 2018-10-11 11:40:09 +01:00
  • f501cb57a5 Clarify documentation of mbedtls_x509_crt_profile Hanno Becker 2018-10-11 11:36:29 +01:00
  • 8ba99e736a Clarify wording of documentation Manuel Pégourié-Gonnard 2022-04-25 10:12:01 +02:00
  • 002a7b20ec Adapt ChangeLog Hanno Becker 2018-10-11 11:40:09 +01:00
  • 2b9fb88281 Clarify documentation of mbedtls_x509_crt_profile Hanno Becker 2018-10-11 11:36:29 +01:00
  • 500e48f095 Consistently use "ARC4" in PSA docs and comments Gilles Peskine 2022-04-22 16:49:30 +02:00
  • eecd0d2fc3 Merge pull request #5679 from yuhaoth/pr/add-tls13-write-server-hello Ronald Cron 2022-04-25 09:28:40 +02:00
  • b51561b017 Add change log entry for mixed-psk Przemek Stekiel 2022-04-25 08:52:26 +02:00
  • a828f4d89c Merge pull request #5684 from tom-daubney-arm/M-AEAD_decrypt_driver_dispatch_test Ronald Cron 2022-04-23 12:10:21 +02:00
  • e65d801580 fix undeclare error Jerry Yu 2022-04-23 10:34:35 +08:00
  • d7e0ee42b8 cmake: Fix runtime library install location in mingw Biswapriyo Nath 2022-04-22 20:59:50 +05:30
  • 0f2e87bdf5 cmake: Use GnuInstallDirs to customize install directories Biswapriyo Nath 2022-04-22 20:56:21 +05:30
  • 882e02ea7a Move and fixup check_test_requires_psa_disabled() into check_test_cases() Neil Armstrong 2022-04-22 16:50:29 +02:00
  • 6e6967f6a0 Reorganize PSA INVALID_PADDING handling for test #5 in pk_rsa_verify_ext_test_vec() Neil Armstrong 2022-04-22 11:32:18 +02:00
  • 2f8c2a5fc5 Merge pull request #5753 from tom-cosgrove-arm/fix-missing-prototypes-warnings-a64-sha256-sha512 Gilles Peskine 2022-04-22 16:45:23 +02:00
  • eef30bcea1 Merge pull request #5755 from mpg/ecdsa-range-test Gilles Peskine 2022-04-22 16:43:44 +02:00
  • 988391d1cb Merge pull request #5769 from mpg/ecdsa-range-test-2.28 Gilles Peskine 2022-04-22 16:43:41 +02:00
  • 72b99edf31 Merge pull request #5381 from mpg/benchmark-ecc-heap Gilles Peskine 2022-04-22 16:43:11 +02:00
  • 8e9e1f6819 Merge pull request #5744 from mpg/benchmark-ecc-heap-2.28 Gilles Peskine 2022-04-22 16:43:04 +02:00
  • 955ddd75a3 fix various issues Jerry Yu 2022-04-22 22:27:33 +08:00
  • 4914d50c73 Fix spelling error in generated helper code Dave Rodgman 2022-04-22 15:26:47 +01:00
  • b8f7694e6a Fix Doxygen syntax error in generated code Dave Rodgman 2022-04-22 15:20:46 +01:00
  • 99114f3084 Fix build flags for opaque/raw psk checks Przemek Stekiel 2022-04-22 11:20:09 +02:00
  • 85d46fe6cf ssl-opt.sh: add tests for clent/server psa opaque dhe-psk key exchange Przemek Stekiel 2022-04-19 12:47:48 +02:00
  • cb322eac6b Enable support for psa opaque DHE-PSK key exchange on the server side Przemek Stekiel 2022-04-19 12:23:37 +02:00
  • b293aaa61b Enable support for psa opaque DHE-PSK key exchange on the client side Przemek Stekiel 2022-04-19 12:22:38 +02:00
  • b6a0503dda ssl-opt.sh: add tests for clent/server psa opaque ecdhe-psk key exchange Przemek Stekiel 2022-04-14 10:22:18 +02:00
  • 14d11b0877 Enable support for psa opaque ECDHE-PSK key exchange on the server side Przemek Stekiel 2022-04-14 08:33:29 +02:00
  • 19b80f8151 Enable support for psa opaque ECDHE-PSK key exchange on the client side Przemek Stekiel 2022-04-14 08:29:31 +02:00
  • 51a1f36be0 setup_psa_key_derivation(): change salt parameter to other_secret Przemek Stekiel 2022-04-13 08:57:06 +02:00
  • b270b56372 ssl-opt.sh: add tests for server psa opaque rsa-psk key exchange Przemek Stekiel 2022-04-06 13:12:48 +02:00
  • aeb710fec5 Enable support for psa opaque RSA-PSK key exchange on the server side Przemek Stekiel 2022-04-06 11:40:30 +02:00
  • 8e0495e0f4 ssl-opt.sh: add tests for client psa opaque rsa-psk key exchange Przemek Stekiel 2022-04-05 23:00:04 +02:00
  • fc72e428ed ssl_client2: Enable support for TLS 1.2 RSA-PSK opaque ciphersuite Przemek Stekiel 2022-04-05 17:29:28 +02:00
  • f2534ba69b tls12_client: skip PMS generation for opaque RSA-PSK Przemek Stekiel 2022-04-05 17:21:14 +02:00
  • c2033409e3 Add support for psa rsa-psk key exchange Przemek Stekiel 2022-04-05 17:19:41 +02:00
  • ae4ed30435 Fix naming: random bytes are the seed (not salt) in derivation process Przemek Stekiel 2022-04-05 17:15:55 +02:00
  • 1f02703e53 setup_psa_key_derivation(): add optional salt parameter Przemek Stekiel 2022-04-05 17:12:11 +02:00
  • 60d83f0126 Merge pull request #5710 from superna9999/5627-pk-opaque-rsa-x509 Manuel Pégourié-Gonnard 2022-04-22 14:29:23 +02:00
  • 55132c6a9a Merge pull request #5703 from superna9999/5322-ecdh-remove-legacy-context Manuel Pégourié-Gonnard 2022-04-22 14:27:06 +02:00
  • 76b7407bd7 Use MBEDTLS_SSL_SOME_SUITES_USE_CBC_ETM to enable ssl_write_encrypt_then_mac_ext() Neil Armstrong 2022-04-06 13:43:54 +02:00
  • f2c82f0a3b Introduce MBEDTLS_SSL_SOME_SUITES_USE_CBC_ETM macro to determine if Encrypt-then-MAC with CBC is used in a ciphersuite Neil Armstrong 2022-04-05 11:16:53 +02:00
  • ccc074e44d Use correct condition to use encrypt_then_mac in ssl_tls.c Neil Armstrong 2022-04-05 11:01:47 +02:00
  • d1be7674a4 Use PSA_BLOCK_CIPHER_BLOCK_LENGTH instead of PSA_BLOCK_CIPHER_BLOCK_MAX_SIZE in ssl_tls12_populate_transform() Neil Armstrong 2022-04-04 11:21:41 +02:00
  • 6b27c97a91 Rename mbedtls_get_mode() to mbedtls_ssl_get_mode() Neil Armstrong 2022-04-04 11:09:51 +02:00
  • ab555e0a6c Rename mbedtls_get_mode_from_XXX to mbedtls_ssl_get_mode_from_XXX Neil Armstrong 2022-04-04 11:07:59 +02:00
  • 858581e81a Remove cipher_info in mbedtls_ssl_ticket_setup() when USE_PSA_CRYPTO is defined Neil Armstrong 2022-04-01 18:03:15 +02:00
  • a0eeb7f470 Remove cipher_info in ssl_tls12_populate_transform() when USE_PSA_CRYPTO is defined Neil Armstrong 2022-04-01 17:36:10 +02:00
  • 7fea33ea4d Use mbedtls_get_mode_from_ciphersuite() in ssl_tls12_populate_transform() Neil Armstrong 2022-04-01 15:40:25 +02:00
  • fe635e42c9 Use mbedtls_get_mode_from_ciphersuite() in server-side ssl_write_encrypt_then_mac_ext() Neil Armstrong 2022-04-01 10:36:09 +02:00
  • 4bf4c8675f Introduce mbedtls_get_mode_from_ciphersuite() by reusing mbedtls_get_mode_from_transform() logic Neil Armstrong 2022-04-01 10:35:48 +02:00
  • 136f8409df Replace PSA/Cipher logic with mbedtls_get_mode_from_transform() Neil Armstrong 2022-03-30 10:58:01 +02:00
  • 8a0f3e8cf0 Introduce mbedtls_ssl_mode_t & mbedtls_get_mode_from_transform() Neil Armstrong 2022-03-30 10:57:37 +02:00
  • 7d063f6467 Adds comments for clarification Thomas Daubney 2022-04-22 11:36:07 +01:00
  • 5c1479d04a Use QueryPerformanceCounter as fallback timer on non-x86 mingw Martin Storsjö 2022-04-22 13:11:42 +03:00
  • a09f5e98ef fix build fail Jerry Yu 2022-04-22 16:46:03 +08:00
  • cfc04b3541 Update comments in write server hello Jerry Yu 2022-04-21 09:31:58 +08:00
  • e74e04af1a Rename write supported_versions ext Jerry Yu 2022-04-21 09:23:16 +08:00
  • d9436a1baa remove guards for write_key_share Jerry Yu 2022-04-20 22:28:09 +08:00
  • 57d4841eda fix write key_share issues Jerry Yu 2022-04-20 21:50:42 +08:00
  • 637a3f1090 fix various issues Jerry Yu 2022-04-20 21:37:58 +08:00
  • 1c3e688df1 fix comments issues Jerry Yu 2022-04-20 21:23:40 +08:00
  • 8b9fd374b8 Add P_CLI test to easy debug Jerry Yu 2022-04-14 20:55:12 +08:00
  • 349a61388b fix write selected_version fail Jerry Yu 2022-04-14 20:52:56 +08:00
  • abf20c7564 add state check Jerry Yu 2022-04-14 18:36:14 +08:00
  • fb9f54db8c fix comments issue Jerry Yu 2022-04-06 10:08:34 +08:00
  • 89e103c54c tls13: Share write ecdh_key_exchange function Jerry Yu 2022-03-30 22:43:29 +08:00
  • 3bf2c6449d tls13: write server hello compile pass Jerry Yu 2022-03-30 22:02:12 +08:00
  • 56404d70c4 tls13:server:Add finalize write_server_hello and dummy body Jerry Yu 2022-03-30 17:36:13 +08:00
  • f4b27e4351 tls13:server:Add prepare write_server_hello Jerry Yu 2022-03-30 17:32:21 +08:00
  • 5b64ae9bad tls13:server:Add base framework for serverhello Jerry Yu 2022-03-30 17:15:02 +08:00
  • 5aeb61ccb4 Improve readability and relevance of values Manuel Pégourié-Gonnard 2022-04-21 09:25:23 +02:00
  • bcaba030ec Expand negative coverage of ECDSA verification Manuel Pégourié-Gonnard 2022-04-20 10:34:22 +02:00
  • 38b8aa4f63 Merge pull request #5539 from xkqian/add_client_hello_to_server Ronald Cron 2022-04-22 10:26:00 +02:00
  • 7f6f672d7e Add Opaque PK test case for TLS 1.3 Neil Armstrong 2022-04-15 10:09:11 +02:00
  • 21f82c7510 Merge pull request #5709 from superna9999/5625-pk-opaque-rsa-tls12 Manuel Pégourié-Gonnard 2022-04-22 10:05:43 +02:00