TeamHepta/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-04-06 12:35:36 +02:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • bdb4f58cea Add and update documentation of some minor version fields Ronald Cron 2022-03-31 15:37:44 +02:00
  • ff59a34606 Prevent free of uninitialised variables Paul Elliott 2022-03-31 17:14:13 +01:00
  • 82c785fac3 Make handshake::min_minor_ver client only Ronald Cron 2022-03-31 15:44:41 +02:00
  • 017a19997a Update references to old Github organisation Dave Rodgman 2022-03-31 14:07:01 +01:00
  • 52af769878 Update references to old Github organisation Dave Rodgman 2022-03-31 14:27:24 +01:00
  • 91477a7964 Switch handshake->ecdh_bits to size_t and remove now useless cast & limit checks Neil Armstrong 2022-03-25 15:42:20 +01:00
  • 98f6f78a70 Update mbedtls_pk_wrap_as_opaque() documentation for ECDH derivation usage Neil Armstrong 2022-03-25 15:36:07 +01:00
  • b7b549aa71 Force server-side TLS1.2 for ECDH- Opaque PK key test Neil Armstrong 2022-03-25 15:13:02 +01:00
  • 1335222f13 Return translated PSA error in PSA version of ssl_get_ecdh_params_from_cert() Neil Armstrong 2022-03-25 15:08:11 +01:00
  • f788253ed3 Fix comment typo in PSA version of ssl_get_ecdh_params_from_cert() Neil Armstrong 2022-03-25 15:06:10 +01:00
  • 023bf8d7c2 Add ECDH- Opaque PK key test Neil Armstrong 2022-03-23 14:04:04 +01:00
  • 80325d00cf Allow ECDSA PK Opaque keys for ECDH Derivation Neil Armstrong 2022-03-23 14:01:56 +01:00
  • 104a7c1d29 Handle Opaque PK EC keys in ssl_get_ecdh_params_from_cert() Neil Armstrong 2022-03-23 10:58:03 +01:00
  • 8113d25d1e Add ecdh_psa_shared_key flag to protect PSA privkey if imported Neil Armstrong 2022-03-23 10:57:04 +01:00
  • 5cd5f76d67 Use mbedtls_platform_zeroize() in ssl_get_ecdh_params_from_cert() Neil Armstrong 2022-03-22 17:28:51 +01:00
  • 4f33fbc7e9 Use PSA define for max EC key pair size in ssl_get_ecdh_params_from_cert() Neil Armstrong 2022-03-22 16:30:01 +01:00
  • 306d6074b3 Fix indentation issue in PSA version of ssl_get_ecdh_params_from_cert() Neil Armstrong 2022-03-18 14:44:56 +01:00
  • 062de7dd79 Use PSA_BITS_TO_BYTES instead of open-coded calculation in PSA version of ssl_get_ecdh_params_from_cert() Neil Armstrong 2022-03-18 14:44:37 +01:00
  • 1f4b39621b Implement PSA server-side ECDH-RSA/ECDSA Neil Armstrong 2022-03-09 14:54:29 +01:00
  • 6476726ce4 Fix comments Ronald Cron 2022-03-31 14:13:57 +02:00
  • a980adf4ce Merge pull request #5637 from ronald-cron-arm/version-negotiation-1 Ronald Cron 2022-03-31 11:47:16 +02:00
  • ba120bb228 ssl_tls13_client.c: Fix ciphersuite final validation Ronald Cron 2022-03-30 22:09:48 +02:00
  • 8fdad9e534 ssl_tls12_client.c: Remove duplicate of ciphersuite validation Ronald Cron 2022-03-30 22:04:30 +02:00
  • 757a2abfe2 ssl_client.c: Extend and export ciphersuite validation function Ronald Cron 2022-03-30 13:57:40 +02:00
  • f735cf1f0f ssl_tls.c: Fix ciphersuite selection regarding protocol version Ronald Cron 2022-03-30 19:51:43 +02:00
  • 9847338429 ssl_tls13_client.c: Add check in supported_versions parsing Ronald Cron 2022-03-30 20:04:10 +02:00
  • 1fa4f6863b ssl_tls.c: Return in error if default config fails Ronald Cron 2022-03-30 17:35:18 +02:00
  • a77fc2756e ssl_tls13_client.c: versions ext writing : Fix available space check Ronald Cron 2022-03-30 17:20:47 +02:00
  • 37bdaab64f tls: Simplify the logic of the config version check and test it Ronald Cron 2022-03-30 16:45:51 +02:00
  • 3cffc5ccb1 tls: Remove unnecessary checks of MBEDTLS_CIPHERSUITE_NODTLS Ronald Cron 2022-03-30 14:06:21 +02:00
  • 150d579d7a ssl_client.c: Improve coding style Ronald Cron 2022-03-30 20:24:51 +02:00
  • e451295179 Remove md_info in ssl_tls12_populate_transform() when USE_PSA_CRYPTO is defined Neil Armstrong 2022-03-08 09:08:22 +01:00
  • 253e9e7e6d Use mbedtls_rsa_info directly in rsa_verify_wrap() Neil Armstrong 2022-03-16 15:32:23 +01:00
  • ea54dbe7c2 Fix comment typo in rsa_verify_wrap() Neil Armstrong 2022-03-14 09:26:48 +01:00
  • 19e6bc4c9f Use new PSA to mbedtls PK error mapping functions in rsa_verify_wrap() Neil Armstrong 2022-03-03 16:50:11 +01:00
  • 8a44bb47ac Handle INVALID_SIGNATURE instead of INVALID_PADDING in rsa_verify_wrap() Neil Armstrong 2022-03-03 13:16:13 +01:00
  • 82cf804e34 Fix 80 characters indentation in rsa_verify_wrap() Neil Armstrong 2022-03-03 12:30:59 +01:00
  • 6baea78072 Use now shared RSA_PUB_DER_MAX_BYTES define in pk_wrap.c Neil Armstrong 2022-03-01 13:52:02 +01:00
  • a33280af6c Check psa_destroy_key() return in rsa_verify_wrap() Neil Armstrong 2022-02-24 15:17:47 +01:00
  • 059a80c212 Map INVALID_PADDING from PSA to MbedTLS error in rsa_verify_wrap() Neil Armstrong 2022-02-24 15:23:42 +01:00
  • 52f41f8228 PK: RSA verification PSA wrap implementation Neil Armstrong 2022-02-22 15:30:24 +01:00
  • 56d51274d8 Initialize PSA crypto in test_suite_pk for RSA verify tests Neil Armstrong 2022-02-22 15:29:05 +01:00
  • da41b38c42 Improve and fix comments Ronald Cron 2022-03-30 09:57:11 +02:00
  • 3304f253d7 Merge pull request #5653 from paul-elliott-arm/handshake_over Manuel Pégourié-Gonnard 2022-03-30 12:16:40 +02:00
  • e42d8bf83b Add macro guard for header file Gabor Mezei 2022-03-30 11:33:06 +02:00
  • abed05f335 Merge pull request #5652 from arturallmann/issue-commit Manuel Pégourié-Gonnard 2022-03-30 10:01:24 +02:00
  • 3a7d7b926b Merge pull request #5670 from bensze01/typo-2.28 Manuel Pégourié-Gonnard 2022-03-30 10:00:05 +02:00
  • 8ecd9937a9 ssl_client.c: Fix state change for DTLS 1.2 Ronald Cron 2022-03-29 12:26:54 +02:00
  • 3cec8e8864 tests: Init PSA crypto if TLS 1.3 is enabled Ronald Cron 2022-03-27 14:34:09 +02:00
  • a1b8f6e914 ssl-opt.sh: Do not force TLS 1.3 on client Ronald Cron 2022-03-18 14:04:12 +01:00
  • f3b425bbde ssl-opt.sh: Force TLS 1.2 on server Ronald Cron 2022-03-17 16:45:09 +01:00
  • f660655b84 TLS: Allow hybrid TLS 1.2/1.3 in default configurations Ronald Cron 2022-03-15 11:23:25 +01:00
  • e71639d39b Simplify TLS major version default value setting Ronald Cron 2022-03-11 11:31:31 +01:00
  • dbe87f08ec Propose TLS 1.3 and TLS 1.2 Ronald Cron 2022-02-10 14:35:27 +01:00
  • 9f0fba374c Add logic to switch to TLS 1.2 Ronald Cron 2022-02-10 16:45:15 +01:00
  • e1d3f06399 Allow hybrid TLS 1.3 + TLS 1.2 configuration Ronald Cron 2022-02-10 14:50:54 +01:00
  • fbd9f99f10 ssl_tls.c: Move some client specific functions to ssl_client.c Ronald Cron 2022-03-17 15:22:07 +01:00
  • 7320e6436b ssl_tls12_client.c: Switch to generic Client Hello state handler Ronald Cron 2022-03-08 13:34:49 +01:00
  • 27c85e743f ssl_tls.c: Unify TLS 1.2 and TLS 1.3 SSL state logs Ronald Cron 2022-03-08 11:37:55 +01:00
  • 5f4e91253f ssl_client.c: Add DTLS ClientHello message sending specifics Ronald Cron 2022-02-21 09:50:36 +01:00
  • 4079abc7d1 ssl_client.c: Adapt extensions writing to the TLS 1.2 case Ronald Cron 2022-02-20 10:35:26 +01:00
  • 11e1857f5e ssl_client.c: Fix key share code guards Ronald Cron 2022-03-17 13:44:33 +01:00
  • df823bf39b ssl_client.c: Re-order partially extension writing Ronald Cron 2022-03-29 18:57:54 +02:00
  • 42c1cbf1de ssl_client.c: Adapt compression methods comment to TLS 1.2 case Ronald Cron 2022-02-20 10:24:39 +01:00
  • 571f1187b6 Merge pull request #5642 from mprse/ecp_export Paul Elliott 2022-03-29 17:19:04 +01:00
  • e25dc1ccdc Fix typo "phtreads" to "pthreads" Artur Allmann 2022-03-21 16:11:35 +02:00
  • 3f396152b7 Fix typo "phtreads" to "pthreads" Artur Allmann 2022-03-21 16:11:35 +02:00
  • d491c2d779 ssl_client.c: Adapt ciphersuite writing to TLS 1.2 case Ronald Cron 2022-02-19 18:30:46 +01:00
  • a874aa818a ssl_client.c: Add DTLS 1.2 cookie support Ronald Cron 2022-02-19 18:11:26 +01:00
  • 021b1785ef ssl_client.c: Adapt session id generation to the TLS 1.2 case Ronald Cron 2022-02-19 17:32:53 +01:00
  • 58b803818d ssl_client.c: Adapt TLS random generation and writing to TLS 1.2 case Ronald Cron 2022-02-18 18:41:08 +01:00
  • cb5ef6a532 Remove duplicated includes Gabor Mezei 2022-03-29 17:10:01 +02:00
  • 55c49a3335 Use proper macro guard Gabor Mezei 2022-03-29 17:09:15 +02:00
  • 29e7ca89d5 Fix typo Gabor Mezei 2022-03-29 17:08:49 +02:00
  • c09437526c Remove commented out code Gabor Mezei 2022-03-29 17:08:15 +02:00
  • 1614eb668c ssl_client.c: Adapt TLS version writing to TLS 1.2 case Ronald Cron 2022-02-18 17:53:01 +01:00
  • 86a477f5ee ssl_client.c: Adapt initial version selection to TLS 1.2 case Ronald Cron 2022-02-18 17:45:10 +01:00
  • 5456a7f89c ssl_client.c: Expand ssl_write_client_hello_body doc with TLS 1.2 case Ronald Cron 2022-02-18 17:38:42 +01:00
  • 71c2332860 ssl_client.c: Rename TLS 1.3 ClientHello writing functions Ronald Cron 2022-02-18 17:29:39 +01:00
  • 3d580bf4bd Move TLS 1.3 client hello writing to new TLS 1.2 and 1.3 client file Ronald Cron 2022-02-18 17:24:56 +01:00
  • 1c41501949 Merge pull request #5632 from tom-cosgrove-arm/seclib-667-sha512-acceleration-mbedtls-internal Dave Rodgman 2022-03-29 15:34:12 +01:00
  • 8f6d39a81d Make some handshake TLS 1.3 utility routines available for TLS 1.2 Ronald Cron 2022-03-10 18:56:50 +01:00
  • 7ffe7ebe38 ssl_tls13_client.c: Add some MBEDTLS_SSL_PROTO_TLS1_3 guards Ronald Cron 2022-03-09 15:26:31 +01:00
  • 04fbd2b2ff ssl_tls13_client.c: Move writing of TLS 1.3 specific extensions Ronald Cron 2022-02-18 12:06:07 +01:00
  • 12dcdf0d6e ssl_tls12_client.c: Move writing of TLS 1.2 specific extensions Ronald Cron 2022-02-16 15:28:22 +01:00
  • 4e263fd49c ssl_tls12_client.c: Simplify TLS version in encrypted PMS Ronald Cron 2022-03-15 15:54:17 +01:00
  • 90f012037d ssl_tls12_server.c: Simplify TLS version check in ClientHello Ronald Cron 2022-03-15 15:37:13 +01:00
  • 086ee0be0e ssl_tls.c: Reject TLS 1.3 version configuration for server Ronald Cron 2022-03-15 15:18:51 +01:00
  • 8457c12127 ssl_tls12_server.c: Remove some unnecessary checks on TLS minor version Ronald Cron 2022-03-07 11:32:54 +01:00
  • b894ac7f99 ssl_tls12_server.c: Remove some dead code for versions of TLS < 1.2 Ronald Cron 2022-03-07 11:56:06 +01:00
  • 90915f2a21 ssl_tls12_client.c: Remove some unnecessary checks on TLS minor version Ronald Cron 2022-03-07 11:11:36 +01:00
  • a25cf58681 ssl_tls.c: Remove one unnecessary minor version check Ronald Cron 2022-03-07 11:10:36 +01:00
  • c2f13a0568 ssl_tls.c: Modify mbedtls_ssl_set_calc_verify_md() Ronald Cron 2022-03-07 10:25:24 +01:00
  • 4dcbca952e ssl_tls.c: Move mbedtls_ssl_set_calc_verify_md() to TLS 1.2 section Ronald Cron 2022-03-07 10:21:40 +01:00
  • 81591aa0f3 ssl_tls.c: Remove ssl_set_handshake_prfs unnecessary minor_ver param Ronald Cron 2022-03-07 09:05:51 +01:00
  • f12b81d387 ssl_tls.c: Fix PSA ECDH private key destruction Ronald Cron 2022-03-15 10:42:41 +01:00
  • 5b98ac9c64 TLS 1.3: Move PSA ECDH private key destroy to dedicated function Ronald Cron 2022-03-15 10:19:18 +01:00
  • 8540cf66ac ssl_tls.c: Propose PKCS1 v1.5 signatures with SHA_384/512 Ronald Cron 2022-03-16 08:01:09 +01:00
  • 60ff79424e ssl_tls13_client.c: alpn: Miscellanous minor improvements Ronald Cron 2022-03-09 13:56:48 +01:00
  • 13d8ea1dd9 ssl_tls13_client.c: alpn: Loop only once over protocol names Ronald Cron 2022-03-09 10:48:18 +01:00