Commit Graph

  • 6dd92c3f6b Wrap lines in the source to <80 columns Gilles Peskine 2021-06-07 20:44:47 +02:00
  • caa0e93f08 Merge pull request #4617 from daverodgman/cmake-version Manuel Pégourié-Gonnard 2021-06-08 11:38:03 +02:00
  • 16fdab79a5 Merge pull request #4382 from hanno-arm/max_record_payload_api Manuel Pégourié-Gonnard 2021-06-08 11:07:27 +02:00
  • dacd044938 Merge pull request #4516 from TRodziewicz/Remove__CHECK_PARAMS_option Manuel Pégourié-Gonnard 2021-06-08 09:30:48 +02:00
  • 68237d718a Merge pull request #4548 from hanno-arm/tls13_key_schedule_upstream Manuel Pégourié-Gonnard 2021-06-08 09:10:58 +02:00
  • 61f292ea0a Fix migration guide for now-removed deprecated functions Hanno Becker 2021-06-08 07:50:55 +01:00
  • 59d3670fa5 Fix ssl-opt.sh test cases grepping for MFL configuration output Hanno Becker 2021-06-08 05:35:29 +01:00
  • df3b86343a Fixup rebase slip in library/ssl_misc.h Hanno Becker 2021-06-08 05:30:45 +01:00
  • 2bfbb17f30 Remove duplicate wipe call in psa_destroy_key Gilles Peskine 2021-06-07 23:27:54 +02:00
  • 11794b30f9 Hopefully clarify the example Gilles Peskine 2021-06-07 23:21:50 +02:00
  • 4de5a6096b Add missing parentheses Gilles Peskine 2021-06-07 20:56:20 +02:00
  • e247b10cd6 Indicate that the truncation from size_t to int is deliberate Gilles Peskine 2021-06-03 11:12:04 +02:00
  • 2ee0bb333c Simplify mbedtls_debug_print_mpi and fix the case of empty bignums Gilles Peskine 2021-06-02 20:17:46 +02:00
  • fba257d391 Add mbedtls_debug_print_mpi test case for 0 Gilles Peskine 2021-06-02 20:16:53 +02:00
  • b37abdcb07 Clarify test case descriptions Gilles Peskine 2021-06-02 20:14:59 +02:00
  • 169fa2336b Document more precisely what goes into the default preset Gilles Peskine 2021-06-07 21:26:41 +02:00
  • 347ada71cc Document more precisely what goes into the default profile Gilles Peskine 2021-06-07 21:24:26 +02:00
  • da728b31b0 Remove meaningless clause Gilles Peskine 2021-06-02 14:37:57 +02:00
  • b3ca90bc44 Reduce the default ECP window size Gilles Peskine 2021-06-02 13:27:03 +02:00
  • 646b78b927 Document more precisely what goes into the default preset Gilles Peskine 2021-06-07 21:26:41 +02:00
  • 0ecd719edf Document more precisely what goes into the default profile Gilles Peskine 2021-06-07 21:24:26 +02:00
  • 6db34e6e01 Merge pull request #4542 from mpg/fix-ssl-cf-hmac-alt-2.16 Gilles Peskine 2021-06-07 20:53:53 +02:00
  • 7a4c7589c8 Merge pull request #4541 from mpg/fix-ssl-cf-hmac-alt-2.x Gilles Peskine 2021-06-07 20:53:48 +02:00
  • 8d4e32b888 Merge pull request #4522 from mpg/fix-ssl-cf-hmac-alt-dev Gilles Peskine 2021-06-07 20:53:33 +02:00
  • 87d36e311b Add a section heading for LTS branches Gilles Peskine 2021-06-07 20:42:50 +02:00
  • d1a8cd5169 Minor clarifications Gilles Peskine 2021-06-07 20:42:40 +02:00
  • 0730cd5d9e Merge branch 'development' into Remove__CHECK_PARAMS_option TRodziewicz 2021-06-07 15:41:49 +02:00
  • 34428a6849 Remove duplicated ASSERT_ALLOC define TRodziewicz 2021-06-07 15:33:15 +02:00
  • 442fdc22ea Remove MBEDTLS_X509_CHECK_*_KEY_USAGE options but enable the code TRodziewicz 2021-06-07 13:52:23 +02:00
  • d285b11f21 Merge pull request #4616 from mpg/hide-ssl-deprecated-constant Ronald Cron 2021-06-07 13:24:52 +02:00
  • 13a9776676 Editorial improvements Manuel Pégourié-Gonnard 2021-06-07 12:00:04 +02:00
  • a74295fb52 Remove outdated note about direct manipulation of private members. Mateusz Starzyk 2021-06-07 11:30:55 +02:00
  • 8fc95a06a6 Wrap variable missed by the python script. Mateusz Starzyk 2021-06-07 11:28:24 +02:00
  • 3b5a7c198c Update ChangeLog and migration guide Manuel Pégourié-Gonnard 2021-06-07 11:13:34 +02:00
  • 2abe51cc75 Extend setup_and_run script to cover remaining configurations. Mateusz Starzyk 2021-06-07 11:08:01 +02:00
  • be4af04fcf Update minimum CMake version in CMakeLists.txt Dave Rodgman 2021-06-04 17:04:20 +01:00
  • f21e4621f8 Changelog entry for updated tool versions Dave Rodgman 2021-06-04 14:15:27 +01:00
  • 2f458d3dcc Update README to document minimum tool versions Dave Rodgman 2021-06-03 17:58:13 +01:00
  • 854a25c7a4 Merge branch 'development' into mbedtls_private_with_python Mateusz Starzyk 2021-06-07 09:49:01 +02:00
  • 449c177469 Merge pull request #829 from mpg/ecp-gen-privkey-ct-compare-2.16-restricted Manuel Pégourié-Gonnard 2021-06-07 09:10:15 +02:00
  • 8639048631 Merge pull request #831 from gilles-peskine-arm/mpi_fill_random-constant_time_comparison-development_2.x-restricted Manuel Pégourié-Gonnard 2021-06-07 09:10:03 +02:00
  • 6f1dbe615c Merge pull request #820 from gilles-peskine-arm/mpi_fill_random-constant_time_comparison-development-restricted Manuel Pégourié-Gonnard 2021-06-07 09:09:55 +02:00
  • d259e347e6 Add CMake package config file Chris Kay 2021-03-25 16:03:25 +00:00
  • 74f66bb5c3 Fix non-constant-time comparison in mbedtls_mpi_random Gilles Peskine 2021-04-13 21:09:10 +02:00
  • 5b0589e9ab Fix non-constant-time comparison in mbedtls_mpi_random Gilles Peskine 2021-04-13 21:09:10 +02:00
  • 9371a40476 Stop referencing private constants in documentation Manuel Pégourié-Gonnard 2021-06-04 11:44:44 +02:00
  • cac90a15ed Hide constants for TLS 1.0 and TLS 1.1 Manuel Pégourié-Gonnard 2021-06-04 11:42:30 +02:00
  • d60b6c62d5 Remove per-version ciphersuite configuration API Hanno Becker 2021-04-29 12:04:11 +01:00
  • 62da8ac37a Merge pull request #4276 from gilles-peskine-arm/random-range-uniformity Manuel Pégourié-Gonnard 2021-06-04 10:43:25 +02:00
  • 0c1a42a147 Merge pull request #4611 from gilles-peskine-arm/random-range-uniformity-3.0 Manuel Pégourié-Gonnard 2021-06-04 10:43:15 +02:00
  • f9f9cc217c Merge pull request #4579 from tom-daubney-arm/rm_ecdh_legacy_context_config_option Manuel Pégourié-Gonnard 2021-06-04 10:02:59 +02:00
  • afb2bd2f22 Note that the byte order in mpi_fill_random_internal() is deliberate Gilles Peskine 2021-06-03 11:51:09 +02:00
  • 405b091d9e Use MBEDTLS_MPI_CHK where warranted Gilles Peskine 2021-06-03 11:38:26 +02:00
  • ed32b576a4 New internal function mbedtls_mpi_resize_clear Gilles Peskine 2021-06-02 22:17:52 +02:00
  • ceefe5d269 Lift function call out of inner loop Gilles Peskine 2021-06-02 21:24:04 +02:00
  • 9077e435c6 Fix mistakes in test case descriptions Gilles Peskine 2021-06-02 21:22:25 +02:00
  • 87823d7913 Use ternary operator with the most common case first Gilles Peskine 2021-06-02 21:18:59 +02:00
  • c7eeeb1e8d Fix long-standing obsolete comment Gilles Peskine 2021-06-02 21:17:36 +02:00
  • e842e58f61 Correct some comments about ECC in mbedtls_mpi_random Gilles Peskine 2021-04-15 11:45:19 +02:00
  • 3270b14d4b DHM: add test case with x_size < 0 Gilles Peskine 2021-04-13 22:26:27 +02:00
  • 19e36207ba DHM tests: add some explanations Gilles Peskine 2021-04-13 22:16:45 +02:00
  • 03299dcf5b DHM: add notes about leading zeros Gilles Peskine 2021-04-13 22:10:24 +02:00
  • ebe9b6a51d mpi_fill_random_internal: remove spurious grow() call Gilles Peskine 2021-04-13 21:55:35 +02:00
  • 0cb493d239 Note that the "0 limb in ..." tests rely on undocumented behavior Gilles Peskine 2021-04-13 21:32:24 +02:00
  • 7ed7c5a37d mbedtls_mpi_random: document MBEDTLS_ERR_MPI_NOT_ACCEPTABLE Gilles Peskine 2021-04-13 21:28:38 +02:00
  • e5381686ef MPI random test: use more iterations for small numbers Gilles Peskine 2021-04-13 21:23:25 +02:00
  • 0ad640ab83 MPI random test: Add test cases with lower_bound > upper_bound Gilles Peskine 2021-04-13 20:47:07 +02:00
  • d463edf8c5 MPI random test: fix small-range test stats check when min > 1 Gilles Peskine 2021-04-13 20:45:05 +02:00
  • 951b5695e3 MPI random test: Add a few more small-range tests Gilles Peskine 2021-04-13 20:44:04 +02:00
  • fbb90098e8 Fix copypasta in test case description Gilles Peskine 2021-04-13 20:00:57 +02:00
  • ee966c4ae4 Contextualize comment about mbedtls_mpi_random retries Gilles Peskine 2021-04-13 19:59:21 +02:00
  • eedefa5627 Better document and slightly simplify >>2^n heuristic Gilles Peskine 2021-04-13 19:50:04 +02:00
  • 422e867acb MPI random: add unit tests with a previously nonzero value Gilles Peskine 2021-04-02 00:02:27 +02:00
  • 1a7df4eda0 Fix mbedtls_mpi_random when N has leading zeros Gilles Peskine 2021-04-01 15:57:18 +02:00
  • 9367f4b1d9 Add changelog entry for non-uniform MPI random generation Gilles Peskine 2021-03-31 23:12:35 +02:00
  • da7ee01589 DHM: use mbedtls_mpi_random for blinding and key generation Gilles Peskine 2021-03-31 23:04:50 +02:00
  • 8e38acc9a5 dhm_check_range: microoptimization Gilles Peskine 2021-03-31 22:56:43 +02:00
  • 17f1a26593 DHM refactoring: use dhm_random_below in dhm_make_common Gilles Peskine 2021-03-31 22:48:14 +02:00
  • 7b2b66e3f3 DHM blinding: don't accept P-1 as a blinding value Gilles Peskine 2021-03-31 22:50:57 +02:00
  • cb660f2bda DHM refactoring: unify mbedtls_dhm_make_{params,public} Gilles Peskine 2021-03-31 22:35:13 +02:00
  • 2baf2b0532 Test mbedtls_dhm_make_params with different x_size Gilles Peskine 2021-03-30 23:44:22 +02:00
  • b27db0acff Repeat a few DH tests Gilles Peskine 2021-03-30 23:33:49 +02:00
  • 02db8f4cf7 Test range and format of dhm_make_params output Gilles Peskine 2021-03-30 23:28:51 +02:00
  • 5921517126 ECP: use mbedtls_mpi_random for blinding Gilles Peskine 2021-03-29 22:28:50 +02:00
  • 60d8b98d48 Preserve MBEDTLS_ERR_ECP_RANDOM_FAILED in case of a hostile RNG Gilles Peskine 2021-03-29 22:28:21 +02:00
  • fdc58c1e8b Changelog entry for adding mbedtls_mpi_random() Gilles Peskine 2021-03-31 23:15:00 +02:00
  • 1e918f44c9 mbedtls_mpi_random: check for invalid arguments Gilles Peskine 2021-03-29 22:14:51 +02:00
  • 02ac93a1a3 Move mbedtls_mpi_random to the bignum module Gilles Peskine 2021-03-29 22:02:55 +02:00
  • 8cfffb30b3 mbedtls_ecp_gen_privkey_sw: generalize to mbedtls_mpi_random Gilles Peskine 2021-03-29 21:53:58 +02:00
  • 7888073147 mbedtls_ecp_gen_privkey_sw: range and coverage tests Gilles Peskine 2021-03-29 21:32:16 +02:00
  • 61f1f5febf mbedtls_ecp_gen_privkey_mx: simplify the size calculation logic Gilles Peskine 2021-03-24 12:46:46 +01:00
  • 67986d0613 mbedtls_ecp_gen_privkey_mx: make bit manipulations unconditional Gilles Peskine 2021-03-24 12:25:59 +01:00
  • 96449ceebe mbedtls_ecp_gen_privkey_mx: remove the exception for all-zero Gilles Peskine 2021-03-24 12:04:43 +01:00
  • 6ff8a01a57 Add unit tests for mbedtls_ecp_gen_privkey_mx Gilles Peskine 2021-03-24 12:01:02 +01:00
  • ecacc3c9d2 Make the fallback behavior of mbedtls_test_rnd_buffer_rand optional Gilles Peskine 2021-03-24 00:48:57 +01:00
  • 0b1b0abe33 Update references in some test function documentation Gilles Peskine 2021-03-24 00:14:53 +01:00
  • 55c46040f6 mbedtls_ecp_gen_privkey_mx: rename n_bits to high_bit Gilles Peskine 2021-03-24 12:34:40 +01:00
  • 72fcc98d23 mbedtls_ecp_gen_privkey: create subfunctions for each curve type Gilles Peskine 2021-03-23 22:31:31 +01:00
  • cce0601485 mbedtls_ecp_gen_privkey: minor refactoring Gilles Peskine 2021-03-23 21:58:14 +01:00
  • 537e64305d Corrects documentation issues Thomas Daubney 2021-06-03 15:46:33 +01:00