Commit Graph

  • e634564381 Restore retry in rsa_prepare_blinding() Peter Kolbus 2020-09-24 11:11:50 -05:00
  • b2aeb75509 Restore retry in rsa_prepare_blinding() Peter Kolbus 2020-09-24 11:11:50 -05:00
  • c427aa74f1 Merge pull request #3642 from okhowang/getrandom Manuel Pégourié-Gonnard 2020-09-30 13:55:04 +02:00
  • f90e3019dd Use PSA_ERROR_INVALID_ARGUMENT for invalid cipher input sizes Fredrik Strupe 2020-09-28 16:11:33 +02:00
  • 76158ce9b7 Use socklen_t on Android and other POSIX-compliant system okhowang(王沛文) 2020-09-03 15:36:36 +08:00
  • 9c46a60e6c Use glibc's getrandom() instead of syscall when glibc > 2.25. okhowang(王沛文) 2020-09-03 16:55:01 +08:00
  • 4bcfe9269f When to write a changelog: minor improvements Gilles Peskine 2020-09-30 09:55:27 +02:00
  • 76228acfb9 Fix typo in define in comment John Durkop 2020-09-29 22:33:49 -07:00
  • 714e3a1318 Minor cleanup to fix errors with some unit tests John Durkop 2020-09-29 22:07:04 -07:00
  • ece00a0cd0 Explain when to write a changelog entry Gilles Peskine 2020-09-30 01:16:59 +02:00
  • 3b4edc78df We no longer credit contributors in the changelog Gilles Peskine 2020-09-30 01:13:05 +02:00
  • 27ed799109 Remove changelog entries without a user-visible impact Gilles Peskine 2020-09-30 01:11:39 +02:00
  • 3ce9480c38 Add changelog entry for the memory management fixes Gilles Peskine 2020-09-30 00:04:47 +02:00
  • 9dd91ecf53 Add changelog entry for the memory management fixes Gilles Peskine 2020-09-30 00:04:47 +02:00
  • b51c8a29b5 Fix uncaught error if fix_negative fails Gilles Peskine 2020-07-23 01:14:34 +02:00
  • 91070e43a6 Fix memory leak in mbedtls_mpi_sub_abs Gilles Peskine 2020-07-23 01:16:46 +02:00
  • e7876341af Always test in-place addition and subtraction Gilles Peskine 2020-07-23 01:18:11 +02:00
  • b09e001d69 Fix regexp detection Gilles Peskine 2020-09-29 23:48:39 +02:00
  • 6d6f8a4b97 Clarify descriptions of constant-flow helpers archive/better-cf-padding-checks Manuel Pégourié-Gonnard 2020-09-25 09:56:53 +02:00
  • 12b89cbc0b Fix premature fopen() call in mbedtls_entropy_write_seed_file #3175 Victor Krasnoshchok 2020-08-27 00:19:55 +03:00
  • 6361ad9bc6 Changelog update #3175 Victor Krasnoshchok 2020-09-27 23:51:21 +03:00
  • ca8b8e7c31 Restore retry in rsa_prepare_blinding() Peter Kolbus 2020-09-24 11:11:50 -05:00
  • 7829748cd4 Merge pull request #3709 from CameronNemo/issue-3524 Gilles Peskine 2020-09-25 15:23:48 +02:00
  • bf4f40883e Rework mbedtls_test_param_failed_get_state_buf() Ronald Cron 2020-09-25 10:45:06 +02:00
  • 736eb1de47 Update to VS project file for PSA crypto config John Durkop 2020-09-24 21:11:10 -07:00
  • 39e09672a3 Update version_features for new PSA crypto config John Durkop 2020-09-24 21:09:25 -07:00
  • 2542c21ba8 Add MBEDTLS_PSA_CRYPTO_CONFIG to test program John Durkop 2020-09-24 21:06:35 -07:00
  • e18d09de37 fix(programs/psa): commit python3 generated file Cameron Nemo 2020-09-22 10:37:26 -07:00
  • e39d14b142 Fix "make -C tests/data_files -f ..." Gilles Peskine 2020-09-24 16:36:04 +02:00
  • 1803563572 Fix "make -C tests/data_files -f ..." Gilles Peskine 2020-09-24 16:36:04 +02:00
  • 2dfaf9ca23 Update how MBEDTLS_PSA_CRYPTO_CONFIG is handled John Durkop 2020-09-24 04:30:10 -07:00
  • d8959390c5 Add ECDSA support to PSA crypto configuration John Durkop 2020-09-20 23:09:17 -07:00
  • 7758c858ae Update requires for MBEDTLS_PSA_CRYPTO_DRIVERS John Durkop 2020-09-17 23:13:42 -07:00
  • 6e33dbe9fd Created infrastructure for MBEDTLS_PSA_CRYPTO_CONFIG John Durkop 2020-09-17 21:15:13 -07:00
  • 2983b27a08 Merge pull request #3707 from ronald-cron-arm/feature/fix_return_code_1-2.7 Gilles Peskine 2020-09-22 18:52:09 +02:00
  • 506498eaa3 Merge pull request #3708 from ronald-cron-arm/feature/fix_return_code_1-2.16 Gilles Peskine 2020-09-22 18:52:03 +02:00
  • 9b33eb3284 Merge pull request #3705 from ctron/feature/fix_return_code_1 Gilles Peskine 2020-09-22 18:51:49 +02:00
  • 84d4f022e2 fix return code Jens Reimann 2020-09-22 11:57:16 +02:00
  • 45a595845d fix return code Jens Reimann 2020-09-22 11:57:16 +02:00
  • 9ad4a33a54 fix return code Jens Reimann 2020-09-22 11:57:16 +02:00
  • e560be3ab4 Mark basic constraints critical as appropriate. Darren Krahn 2020-09-21 17:40:50 -07:00
  • 95434380e1 Detailed architecture of symbol definitions and header inclusion Gilles Peskine 2020-09-21 20:08:51 +02:00
  • a8fc171418 Add validate_key entry point Gilles Peskine 2020-09-21 13:54:00 +02:00
  • f4d2c7de31 Improve FI resistance of pk verification in ssl_cli.c Andrzej Kurek 2020-09-20 02:03:42 +02:00
  • f74a86c0b0 Improve FI resistance of certificate verification in ssl_srv.c Andrzej Kurek 2020-09-20 01:57:30 +02:00
  • ef34494d80 ssl_srv.c: change the initial return variable value Andrzej Kurek 2020-08-10 07:11:04 -04:00
  • ff51721e99 ssl_tls: reduce the complexity of encryption validation Andrzej Kurek 2020-08-10 07:10:35 -04:00
  • 8ec9e136cf ssl_tls: Add a flag indicating that encryption succeeded Andrzej Kurek 2020-08-10 00:26:40 -04:00
  • 6c30be8e4b ssl: call signature verification twice for non-restartable operations Andrzej Kurek 2020-08-09 14:53:10 -04:00
  • 2544cd3582 Merge pull request #3724 from AndrzejKurek/transform-cipher-optimization-2 Andrzej Kurek 2020-10-06 14:20:10 +01:00
  • 69bafce7a3 Improve the FI resistance in ssl_tls.c key switching Andrzej Kurek 2020-09-19 12:45:20 +02:00
  • f7df0d37ab Reduce the size of used constant in ssl_tls.c Andrzej Kurek 2020-09-19 12:00:57 +02:00
  • a793237998 Calculate hashes of ssl encryption and decryption keys Andrzej Kurek 2020-09-19 07:56:06 +02:00
  • d81351b047 Change the default value of initialized cipher operation to NONE Andrzej Kurek 2020-09-18 13:14:31 +02:00
  • 73680ad5a2 Merge pull request #3694 from AndrzejKurek/transform-cipher-optimization Andrzej Kurek 2020-09-23 14:06:43 +01:00
  • 27e69b59a5 Fix prototypes of opaque key creation entry points Gilles Peskine 2020-09-19 00:35:01 +02:00
  • 22270b5048 Fix copypasta punctuation in some function prototypes Gilles Peskine 2020-09-18 22:54:51 +02:00
  • 5cb54f7b27 Merge pull request #3542 from gilles-peskine-arm/psa-unified-driver-specs-20200807 Gilles Peskine 2020-09-18 22:53:46 +02:00
  • 401ba5e9b7 Merge pull request #755 from gabor-mezei-arm/692_bp216_missing_zeroizations_of_sensitive_data Gilles Peskine 2020-09-18 16:20:21 +02:00
  • 4685d501e8 Merge pull request #756 from gabor-mezei-arm/692_bp27_missing_zeroizations_of_sensitive_data Gilles Peskine 2020-09-18 16:20:17 +02:00
  • bbc6032444 Merge pull request #731 from gabor-mezei-arm/692_missing_zeroizations_of_sensitive_data Gilles Peskine 2020-09-18 16:20:13 +02:00
  • 822b3729e7 Remove last use of non-bit operations Manuel Pégourié-Gonnard 2020-09-18 09:54:01 +02:00
  • 2a59fb45b5 Add explicit cast when truncating values Manuel Pégourié-Gonnard 2020-08-25 11:51:46 +02:00
  • 6e2a9a7faa Factor repeated code in ssl_cf functions Manuel Pégourié-Gonnard 2020-08-25 10:01:00 +02:00
  • 2ddec4306f Use bit operations for constant-flow padding check Manuel Pégourié-Gonnard 2020-08-24 12:49:23 +02:00
  • 1175044156 Merge enc/dec cipher contexts in ssl transforms Andrzej Kurek 2020-09-17 07:12:06 -04:00
  • e72c8d28f1 Merge pull request #3687 from Jongy/fix-docs-mbedtls-2.16 Gilles Peskine 2020-09-17 00:02:36 +02:00
  • 1d9c11081a Merge pull request #3667 from Jongy/fix-docs Gilles Peskine 2020-09-17 00:02:08 +02:00
  • f9604bbdc1 Fix docs to desribe written-into buffer parameter as writable Yonatan Goldschmidt 2020-09-12 00:19:52 +03:00
  • f8d7e0112a Merge pull request #3669 from shelib01/ec_key_gen_optimization Shelly Liberman 2020-09-16 20:32:52 +03:00
  • 05beb9ac70 replace user rand by platform rand in ecc delays Shelly Liberman 2020-09-13 15:23:56 +03:00
  • 2a25904f45 Merge pull request #3568 from hanno-arm/tls13_experimental_key_schedule_1 Janos Follath 2020-09-16 11:40:06 +01:00
  • 531fe3054c Comment on hardcoding of maximum HKDF key expansion of 255 Bytes Hanno Becker 2020-09-16 09:45:27 +01:00
  • 61baae7c9f Minor fixes and improvements in TLS 1.3 key schedule documentation Hanno Becker 2020-09-16 09:24:14 +01:00
  • dc57c25e30 Merge pull request #3527 from ronald-cron-arm/key-extended-id Gilles Peskine 2020-09-15 16:06:06 +02:00
  • 7107e661b8 Merge pull request #3644 from stevew817/feature/transparent_multipart_driver Gilles Peskine 2020-09-15 09:51:24 +02:00
  • 7424f0d998 psa: Move key identifier related macros and functions Ronald Cron 2020-09-14 16:17:41 +02:00
  • cb54610e97 Set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER in baremetal configuration Ronald Cron 2020-09-14 13:58:59 +02:00
  • 9a2511e78f Fix key owner identifier documentation Ronald Cron 2020-09-14 10:02:56 +02:00
  • 5eba579c6c Remove unnecessary inline definition Ronald Cron 2020-09-15 08:48:15 +02:00
  • 6d81f7e119 Final feedback from @ronald-cron-arm Steven Cooreman 2020-09-14 13:14:31 +02:00
  • ef8575e1bf Apply review feedback Steven Cooreman 2020-09-11 11:44:50 +02:00
  • 89e54f2edc Add mock and negative testing to cipher driver Steven Cooreman 2020-09-10 18:07:57 +02:00
  • a07b9970c6 Update semantics around driver context use in psa_cipher_setup Steven Cooreman 2020-09-10 14:54:14 +02:00
  • eca33c60f8 Add testing of fallback to cipher operations Steven Cooreman 2020-09-10 14:32:26 +02:00
  • fe0ab55c61 Implement one-shot cipher in test driver Steven Cooreman 2020-09-10 13:07:02 +02:00
  • e55f3e8de4 Make sure to not call mbedtls_cipher_free on an uninitialised context Steven Cooreman 2020-09-09 18:41:07 +02:00
  • b5e52f2e31 Remove superfluous call in PSA cipher setup Steven Cooreman 2020-09-09 16:19:34 +02:00
  • 16afd3d9b4 Unify cipher setup function inside test driver Steven Cooreman 2020-09-09 15:36:39 +02:00
  • 7df0292f5a Check & set operation flags for both driver and software in the core Steven Cooreman 2020-09-09 15:28:49 +02:00
  • cfeea8fa1e Unify driver context struct handling Steven Cooreman 2020-09-09 15:09:18 +02:00
  • 150c99b884 Simplify cipher setup wrapper body Steven Cooreman 2020-09-09 14:32:44 +02:00
  • fb81aa5889 Only pass the driver-relevant portion of the context struct Steven Cooreman 2020-09-09 12:01:43 +02:00
  • 5240e8b519 Style and language fixes from review Steven Cooreman 2020-09-09 11:51:45 +02:00
  • acb5a100a7 Structify cipher test driver hook variables Steven Cooreman 2020-09-08 14:06:57 +02:00
  • 435beeaef3 Add new files to IDE project Steven Cooreman 2020-09-03 16:37:54 +02:00
  • a32193fae8 Add changelog entry Steven Cooreman 2020-09-03 16:25:36 +02:00
  • d53c1bf6f2 Exercise the AES-CTR multipart driver and check it gets called Steven Cooreman 2020-09-03 15:31:04 +02:00
  • 8b12225717 Add a working implementation of a multipart AES-CTR test driver Steven Cooreman 2020-09-03 15:30:32 +02:00
  • 3ec4018e2b Update license texts Steven Cooreman 2020-09-02 16:27:46 +02:00