Commit Graph

  • 722a7e6940 Revert "Only build libmbedcrypto" Gilles Peskine 2020-02-26 19:05:19 +01:00
  • 12230eb5c8 Revert "Remove irrelevant configs" Gilles Peskine 2020-02-26 19:02:33 +01:00
  • 9d28c426d1 Revert "check-names: Enable referencing Mbed TLS macros" Gilles Peskine 2020-02-26 19:00:46 +01:00
  • 4e1174967a Revert "config: Remove TLS and NET options" Gilles Peskine 2020-02-26 18:56:08 +01:00
  • 252e391cca Revert "config: Remove X.509 options" Gilles Peskine 2020-02-26 18:33:58 +01:00
  • 458b8f2a59 Revert "Remove unused TLS, NET, and X.509 files" Gilles Peskine 2020-02-26 18:28:28 +01:00
  • 314bc89b36 Revert "scripts: Remove dependency on TLS" Gilles Peskine 2020-02-26 18:28:25 +01:00
  • 1bf45e1980 Revert "scripts: Remove dependency on X.509" Gilles Peskine 2020-02-26 18:28:23 +01:00
  • 1fcf721e11 Revert "scripts: Remove dependency on NET" Gilles Peskine 2020-02-26 18:26:46 +01:00
  • a4b99a2d5a Fix extra coma in README.md Manuel Pégourié-Gonnard 2020-03-19 12:36:02 +01:00
  • ab713a9916 Fix debug message by using the correct function name called Ercan Ozturk 2020-01-28 21:51:04 -08:00
  • a46f75cbad Fix debug message by using the correct function name called Ercan Ozturk 2020-01-28 21:51:04 -08:00
  • b5695d9997 Merge pull request #3101 from sbutcher-arm/change-used-pylint-2.16 Janos Follath 2020-03-18 17:04:24 +00:00
  • be483ab3c4 Merge pull request #3100 from sbutcher-arm/change-used-pylint Janos Follath 2020-03-18 17:04:13 +00:00
  • 7ed01e8c68 ssl_srv.c: initialize flags on each iteration of the loop Andrzej Kurek 2020-03-18 11:51:59 -04:00
  • 03da0846df ssl - improve documentation on mbedtls_ssl_read and PEER_CLOSE_NOTIFY Andrzej Kurek 2020-03-17 11:11:36 -04:00
  • 4fca6b1a15 Merge pull request #377 from sbutcher-arm/gcc7-warning-fix Jaeden Amero 2020-03-17 22:44:23 +04:00
  • 47f728718f Change the use of pylint to optionally use pylint3 Simon Butcher 2020-03-16 11:30:46 +00:00
  • e30d03e4f4 Change the use of pylint to optionally use pylint3 Simon Butcher 2020-03-16 11:30:46 +00:00
  • eb22ad2ddc Merge pull request #2440 from andresag01/mbedtls-2.7-iotssl-2544-deprecate-record-accel Manuel Pégourié-Gonnard 2020-03-16 10:37:32 +01:00
  • acfa36890c Merge pull request #2439 from andresag01/mbedtls-2.16-iotssl-2544-deprecate-record-accel Manuel Pégourié-Gonnard 2020-03-16 10:37:24 +01:00
  • 21d1cbccda Merge pull request #2262 from andresag01/iotssl-2544-deprecate-record-accel Manuel Pégourié-Gonnard 2020-03-16 10:37:16 +01:00
  • f3a13486f4 Revert "Merge pull request #3012 from Patater/dev/jp-bennett/development-2.16" Janos Follath 2020-02-04 14:42:15 +00:00
  • a4c1c4b55d Test GCC and Clang with common build options Gilles Peskine 2019-09-20 19:56:06 +02:00
  • 06c1e23960 Replace -O0 by -O1 or -Os in most components Gilles Peskine 2019-09-20 19:23:10 +02:00
  • f5faa25cf4 shrink tests: clearer description Gilles Peskine 2020-02-03 16:18:30 +01:00
  • 7313e2caff Move test functions from Lilliput to Blefuscu Gilles Peskine 2020-02-03 16:15:47 +01:00
  • 8830bd2447 Minor comment improvement Gilles Peskine 2020-01-21 13:59:51 +01:00
  • 0660747057 Improve comments in mpi_shrink Gilles Peskine 2020-01-20 21:17:43 +01:00
  • 51c2e06eb8 mpi_copy: make the 0 case slightly more robust Gilles Peskine 2020-01-20 21:12:50 +01:00
  • edb621b84a Better coverage for copy and swap Gilles Peskine 2020-01-20 21:01:51 +01:00
  • 16fca92e3d Bignum copy/shrink: More precise test case descriptions Gilles Peskine 2020-01-20 17:19:03 +01:00
  • 95ce7dab34 Fix duplicated Bugfix section in the changelog Gilles Peskine 2020-01-31 12:20:10 +01:00
  • a32e45d632 Add changelog entry Gilles Peskine 2020-01-31 12:05:53 +01:00
  • d817f54077 De-duplicate SHA1-independent test in ssl-opt.sh Manuel Pégourié-Gonnard 2020-01-30 12:45:14 +01:00
  • 7006ca10d9 Fix ssl-opt.sh for GnuTLS versions rejecting SHA-1 Manuel Pégourié-Gonnard 2020-01-30 10:58:57 +01:00
  • 32b6e6984d Parse RSA parameters DP, DQ and QP from PKCS1 private keys Jack Lloyd 2020-01-29 13:09:55 -05:00
  • 9a5c8d4b5b Fix previous ChangeLog merging error Manuel Pégourié-Gonnard 2020-01-29 11:32:09 +01:00
  • 7489f81be7 Fix contributor names in ChangeLog Manuel Pégourié-Gonnard 2020-01-29 10:47:34 +01:00
  • 99999b73b1 Add ChangeLog entry Jaeden Amero 2020-01-24 18:20:22 +00:00
  • b9082ed820 Allow loading symlinked certificates Jonathan Bennett 2020-01-24 09:12:03 -06:00
  • 0f14c15842 Add missing return code check on calls to mbedtls_md() Gilles Peskine 2020-01-21 16:52:08 +01:00
  • a48fe01f15 Check that mbedtls_mpi_grow succeeds Gilles Peskine 2020-01-21 16:30:53 +01:00
  • 010efeb5a2 Remove redundant block_size validity check Gilles Peskine 2020-01-21 15:02:14 +01:00
  • aa377cf111 Fix incrementing pointer instead of value Manuel Pégourié-Gonnard 2020-01-24 12:11:56 +01:00
  • c0213a91ab Add changelog entry for the unchecked mbedtls_md call Gilles Peskine 2020-01-22 19:04:19 +01:00
  • 140f50206e Add missing return code check on call to mbedtls_md() Gilles Peskine 2020-01-21 16:56:03 +01:00
  • e7b49d3cd1 Bump version to Mbed TLS 2.16.4 Janos Follath 2020-01-20 14:32:57 +00:00
  • 10a7f626d9 Add test for record compression in ssl-opt.sh Manuel Pégourié-Gonnard 2020-01-02 11:58:00 +01:00
  • 8b7f03f172 Catch AES failure in mbedtls_ctr_drbg_random Gilles Peskine 2019-11-28 09:45:32 +01:00
  • bcdd8bcfcf Enable more test cases without MBEDTLS_MEMORY_DEBUG Gilles Peskine 2019-10-31 15:07:45 +01:00
  • 6a1ec6abea More accurate test case description Gilles Peskine 2019-10-31 15:07:35 +01:00
  • 8064dbb646 Clarify that the "FATAL" message is expected Gilles Peskine 2019-10-31 15:07:08 +01:00
  • a8405447aa Zeroize local AES variables before exiting the function Andrzej Kurek 2019-11-12 03:34:03 -05:00
  • e9db2aa5b4 mpi_lt_mpi_ct: fix condition handling Janos Follath 2019-11-05 12:24:52 +00:00
  • 47b56a159e mpi_lt_mpi_ct: Add further tests Janos Follath 2019-11-05 12:19:14 +00:00
  • 006b207de6 mpi_lt_mpi_ct: Fix test numbering Janos Follath 2019-11-05 11:56:07 +00:00
  • d2aa4aa454 mpi_lt_mpi_ct perform tests for both limb size Janos Follath 2019-11-05 11:42:20 +00:00
  • 3d2b769d1c ct_lt_mpi_uint: cast the return value explicitely Janos Follath 2019-10-29 15:08:46 +00:00
  • 44e40c0792 mbedtls_mpi_lt_mpi_ct: add tests for 32 bit limbs Janos Follath 2019-10-29 15:05:12 +00:00
  • c8256e7020 mbedtls_mpi_lt_mpi_ct: simplify condition Janos Follath 2019-10-28 12:37:21 +00:00
  • ec4c42a95f Rename variable for better readability Janos Follath 2019-10-28 12:31:34 +00:00
  • cf7eeef2cc mbedtls_mpi_lt_mpi_ct: Improve documentation Janos Follath 2019-10-28 12:23:18 +00:00
  • aa9e7a4717 Make mbedtls_mpi_lt_mpi_ct more portable Janos Follath 2019-10-28 12:12:15 +00:00
  • f8dbfd4f05 Bignum: Document assumptions about the sign field Janos Follath 2019-10-28 12:07:52 +00:00
  • eb8fcf8181 Add more tests for mbedtls_mpi_lt_mpi_ct Janos Follath 2019-10-14 11:33:39 +01:00
  • 3be2fa44e1 mpi_lt_mpi_ct test: hardcode base 16 Janos Follath 2019-10-14 09:21:49 +01:00
  • 3480947667 Document ct_lt_mpi_uint Janos Follath 2019-10-14 09:09:32 +01:00
  • afa5342452 mpi_lt_mpi_ct: make use of unsigned consistent Janos Follath 2019-10-14 09:01:15 +01:00
  • a830377142 ct_lt_mpi_uint: make use of biL Janos Follath 2019-10-14 08:59:14 +01:00
  • 8faf1d627b Change mbedtls_mpi_cmp_mpi_ct to check less than Janos Follath 2019-10-11 14:21:53 +01:00
  • 81c9fe5f2c mbedtls_mpi_cmp_mpi_ct: remove multiplications Janos Follath 2019-10-11 10:43:40 +01:00
  • fd9797b595 Remove excess vertical space Janos Follath 2019-10-11 10:22:37 +01:00
  • 78ed22b404 Remove declaration after statement Janos Follath 2019-09-23 09:19:14 +01:00
  • fc2a826ab4 Fix side channel vulnerability in ECDSA Janos Follath 2019-09-16 14:27:39 +01:00
  • 7ce3a25316 Add tests to constant time mpi comparison Janos Follath 2019-09-11 16:07:14 +01:00
  • c514ce474a Add new, constant time mpi comparison Janos Follath 2019-09-05 14:47:19 +01:00
  • a5e2d86c3f Note that mbedtls_ctr_drbg_seed() must not be called twice Gilles Peskine 2019-10-28 17:33:07 +01:00
  • 216040d46f Fix CTR_DRBG benchmark Gilles Peskine 2019-10-28 17:28:46 +01:00
  • d69ae8c21d Add ChangeLog entry Janos Follath 2019-10-25 08:53:01 +01:00
  • 6bd8c0ae2a ECDSA: Fix side channel vulnerability Janos Follath 2019-10-17 10:18:51 +01:00
  • bb3d55665e Changelog entry for xxx_drbg_set_entropy_len before xxx_drbg_seed Gilles Peskine 2019-10-18 16:40:10 +02:00
  • 20dbfb9938 CTR_DRBG: support set_entropy_len() before seed() Gilles Peskine 2019-10-04 12:15:55 +02:00
  • f0bf757f9c CTR_DRBG: Don't use functions before they're defined Gilles Peskine 2019-10-02 20:31:54 +02:00
  • 1d2a9e88c3 HMAC_DRBG: support set_entropy_len() before seed() Gilles Peskine 2019-10-04 11:47:35 +02:00
  • 6e2cb64a97 'make test' must fail if Asan fails Gilles Peskine 2019-10-21 19:08:07 +02:00
  • 6eec4ab323 Asan make builds: avoid sanitizer recovery Gilles Peskine 2019-10-21 19:06:33 +02:00
  • b3e54396fa Use UBsan in addition to Asan with 'make test' Gilles Peskine 2019-10-21 20:09:22 +02:00
  • 3ccb7f18e0 Unify ASan options in make builds Gilles Peskine 2019-10-21 17:11:33 +02:00
  • 6b5e60c26c config.pl full: exclude MBEDTLS_CTR_DRBG_USE_128_BIT_KEY Gilles Peskine 2019-10-07 15:57:50 +02:00
  • d41a95e223 mbedtls_hmac_drbg_set_entropy_len() only matters when reseeding Gilles Peskine 2019-10-04 11:52:22 +02:00
  • 5fc111fe69 mbedtls_ctr_drbg_set_entropy_len() only matters when reseeding Gilles Peskine 2019-10-03 14:22:04 +02:00
  • 4c57b20247 mbedtls_ctr_drbg_seed: correct maximum for len Gilles Peskine 2019-10-03 15:13:08 +02:00
  • 5953660a6a Add a note about CTR_DRBG security strength to config.h Gilles Peskine 2019-10-03 14:21:39 +02:00
  • e1dc2de900 Move MBEDTLS_CTR_DRBG_USE_128_BIT_KEY to the correct section Gilles Peskine 2019-10-03 14:21:14 +02:00
  • 6e36d0b33c CTR_DRBG: more consistent formatting and wording Gilles Peskine 2019-10-03 14:20:46 +02:00
  • 9640403fa0 CTR_DRBG documentation: further wording improvements Gilles Peskine 2019-10-02 19:02:13 +02:00
  • 7b674eac64 CTR_DRBG: Improve the explanation of security strength Gilles Peskine 2019-10-02 19:01:31 +02:00
  • 7df4b7b3b6 CTR_DRBG: make it easier to understand the security strength Gilles Peskine 2019-10-02 18:23:38 +02:00
  • 56f628ca26 HMAC_DRBG: note that the initial seeding grabs entropy for the nonce Gilles Peskine 2019-10-01 18:41:12 +02:00