Commit Graph

  • d0b66d08bb Don't use memcpy() for 2-byte copy operation Hanno Becker 2019-07-26 08:07:03 +01:00
  • 9eca276768 Remove integer parsing macro Hanno Becker 2019-07-25 10:16:37 +01:00
  • f5466258b4 Fix alignment in record header parsing routine Hanno Becker 2019-07-25 10:13:02 +01:00
  • b2a86c3e01 Don't disallow 'record from another epoch' log msg in proxy ref test Hanno Becker 2019-07-19 15:43:09 +01:00
  • 552f747216 Make sure 'record from another epoch' is displayed for next epoch Hanno Becker 2019-07-19 10:59:12 +01:00
  • 5422981052 Implement record checking API Hanno Becker 2019-07-12 14:40:00 +01:00
  • 331de3df9a Mark ssl_parse_record_header() as const in SSL context Hanno Becker 2019-07-12 11:10:16 +01:00
  • 47be7686ab Make mbedtls_ssl_in_hdr_len() CID-unaware Hanno Becker 2019-07-12 09:55:46 +01:00
  • b0fe0eedce Remove duplicate setting of ssl->in_msgtype and ssl->in_msglen Hanno Becker 2019-07-12 09:44:55 +01:00
  • 44d89b2d53 Move update of in_xxx fields in ssl_get_next_record() Hanno Becker 2019-07-12 09:40:44 +01:00
  • 8685c822c1 Move update of in_xxx fields outside of ssl_prepare_record_content() Hanno Becker 2019-07-12 09:37:30 +01:00
  • 58ef0bf19f Reduce dependency of ssl_prepare_record_content() on in_xxx fields Hanno Becker 2019-07-12 09:35:58 +01:00
  • d8bf8ceeb4 Move ssl_update_in_pointers() to after record hdr parsing Hanno Becker 2019-07-12 09:23:47 +01:00
  • 0183d699bf Mark DTLS replay check as const on the SSL context Hanno Becker 2019-07-12 08:50:37 +01:00
  • 7ae20e0f4c Move updating the internal rec ptrs to outside of rec hdr parsing Hanno Becker 2019-07-12 08:33:49 +01:00
  • 605949f84c Mark ssl_decrypt_buf() as `const in the input SSL context Hanno Becker 2019-07-12 08:23:59 +01:00
  • fdf660426d Adapt ssl_prepare_record_content() to use SSL record structure Hanno Becker 2019-07-11 13:07:45 +01:00
  • a31756619c Use record length from record structure when fetching content in TLS Hanno Becker 2019-07-11 12:50:29 +01:00
  • f50da50c04 Use record structure when remembering offset of next record in dgram Hanno Becker 2019-07-11 12:50:10 +01:00
  • 4acada35f5 Use SSL record structure when skipping over unexpected record Hanno Becker 2019-07-11 12:48:53 +01:00
  • 519f15dbba Adapt ssl_buffer_future_record() to work with SSL record structure Hanno Becker 2019-07-11 12:43:20 +01:00
  • e5e7e7833c Setup SSL record structure in ssl_parse_record_header() Hanno Becker 2019-07-11 12:29:35 +01:00
  • 376d0d9e4a Merge remote-tracking branch 'upstream-public/pr/2736' into mbedtls-2.16 Gilles Peskine 2019-08-14 16:00:53 +02:00
  • 0e08fff32f Merge remote-tracking branch 'upstream-public/pr/2737' into mbedtls-2.7 Gilles Peskine 2019-08-14 16:00:47 +02:00
  • b963f23b82 Merge remote-tracking branch 'upstream-public/pr/2751' into mbedtls-2.16 Gilles Peskine 2019-08-14 16:00:37 +02:00
  • c1b621c5cb Merge remote-tracking branch 'upstream-public/pr/2754' into mbedtls-2.16 Gilles Peskine 2019-08-14 16:00:01 +02:00
  • c7ad7ed185 Merge remote-tracking branch 'upstream-public/pr/2755' into mbedtls-2.7 Gilles Peskine 2019-08-14 15:59:21 +02:00
  • 7a93214f15 Merge remote-tracking branch 'upstream-public/pr/2778' into mbedtls-2.16 Gilles Peskine 2019-08-14 15:58:47 +02:00
  • f85f49dcbd Merge remote-tracking branch 'upstream-public/pr/2786' into mbedtls-2.16 Gilles Peskine 2019-08-14 15:57:58 +02:00
  • bed094b1ca Merge remote-tracking branch 'upstream-public/pr/2787' into mbedtls-2.7 Gilles Peskine 2019-08-14 15:57:37 +02:00
  • d840cea4a1 Expand documentation of internal mbedtls_record structure Hanno Becker 2019-07-11 09:24:36 +01:00
  • 37cfe73c92 Minor documentation improvements in ssl_parse_record_header() Hanno Becker 2019-07-10 17:20:01 +01:00
  • 955a5c98df Check for sufficient datagram size in ssl_parse_record_header() Hanno Becker 2019-07-10 17:12:07 +01:00
  • d5c0f826e6 Don't send an alert when receiving a record of unknown ContentType Hanno Becker 2019-07-10 16:53:30 +01:00
  • a8814794e9 Don't call ssl_fetch_input for record content fetch in DTLS Hanno Becker 2019-07-10 15:01:45 +01:00
  • 59be60e98b Don't call ssl_fetch_input for record hdr size check in DTLS Hanno Becker 2019-07-10 14:53:43 +01:00
  • e538d8287e Move size-check for DTLS record header with CID to DTLS-only branch Hanno Becker 2019-07-10 14:50:10 +01:00
  • 2fddd3765e Check same-port-reconnect from client outside of record hdr parsing Hanno Becker 2019-07-10 14:37:41 +01:00
  • 4894873b92 Remove redundant minimum length check Hanno Becker 2019-07-10 13:55:17 +01:00
  • 20016654c3 Remove unnecessary backup of explicit IV in AEAD record decryption Hanno Becker 2019-07-10 11:44:13 +01:00
  • d96a652d80 Improve documentation of mbedtls_ssl_decrypt_buf() Hanno Becker 2019-07-10 13:55:25 +01:00
  • c957e3b5f8 Remove redundant length check during record header parsing Hanno Becker 2019-07-10 11:37:19 +01:00
  • e2b786d40f Remove misleading comment in mbedtls_ssl_decrypt_buf() Hanno Becker 2019-07-10 09:49:56 +01:00
  • 47ebaa2205 Remove assertion in mbedtls_ssl_decrypt_buf() Hanno Becker 2019-07-10 09:45:44 +01:00
  • d96e10bf23 Check architectural bound for max record payload len in one place Hanno Becker 2019-07-09 17:30:02 +01:00
  • 3be264e2c3 Remove redundant length-0 checks for incoming unprotected records Hanno Becker 2019-07-09 17:27:32 +01:00
  • bbdf310c66 Merge pull request #221 from gilles-peskine-arm/annotate_todo_comments-20190813 Gilles Peskine 2019-08-14 13:59:53 +02:00
  • 31c3b14e37 Documentation fixes according to review Jarno Lamsa 2019-08-14 10:39:32 +03:00
  • 012dcc4b87 Remove PSA_PRE_1_0_KEY_DERIVATION and the corresponding code k-stachowiak 2019-08-13 14:55:03 +02:00
  • 0b74cf85ea Remove psa_key_derivation() and associated static functions k-stachowiak 2019-08-13 14:20:39 +02:00
  • 89e7655691 Merge remote-tracking branch 'crypto/pr/212' into development Jaeden Amero 2019-08-16 11:02:31 +01:00
  • c26591a8f2 Merge pull request #196 from RonEld/fix_license_header Jaeden Amero 2019-08-16 09:26:41 +01:00
  • 24b8f9f171 Merge pull request #223 from Patater/tls-development-20190815 Jaeden Amero 2019-08-15 16:37:13 +01:00
  • 9d20e1f2c4 Merge remote-tracking branch 'tls/development' into development Jaeden Amero 2019-08-15 15:49:46 +01:00
  • 61fc108d25 Merge remote-tracking branch 'upstream-public/pr/2728' into development Gilles Peskine 2019-08-14 16:00:58 +02:00
  • 1435767d2a Merge remote-tracking branch 'upstream-public/pr/2753' into development Gilles Peskine 2019-08-14 16:00:11 +02:00
  • 681edbeaa6 Merge remote-tracking branch 'upstream-public/pr/2777' into development Gilles Peskine 2019-08-14 15:59:01 +02:00
  • 787d1515eb Merge remote-tracking branch 'upstream-public/pr/2779' into development Gilles Peskine 2019-08-14 15:58:07 +02:00
  • 0ed1df6206 Merge pull request #184 from hanno-arm/ecp_restartable_offset Gilles Peskine 2019-08-14 15:40:08 +02:00
  • 317f940304 Merge pull request #144 from gilles-peskine-arm/oss-fuzz-fix-build-crypto Gilles Peskine 2019-08-14 15:30:18 +02:00
  • 26f3e2800d Honor MBEDTLS_CONFIG_FILE in fuzz tests Gilles Peskine 2019-08-13 18:00:02 +02:00
  • 56c0161b68 Test that a shared library build produces a dynamically linked executable Gilles Peskine 2019-07-03 20:43:32 +02:00
  • cf74050fea Test that the shared library build with CMake works Gilles Peskine 2019-07-03 20:43:05 +02:00
  • abf9b4dee8 Add a test of MBEDTLS_CONFIG_FILE Gilles Peskine 2019-07-03 20:42:16 +02:00
  • c9d7f94a65 Add issue numbers for some missing parts of secure element support Gilles Peskine 2019-08-13 16:17:16 +02:00
  • a9d5c452f3 Remove mbedtls_ssl_transform::minlen Hanno Becker 2019-07-25 16:47:12 +01:00
  • 5da7b3e55c Drivers must have a psa_destroy_key method Gilles Peskine 2019-08-13 16:03:28 +02:00
  • 4b7f340fbf Clean up status code handling inside psa_destroy_key Gilles Peskine 2019-08-13 15:58:36 +02:00
  • 9ce31c466d Note about destroying a key with other open handles Gilles Peskine 2019-08-13 15:14:20 +02:00
  • caec27821f SE keys: make psa_destroy_key remove the key from storage Gilles Peskine 2019-08-13 15:11:49 +02:00
  • 8fe253ae4a SE keys: test that psa_destroy_key removes the key from storage Gilles Peskine 2019-08-13 15:11:25 +02:00
  • 3f7cd62ff5 Document better what wiping a key slot does not do Gilles Peskine 2019-08-13 15:01:08 +02:00
  • b4e73e9747 Add some design notes about multipart operation structures Gilles Peskine 2019-08-13 15:00:57 +02:00
  • 40244bc348 Fix the license header of hkdf Ron Eldor 2019-07-31 13:58:29 +03:00
  • 1d57a20cbe Make TODO comments consistent Janos Follath 2019-08-13 12:15:34 +01:00
  • 0f36e7bfa3 Explain why RNG ctx parameter is kept in MBEDTLS_SSL_CONF_RNG Hanno Becker 2019-08-13 11:06:51 +01:00
  • 665d698972 Fix typo in documentation of MBEDTLS_SSL_CONF_RNG in config.h Hanno Becker 2019-08-13 11:06:41 +01:00
  • 7ba6288c37 Add all.sh tests for testing tinycrypt Jarno Lamsa 2019-08-02 11:45:44 +03:00
  • 6ad89c2a3a Exclude DTLS 1.2 only with older OpenSSL Gilles Peskine 2019-08-10 17:38:34 +02:00
  • e30c09198c Exclude DTLS 1.2 only with older OpenSSL Gilles Peskine 2019-08-10 17:38:34 +02:00
  • 6eece5b666 Exclude DTLS 1.2 only with older OpenSSL Gilles Peskine 2019-08-10 17:38:34 +02:00
  • 3a33679ab1 Fix style issue in ssl_internal.h Hanno Becker 2019-08-12 15:25:14 +01:00
  • b4983468e1 Add documentation for MBEDTLS_USE_TINYCRYPT Jarno Lamsa 2019-07-31 14:43:55 +03:00
  • 19bf09ee92 Remove standalone tinyCrypt tests from all.sh Hanno Becker 2019-07-25 09:45:50 +01:00
  • b72fc6a648 Don't use const var in initialization of another const var Hanno Becker 2019-07-24 15:23:37 +01:00
  • 8295ff0b04 tinyCrypt: Don't store public ECDH-share in handshake struct Hanno Becker 2019-07-24 12:45:52 +01:00
  • b1626fb619 tinyCrypt: Remove check for Secp256r1 in SrvKeyExch writing Hanno Becker 2019-07-24 11:54:54 +01:00
  • 9175c21b72 tinyCrypt: Move key buffers to end of mbedtls_ssl_handshake_params Hanno Becker 2019-07-24 11:47:22 +01:00
  • af9ff4ab9d tinyCrypt: Enforce matching setting of MBEDTLS_SSL_CONF_SINGLE_EC Hanno Becker 2019-07-24 11:40:53 +01:00
  • 9cf087d2e7 Use tinyCrypt only for ECDHE-RSA/ECDSA in SrvKeyExch writing Hanno Becker 2019-07-24 11:19:03 +01:00
  • cdce332d8c Remove MBEDTLS_ECDH_C from baremetal configuration Hanno Becker 2019-07-24 11:14:05 +01:00
  • 7a19633c99 tinyCrypt: Avoid unused var warning by marking vars as unused Hanno Becker 2019-07-24 11:12:41 +01:00
  • 29d165565c Add MBEDTLS_ECDH_C guards to ECDH code-paths using legacy ECDH Hanno Becker 2019-07-24 11:11:45 +01:00
  • 975b9ee3c8 Fix guards around use of legacy ECDH context Hanno Becker 2019-07-24 10:09:27 +01:00
  • 49dc8edd26 Don't require MBEDTLS_ECDH_C for ECDHA-{ECDSA|RSA}-based suites Hanno Becker 2019-07-24 10:08:11 +01:00
  • 00a9b6df77 tinyCrypt: Enforce global RNG Hanno Becker 2019-07-24 09:43:44 +01:00
  • 621113fd3a tinyCrypt: Write client's key share Hanno Becker 2019-07-23 17:01:13 +01:00
  • a3c2c1712c tinyCrypt: Share ECDH secret calculation code-path Hanno Becker 2019-07-23 16:51:57 +01:00
  • 75f12d1eb9 tinyCrypt: Add ServerKeyExchange parsing code Hanno Becker 2019-07-23 16:16:15 +01:00
  • d849c7ca19 tinyCrypt: Hardcode ECDH parameter header Hanno Becker 2019-07-23 15:59:58 +01:00