Commit Graph

  • 9c5bcc9220 Use more specific name in debug message for testing Manuel Pégourié-Gonnard 2019-05-20 12:09:50 +02:00
  • 9ebcf9b00a Merge remote-tracking branch 'origin/pr/2538' into development Jaeden Amero 2019-05-20 10:58:36 +01:00
  • fc4596f3d5 Merge remote-tracking branch 'origin/pr/2624' into development Jaeden Amero 2019-05-16 18:13:34 +01:00
  • 6a042fee2d Merge remote-tracking branch 'origin/pr/2636' into development Jaeden Amero 2019-05-14 16:20:23 +01:00
  • 642cc821e2 Merge remote-tracking branch 'origin/pr/2465' into development Jaeden Amero 2019-05-14 16:19:29 +01:00
  • 6aeae9e962 Style fix Ron Eldor 2019-05-20 12:00:36 +03:00
  • 76a9c4a81f Fix test data Ron Eldor 2019-05-20 11:58:59 +03:00
  • 762d011ece Fix alignment issues Manuel Pégourié-Gonnard 2019-05-20 10:27:20 +02:00
  • 42c814fdc1 Clarify comment about TLS versions Manuel Pégourié-Gonnard 2019-05-20 10:10:17 +02:00
  • 5478e1e5ed Remove redundant debug message. Manuel Pégourié-Gonnard 2019-05-20 10:07:29 +02:00
  • 8a59d6b964 Update test data Ron Eldor 2019-05-19 12:32:15 +03:00
  • 505089d944 Fix missing compile-time guards around CID-only constants Hanno Becker 2019-05-01 09:45:57 +01:00
  • 4c6fe12db8 Remove TODO Hanno Becker 2019-04-30 16:56:40 +01:00
  • 2e7cd5aa4c Use MBEDTLS_ namespace for internal CID length constant Hanno Becker 2019-04-30 15:01:51 +01:00
  • d91dc3767f Skip copying CIDs to SSL transforms until CID feature is complete Hanno Becker 2019-04-30 13:52:29 +01:00
  • 92c930f7c4 Implement inner plaintext parsing/writing for CID-based connections Hanno Becker 2019-04-29 17:31:37 +01:00
  • d8f753bd04 Add unit tests for record protection using CID Hanno Becker 2019-04-29 17:30:59 +01:00
  • 36fb379f68 Record enc/dec tests: Don't take turns in sending / receiving roles Hanno Becker 2019-04-29 17:24:44 +01:00
  • e83efe6d79 Incorporate CID into MAC computations during record protection Hanno Becker 2019-04-29 13:52:53 +01:00
  • 80fe63e082 Add CID field to internal structure representing TLS records Hanno Becker 2019-04-29 13:45:54 +01:00
  • 8013b27481 Replace 'ingoing' -> 'incoming' in CID debug messages Hanno Becker 2019-05-03 12:55:51 +01:00
  • cb063f5a5b Document behaviour of mbedtls_ssl_get_peer_cid() for empty CIDs Hanno Becker 2019-05-03 12:54:52 +01:00
  • f885d3bba2 Improve structure of client-side CID extension parsing Hanno Becker 2019-05-03 12:47:49 +01:00
  • 8f68f87382 Improve debugging output of client-side CID extension parsing Hanno Becker 2019-05-03 12:46:59 +01:00
  • 19976b5345 Improve structure of ssl_parse_cid_ext() Hanno Becker 2019-05-03 12:43:44 +01:00
  • fc7ff9289f Use unused extension ID as tentative ID for CID extension Hanno Becker 2019-05-03 12:42:13 +01:00
  • 4ce06047e1 Enable use of CID in baremetal configuration and test script Hanno Becker 2019-04-30 14:18:25 +01:00
  • 2e0bedcc35 Correct compile-time guard around unhexify() in ssl_server2 Hanno Becker 2019-04-30 14:18:06 +01:00
  • 31f1668d3c Correct compile-time guard around CID extension writing func on srv Hanno Becker 2019-04-30 14:17:40 +01:00
  • b4a5606e2d Make integer truncation explicit in mbedtls_ssl_set_cid() Hanno Becker 2019-04-30 14:07:31 +01:00
  • 6a3ff286a5 Grep for dbug msgs witnessing use of CID in ssl_client2/ssl_server2 Hanno Becker 2019-04-26 17:19:46 +01:00
  • 0c8281aae5 Change formating of CID debug output in ssl_client2/ssl_server2 Hanno Becker 2019-04-26 17:19:15 +01:00
  • 2de89fae8f Implement mbedtls_ssl_get_peer_cid() Hanno Becker 2019-04-26 17:08:02 +01:00
  • 5e2cd1422e Grep for dbg msg witnessing copying of CIDs to SSL transform Hanno Becker 2019-04-26 16:23:52 +01:00
  • dd0afca3f6 Copy CIDs into SSL transform if use of CID has been negotiated Hanno Becker 2019-04-26 16:22:27 +01:00
  • 4f0b15faec Add fields holding in/out CIDs to SSL record transformation struct Hanno Becker 2019-04-25 15:54:02 +01:00
  • cf2a565e3e Grep for dbg msg witnessing parsing of CID extension in ServerHello Hanno Becker 2019-04-26 16:13:31 +01:00
  • 1ba81f62a6 Implement parsing of CID extension in ServerHello Hanno Becker 2019-04-26 15:37:26 +01:00
  • 4eb0587c0f Grep for dbg msg witnessing writing of CID extension in ServerHello Hanno Becker 2019-04-26 16:00:29 +01:00
  • 072d4eca2e Implement writing of CID extension in ServerHello Hanno Becker 2019-04-26 15:46:55 +01:00
  • c008cb5f8c Grep for dbg msg witnessing parsing of CID extension in ClientHello Hanno Becker 2019-04-26 14:17:56 +01:00
  • c403b264e8 Implement parsing of CID extension in ClientHello Hanno Becker 2019-04-26 13:56:39 +01:00
  • 7345599a7b Grep for dbg msg witnessing writing of CID extension in ClientHello Hanno Becker 2019-04-25 17:01:43 +01:00
  • 39ec525e4f Implement writing of CID extension in ClientHello Hanno Becker 2019-04-25 16:55:15 +01:00
  • 46629717c9 Check static bounds of CID lengths in check_config.h Hanno Becker 2019-04-25 16:47:57 +01:00
  • 4baec2c4bf Add identifier for CID extension Hanno Becker 2019-04-25 16:24:57 +01:00
  • 9dae9fd57b Modify CID tests in ssl-opt.sh to grep for CID config debug msgs Hanno Becker 2019-04-25 16:05:45 +01:00
  • 0748986178 Allow configuring own CID fields through mbedtls_ssl_get_peer_cid() Hanno Becker 2019-04-25 16:01:49 +01:00
  • e5e7f621cc Add fields to SSL structures describing state and config of CID ext Hanno Becker 2019-04-25 15:46:59 +01:00
  • fba7539ad7 Merge pull request #269 from ARMmbed/psa-slots_to_handles Jaeden Amero 2019-05-17 10:18:34 +01:00
  • eff4942202 Merge pull request #268 from ARMmbed/psa-error_tampering_detected Gilles Peskine 2019-05-17 11:06:09 +02:00
  • fce6f836ba Merge branch 'mbedtls-2.16' into baremetal Hanno Becker 2019-05-17 10:06:02 +01:00
  • 1d8f3b5107 Merge pull request #114 from gilles-peskine-arm/psa-keypair-to-key_pair Jaeden Amero 2019-05-17 09:59:34 +01:00
  • 35ef36b62f Rename psa_generate_random_key back to psa_generate_key Gilles Peskine 2019-05-16 19:42:05 +02:00
  • c93b80c350 Rename *KEYPAIR* to *KEY_PAIR* Gilles Peskine 2019-05-16 19:39:54 +02:00
  • 683898c079 Merge pull request #112 from gilles-peskine-arm/psa-remove_domain_parameters Jaeden Amero 2019-05-17 09:55:13 +01:00
  • 0a695bd13e Simplify description of psa_copy_key Adrian L. Shaw 2019-05-15 13:28:41 +01:00
  • 52d83dabd6 Mention psa_close_key in the description of psa_open_key Adrian L. Shaw 2019-05-15 11:39:06 +01:00
  • d56456cbe8 Improve descriptions that mention handles and fix incorrect mention of psa_create_key Adrian L. Shaw 2019-05-15 11:36:13 +01:00
  • 67e1c7ac80 Remove remaining mentions of slots Adrian L. Shaw 2019-05-14 15:24:21 +01:00
  • 4b3eb69271 Rename PSA_ERROR_TAMPERING_DETECTED to ..._CORRUPTION_DETECTED Gilles Peskine 2019-05-16 21:35:18 +02:00
  • 27a983d93c Grammar fix Gilles Peskine 2019-05-16 17:24:53 +02:00
  • 20a77aeac7 RSA key generation: require e=65537 Gilles Peskine 2019-05-16 14:05:56 +02:00
  • a130219ac0 Move remaining text about DSA out of the specification Gilles Peskine 2019-05-16 13:58:24 +02:00
  • e38ab1ac4f Move DSA definitions out of the specification Gilles Peskine 2019-05-16 13:51:50 +02:00
  • dcaefae849 Parametrize Diffie-Hellman keys by a group identifier Gilles Peskine 2019-05-16 12:55:35 +02:00
  • 24f10f85e2 Remove domain parameters from the official API Gilles Peskine 2019-05-16 12:18:32 +02:00
  • eef988fc2d Merge pull request #113 from gilles-peskine-arm/psa-generator_to_derivation Jaeden Amero 2019-05-16 18:20:29 +01:00
  • 58fe9e8afe Correct the description of psa_raw_key_agreement Gilles Peskine 2019-05-16 18:01:45 +02:00
  • be697d8324 Shorten the name of psa_key_agreement_raw_shared_secret Gilles Peskine 2019-05-16 18:00:41 +02:00
  • 1cb9a08d6a Reorder key derivation functions in the header file Gilles Peskine 2019-05-16 17:56:47 +02:00
  • cf7292e257 Wrap and reindent some lines Gilles Peskine 2019-05-16 17:53:40 +02:00
  • 51ae0e4b79 Rename "generator" to "operation" Gilles Peskine 2019-05-16 17:31:03 +02:00
  • 35675b6b26 Terminology: say "key derivation operation", not "generator" Gilles Peskine 2019-05-16 17:26:11 +02:00
  • cbe6650394 Rename generator-related internal identifiers Gilles Peskine 2019-05-16 16:59:18 +02:00
  • 03410b5c5f Rename PSA_KDF_STEP_xxx -> PSA_KEY_DERIVATION_INPUT_xxx Gilles Peskine 2019-05-16 16:05:19 +02:00
  • a99d3fbd05 Rename generator functions to psa_key_derivation_xxx Gilles Peskine 2019-05-16 15:28:51 +02:00
  • d35249e66f Merge pull request #109 from gilles-peskine-arm/psa-key_attributes-set_persistent Jaeden Amero 2019-05-16 17:28:53 +01:00
  • 99e8d26a75 Merge pull request #104 from gilles-peskine-arm/psa-global_key_id Jaeden Amero 2019-05-16 17:11:59 +01:00
  • 11818f2c17 Add some negative test cases Ron Eldor 2019-05-16 18:17:02 +03:00
  • f1b7694768 Minor documentation improvements Gilles Peskine 2019-05-16 16:10:59 +02:00
  • 280948a32b Fix copypasta in the documentation of PSA_KEY_ID_xxx_{MIN,MAX} Gilles Peskine 2019-05-16 15:27:14 +02:00
  • a291391775 Fix minor issues Ron Eldor 2019-05-16 16:17:38 +03:00
  • 16ab39102e Merge pull request #102 from gilles-peskine-arm/psa-aead_multipart-delay Jaeden Amero 2019-05-16 13:34:21 +01:00
  • 76be7f9c70 Merge pull request #108 from gilles-peskine-arm/psa-copy_key-policy Jaeden Amero 2019-05-16 12:08:13 +01:00
  • 826e326d2e Merge pull request #107 from gilles-peskine-arm/psa-curve_size_macro Jaeden Amero 2019-05-16 11:59:41 +01:00
  • beb0cc270e Merge pull request #111 from gilles-peskine-arm/psa-handle-param-order Jaeden Amero 2019-05-16 10:52:06 +01:00
  • e269537b80 Add ChangeLog entry about listing all SAN Ron Eldor 2019-05-16 11:52:57 +03:00
  • e2f62ba9ec Fix unused variable in builds without storage Gilles Peskine 2019-05-16 00:31:48 +02:00
  • c9d910bed6 EC key pair import: check the buffer size Gilles Peskine 2019-05-13 14:21:57 +02:00
  • 6c9514427b New macro to get the bit size of an elliptic curve Gilles Peskine 2019-05-13 12:51:03 +02:00
  • 049c7535af Split long lines after psa_import_key refactoring Gilles Peskine 2019-05-15 20:22:09 +02:00
  • 73676cbc50 Put handle parameter last: psa_import_key Gilles Peskine 2019-05-15 20:15:10 +02:00
  • 806051f17e Update an obsolete use of psa_import_key in documentation Gilles Peskine 2019-05-15 19:50:17 +02:00
  • 98dd779eb5 Put handle parameter last: psa_generate_derived_key Gilles Peskine 2019-05-15 19:43:49 +02:00
  • dd835cbea6 Add a few tests for persistent attributes Gilles Peskine 2019-05-15 16:14:57 +02:00
  • 9de5eb0a2f Remove psa_make_key_persistent Gilles Peskine 2019-05-15 16:14:48 +02:00
  • c87af66325 Replace psa_make_key_persistent by id/lifetime setters in tests Gilles Peskine 2019-05-15 16:12:22 +02:00
  • dc8219a10d Replace psa_make_key_persistent by id/lifetime setters Gilles Peskine 2019-05-15 16:11:15 +02:00
  • 80b39ae753 Remove obsolete use of key policy structure in API text Gilles Peskine 2019-05-15 16:09:46 +02:00