Commit Graph

  • 56d7cc472f Fix bias in random number generation in Miller-Rabin test Darryl Green 2018-10-02 13:21:35 +01:00
  • 8d3fb2e167 Changelog: Add entry for prime validation fix Janos Follath 2018-09-06 10:40:04 +01:00
  • 0b74161502 Bignum: Add tests for primality testing Janos Follath 2018-09-05 17:04:49 +01:00
  • f3d0a56841 Integrated mostly cosmetic feedback from Alex Derek Miller 2018-10-18 16:41:08 -05:00
  • d004ffa59e Merge pull request #138 from ARMmbed/truncated_mac Gilles Peskine 2018-10-18 20:06:30 +02:00
  • 5e0924cb52 Adapt ChangeLog Hanno Becker 2018-10-18 12:11:54 +01:00
  • 27516979c1 Entropy: Fall through to /dev/random if getrandom() syscall unknown Hanno Becker 2018-10-18 11:49:25 +01:00
  • 7458975805 Add a macro to define the memory size in ssl_server2.c Simon Butcher 2018-07-23 14:26:09 +01:00
  • e8c12f1ec9 Increase the memory buffer size for ssl_server2.c Simon Butcher 2018-07-22 14:43:39 +01:00
  • 437f96e3a4 Add a macro to define the memory size in ssl_server2.c Simon Butcher 2018-07-23 14:26:09 +01:00
  • 35007df398 Increase the memory buffer size for ssl_server2.c Simon Butcher 2018-07-22 14:43:39 +01:00
  • e0e9c7c417 New macro PSA_ALG_FULL_LENGTH_MAC Gilles Peskine 2018-10-17 18:28:05 +02:00
  • 57fbdb1939 Use a public macro for AEAD tag length variations Gilles Peskine 2018-10-17 18:29:17 +02:00
  • 7fa99d90dd Add metadata tests for truncated MAC and short-tag AEAD Gilles Peskine 2018-09-24 22:09:46 +02:00
  • c2a1dd98d5 Adapt ChangeLog Hanno Becker 2018-10-17 14:53:05 +01:00
  • 3aab4cc486 Fail when encountering invalid CBC padding in EtM records Hanno Becker 2018-10-17 14:43:14 +01:00
  • 7e1913bfa8 Adapt ChangeLog Hanno Becker 2018-10-17 14:53:05 +01:00
  • ca31b47188 Fail when encountering invalid CBC padding in EtM records Hanno Becker 2018-10-17 14:43:14 +01:00
  • f24c3360fc Adapt ChangeLog Hanno Becker 2018-10-17 14:53:05 +01:00
  • dd3ab13da3 Fail when encountering invalid CBC padding in EtM records Hanno Becker 2018-10-17 14:43:14 +01:00
  • a966e6ff47 Add missing return value check in ECDSA test suite Hanno Becker 2018-10-17 13:58:19 +01:00
  • ddf9d9645a Add missing return value check in ECDSA test suite Hanno Becker 2018-10-17 13:58:19 +01:00
  • 198611db32 Add missing return value check in ECDSA test suite Hanno Becker 2018-10-17 13:58:19 +01:00
  • f8a8fe60f8 Fix memory leak with AEAD with non-default tag lengths Gilles Peskine 2018-08-21 16:38:05 +02:00
  • c26eae1a9d Clarify the description of a CCM truncated tag test Gilles Peskine 2018-08-21 16:01:19 +02:00
  • 85ea2b397c Add some negative tests of CCM and GCM with invalid tag lengths Gilles Peskine 2018-08-21 15:07:55 +02:00
  • 8cac2e628e Translate GCM_BAD_INPUT to INVALID_ARGUMENT, not NOT_SUPPORTED Gilles Peskine 2018-08-21 15:07:38 +02:00
  • 28dfea6bb9 Add test cases for truncated MAC with a too short/long length Gilles Peskine 2018-08-21 14:59:24 +02:00
  • 99b7d6b700 Wipe sensitive data in psa_mac_verify_finish Gilles Peskine 2018-08-21 14:56:19 +02:00
  • 87b0ac49f8 Fix possible buffer overread in psa_mac_finish_internal (CMAC) Gilles Peskine 2018-08-21 14:55:49 +02:00
  • 6d72ff9e79 Document that the minimum truncated MAC length is implementation-defined Gilles Peskine 2018-08-21 14:55:08 +02:00
  • e1f2d7d1ac Document and check the consistency of truncated MAC encodings Gilles Peskine 2018-08-21 14:54:54 +02:00
  • 73497ceaef Mark internal function as static Darryl Green 2018-10-16 15:07:48 +01:00
  • 4577beb945 Add dep of mbedtls_rsa_rsassa_pkcs1_v15_verify on ASN.1 parsing Hanno Becker 2018-10-16 14:06:20 +01:00
  • a359f2764c Add dependency of pkwrite test suite on pkparse module Hanno Becker 2018-10-16 13:46:25 +01:00
  • c2eba85d70 Add dependency of key_app_writer example program on PK parse module Hanno Becker 2018-10-16 13:45:22 +01:00
  • 9928807a62 Duplicate mbedtls_asn1_find_named_data in asn1write.c to avoid dep. Hanno Becker 2018-10-12 10:42:13 +01:00
  • 5e0f4a5e48 Guard mbedtls_pkcs5_pbes2() by MBEDTLS_ASN1_PARSE_C Hanno Becker 2018-10-12 10:57:33 +01:00
  • 027c1f2470 Make PBE-related parts of PKCS12 depend on MBEDTLS_ASN1_PARSE_C Hanno Becker 2018-10-12 10:46:32 +01:00
  • bc9ae7a7ae Guard PK-parse module by ASN.1-parse module in check_config.h Hanno Becker 2018-10-12 10:44:27 +01:00
  • f4860e0ef7 Add dependency of mbedtls_asn1_write_len() test on ASN.1 parsing Hanno Becker 2018-10-16 13:48:23 +01:00
  • 175dbe9ade Add dependency of pkwrite test suite on pkparse module Hanno Becker 2018-10-16 13:46:25 +01:00
  • 3a3f1aa1a6 Add dependency of key_app_writer example program on PK parse module Hanno Becker 2018-10-16 13:45:22 +01:00
  • a4d116e20f Duplicate mbedtls_asn1_find_named_data in asn1write.c to avoid dep. Hanno Becker 2018-10-12 10:42:13 +01:00
  • 5ed0355bc8 Guard mbedtls_pkcs5_pbes2() by MBEDTLS_ASN1_PARSE_C Hanno Becker 2018-10-12 10:57:33 +01:00
  • d30cd34dc2 Make PBE-related parts of PKCS12 depend on MBEDTLS_ASN1_PARSE_C Hanno Becker 2018-10-12 10:46:32 +01:00
  • 30617b080a Guard PK-parse module by ASN.1-parse module in check_config.h Hanno Becker 2018-10-12 10:44:27 +01:00
  • 0fbbc64fee Add dependency of mbedtls_asn1_write_len() test on ASN.1 parsing Hanno Becker 2018-10-16 13:48:23 +01:00
  • 19d858e8e6 Add dependency of pkwrite test suite on pkparse module Hanno Becker 2018-10-16 13:46:25 +01:00
  • b14c331eb9 Add dependency of key_app_writer example program on PK parse module Hanno Becker 2018-10-16 13:45:22 +01:00
  • 44da18a294 Duplicate mbedtls_asn1_find_named_data in asn1write.c to avoid dep. Hanno Becker 2018-10-12 10:42:13 +01:00
  • 1ea604d3ee Guard mbedtls_pkcs5_pbes2() by MBEDTLS_ASN1_PARSE_C Hanno Becker 2018-10-12 10:57:33 +01:00
  • 8a89f9fcd2 Make PBE-related parts of PKCS12 depend on MBEDTLS_ASN1_PARSE_C Hanno Becker 2018-10-12 10:46:32 +01:00
  • cb9debda6b Guard PK-parse module by ASN.1-parse module in check_config.h Hanno Becker 2018-10-12 10:44:27 +01:00
  • 96f3b4ee42 Remove yotta support from check-files.py Gilles Peskine 2018-10-16 14:10:21 +02:00
  • b25cb603bb Add a comment to clarify code flow Manuel Pégourié-Gonnard 2018-10-16 11:48:09 +02:00
  • a5a3e40c4e Fix missing dereference. Manuel Pégourié-Gonnard 2018-10-16 11:27:23 +02:00
  • 7a28e99fa0 Expand test to ensure no assumption on output Manuel Pégourié-Gonnard 2018-10-16 11:22:45 +02:00
  • 90f31b71a8 Improve readability by moving counter decrement Manuel Pégourié-Gonnard 2018-10-16 10:45:24 +02:00
  • a58e011ac0 Fix alignment in a macro definition Manuel Pégourié-Gonnard 2018-10-16 10:42:47 +02:00
  • b843b15a02 Fix function name to fit conventions Manuel Pégourié-Gonnard 2018-10-16 10:41:31 +02:00
  • c0edc96704 Add comment on internal function API Manuel Pégourié-Gonnard 2018-10-16 10:38:19 +02:00
  • d8b73f2312 Remove unnecessary calls to init() from free() Manuel Pégourié-Gonnard 2018-10-16 10:34:13 +02:00
  • c37423fa76 Fix misleading sub-state name and comments Manuel Pégourié-Gonnard 2018-10-16 10:28:17 +02:00
  • f5b094fc72 Adapt ChangeLog Hanno Becker 2018-10-15 13:20:28 +01:00
  • 728d6cdcef Add missing zeroization of reassembled handshake messages Hanno Becker 2018-10-15 13:22:22 +01:00
  • 74a1c4b178 Adapt ChangeLog Hanno Becker 2018-10-15 13:20:28 +01:00
  • d82e0c0235 Add missing zeroization of reassembled handshake messages Hanno Becker 2018-10-15 13:22:22 +01:00
  • 16e72299cd Changed crypto_driver.h based on PR feedback Derek Miller 2018-10-15 16:14:24 -05:00
  • 5267b62248 Change error description Ron Eldor 2018-10-15 18:44:42 +03:00
  • a27190b774 Rename platform error code and value Ron Eldor 2018-10-15 16:33:43 +03:00
  • 25781f90da Fix missing check in example client Manuel Pégourié-Gonnard 2018-10-15 15:28:16 +02:00
  • ee68cff813 Fix or improve some comments (and whitespace) Manuel Pégourié-Gonnard 2018-10-15 15:27:49 +02:00
  • 32df91183e Fix documentation of what functions restart when Manuel Pégourié-Gonnard 2018-10-15 13:29:21 +02:00
  • 6a74b2f687 Zeroize sensitive data in aescrypt2 and crypt_and_hash examples Hanno Becker 2018-10-12 16:46:37 +01:00
  • 9a1a151a1a Zeroize sensitive data in aescrypt2 and crypt_and_hash examples Hanno Becker 2018-10-12 16:46:37 +01:00
  • 7e1f3bedd9 Adapt ChangeLog Hanno Becker 2018-10-15 13:20:28 +01:00
  • b2ba79abec Adapt ChangeLog Hanno Becker 2018-10-15 12:23:02 +01:00
  • f0bbd7e3fd Misc documentation fixes/improvements. Manuel Pégourié-Gonnard 2018-10-15 13:22:41 +02:00
  • 0af25e71ab Add parentheses about parameter of MBEDTLS_X509_ID_FLAG Hanno Becker 2018-10-15 12:13:38 +01:00
  • 6346a75dfb Merge branch 'development' into iotssl-1260-non-blocking-ecc-restricted Manuel Pégourié-Gonnard 2018-10-15 11:26:17 +02:00
  • 4899247bf2 Fix undefined behavior in unsigned-to-signed conversion Gilles Peskine 2018-10-12 19:19:12 +02:00
  • 9b430704d1 Fix likely-harmless undefined behavior surrounding volatile Gilles Peskine 2018-10-12 19:15:34 +02:00
  • e3be8d672e Fix undefined behavior in unsigned-to-signed conversion Gilles Peskine 2018-10-12 19:19:12 +02:00
  • 996f30d381 Fix likely-harmless undefined behavior surrounding volatile Gilles Peskine 2018-10-12 19:15:34 +02:00
  • 84a21d5a54 Fix undefined behavior in unsigned-to-signed conversion Gilles Peskine 2018-10-12 19:19:12 +02:00
  • 66a28e991d Fix likely-harmless undefined behavior surrounding volatile Gilles Peskine 2018-10-12 19:15:34 +02:00
  • 0b44d5cc79 Zeroize sensitive data in aescrypt2 and crypt_and_hash examples Hanno Becker 2018-10-12 16:46:37 +01:00
  • 805f2e11bd Add missing zeroization of buffered handshake messages Hanno Becker 2018-10-12 16:31:41 +01:00
  • 0c9bbb0ff8 Fix bias in random number generation in Miller-Rabin test Darryl Green 2018-10-02 13:21:35 +01:00
  • da4ea3bd92 Changelog: Add entry for prime validation fix Janos Follath 2018-09-06 10:40:04 +01:00
  • 18b08c6f4c Bignum: Add tests for primality testing Janos Follath 2018-09-05 17:04:49 +01:00
  • 9dc5b7a27b Bignum: Fix prime validation vulnerability Janos Follath 2018-09-03 14:45:23 +01:00
  • 72d555dd7c Bignum: Fix prime validation vulnerability Janos Follath 2018-09-03 14:45:23 +01:00
  • 9580528248 ssl-opt.sh: fix typo in mtu settings Andrzej Kurek 2018-10-11 08:55:37 -04:00
  • b459346f67 ssl-opt.sh: add a check for i686 targets Andrzej Kurek 2018-10-11 08:43:30 -04:00
  • 7782605491 ssl-opt.sh: add comments regarding ciphersuite forcing Andrzej Kurek 2018-10-11 07:34:08 -04:00
  • 748face36f ssl_tls: fix maximum output length Andrzej Kurek 2018-10-11 07:20:19 -04:00
  • 7c6df832ed ssl-opt.sh: revert unnecessary "autoreduction" checks Andrzej Kurek 2018-10-11 07:06:12 -04:00
  • 7311c78074 ssl-opt.sh: force ciphersuites to reduce mtu size Andrzej Kurek 2018-10-11 06:49:41 -04:00