Commit Graph

  • 780f0a4cc1 Reinitialize PK ctx in mbedtls_pk_parse_key before reuse are free Hanno Becker 2018-10-10 11:23:33 +01:00
  • bbd5131c19 Omit runtime configuration of calloc/free if macro config enabled Hanno Becker 2018-10-11 10:26:55 +01:00
  • 864e998dec Add test for MBEDTLS_PLATFORM_{CALLOC/FREE}_MACRO to all.sh Hanno Becker 2018-10-11 11:15:14 +01:00
  • 643f311921 Omit runtime configuration of calloc/free if macro config enabled Hanno Becker 2018-10-11 10:26:55 +01:00
  • 72311b468d Add test for MBEDTLS_PLATFORM_{CALLOC/FREE}_MACRO to all.sh Hanno Becker 2018-10-11 11:02:52 +01:00
  • cfa2e33fd2 Omit runtime configuration of calloc/free if macro config enabled Hanno Becker 2018-10-11 10:26:55 +01:00
  • e5fecec7bf Add test for MBEDTLS_PLATFORM_{CALLOC/FREE}_MACRO to all.sh Hanno Becker 2018-10-11 11:02:52 +01:00
  • 5b3417a3d1 Added the crypto driver API header file Derek Miller 2018-10-10 17:55:03 -05:00
  • e6a5ee7b72 Add explicit unsigned-to-signed integer conversion Hanno Becker 2018-10-10 15:48:39 +01:00
  • d72fab9f3e Add explicit unsigned-to-signed integer conversion Hanno Becker 2018-10-10 15:48:39 +01:00
  • 8df10232cf Add explicit unsigned-to-signed integer conversion Hanno Becker 2018-10-10 15:48:39 +01:00
  • 4c1db16956 Add Changelog entry for #482 Simon Butcher 2018-09-30 12:27:26 +01:00
  • ac2ead0e68 Improve deterministic test for prime testing Darryl Green 2018-10-02 15:30:39 +01:00
  • e3f95ed25b Fix bias in random number generation in Miller-Rabin test Darryl Green 2018-10-02 13:21:35 +01:00
  • e0e7ddf99e Changelog: Add entry for prime validation fix Janos Follath 2018-09-06 10:40:04 +01:00
  • a0b67c2f3e Bignum: Deprecate mbedtls_mpi_is_prime() Janos Follath 2018-09-18 14:48:23 +01:00
  • da31fa137a Bignum: Fix prime validation vulnerability Janos Follath 2018-09-03 14:45:23 +01:00
  • 64eca05ec2 Bignum: Add tests for primality testing Janos Follath 2018-09-05 17:04:49 +01:00
  • b728c29114 Bignum: Remove dead code Janos Follath 2018-09-04 11:19:21 +01:00
  • 3332937538 Changelog: Add entry for prime test improvement Janos Follath 2018-09-06 10:41:33 +01:00
  • b8fc1b02ee RSA: Use MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR Janos Follath 2018-09-03 15:37:01 +01:00
  • a3cb7eb8ad Bignum: Add test for improved prime generation Janos Follath 2018-08-14 15:31:54 +01:00
  • f301d23ceb Bignum: Improve primality test for FIPS primes Janos Follath 2018-08-14 13:34:01 +01:00
  • 35f2f300ca ssl-opt.sh: change expected pattern from 'resend' to 'autoreduction' Andrzej Kurek 2018-10-09 08:52:14 -04:00
  • ef43ce6e25 Dtls: change the way unlimited mtu is set for client hello messages Andrzej Kurek 2018-10-09 08:24:12 -04:00
  • d6a0ed169f Adapt ChangeLog Hanno Becker 2018-10-09 12:44:35 +01:00
  • 7c2f2f3266 Fix ordering of free()ing of internal structures in ssl_server2 Hanno Becker 2018-10-09 12:39:13 +01:00
  • 591cdb0daa Adapt ChangeLog Hanno Becker 2018-10-09 12:44:35 +01:00
  • f690ffa53c Fix ordering of free()ing of internal structures in ssl_server2 Hanno Becker 2018-10-09 12:39:13 +01:00
  • abe6003f5a Adapt ChangeLog Hanno Becker 2018-10-09 12:44:35 +01:00
  • 095d9cf58e Fix ordering of free()ing of internal structures in ssl_server2 Hanno Becker 2018-10-09 12:39:13 +01:00
  • 0fc9cf40cf ssl-opt.sh: increase proxy mtu sizes to contain entire datagrams Andrzej Kurek 2018-10-09 03:09:41 -04:00
  • 1624e2e8bb Avoid overly long lines X.509 DN attr array def in x509_create.c Hanno Becker 2018-10-08 14:52:20 +01:00
  • 35b6854e54 Replace reference to RFC 3280 by reference to newer RFC 5280 Hanno Becker 2018-10-08 14:47:38 +01:00
  • cfc47bab69 Correct some indentation and line lengths in x509_create.c Hanno Becker 2018-10-08 14:45:42 +01:00
  • d355e69aed Rename tag to default_tag in x509_attr_descriptor_t Hanno Becker 2018-10-08 14:42:47 +01:00
  • d0e21fbd27 Improve documentation of ASN.1 string-writing functions Hanno Becker 2018-10-08 14:41:31 +01:00
  • d2c9009e5a Improve documentation of x509_attr_descriptor_t Hanno Becker 2018-10-08 14:32:55 +01:00
  • be75866fb3 Adapt ChangeLog Hanno Becker 2018-10-08 13:51:38 +01:00
  • bab079e85e Fix bounds check in ssl_parse_server_psk_hint() Hanno Becker 2018-10-08 13:40:50 +01:00
  • bd76de27ac Adapt ChangeLog Hanno Becker 2018-10-08 13:51:38 +01:00
  • 63c706f429 Fix bounds check in ssl_parse_server_psk_hint() Hanno Becker 2018-10-08 13:40:50 +01:00
  • dc71ef8fcc Adapt ChangeLog Hanno Becker 2018-10-08 13:51:38 +01:00
  • 3111981d94 Fix parameter name in Doxygen documentation Gilles Peskine 2018-08-21 14:47:48 +02:00
  • 38808fa094 psa_constant_names: fix some copypasta Gilles Peskine 2018-08-20 15:07:37 +02:00
  • 498c2a1ff5 psa_constant_names: support truncated MAC and AEAD Gilles Peskine 2018-08-20 15:07:20 +02:00
  • 0deaf3d8d7 psa_constant_names: new function append_integer Gilles Peskine 2018-08-20 15:06:39 +02:00
  • 70f46e17e8 New macro PSA_ALG_AEAD_WITH_DEFAULT_TAG_LENGTH Gilles Peskine 2018-08-20 15:07:53 +02:00
  • be00a71c90 Add tests for shorter-tag AEAD (CCM, GCM) Gilles Peskine 2018-08-17 19:59:43 +02:00
  • 23cc2ff9a8 Add support for non-default-tag-size AEAD (CCM and GCM) Gilles Peskine 2018-08-17 19:47:52 +02:00
  • 7da96b0d91 Reorder parameters of AEAD unit tests to be more logical Gilles Peskine 2018-08-17 18:45:42 +02:00
  • edf9a6576d Refactor AEAD setup into a common function Gilles Peskine 2018-08-17 18:11:56 +02:00
  • d911eb7915 Add support for truncated MAC algorithms Gilles Peskine 2018-08-14 15:18:45 +02:00
  • a7aa442c7c Add tests for mac_sign Gilles Peskine 2018-08-14 15:17:54 +02:00
  • f18c146d6b Remove a redundant test case Gilles Peskine 2018-08-14 15:17:29 +02:00
  • 0c161d1956 Fix bounds check in ssl_parse_server_psk_hint() Hanno Becker 2018-10-08 13:40:50 +01:00
  • 02a8b0e232 Bignum: Remove dead code Janos Follath 2018-09-04 11:19:21 +01:00
  • 3b3d5e24ea Add tests for PKCS#1 v1.5 decoding Gilles Peskine 2018-10-05 18:15:25 +02:00
  • b39740e934 Bignum: Remove dead code Janos Follath 2018-09-04 11:19:21 +01:00
  • 58e60097cd Adds test_suite_pkcs1_v15 to tests/Makefile Simon Butcher 2016-04-12 11:31:00 +01:00
  • d3f978bd95 Add tests for PKCS#1 v1.5 decoding Gilles Peskine 2018-10-05 18:15:25 +02:00
  • 23d7ceaca9 PKCS#1 v1.5 decoding: fix empty payload case Gilles Peskine 2018-10-05 18:11:27 +02:00
  • 5d2391e9aa Indicate the memory access variations in the changelog entry Gilles Peskine 2018-10-05 15:42:52 +02:00
  • 0b330f764f Remove a remaining sensitive memory access in PKCS#1 v1.5 decryption Gilles Peskine 2018-10-05 15:06:12 +02:00
  • 03fb3e36e4 mbedtls_rsa_rsaes_pkcs1_v15_decrypt: remove the variable p Gilles Peskine 2018-10-05 14:50:21 +02:00
  • 087544bc98 Minor optimization in the PKCS#1v1.5 unpadding step Gilles Peskine 2018-10-04 22:45:13 +02:00
  • cf1253e8f0 Use branch-free size comparison for the padding size Gilles Peskine 2018-10-04 21:24:21 +02:00
  • a04f8bbd0d Bleichenbacher fix: don't leak the plaintext length (step 2) Gilles Peskine 2018-10-04 21:18:30 +02:00
  • f9dd29e3a8 Bleichenbacher fix: don't leak the plaintext length (step 1) Gilles Peskine 2018-10-04 19:13:43 +02:00
  • b473916dcf Evolve choose_int_from_mask to if_int Gilles Peskine 2018-10-04 18:32:29 +02:00
  • ae97c25a91 Add ChangeLog entry Gilles Peskine 2018-10-03 13:40:16 +02:00
  • dabe87cd71 Fix a timing-based Bleichenbacher attack on PKCS#1v1.5 decryption Gilles Peskine 2018-10-02 22:44:41 +02:00
  • cd500f3832 Minor readability improvement Gilles Peskine 2018-10-02 22:43:06 +02:00
  • 2bd6518d5e PKCS#1 v1.5 decoding: fix empty payload case Gilles Peskine 2018-10-05 18:11:27 +02:00
  • ed3bdd82f8 Indicate the memory access variations in the changelog entry Gilles Peskine 2018-10-05 15:42:52 +02:00
  • fde301a409 Remove a remaining sensitive memory access in PKCS#1 v1.5 decryption Gilles Peskine 2018-10-05 15:06:12 +02:00
  • c5552e8ea3 mbedtls_rsa_rsaes_pkcs1_v15_decrypt: remove the variable p Gilles Peskine 2018-10-05 14:50:21 +02:00
  • f19aefb00b Minor optimization in the PKCS#1v1.5 unpadding step Gilles Peskine 2018-10-04 22:45:13 +02:00
  • 08513ce341 Use branch-free size comparison for the padding size Gilles Peskine 2018-10-04 21:24:21 +02:00
  • 9fb28dd9e7 Bleichenbacher fix: don't leak the plaintext length (step 2) Gilles Peskine 2018-10-04 21:18:30 +02:00
  • 2036508538 Bleichenbacher fix: don't leak the plaintext length (step 1) Gilles Peskine 2018-10-04 19:13:43 +02:00
  • 9f11f21a26 Evolve choose_int_from_mask to if_int Gilles Peskine 2018-10-04 18:32:29 +02:00
  • b0034327cb Add ChangeLog entry Gilles Peskine 2018-10-03 13:40:16 +02:00
  • f50ee60ff3 Fix a timing-based Bleichenbacher attack on PKCS#1v1.5 decryption Gilles Peskine 2018-10-02 22:44:41 +02:00
  • f7a8814b72 Minor readability improvement Gilles Peskine 2018-10-02 22:43:06 +02:00
  • 695a34654a Add tests for PKCS#1 v1.5 decoding Gilles Peskine 2018-10-05 18:15:25 +02:00
  • e1660af2e2 Fix CSR parsing header call Simon Butcher 2018-10-07 17:48:37 +01:00
  • 1d533cab6e Strip trailing whitespace in bn_mul.h Simon Butcher 2018-09-30 12:09:47 +01:00
  • 0873dc4c87 Add Changelog entry for #482 Simon Butcher 2018-09-30 12:27:26 +01:00
  • 2df2bf27df Strip trailing whitespace in bn_mul.h Simon Butcher 2018-09-30 12:09:47 +01:00
  • 5199227d87 Add Changelog entry for #767 Simon Butcher 2018-09-30 15:44:52 +01:00
  • 03de21059d Add additional test case for alternative CSR headers Simon Butcher 2018-10-06 16:24:13 +01:00
  • 0488ce653a Add support for alternative CSR headers Simon Butcher 2018-09-30 15:36:50 +01:00
  • 948fe80f42 ssl-opt.sh: adjust test timeouts to fit slower targets Andrzej Kurek 2018-10-05 15:42:44 -04:00
  • ec2a5fdee1 PKCS#1 v1.5 decoding: fix empty payload case Gilles Peskine 2018-10-05 18:11:27 +02:00
  • c5ccd7a1e7 Indicate the memory access variations in the changelog entry Gilles Peskine 2018-10-05 15:42:52 +02:00
  • 40b57f4acd Remove a remaining sensitive memory access in PKCS#1 v1.5 decryption Gilles Peskine 2018-10-05 15:06:12 +02:00
  • 85a7442753 mbedtls_rsa_rsaes_pkcs1_v15_decrypt: remove the variable p Gilles Peskine 2018-10-05 14:50:21 +02:00
  • 6290dae909 Disable dtls fragmentation for ClientHello messages Andrzej Kurek 2018-10-05 08:06:01 -04:00
  • 52f8491dc2 ssl-opt.sh: adjust tests to fit slower targets Andrzej Kurek 2018-10-05 07:53:40 -04:00