TeamHepta/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-03-31 09:31:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 6dcf0bfcf4 Use x509write_pubkey_der() when applicable Manuel Pégourié-Gonnard 2013-09-11 13:09:04 +02:00
  • 5353a03eb9 x509write_csr using PK internally (WIP) Manuel Pégourié-Gonnard 2013-09-11 12:14:26 +02:00
  • 85dfe08b31 Merge duplicated else/#else branch Manuel Pégourié-Gonnard 2013-09-10 15:59:02 +02:00
  • 88a2264def Fixed potential file descriptor leaks Paul Bakker 2013-09-11 12:14:16 +02:00
  • f65fbee52b x509_verify() now case insensitive for cn (RFC 6125 6.4) (cherry picked from commit a5943858d8) Paul Bakker 2013-09-11 11:52:17 +02:00
  • 34b225f0ee Added C++ style extern in x509write header file Paul Bakker 2013-09-11 11:47:26 +02:00
  • a565aceea1 Fixed potential memory leak when failing to resume a session Paul Bakker 2013-09-11 11:45:41 +02:00
  • 78020fe72c Added fixes to ChangeLog Paul Bakker 2013-09-11 11:42:50 +02:00
  • 3513868f29 Fixed potential file descriptor leaks Paul Bakker 2013-09-11 13:28:00 +02:00
  • 3081ba12bb Fixed potential heap buffer overflow on large hostname setting (cherry picked from commit 75c1a6f97c) Paul Bakker 2013-09-11 11:38:34 +02:00
  • df177ba728 Fixed potential memory leak when failing to resume a session Paul Bakker 2013-09-11 11:45:41 +02:00
  • 16e5f81473 Fixed potential negative value misinterpretation in load_file() (cherry picked from commit 42c3ccf36e) Paul Bakker 2013-09-11 11:37:33 +02:00
  • 8648f04e47 Potential buffer-overflow for ssl_read_record() Paul Bakker 2013-09-11 13:16:28 +02:00
  • a13d744d2e Fixed potential heap buffer overflow on large hostname setting (cherry picked from commit 75c1a6f97c) Paul Bakker 2013-09-11 11:38:34 +02:00
  • fe7c24caa6 Fixed potential negative value misinterpretation in load_file() (cherry picked from commit 42c3ccf36e) Paul Bakker 2013-09-11 11:37:33 +02:00
  • 433fad261e Removed errant printf in x509parse_self_test() (cherry picked from commit dc4baf11ab) Paul Bakker 2013-09-11 11:32:46 +02:00
  • 18f0341aed Typo in comments in ctr_drbg.c Paul Bakker 2013-09-11 10:53:05 +02:00
  • 13a94a1601 Upgraded doxygen config file Paul Bakker 2013-09-10 16:17:15 +02:00
  • dcbfdcc177 Updated doxygen documentation in header files and HTML pages Paul Bakker 2013-09-10 16:16:50 +02:00
  • da7317ed00 Use asn1_free_named_data_list() when relevant Manuel Pégourié-Gonnard 2013-09-10 15:52:52 +02:00
  • 6ec34fb53d Added ChangeLog for blinding Paul Bakker 2013-09-10 14:53:46 +02:00
  • 8f0423afbc Fix for benchmark app after GCM refactoring merge Paul Bakker 2013-09-10 14:51:50 +02:00
  • c0dcf0ceb1 Merged blinding additions for EC, RSA and DHM into development Paul Bakker 2013-09-10 14:44:27 +02:00
  • 36b7e1efe7 Merged GCM refactoring into development Paul Bakker 2013-09-10 14:41:05 +02:00
  • 2a6a3a7e69 Better checking on cipher_info_from_values() Paul Bakker 2013-09-10 14:29:28 +02:00
  • a0558e0484 Check that the cipher GCM receives is a 128-bit-based cipher Paul Bakker 2013-09-10 14:25:51 +02:00
  • 8a109f106d Optimize RSA blinding by caching-updating values Manuel Pégourié-Gonnard 2013-09-10 13:37:26 +02:00
  • ea53a55c0f Refactor to prepare for RSA blinding optimisation Manuel Pégourié-Gonnard 2013-09-10 13:29:30 +02:00
  • 1c3853b953 oid_get_oid_by_*() now give back oid length as well Paul Bakker 2013-09-10 11:43:44 +02:00
  • 7db0109436 Made POLARSSL_MD_MAX_SIZE dependent on POLARSSL_SHA512_C Paul Bakker 2013-09-10 11:10:57 +02:00
  • 003dbad250 Fixed file descriptor leak in x509parse_crtpath() Paul Bakker 2013-09-09 17:26:14 +02:00
  • a5943858d8 x509_verify() now case insensitive for cn (RFC 6125 6.4) Paul Bakker 2013-09-09 17:21:45 +02:00
  • b2d7f23592 Ability to selfsign certificates added to cert_write app Paul Bakker 2013-09-09 16:24:18 +02:00
  • 4122f3eacf Removed POLARSSL_ERROR_C define and added as requirement defing for cert_req and cert_write apps Paul Bakker 2013-09-09 16:01:46 +02:00
  • 80d44fee2e Moved 'define handling code' to top Paul Bakker 2013-09-09 15:59:20 +02:00
  • eba3ccf785 Typo in config.h Paul Bakker 2013-09-09 15:55:12 +02:00
  • e2673fb34b cert_write app now parses presented CSR for subject name and key Paul Bakker 2013-09-09 15:52:07 +02:00
  • f9f377e652 CSR Parsing (without attributes / extensions) implemented Paul Bakker 2013-09-09 15:35:10 +02:00
  • 8693274219 Small typo in usage of cert_req app Paul Bakker 2013-09-09 14:09:42 +02:00
  • 1014e95775 Use issuer_name from the issuer_certificate in cert_write app Paul Bakker 2013-09-09 13:59:42 +02:00
  • d4bf870ff5 Allow spaces after the comma when converting X509 names Paul Bakker 2013-09-09 13:59:11 +02:00
  • cdda097507 Fixed doxygen documentation in asn1.h (added \brief) Paul Bakker 2013-09-09 12:51:29 +02:00
  • 52be08c299 Added support for writing Key Usage and NS Cert Type extensions Paul Bakker 2013-09-09 12:37:54 +02:00
  • cd35803684 Changes x509_csr to x509write_csr Paul Bakker 2013-09-09 12:08:11 +02:00
  • 5f45e62afe Migrated from x509_req_name to asn1_named_data structure Paul Bakker 2013-09-09 12:02:36 +02:00
  • c547cc992e Added generic asn1_free_named_data_list() Paul Bakker 2013-09-09 12:01:23 +02:00
  • 59ba59fa30 Generalized x509_set_extension() behaviour to asn1_store_named_data() Paul Bakker 2013-09-09 11:26:00 +02:00
  • 43aff2aec4 Moved GCM to use cipher layer instead of AES directly Paul Bakker 2013-09-09 00:10:27 +02:00
  • f46b6955e3 Added cipher_info_from_values() to cipher layer (Search by ID+keylen+mode) Paul Bakker 2013-09-09 00:08:26 +02:00
  • 5e0efa7ef5 Added POLARSSL_MODE_ECB to the cipher layer Paul Bakker 2013-09-08 23:04:04 +02:00
  • 9f5a3c4a0a Fix possible memory error. Manuel Pégourié-Gonnard 2013-09-07 18:09:43 +02:00
  • bfb355c33b Fix memory leak on missed session reuse Manuel Pégourié-Gonnard 2013-09-07 17:27:43 +02:00
  • e8ea0c0421 Fix exit value on SERVERQUIT Manuel Pégourié-Gonnard 2013-09-07 17:09:14 +02:00
  • 7669f28421 Add 'memcheck' (valgrind) target to CMake Manuel Pégourié-Gonnard 2013-09-07 16:52:42 +02:00
  • bc4b7f08ba Fix possible race in ssl_list_ciphersuites() Manuel Pégourié-Gonnard 2013-09-07 15:04:26 +02:00
  • 055ef61658 Merged SSL refactoring changing layer to use cipher layer Paul Bakker 2013-09-08 20:06:30 +02:00
  • 2397cf3ede First certificate writing test. Full server1.crt reconstruction Paul Bakker 2013-09-08 15:58:15 +02:00
  • 9c208aabc8 Use ASN1_UTC_TIME in some cases Paul Bakker 2013-09-08 15:44:31 +02:00
  • 032c34e206 Don't use DH blinding for ephemeral DH Manuel Pégourié-Gonnard 2013-09-07 13:06:27 +02:00
  • ce6352a791 Add benchmark for fixed-DHM with blinding Manuel Pégourié-Gonnard 2013-09-07 13:05:52 +02:00
  • 1a2012459b Fix undetected errors in benchmark Manuel Pégourié-Gonnard 2013-09-07 12:27:35 +02:00
  • 337b29c334 Test and document EC blinding overhead Manuel Pégourié-Gonnard 2013-09-07 11:52:27 +02:00
  • 15162a054a Writing of X509v3 extensions supported Paul Bakker 2013-09-06 19:27:21 +02:00
  • 329def30c5 Added asn1_write_bool() Paul Bakker 2013-09-06 16:34:38 +02:00
  • 9397dcb0e8 Base X509 certificate writing functinality Paul Bakker 2013-09-06 09:55:26 +02:00
  • 7da0a38d43 Rm some includes that are now useless Manuel Pégourié-Gonnard 2013-09-05 16:56:03 +02:00
  • d13a4099dd GCM ciphersuites using only cipher layer Manuel Pégourié-Gonnard 2013-09-05 16:10:41 +02:00
  • b8bd593741 Restrict cipher_update() for GCM Manuel Pégourié-Gonnard 2013-09-05 13:38:15 +02:00
  • 226d5da1fc GCM ciphersuites partially using cipher layer Manuel Pégourié-Gonnard 2013-09-05 13:19:22 +02:00
  • 1af50a240b Cipher: test multiple cycles Manuel Pégourié-Gonnard 2013-09-05 10:30:32 +02:00
  • cac5f7d737 Update benchmarks for new prototypes Manuel Pégourié-Gonnard 2013-09-04 17:19:18 +02:00
  • ed8a02bfae Simplify DH blinding a bit Manuel Pégourié-Gonnard 2013-09-04 16:39:03 +02:00
  • 45125bc160 Changes to handle merged enhancements Paul Bakker 2013-09-04 16:47:11 +02:00
  • 143b5028a5 Implement DH blinding Manuel Pégourié-Gonnard 2013-09-04 16:29:59 +02:00
  • c049955b32 Merged new cipher layer enhancements Paul Bakker 2013-09-04 16:12:55 +02:00
  • 2d627649bf Change dhm_calc_secret() prototype Manuel Pégourié-Gonnard 2013-09-04 14:22:07 +02:00
  • ce4112538c Fix RC4 key length in cipher Manuel Pégourié-Gonnard 2013-09-04 12:28:37 +02:00
  • 83f3fc0d77 Add AES-192-GCM Manuel Pégourié-Gonnard 2013-09-04 12:07:24 +02:00
  • f7ce67f0d2 Add tests for gcm via cipher Manuel Pégourié-Gonnard 2013-09-03 20:17:35 +02:00
  • 8eccab5077 Add test vectors to the cipher test suite Manuel Pégourié-Gonnard 2013-09-03 18:31:25 +02:00
  • 43a4780b03 Ommit AEAD functions if GCM not defined Manuel Pégourié-Gonnard 2013-09-03 16:35:53 +02:00
  • aa9ffc5e98 Split tag handling out of cipher_finish() Manuel Pégourié-Gonnard 2013-09-03 16:19:22 +02:00
  • 2adc40c346 Split cipher_update_ad() out or cipher_reset() Manuel Pégourié-Gonnard 2013-09-03 13:54:12 +02:00
  • a235b5b5bd Fix iv_len interface. Manuel Pégourié-Gonnard 2013-09-03 13:25:52 +02:00
  • 9c853b910c Split cipher_set_iv() out of cipher_reset() Manuel Pégourié-Gonnard 2013-09-03 13:04:44 +02:00
  • 07de4b1d08 Implement randomized coordinates in ecp_mul() Manuel Pégourié-Gonnard 2013-09-02 16:26:04 +02:00
  • c75c56fef7 Fix off-by-one error in ecdsa_write_signature() Manuel Pégourié-Gonnard 2013-09-02 16:25:37 +02:00
  • ea6ad3f6e5 ARC4 ciphersuites using only cipher layer Paul Bakker 2013-09-02 14:57:01 +02:00
  • e09d2f8261 Change ecp_mul() prototype to allow randomization Manuel Pégourié-Gonnard 2013-09-02 14:29:09 +02:00
  • eb851f6cd5 Merged current cipher enhancements for ARC4 and AES-GCM Paul Bakker 2013-09-01 15:49:38 +02:00
  • 9241be7ac5 Change cipher prototypes for GCM Manuel Pégourié-Gonnard 2013-08-31 17:31:03 +02:00
  • cca5b81d18 All CBC ciphersuites via the cipher layer Paul Bakker 2013-08-31 17:40:26 +02:00
  • da02a7f45e AES_CBC ciphersuites now run purely via cipher layer Paul Bakker 2013-08-31 17:25:14 +02:00
  • 20d6a17af9 Make GCM tag check "constant-time" Manuel Pégourié-Gonnard 2013-08-31 16:37:46 +02:00
  • 07f8fa5a69 GCM in the cipher layer, step 1 Manuel Pégourié-Gonnard 2013-08-30 18:34:08 +02:00
  • b5e85885de Handle NULL as a stream cipher for more uniformity Manuel Pégourié-Gonnard 2013-08-28 16:36:14 +02:00
  • 37e230c022 Add arc4 support in the cipher layer Manuel Pégourié-Gonnard 2013-08-28 13:50:42 +02:00
  • f451bac000 Blinding RSA only active when f_rng is provided Paul Bakker 2013-08-30 15:37:02 +02:00
  • 48377d9834 Configuration option to enable/disable POLARSSL_PKCS1_V15 operations Paul Bakker 2013-08-30 12:06:24 +02:00
  • aab30c130c RSA blinding added for CRT operations Paul Bakker 2013-08-30 11:00:25 +02:00