TeamHepta/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-03-30 17:12:00 +02:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 08f06cf49f Disabled the HAVEGE random generator by default Paul Bakker 2013-06-06 14:05:26 +02:00
  • e0225e4d7f Fixed const correctness issues in programs and tests Paul Bakker 2013-06-06 12:52:24 +02:00
  • eae09db9e5 Fixed const correctness issues that have no impact on the ABI Paul Bakker 2013-06-06 12:35:54 +02:00
  • f92263021c Fixed offset for cert_type list in ssl_parse_certificate_request() Paul Bakker 2013-06-06 11:24:37 +02:00
  • 7c3c3899cf Secure renegotiation extension should only be sent in case client supports secure renegotiation Paul Bakker 2013-06-06 11:22:13 +02:00
  • 73d4431ccd Fixed parse error in ssl_parse_certificate_request() Paul Bakker 2013-05-22 13:56:26 +02:00
  • 777a5757d6 ca_path and ca_file arguments added to support chain validation in cert_app Paul Bakker 2013-05-21 16:20:04 +02:00
  • f6a19bd728 Possible resource leak on FILE* removed in X509 parse Paul Bakker 2013-05-14 13:26:51 +02:00
  • c72d3f7d85 Possible resource leak on FILE* removed in CTR_DRBG Paul Bakker 2013-05-14 13:22:41 +02:00
  • 45bda90caa Comments for extra PSK ciphersuites added to config.h Paul Bakker 2013-04-19 22:28:21 +02:00
  • 40afb4ba13 Added PSK GCM, SHA256 and SHA384 ciphers from RFC5487 Paul Bakker 2013-04-19 22:03:30 +02:00
  • 0c5fac2931 Reordered ID's to numerical order Paul Bakker 2013-04-19 21:10:51 +02:00
  • a1bf92ddb4 Added PSK NULL ciphers from RFC4785 Paul Bakker 2013-04-19 19:48:45 +02:00
  • b91c2b5782 PSK and DHE-PSK addition to ChangeLog Paul Bakker 2013-04-19 16:05:16 +02:00
  • bc956d900e Added missing config.h include Paul Bakker 2013-04-19 14:51:29 +02:00
  • 48f7a5d724 DHE-PSK based ciphersuite support added and cleaner key exchange based code selection Paul Bakker 2013-04-19 14:30:58 +02:00
  • 0b35157467 PSK and DHE-PSK addition to ChangeLog polarssl-1.3-alpha1 Paul Bakker 2013-04-19 16:05:16 +02:00
  • 7a6c07457a Added missing config.h include Paul Bakker 2013-04-19 14:51:29 +02:00
  • 19b39bbca0 DHE-PSK based ciphersuite support added and cleaner key exchange based code selection Paul Bakker 2013-04-19 14:30:58 +02:00
  • 188c8de430 Only allow missing SereverKeyExchange message in bare PSK mode Paul Bakker 2013-04-19 09:13:37 +02:00
  • bcbe2d8d81 Prettier printing of the lists for longer ciphersuite names Paul Bakker 2013-04-19 09:10:20 +02:00
  • e07f41d4be Introduced defines to control availability of specific SSL Key Exchange methods. Paul Bakker 2013-04-19 09:08:57 +02:00
  • 7ad00f9808 Sanity checks added to config.h Paul Bakker 2013-04-18 23:05:25 +02:00
  • ed27a041e4 More granular define selections within code to allow for smaller code sizes Paul Bakker 2013-04-18 22:46:23 +02:00
  • 7e5e7ca205 Added PSK ciphersuite tests to compat.sh Paul Bakker 2013-04-17 19:27:58 +02:00
  • 73a899a9eb Changed error code message to also cover missing pre-shared key Paul Bakker 2013-04-17 19:11:36 +02:00
  • fbb17804d8 Added pre-shared key handling for the server side of SSL / TLS Paul Bakker 2013-04-17 19:10:21 +02:00
  • 70df2fbaa5 Split parts of ssl_parse_client_key_exchange() into separate functions Paul Bakker 2013-04-17 17:19:09 +02:00
  • d4a56ec6bf Added pre-shared key handling for the client side of SSL / TLS Paul Bakker 2013-04-16 18:05:29 +02:00
  • f7abd422dc Removed extra spaces on end of lines Paul Bakker 2013-04-16 13:15:56 +02:00
  • 29e1f12f6b split parts of ssl_parse_server_key_exchange() into separate functions Paul Bakker 2013-04-16 13:07:56 +02:00
  • 8f4ddaeea9 Ability to specify allowed ciphersuites based on the protocol version. Paul Bakker 2013-04-15 15:09:54 +02:00
  • 822e958bb2 Prepared for PolarSSL 1.2.7 release polarssl-1.2.7 Paul Bakker 2013-04-13 11:56:17 +02:00
  • f4a84b1154 Added default value comment for ssl_set_ciphersuites*() Paul Bakker 2013-04-12 15:33:30 +02:00
  • f42e5cceab Cleanup of the GCM code Paul Bakker 2013-04-12 13:21:29 +02:00
  • d68703b17f Split up largest test suite data files into smaller chunks (cherry picked from commit 286bf3c501) Paul Bakker 2013-04-12 13:20:30 +02:00
  • 8a4ec44c7c Blowfish has default of 128-bit keysize in cipher layer (cherry picked from commit bfe671f2d5) Paul Bakker 2013-04-12 13:18:53 +02:00
  • cecfd95aba Minor checks to prevent NULL-pointer exceptions (cherry picked from commit c295b834a2) Paul Bakker 2013-04-12 13:18:07 +02:00
  • 93bab7ff8e Made change to error.c for dummy error_strerror() permanent (cherry picked from commit a0234377fc) Paul Bakker 2013-04-12 13:17:02 +02:00
  • a62729888b Ability to specify allowed ciphersuites based on the protocol version. Paul Bakker 2013-04-12 13:13:43 +02:00
  • d4c5944212 Fixed MPI assembly for ARM when -O2 is used Paul Bakker 2013-04-12 09:40:38 +02:00
  • eff2e6d414 Fixed MPI assembly for ARM when -O2 is used Paul Bakker 2013-04-11 17:13:22 +02:00
  • 0ecdb23eed Cleanup of the GCM code Paul Bakker 2013-04-09 11:36:42 +02:00
  • 286bf3c501 Split up largest test suite data files into smaller chunks Paul Bakker 2013-04-08 18:09:51 +02:00
  • 370e90c2f0 Enable PBKDF2 by default Paul Bakker 2013-04-08 15:19:43 +02:00
  • abfdfbfd46 Removed duplicate value from compat.sh ciphersuite list Paul Bakker 2013-04-08 14:07:43 +02:00
  • a280d0f2b9 Fixed compiler warning for possible uninitialized ret Paul Bakker 2013-04-08 13:40:17 +02:00
  • 27714b1aa1 Added Camellia ECDHE-based CBC ciphersuites Paul Bakker 2013-04-07 23:07:12 +02:00
  • bfe671f2d5 Blowfish has default of 128-bit keysize in cipher layer Paul Bakker 2013-04-07 22:35:44 +02:00
  • d5c2b542cc Indication of x509_get_numeric_string() deprecation Paul Bakker 2013-04-07 22:34:26 +02:00
  • c70b982056 OID functionality moved to a separate module. Paul Bakker 2013-04-07 22:00:46 +02:00
  • 37de6bec16 Const correctness added for asn1write functions Paul Bakker 2013-04-07 13:11:31 +02:00
  • c295b834a2 Minor checks to prevent NULL-pointer exceptions Paul Bakker 2013-04-02 11:13:39 +02:00
  • 3b6a07b745 Prevented compiler warning on uninitialized end Paul Bakker 2013-03-21 11:56:50 +01:00
  • d3edc86720 Moved writing of client extensions to separate functions in ssl_cli.c Paul Bakker 2013-03-20 16:07:17 +01:00
  • a54e493bc0 Added ECDHE-based SHA256 and SHA384 ciphersuites Paul Bakker 2013-03-20 15:31:54 +01:00
  • b7149bcc90 Corrected behaviour for CBC-based suites using the SHA384 MAC and PRF Paul Bakker 2013-03-20 15:30:09 +01:00
  • a0234377fc Made change to error.c for dummy error_strerror() permanent Paul Bakker 2013-03-20 14:42:21 +01:00
  • 41c83d3f67 Added Ephemeral Elliptic Curve Diffie Hellman ciphersuites to SSL/TLS Paul Bakker 2013-03-20 14:39:14 +01:00
  • 00c1f43743 Merge branch 'ecc-devel-mpg' into development Paul Bakker 2013-03-13 16:31:01 +01:00
  • d589a0ddb6 Modified Makefiles to include new files and and config.h to PolarSSL standard Paul Bakker 2013-03-13 16:30:17 +01:00
  • 68884e3c09 Moved to advanced ciphersuite representation and more dynamic SSL code Paul Bakker 2013-01-07 18:20:04 +01:00
  • 9b5798dc75 Modified ChangeLog to include explanations of last SSL module changes Paul Bakker 2013-03-13 13:53:00 +01:00
  • c9118b433b Renamed hash structures to ctx Paul Bakker 2013-03-13 11:48:39 +01:00
  • 09d67258a2 Modified to work in-place Paul Bakker 2013-01-04 16:38:25 +01:00
  • 92be97b8e6 Align data with future location based on IV size Paul Bakker 2013-01-02 17:30:03 +01:00
  • 07eb38ba31 Update ssl_hw_record_init() to receive keylen, ivlen and maclen as well Added ssl_hw_record_activate() Paul Bakker 2012-12-19 14:42:06 +01:00
  • c7878113cb Do not set done in case of a fall-through Paul Bakker 2012-12-19 14:41:14 +01:00
  • 5bd422937a Reverted commit 186751d9dd and made out_hdr and out_msg back-to-back again Paul Bakker 2012-12-19 14:40:42 +01:00
  • fae35f0601 Functions in cipher_wrap.c marked static Paul Bakker 2013-03-13 10:33:51 +01:00
  • d1df02a8a3 Functions inside md_wrap.c now marked static Paul Bakker 2013-03-13 10:31:31 +01:00
  • ac0fba5389 Added missing header for MD2 and made code compile with missing header files Paul Bakker 2013-03-13 10:28:40 +01:00
  • 1bd3ae826c Added md_process() to MD layer for generic internal access to hash process functions Paul Bakker 2013-03-13 10:26:44 +01:00
  • d3cd5c1129 Prepared for PolarSSL 1.1.6 release polarssl-1.1.6 Paul Bakker 2013-03-11 17:02:58 +01:00
  • f8e407a690 Inserted bump_version.sh in git repository (cherry picked from commit 34558735d2) Paul Bakker 2013-03-11 16:56:36 +01:00
  • b5f272778e Fixed net_bind() for specified IP addresses on little endian systems (cherry picked from commit 37286a573b) Paul Bakker 2013-03-11 16:53:25 +01:00
  • e73a77f656 Removed timing differences due to bad padding from RSA decrypt for PKCS#1 v1.5 operations (cherry picked from commit 8804f69d46) Paul Bakker 2013-03-11 16:51:05 +01:00
  • 0a971b5dc8 Removed further timing differences during SSL message decryption in ssl_decrypt_buf() Paul Bakker 2013-03-11 16:08:06 +01:00
  • f6bff2a300 Made x509parse.c also work with missing hash header files (cherry picked from commit 2ca8ad10a1) Paul Bakker 2013-03-11 16:05:32 +01:00
  • 332166eeda Added comments to indicate dependency from PEM on AES, DES and MD5 (cherry picked from commit 6deb37e03e) Paul Bakker 2013-03-11 16:04:49 +01:00
  • 6c04475bfc Fixed typo in base64.h (cherry picked from commit fbb5cf9f59) Paul Bakker 2013-03-11 16:04:04 +01:00
  • 9fa6ea7cdf Fixed comment (cherry picked from commit 86f04f400b) Paul Bakker 2013-03-11 16:03:35 +01:00
  • 48b7cb8ea2 Disable debug messages that can introduce a timing side channel. Paul Bakker 2013-03-11 15:59:03 +01:00
  • 6a229c1f8c Fixed timing difference resulting from badly formatted padding. (cherry picked from commit 4582999be6) Paul Bakker 2013-03-11 15:56:17 +01:00
  • cb60e7c065 Allow enabling of dummy error_strerror() to support some use-cases Paul Bakker 2013-03-11 15:50:35 +01:00
  • 90f042d4cb Prepared for PolarSSL 1.2.6 release polarssl-1.2.6 Paul Bakker 2013-03-11 11:38:44 +01:00
  • fb1cbd3cea Fixed assembly code for ARM (Thumb and regular) for some compilers Paul Bakker 2013-03-06 18:14:52 +01:00
  • e81beda60f The SSL session cache module (ssl_cache) now also retains peer_cert information (not the entire chain) Paul Bakker 2013-03-06 17:40:46 +01:00
  • a35aa54967 Fixed whitespaces in ChangeLog Paul Bakker 2013-03-06 17:06:21 +01:00
  • 78a8c71993 Re-added support for parsing and handling SSLv2 Client Hello messages Paul Bakker 2013-03-06 17:01:52 +01:00
  • 37286a573b Fixed net_bind() for specified IP addresses on little endian systems Paul Bakker 2013-03-06 16:55:11 +01:00
  • 926c8e49fe Fixed possible NULL pointer exception in ssl_get_ciphersuite() Paul Bakker 2013-03-06 10:23:34 +01:00
  • 8804f69d46 Removed timing differences due to bad padding from RSA decrypt for PKCS#1 v1.5 operations Paul Bakker 2013-02-28 18:06:26 +01:00
  • a43231c5a5 Added support for custom labels when using rsa_rsaes_oaep_encrypt() or rsa_rsaes_oaep_decrypt() Paul Bakker 2013-02-28 17:33:49 +01:00
  • b386913f8b Split up the RSA PKCS#1 encrypt, decrypt, sign and verify functions Paul Bakker 2013-02-28 17:21:01 +01:00
  • e3e4a59622 Added bugfix line for previous fixes for MS Visual Studio Paul Bakker 2013-02-28 10:20:53 +01:00
  • 8ea31ff3b5 Added missing typedef for INT64 Paul Bakker 2013-02-27 15:02:50 +01:00
  • 9f2018ea28 Fixed typo in _MSC_VER (double underscore at the start) Paul Bakker 2013-02-27 15:01:34 +01:00
  • 8ddb645ad3 Added conversion to int for a t_uint value to prevent compiler warnings Paul Bakker 2013-02-27 14:56:33 +01:00
  • 3d2dc0f8e5 Corrected GCM counter incrementation to use only 32-bits instead of 128-bits Paul Bakker 2013-02-27 14:52:37 +01:00