Commit Graph

  • 8eafe1525d Merge branch 'mbedtls-2.28-restricted' into backport_mac_buffer_protection tom-daubney-arm 2024-02-22 15:28:49 +00:00
  • 5cd611d144 Merge branch 'development-restricted' into mac_buffer_protection tom-daubney-arm 2024-02-22 15:26:06 +00:00
  • 673461c389 Improve validation in mpi_exp_mod_min_RR Gilles Peskine 2024-02-21 16:03:04 +01:00
  • fdab786852 Use TEST_EQUAL instead of TEST_ASSERT in new code Janos Follath 2024-02-22 15:19:13 +00:00
  • 1b91500dd6 add changelog Valerio Setti 2024-02-22 14:52:36 +01:00
  • 2a20b8c5ed pk: fix documentation for mbedtls_pk_context structure Valerio Setti 2024-02-22 14:46:33 +01:00
  • 50122b6e40 pk/test_suite_pk: fix guards Valerio Setti 2024-02-22 14:45:02 +01:00
  • dd9cbf99c2 Benchmark only one side of ECDH, both static and ephemeral Manuel Pégourié-Gonnard 2024-02-22 12:14:28 +01:00
  • dcb09ca6df tests: write early data: Improve get_early_data_status testing Ronald Cron 2024-02-22 12:12:45 +01:00
  • f19989da31 tls13: Improve sanity check in get_early_data_status Ronald Cron 2024-02-22 12:05:42 +01:00
  • 74589ba31c ssl_context_info: explicitly note accesses to private fields Gilles Peskine 2024-02-22 12:12:01 +01:00
  • 09cf4f2e78 Decouple if statement in psa_raw_key_agreement exit. Thomas Daubney 2024-02-22 11:08:22 +00:00
  • 72da8b3521 Don't authorize private access to fields where not actually needed Gilles Peskine 2024-02-22 12:07:29 +01:00
  • abf0be392a fuzz_dtlsserver: explicitly note the one access to a private field Gilles Peskine 2024-02-22 12:07:09 +01:00
  • 5390acada9 Decouple if statements in psa_raw_key_agreement exit. Thomas Daubney 2024-02-22 11:06:04 +00:00
  • d5f68976e8 fuzz_pubkey, fuzz_privkey: no real need to access private fields Gilles Peskine 2024-02-22 12:05:35 +01:00
  • 8f1de7e029 tls13: Improve documentation Ronald Cron 2024-02-22 12:02:39 +01:00
  • 7d158f41ca tests: read early data: Use write API to send early data Ronald Cron 2024-02-22 11:39:39 +01:00
  • 110303fbe5 tests: read early data: Add no early data indication sent scenario Ronald Cron 2024-02-22 11:35:21 +01:00
  • e110a4c900 Make psa_open_key threadsafe Ryan Everett 2024-02-22 10:43:03 +00:00
  • 86d288c0d4 tests: ssl: Rename tls13_early_data to tls13_read_early_data Ronald Cron 2024-02-22 11:28:29 +01:00
  • 9af70e51c1 Make multi-part AEAD operations thread-safe Ryan Everett 2024-02-14 18:38:56 +00:00
  • bbedfcec2e Make multi-part PAKE operations thread-safe Ryan Everett 2024-02-14 18:22:09 +00:00
  • 5ac6fa7aae Make multi-part key derivation operations thread-safe Ryan Everett 2024-02-14 17:11:36 +00:00
  • c0053cc499 Make multi-part cipher operations thread-safe Ryan Everett 2024-02-14 16:27:13 +00:00
  • 291267f486 Make restartable signature verifications thread-safe Ryan Everett 2024-02-14 15:59:15 +00:00
  • dcc03d552d Make restartable signature operations thread-safe Ryan Everett 2024-02-14 15:44:13 +00:00
  • fb9857ff9e Make multi-part MAC operations thread-safe Ryan Everett 2024-02-14 12:16:41 +00:00
  • 7a3059ac92 Benchmark: not using private fields anymore Gilles Peskine 2024-02-22 10:53:31 +01:00
  • 984352d6f1 Benchmark: remove the legacy-context ECDH block Gilles Peskine 2024-02-22 10:50:12 +01:00
  • 9f2c3c09df tls13: cli: Add mbedtls_ssl_get_early_data_status() API Ronald Cron 2024-02-21 17:03:22 +01:00
  • e21c2d2ce1 tls13: cli: Add missing MBEDTLS_SSL_EARLY_DATA guards Ronald Cron 2024-02-21 16:37:16 +01:00
  • 0004600702 tests: write early data: Inverse loop over state logic Ronald Cron 2024-02-21 16:00:12 +01:00
  • bf5e909467 tests: write early data: Check we can complete handshake after writing Ronald Cron 2024-02-21 15:31:36 +01:00
  • 0aead12706 ssl_client2: Improve loop writing early data Ronald Cron 2024-02-21 14:46:56 +01:00
  • b4fd47e897 ssl_client2: Default to library default for early data enablement Ronald Cron 2024-02-21 14:37:25 +01:00
  • d4069247b8 Improve comments/documentation Ronald Cron 2024-02-21 13:45:52 +01:00
  • 36e6bd6926 Merge pull request #8811 from gilles-peskine-arm/pk_import_into_psa-backports-2.28 Gilles Peskine 2024-02-21 15:45:21 +00:00
  • 0aab69d2eb Merge pull request #8807 from gilles-peskine-arm/pk_import_into_psa-implement_import Gilles Peskine 2024-02-21 15:45:17 +00:00
  • 2ea8d8fa3c Revise how output allocation is checked Thomas Daubney 2024-02-21 15:16:01 +00:00
  • 0576a6a174 Revise how output allocation is checked Thomas Daubney 2024-02-21 15:15:00 +00:00
  • d237190f04 Merge pull request #8773 from Ryan-Everett-arm/threadsafe-key-locking Paul Elliott 2024-02-21 13:55:12 +00:00
  • 6f430b2923 tests: fix some guards Valerio Setti 2024-02-21 14:09:02 +01:00
  • a123e7c415 test_suite_pk: add PSA_WANT_KEY_TYPE_[RSA|ECC]_KEY_PAIR_GENERATE dependency to pk_can_do_ext() Valerio Setti 2024-02-20 18:25:52 +01:00
  • 17033e373c test_suite_pk: replace USE_PSA with CRYPTO_CLIENT in tests with opaque keys Valerio Setti 2024-02-20 16:47:31 +01:00
  • 49221900b0 tls13: write_early_data: Add endpoint check Ronald Cron 2024-02-21 13:39:14 +01:00
  • 0736df33ac Check for output allocation before randomising Thomas Daubney 2024-02-21 12:28:20 +00:00
  • 89d8c2a1b4 Rework check for failed output allocation Thomas Daubney 2024-02-21 11:16:16 +00:00
  • 0902572aa4 Fix style Janos Follath 2024-02-21 11:50:25 +00:00
  • 6bd5cae3e6 Fix MBEDTLS_MPI_WINDOW_SIZE documentation Janos Follath 2024-02-21 11:27:31 +00:00
  • 86258f51b5 Exp mod: handle negative zero Janos Follath 2024-02-21 11:25:41 +00:00
  • aec1a868fe Use mbedtls_ct_condition_t in mpi_core_check_zero Janos Follath 2024-02-21 11:24:20 +00:00
  • dd49c739f0 Merge remote-tracking branch 'development' into pk_import_into_psa-implement_import Gilles Peskine 2024-02-21 12:10:40 +01:00
  • 8ed3c60504 Remove unnecessary ChangeLog entry David Horstmann 2024-02-21 10:36:54 +00:00
  • 946491360b Unrestore mbedtls_x509_string_to_names() David Horstmann 2024-02-21 10:31:39 +00:00
  • 0ecb5fd6f5 Merge pull request #8574 from ronald-cron-arm/ssl-tickets Manuel Pégourié-Gonnard 2024-02-21 09:38:46 +00:00
  • 424c2655b9 Exp mod: tidy up temporary storage allocation Janos Follath 2024-02-21 09:26:36 +00:00
  • 93cea578b9 Clarify which unregister operation needs to be used Ryan Everett 2024-02-20 18:01:29 +00:00
  • 23605d19d9 More renaming: method -> production parameters Gilles Peskine 2024-02-20 17:10:56 +01:00
  • 0ce9589e36 Merge pull request #1133 from davidhorstmann-arm/copying-aead-2.28 David Horstmann 2024-02-20 16:07:36 +00:00
  • cf3457ef26 Merge pull request #1132 from davidhorstmann-arm/copying-aead David Horstmann 2024-02-20 16:07:30 +00:00
  • 9190522b08 pk: guard mbedtls_pk_wrap_as_opaque() with CRYPTO_CLIENT instead of USE_PSA Valerio Setti 2024-02-20 16:44:28 +01:00
  • aab7f7f517 project: set version Bill Roberts 2024-02-20 08:16:57 -06:00
  • 092ce51c47 Rename "key generation method" to "key production parameters" Gilles Peskine 2024-02-20 12:31:24 +01:00
  • 0512d178e0 Exp mod: Make sure RR has enough limbs Janos Follath 2024-02-20 14:30:46 +00:00
  • b15e54ec26 test_suite_pk: replace USE_PSA with CRYPTO_C in tests using mbedtls_pk_setup_opaque() Valerio Setti 2024-02-20 15:23:38 +01:00
  • fc3f980f0f Merge pull request #8826 from valeriosetti/issue8824 Manuel Pégourié-Gonnard 2024-02-20 14:08:41 +00:00
  • 0f8d695c25 psa_util/pk_wrap: remove redundant guards and optimize Valerio Setti 2024-02-20 12:04:51 +01:00
  • 7c5547ccbd Add stub functions so that we can run tests with MBEDTLS_PSA_CRYPTO_CLIENT Gilles Peskine 2024-02-19 20:29:24 +01:00
  • a7f651cf16 Merge pull request #8804 from valeriosetti/issue8799 Manuel Pégourié-Gonnard 2024-02-20 11:58:52 +00:00
  • 26d1c43821 Check output allocated before randomising Thomas Daubney 2024-02-20 11:26:55 +00:00
  • d997e7ad9a Check output allocated before randomising Thomas Daubney 2024-02-20 11:24:07 +00:00
  • e7a7013910 Remove initialization function for variable-length struct Gilles Peskine 2024-02-20 11:49:54 +01:00
  • a26a1b7acd Switch back to non-PSA paths in PK when MBEDTLS_USE_PSA_CRYPTO is off Gilles Peskine 2024-02-19 20:27:36 +01:00
  • dc5597b3dd Fix copypasta Gilles Peskine 2024-02-20 11:42:18 +01:00
  • 3e6ac1b5d1 fix changelog Valerio Setti 2024-02-20 11:28:00 +01:00
  • 56457b9eac add changelog Valerio Setti 2024-02-20 10:47:47 +01:00
  • 7e1596d24c rsa: remove leftovers from mbedtls_rsa_parse_[pub]key() Valerio Setti 2024-02-20 10:23:49 +01:00
  • 02f30230c4 pem: zeroize the entire buffer in case of errors in mbedtls_pem_read_buffer() Valerio Setti 2024-02-20 10:22:36 +01:00
  • 7986c77bbd pk: guard mbedtls_pk_setup_opaque() with CRYPTO_CLIENT instead of USE_PSA Valerio Setti 2024-02-19 12:03:59 +01:00
  • 9fb53a9e26 Merge pull request #8744 from Ryan-Everett-arm/threadsafe-key-loading Janos Follath 2024-02-19 16:30:36 +00:00
  • 028a38b7cb Merge pull request #8661 from BensonLiou/use_init_api Janos Follath 2024-02-19 15:49:34 +00:00
  • 53e5adfca4 Merge pull request #8841 from BensonLiou/use_init_api-228 Janos Follath 2024-02-19 15:49:29 +00:00
  • 80bc5d6aad test_suite_pk: fix data in some RSA related test cases Valerio Setti 2024-02-19 16:13:47 +01:00
  • 85e568c76d pk: fix documentation for RSA sign/verify and encrypt/decrypt Valerio Setti 2024-02-19 15:45:00 +01:00
  • f966a97806 test_suite_pk: remove leftover comment Valerio Setti 2024-02-19 15:30:27 +01:00
  • e88a1c5b85 pem: fix return values in pem_check_pkcs_padding() Valerio Setti 2024-02-19 15:08:49 +01:00
  • e10674d547 test_suite_pem: fix comment in test case Valerio Setti 2024-02-19 14:52:24 +01:00
  • 7511d4aed7 ECP write/export key: document that these functions don't detect unset data Gilles Peskine 2024-02-19 13:56:39 +01:00
  • 1c7ff7ea53 mbedtls_ecp_write_key: document and test smaller output buffer Gilles Peskine 2024-02-19 13:49:45 +01:00
  • a395bdd066 mbedtls_ecp_write_key: document and test larger output buffer Gilles Peskine 2024-02-19 13:30:31 +01:00
  • 5bb04e03ac mbedtls_ecp_write_key: no FEATURE_UNAVAILABLE error Gilles Peskine 2024-02-19 13:24:41 +01:00
  • 518b5b60c6 Improve style Janos Follath 2024-02-19 11:29:34 +00:00
  • 467a5499a5 Exp mod: clarify preprocessing Janos Follath 2024-02-19 11:27:38 +00:00
  • 8de8cc0bd8 Add ChangeLog entry for restoring X509 functions David Horstmann 2024-02-19 11:21:37 +00:00
  • 583f047c9f Exp mod: simplify 0 exponent handling Janos Follath 2024-02-19 11:16:44 +00:00
  • 3f031f7c66 all.sh: improve components testing CRYPTO_CLIENT Valerio Setti 2024-02-19 12:00:55 +01:00
  • e5d9a0f3bb all.sh: fix and add test component for CRYPTO_CLIENT Valerio Setti 2024-02-19 09:30:50 +01:00
  • 762f9f9cbb Restore X509 functions erroneously made private David Horstmann 2024-02-19 11:07:50 +00:00
  • 576087d836 Exp mod: use assignment instead memcpy Janos Follath 2024-02-19 11:05:01 +00:00