Commit Graph

  • b6a96195fb programs_dh_client/server: Updated programs to use mbedtls_rsa_get_len() Minos Galanakis 2024-01-12 14:34:14 +00:00
  • f4dfd1c8a5 programs/dh_client/server: Added entropy source to mbedtls_rsa_pkcs1_sign() Minos Galanakis 2024-01-12 16:06:15 +00:00
  • a184fd0516 programs/dh_client/server: Replaced mbedtls_sha1 with mbedtls_sha256 Minos Galanakis 2024-01-11 10:05:00 +00:00
  • d929106f36 ssl_ciphersuites: move internal functions declarations to a private header Valerio Setti 2024-01-17 09:48:06 +01:00
  • 4d4891e18a Merge pull request #8666 from valeriosetti/issue8340 Gilles Peskine 2024-01-18 13:58:55 +00:00
  • c7e208d2fa Merge pull request #8662 from LocutusOfBorg/mbedtls-2.28 Tom Cosgrove 2024-01-18 13:52:02 +00:00
  • d7768235da Update library/timing.c Gianfranco Costamagna 2024-01-18 12:08:21 +01:00
  • fb02d57de7 Document the thread safety of the primitive key slot functions Ryan Everett 2024-01-08 11:13:03 +00:00
  • 0e3b677cf4 Support PSA_ERROR_SERVICE_FAILURE Ryan Everett 2024-01-08 11:11:39 +00:00
  • 846889355c Initialize and free the key slot mutex Ryan Everett 2024-01-08 11:10:03 +00:00
  • b1f96c0354 Merge pull request #7815 from gilles-peskine-arm/ecp-export-partial Gilles Peskine 2024-01-18 10:29:05 +00:00
  • c9077cccd3 Merge pull request #8664 from valeriosetti/issue7764 Gilles Peskine 2024-01-18 10:28:55 +00:00
  • 491f7e5ac3 Define key_slot_mutex Ryan Everett 2024-01-08 11:04:21 +00:00
  • 18371ee08f generate_tls13_compat_tests: add DH group dependency when FFDH is used Valerio Setti 2024-01-18 09:49:39 +01:00
  • 05754d8e85 ssl-opt: add DH groups requirements in test cases using FFDH Valerio Setti 2024-01-18 09:47:00 +01:00
  • 4f34b155f5 test_driver_key_management: keep mbedtls_test_opaque_wrap_key() private Valerio Setti 2024-01-18 08:44:13 +01:00
  • 43ff242a8b changelog: fix typo Valerio Setti 2024-01-18 08:42:38 +01:00
  • fb133513d6 Merge pull request #8705 from daverodgman/ctr-perf Dave Rodgman 2024-01-17 20:25:41 +00:00
  • 2728267ec4 Merge pull request #8672 from Ryan-Everett-arm/implement-new-key-slot-states Paul Elliott 2024-01-17 17:50:04 +00:00
  • e7bfbc27bf Add underflow check to UNPOISON counter decrement David Horstmann 2024-01-17 15:27:50 +00:00
  • 1b421b1005 Separate memory poisoning tests from generic ASan David Horstmann 2024-01-17 14:53:08 +00:00
  • 6de5828288 Change memory poisoning flag to a count David Horstmann 2024-01-17 14:23:20 +00:00
  • d3efb92922 Add underflow check to UNPOISON counter decrement David Horstmann 2024-01-17 15:27:50 +00:00
  • 5c745fa7da Pacify check_files Dave Rodgman 2024-01-17 09:59:10 +00:00
  • 5f8e2a2b5f Spelling fix Dave Rodgman 2024-01-16 17:33:34 +00:00
  • ad4b705863 Use quiet make wrappers from all.sh Dave Rodgman 2024-01-16 17:33:27 +00:00
  • 3e2c61dca2 Create quiet wrappers for make and cmake Dave Rodgman 2024-01-04 16:20:20 +00:00
  • 78aa0bc1d9 all.sh: fix tests with accelerated FFDH Valerio Setti 2024-01-17 15:53:46 +01:00
  • 1161b44981 crypto_config_test_driver_extension: support accelaration of DH groups Valerio Setti 2024-01-17 15:53:11 +01:00
  • 48a847afb7 tests: add guards for DH groups Valerio Setti 2024-01-17 15:22:47 +01:00
  • 6bed64ec75 all.sh: add new component with only DH 2048 bits. Valerio Setti 2024-01-17 15:21:44 +01:00
  • 504a10254c psa_crypto: do not validate DH groups which are not enabled Valerio Setti 2024-01-17 15:19:30 +01:00
  • e8683ce9ef ssl_test_lib: add guards for enabled DH groups Valerio Setti 2024-01-17 12:34:06 +01:00
  • ecaf7c5690 ssl_tls: add guards for enabled DH key types Valerio Setti 2024-01-17 12:30:30 +01:00
  • de50413009 crypto_sizes: adjust PSA_VENDOR_FFDH_MAX_KEY_BITS based on the supported groups Valerio Setti 2024-01-17 12:21:55 +01:00
  • 4ed8daa929 psa_crypto_ffdh: add guards for enabled domain parameters Valerio Setti 2024-01-17 12:16:14 +01:00
  • fecef8bc8e config_adjust: fix adjustments between legacy and PSA Valerio Setti 2024-01-17 12:06:40 +01:00
  • 9de6edd462 Separate memory poisoning tests from generic ASan David Horstmann 2024-01-17 14:53:08 +00:00
  • fad038c501 Change memory poisoning flag to a count David Horstmann 2024-01-17 14:23:20 +00:00
  • 4a0ba80bdb Clarify psa_destroy_key documentation Ryan Everett 2024-01-17 14:12:33 +00:00
  • c2ab398d01 Request C11 in CMake (but only for tests) David Horstmann 2024-01-17 12:25:19 +00:00
  • dd77343381 Open question for ECDSA signature that can be resolved during implementation Gilles Peskine 2024-01-17 14:33:32 +01:00
  • d5b04a0c63 Add a usage parameter to mbedtls_pk_get_psa_attributes Gilles Peskine 2024-01-17 14:29:21 +01:00
  • 702d9f65f6 Resolve several open questions as nothing special to do Gilles Peskine 2024-01-17 12:58:25 +01:00
  • 38a2b7a6a3 Extend psa_wipe_key_slot documentation Ryan Everett 2024-01-17 11:45:44 +00:00
  • 7ed542e0f1 Implement delayed deletion in psa_destroy_key and some cleanup Ryan Everett 2024-01-17 11:39:09 +00:00
  • 42a025dc9c Reference filed issues Gilles Peskine 2024-01-17 12:35:15 +01:00
  • 885248c8ee Add header guards Dave Rodgman 2024-01-17 11:06:31 +00:00
  • bbff303fe1 crypto_config: define feature macros for DH keys Valerio Setti 2024-01-17 11:47:44 +01:00
  • 5a64c42693 Reference ongoing work Gilles Peskine 2024-01-17 10:09:16 +01:00
  • 89ca6c7e72 typo Gilles Peskine 2024-01-17 10:08:56 +01:00
  • 32294044e1 Generalize mbedtls_pk_setup_opaque beyond MBEDTLS_USE_PSA_CRYPTO Gilles Peskine 2024-01-17 10:07:55 +01:00
  • 584dc80d96 add changelog Valerio Setti 2024-01-16 16:43:07 +01:00
  • 1325942c28 Merge pull request #8707 from bensze01/new_redirect_format Bence Szépkúti 2024-01-16 20:22:08 +00:00
  • 9039ba572b Fix test dependencies Dave Rodgman 2024-01-16 18:38:55 +00:00
  • 7e5b7f91ca Fix error in ctr_drbg Dave Rodgman 2024-01-16 17:28:25 +00:00
  • b7778b2388 Fix ASAN error in test Dave Rodgman 2024-01-16 16:27:34 +00:00
  • 333ca8fdfc Migrate to new RTD redirect format Bence Szépkúti 2024-01-16 17:05:19 +01:00
  • 9f97566c04 Add Changelog Dave Rodgman 2024-01-14 23:55:20 +00:00
  • 24ad1b59e8 Add NIST AES-CTR test vectors Dave Rodgman 2024-01-14 23:52:27 +00:00
  • 4cc6fb9039 add test for multipart AES-CTR Dave Rodgman 2024-01-14 18:13:05 +00:00
  • 265415afa1 Merge pull request #1146 from yanesca/update-Marvin-changelog-backport Gilles Peskine 2024-01-16 11:19:27 +01:00
  • afd8154b1e Merge pull request #1139 from yanesca/update-Marvin-changelog Gilles Peskine 2024-01-16 11:19:20 +01:00
  • 86bbb13779 Update Marvin fix Changelog entry Janos Follath 2024-01-11 14:24:02 +00:00
  • 89b50a7cb4 Fix parsing of C line comments Gilles Peskine 2024-01-08 21:05:42 +01:00
  • 4411c9c1f8 Disable PSA wrappers psa_collect_statuses builds Gilles Peskine 2024-01-04 20:51:38 +01:00
  • 88385c2f74 PSA wrappers: don't poison buffers when buffer copying is disabled Gilles Peskine 2024-01-04 20:33:29 +01:00
  • a1871f318b Add review exception warning Gilles Peskine 2024-01-04 17:28:59 +01:00
  • 8e7960b685 Remove the manually written poisoning wrapper Gilles Peskine 2024-01-04 17:11:54 +01:00
  • 90d14d7fc2 Update generated PSA wrappers Gilles Peskine 2024-01-04 16:59:28 +01:00
  • 4adacac142 Generated PSA wrappers: poison/unpoison buffer parameters Gilles Peskine 2023-12-06 19:32:52 +01:00
  • 2b106dec8b Enable generated PSA wrappers Gilles Peskine 2024-01-04 16:44:16 +01:00
  • e00150df4a Declare the outputs from generate_psa_wrappers.py as generated files Gilles Peskine 2024-01-04 16:46:00 +01:00
  • 6e4332cc24 Commit generated PSA wrappers Gilles Peskine 2024-01-04 16:42:40 +01:00
  • 5294bb347c PSA wrapper generator Gilles Peskine 2024-01-04 16:38:17 +01:00
  • f838eb2259 Guard the macro definition Gilles Peskine 2023-11-23 14:12:29 +01:00
  • d022093ea6 C function wrapper generator Gilles Peskine 2023-11-22 19:24:59 +01:00
  • 00ed38c25b Python module to parse function declarations from a header file Gilles Peskine 2023-11-22 19:24:31 +01:00
  • 4860a6c7ac test_suite_psa_crypto: revert known failing checks for [en|de]cryption with opaque keys Valerio Setti 2024-01-15 15:05:24 +01:00
  • 62b6f10f64 test_driver_asymmetric_encryption: implement opaque [en/de]cryption functions Valerio Setti 2024-01-15 15:03:17 +01:00
  • 66a827fc83 test_driver_key_management: make opaque [un]wrapping functions public Valerio Setti 2024-01-15 15:00:52 +01:00
  • 46697da5b3 Make gcm counter increment more efficient Dave Rodgman 2024-01-14 12:59:49 +00:00
  • 174eeff235 Save 14 bytes in CTR-DRBG Dave Rodgman 2024-01-13 16:43:18 +00:00
  • 591ff05384 Use optimised counter increment in AES-CTR and CTR-DRBG Dave Rodgman 2024-01-13 16:42:38 +00:00
  • ae730348e9 Add tests for mbedtls_ctr_increment_counter Dave Rodgman 2024-01-13 17:31:13 +00:00
  • b49cf1019d Introduce mbedtls_ctr_increment_counter Dave Rodgman 2024-01-13 16:40:58 +00:00
  • 1d32a57764 Revert change to psa_destroy_key documentation Ryan Everett 2024-01-15 11:27:58 +00:00
  • 709120a9ce Revert change to return behaviour in psa_reserve_free_key_slot Ryan Everett 2024-01-15 11:19:03 +00:00
  • dfe8bf86a8 Return CORRUPTION_DETECTED instead of BAD_SLOT when the slot's state is wrong Ryan Everett 2024-01-12 17:45:05 +00:00
  • 4755e6bda4 Relax psa_wipe_key_slot to allow states other than SLOT_PENDING_DELETION Ryan Everett 2024-01-12 16:35:59 +00:00
  • c4f984f2a5 Iterate in 16-byte chunks Dave Rodgman 2024-01-12 18:29:01 +00:00
  • 5bb454aace psa_crypto: allow asymmetric encryption/decryption also with opaque keys Valerio Setti 2024-01-15 10:43:16 +01:00
  • f202c2968b test_suite_psa_crypto: test asymmetric encryption/decryption also with opaque keys Valerio Setti 2024-01-15 10:42:37 +01:00
  • 40a4ab0e0c ssl_tls.c: Factorize save/load of endpoint and ciphersuite Ronald Cron 2024-01-15 10:21:30 +01:00
  • 3c0072b58e ssl_ticket.c: Base ticket age check on the ticket creation time Ronald Cron 2023-11-22 10:00:14 +01:00
  • c57f86e132 Add ticket creation time to TLS 1.2 session serialization Ronald Cron 2023-11-22 09:50:01 +01:00
  • d1c106c787 Define ticket creation time in TLS 1.2 case as well Ronald Cron 2023-11-22 09:14:02 +01:00
  • feb577a949 Fix TLS 1.2 session serialization on server side Ronald Cron 2023-11-23 12:34:43 +01:00
  • 7b1921ac57 Add endpoint in TLS 1.2 session serialization data Ronald Cron 2023-11-23 12:31:56 +01:00
  • 17ef8dfddb ssl_session: Define unconditionally the endpoint field Ronald Cron 2023-11-22 10:29:42 +01:00