Janos Follath e8894974cb Reintroduce ssl_parse_signature_algorithm ...

The logic was easier to follow before 693a47a, which removed the
ssl_parse_signature_algorithm function and introduced the bug being
fixed in this PR.

When validating multiple conditions, it's easier to read, easier to
debug and, as we can see, easier to get right if you validate them
separately.

Signed-off-by: Janos Follath <janos.follath@arm.com>

2026-03-16 12:27:21 +00:00

..

.gitignore

Register generate_config_files.py outputs as generated files

2025-09-19 13:36:24 +02:00

CMakeLists.txt

cmake: Introduce TF_PSA_CRYPTO_PRIVATE_INCLUDE_DIRS

2026-03-09 08:28:51 +01:00

debug_internal.h

test_suite_debug: test the printf used by debug.c

2026-02-26 20:56:03 +01:00

debug.c

Temporarily force standard *printf functions on MingW

2026-02-26 21:34:32 +01:00

Makefile

Use the crypto makefile helpers in tf-psa-crypto

2026-01-08 14:57:50 +01:00

mbedtls_check_config.h

Merge pull request #10607 from gilles-peskine-arm/timing-use-mstime

2026-02-26 14:38:50 +00:00

mbedtls_common.h

Make sure we declare TF-PSA-Crypto platform requirements before including system headers

2026-03-04 11:54:35 +01:00

mbedtls_config.c

Create a mbedtls_common.h for the project

2026-02-26 19:54:15 +00:00

mbedtls_platform_requirements.h

Tell MSVC to allow non-s functions where needed

2026-03-04 11:32:18 +01:00

mbedtls_utils.h

library: ssl: adjust return type of mbedtls_psa_alg_from_pk_sigalg()

2025-12-09 16:15:48 +01:00

mps_common.h

Fix some non-standard headers

2023-11-03 12:24:58 +00:00

mps_error.h

Fix some non-standard headers

2023-11-03 12:24:58 +00:00

mps_reader.c

Include ssl_misc.h for additional SSL helper files

2024-10-11 12:21:30 +01:00

mps_reader.h

Fix some non-standard headers

2023-11-03 12:24:58 +00:00

mps_trace.c

Include ssl_misc.h for additional SSL helper files

2024-10-11 12:21:30 +01:00

mps_trace.h

Include ssl_misc.h for additional SSL helper files

2024-10-11 12:21:30 +01:00

net_sockets.c

Start from a clean baseline for C11 ext1 and POSIX features

2026-03-04 11:32:18 +01:00

pkcs7.c

Change the call to mbedtls_pk_verify_ext in pkcs7 to have a variable input cert->sig_pk

2025-10-30 13:37:09 +00:00

ssl_cache.c

Update includes for each library file

2024-10-09 11:18:50 +01:00

ssl_ciphersuites_internal.h

ssl: rm useless private includes in internal headers

2025-12-01 10:24:41 +01:00

ssl_ciphersuites.c

Change the return type of mbedtls_ssl_get_ciphersuite_sig_pk_alg to mbedtls_pk_sigalg_t

2025-10-28 07:58:37 +00:00

ssl_client.c

Tidy up debug of non ext functions

2025-10-28 07:58:37 +00:00

ssl_client.h

Update includes for each library file

2024-10-09 11:18:50 +01:00

ssl_cookie.c

remove RNG parameters from SSL API's

2025-03-10 13:24:31 +00:00

ssl_debug_helpers.h

ssl_tls.c: Rename and expand ssl_tls13_get_hs_msg_name

2026-02-18 14:21:48 +01:00

ssl_misc.h

Create a mbedtls_common.h for the project

2026-02-26 19:54:15 +00:00

ssl_msg.c

Restore seq number check of post-handshake ClientHello msg

2026-03-10 10:12:55 +01:00

ssl_ticket.c

removed psa_crypto_init from library as this is supposed to be called by the application

2025-03-10 13:46:14 +00:00

ssl_tls12_client.c

Reintroduce ssl_parse_signature_algorithm

2026-03-16 12:27:21 +00:00

ssl_tls12_server.c

ssl_tls12_server.c: Move back the digest update

2026-03-10 08:25:21 +01:00

ssl_tls13_client.c

mbedtls_ssl_conf_alpn_protocols: declare list elements as const

2025-05-28 20:23:22 +02:00

ssl_tls13_generic.c

library: ssl: replace mbedtls_pk_can_do() with mbedtls_pk_can_do_psa()

2025-12-04 16:28:44 +01:00

ssl_tls13_invasive.h

Update includes for each library file

2024-10-09 11:18:50 +01:00

ssl_tls13_keys.c

Replace __attribute__((nonstring)) with macro MBEDTLS_ATTRIBUTE_UNTERMINATED_STRING

2025-06-20 11:48:16 +01:00

ssl_tls13_keys.h

Replace __attribute__((nonstring)) with macro MBEDTLS_ATTRIBUTE_UNTERMINATED_STRING

2025-06-20 11:48:16 +01:00

ssl_tls13_server.c

tls13: Commit to session resume only when we actually do it

2026-02-26 15:16:51 +01:00

ssl_tls.c

ssl_tls.c: Allow client hello fragmentation

2026-02-23 12:12:36 +01:00

timing.c

Fix a build error with MSVC

2026-02-19 16:53:52 +01:00

version.c

Simplify runtime version info string methods

2025-08-18 11:39:45 +02:00

x509_create.c

Fix null pointer dereference in string to names

2026-02-26 13:34:01 +00:00

x509_crl.c

Unfortunately, we had two files named oid.h - one in the main repo, and one in the tf-psa-crypto repo, and these files included the mbedtls one, so I restored the header include

2025-08-29 07:05:40 +02:00

x509_crt.c

inet_pton: simplify IPv4 walkback loop

2026-02-12 08:11:37 +00:00

x509_csr.c

Change function name from mbedtls_pk_key_type_to_string to mbedtls_x509_pk_type_as_string

2026-01-12 08:19:07 +00:00

x509_internal.h

Create a mbedtls_common.h for the project

2026-02-26 19:54:15 +00:00

x509_oid.c

Unfortunately, we had two files named oid.h - one in the main repo, and one in the tf-psa-crypto repo, and these files included the mbedtls one, so I restored the header include

2025-08-29 07:05:40 +02:00

x509_oid.h

x509: rm useless private includes in internal headers

2025-12-01 10:24:50 +01:00

x509.c

Add improvements to code comments and docs

2026-01-12 08:19:07 +00:00

x509write_crt.c

x509: replace usage of mbedtls_pk_can_do() with mbedtls_pk_get_key_type()

2025-12-04 16:28:44 +01:00

x509write_csr.c

x509: replace usage of mbedtls_pk_can_do() with mbedtls_pk_get_key_type()

2025-12-04 16:28:44 +01:00

x509write.c

Remove two more useless internal includes

2025-12-02 12:06:39 +01:00