Janos Follath 441d6f9833 Remove MBEDTLS_SSL_AEAD_RANDOM_IV feature ...

In a USENIX WOOT '16 paper the authors warn about a security risk
of random Initialisation Vectors (IV) repeating values.

The MBEDTLS_SSL_AEAD_RANDOM_IV feature is affected by this risk and
it isn't compliant with RFC5116. Furthermore, strictly speaking it
is a different cipher suite from the TLS (RFC5246) point of view.

Removing the MBEDTLS_SSL_AEAD_RANDOM_IV feature to resolve the above
problems.

Hanno Böck, Aaron Zauner, Sean Devlin, Juraj Somorovsky and Philipp
Jovanovic, "Nonce-Disrespecting Adversaries: Practical Forgery Attacks
on GCM in TLS", USENIX WOOT '16

2016-10-13 14:14:16 +01:00

..

aes.h

Rename website and repository

2015-03-06 13:17:10 +00:00

aesni.h

Add missing extern "C" guard in aesni.h

2015-03-10 16:12:29 +00:00

arc4.h

Rename website and repository

2015-03-06 13:17:10 +00:00

asn1.h

Rename website and repository

2015-03-06 13:17:10 +00:00

asn1write.h

Rename website and repository

2015-03-06 13:17:10 +00:00

base64.h

Fix references to non-standard SIZE_T_MAX

2015-10-05 15:29:48 +01:00

bignum.h

Fix for MPI divide on MSVC

2016-01-03 22:39:18 +00:00

blowfish.h

Rename website and repository

2015-03-06 13:17:10 +00:00

bn_mul.h

Avoid build errors with -O0 due to assembly

2016-01-08 15:30:03 +01:00

camellia.h

Rename website and repository

2015-03-06 13:17:10 +00:00

ccm.h

Rename website and repository

2015-03-06 13:17:10 +00:00

certs.h

Rename website and repository

2015-03-06 13:17:10 +00:00

check_config.h

Add warning/errors about deprecated config items

2015-07-15 11:18:40 +02:00

cipher_wrap.h

Rename website and repository

2015-03-06 13:17:10 +00:00

cipher.h

Fix spurious #endif from previous cherry-pick

2015-10-05 14:57:01 +01:00

compat-1.2.h

Fix macroization of inline in C++

2015-10-05 14:28:17 +01:00

config.h

Remove MBEDTLS_SSL_AEAD_RANDOM_IV feature

2016-10-13 14:14:16 +01:00

ctr_drbg.h

Rename website and repository

2015-03-06 13:17:10 +00:00

debug.h

Revert "Avoid formatting debug message uselessly"

2015-08-10 17:36:47 +02:00

des.h

Rename website and repository

2015-03-06 13:17:10 +00:00

dhm.h

Rename website and repository

2015-03-06 13:17:10 +00:00

ecdh.h

Rename website and repository

2015-03-06 13:17:10 +00:00

ecdsa.h

Fix ifdef issue

2015-04-02 14:16:45 +01:00

ecp.h

Typos and doc additions

2015-05-11 10:44:11 +01:00

entropy_poll.h

Rename website and repository

2015-03-06 13:17:10 +00:00

entropy.h

Rename website and repository

2015-03-06 13:17:10 +00:00

error.h

Rename website and repository

2015-03-06 13:17:10 +00:00

gcm.h

Fix documentation for mbedtls_gcm_finish()

2016-10-13 12:54:32 +01:00

havege.h

Rename website and repository

2015-03-06 13:17:10 +00:00

hmac_drbg.h

Rename website and repository

2015-03-06 13:17:10 +00:00

md2.h

Rename website and repository

2015-03-06 13:17:10 +00:00

md4.h

Rename website and repository

2015-03-06 13:17:10 +00:00

md5.h

Rename website and repository

2015-03-06 13:17:10 +00:00

md_wrap.h

Rename website and repository

2015-03-06 13:17:10 +00:00

md.h

Fix macroization of inline in C++

2015-10-05 14:28:17 +01:00

memory_buffer_alloc.h

Rename website and repository

2015-03-06 13:17:10 +00:00

memory.h

Add POLARSSL_DEPRECATED_{WARNING,REMOVED}

2015-03-23 14:11:11 +01:00

net.h

Rename website and repository

2015-03-06 13:17:10 +00:00

oid.h

Typos and doc additions

2015-05-11 10:44:11 +01:00

openssl.h

Fix macro name from wrong branch

2015-04-15 11:21:24 +02:00

padlock.h

Disable padlock asm with ASan

2015-08-10 17:44:53 +02:00

pbkdf2.h

Add POLARSSL_DEPRECATED_{WARNING,REMOVED}

2015-03-23 14:11:11 +01:00

pem.h

Rename website and repository

2015-03-06 13:17:10 +00:00

pk_wrap.h

Rename website and repository

2015-03-06 13:17:10 +00:00

pk.h

Rename website and repository

2015-03-06 13:17:10 +00:00

pkcs5.h

Rename website and repository

2015-03-06 13:17:10 +00:00

pkcs11.h

Fix spurious #endif from previous cherry-pick

2015-10-05 14:57:01 +01:00

pkcs12.h

Rename website and repository

2015-03-06 13:17:10 +00:00

platform.h

Fix compile errors with NO_STD_FUNCTIONS

2015-06-03 10:20:33 +01:00

ripemd160.h

Rename website and repository

2015-03-06 13:17:10 +00:00

rsa.h

Document thread-safety of the RSA functions

2015-07-03 17:51:10 +02:00

sha1.h

Rename website and repository

2015-03-06 13:17:10 +00:00

sha256.h

Rename website and repository

2015-03-06 13:17:10 +00:00

sha512.h

Rename website and repository

2015-03-06 13:17:10 +00:00

ssl_cache.h

Fix typo in documenation

2015-10-20 09:38:10 +02:00

ssl_ciphersuites.h

ECHDE-PSK does not use a certificate

2015-10-27 15:12:39 +01:00

ssl.h

Merge branch 'mbedtls-1.3' into mbedtls-1.3-restricted

2015-10-05 17:06:24 +01:00

threading.h

Rename website and repository

2015-03-06 13:17:10 +00:00

timing.h

Rename website and repository

2015-03-06 13:17:10 +00:00

version.h

Changed library version number to 1.3.17

2016-06-27 19:37:31 +01:00

x509_crl.h

Rename website and repository

2015-03-06 13:17:10 +00:00

x509_crt.h

Add x509_crt_verify_info()

2015-04-17 17:24:25 +02:00

x509_csr.h

Rename website and repository

2015-03-06 13:17:10 +00:00

x509.h

Add x509_crt_verify_info()

2015-04-17 17:24:25 +02:00

xtea.h

Rename website and repository

2015-03-06 13:17:10 +00:00