TeamHepta/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-05-12 14:54:28 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
ead1766b5f910dd2a8d6368982b6539ed618634d
mbedtls/library
History
Gilles Peskine ead1766b5f Fix PBKDF2 with empty salt segment on platforms where malloc(0)=NULL 
"Fix PBKDF2 with empty salt on platforms where malloc(0)=NULL" took care of
making an empty salt work. But it didn't fix the case of an empty salt
segment followed by a non-empty salt segment, which still invoked memcpy
with a potentially null pointer as the source. This commit fixes that case,
and also simplifies the logic in the function a little.

Test data obtained with:
```
pip3 install cryptodome
python3 -c 'import sys; from Crypto.Hash import SHA256; from Crypto.Protocol.KDF import PBKDF2; cost = int(sys.argv[1], 0); salt = bytes.fromhex(sys.argv[2]); password = bytes.fromhex(sys.argv[3]); n = int(sys.argv[4], 0); print(PBKDF2(password=password, salt=salt, dkLen=n, count=cost, hmac_hash_module=SHA256).hex())' 1 "" "706173737764" 64
```

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2023-08-20 22:05:16 +02:00
..
.gitignore
Add gitignore anchors to denote generated files
2023-07-06 17:58:18 +01:00
aes.c
Fix potential corruption of IV for AES CBC
2023-08-11 17:04:06 +01:00
aesce.c
Replace cpu modifier flags
2023-07-13 17:32:11 +08:00
aesce.h
Improve readability of unrolled AESCE code
2023-06-16 09:36:50 +01:00
aesni.c
Merge remote-tracking branch 'origin/master' into master-update
2023-08-02 10:57:07 +01:00
aesni.h
Address test review comments
2023-06-16 20:18:36 +01:00
alignment.h
Fix MBEDTLS_BSWAP32 on armcc 5
2023-07-11 14:06:37 +01:00
aria.c
…
asn1parse.c
…
asn1write.c
Read and write X25519 and X448 private keys
2023-05-04 13:01:47 +02:00
base64_internal.h
Move base64 test interfaces into base64_internal.h
2023-05-26 12:42:48 +01:00
base64.c
Move base64 test interfaces into base64_internal.h
2023-05-26 12:42:48 +01:00
bignum_core.c
Merge pull request #7578 from daverodgman/safer-ct5
2023-08-10 16:57:39 +00:00
bignum_core.h
Improve docs for mbedtls_mpi_core_cond_assign
2023-07-31 12:27:05 +01:00
bignum_mod_raw_invasive.h
…
bignum_mod_raw.c
Merge branch 'development' into safer-ct5
2023-08-07 11:47:35 +01:00
bignum_mod_raw.h
bignum: Removed merge scaffolding.
2023-04-05 16:13:11 +01:00
bignum_mod.c
Provide and use internal function mbedtls_zeroize_and_free()
2023-07-17 15:17:40 +01:00
bignum_mod.h
bignum_mod: Added a typedef for OPT_RED function pointer.
2023-06-22 09:14:28 +01:00
bignum.c
Merge pull request #7578 from daverodgman/safer-ct5
2023-08-10 16:57:39 +00:00
bn_mul.h
Merge pull request #7784 from daverodgman/aesce-unroll
2023-07-04 18:41:13 +01:00
camellia.c
…
ccm.c
Use fewer bits for block_size
2023-06-24 13:37:28 +01:00
chacha20.c
…
chachapoly.c
…
check_crypto_config.h
library: replace PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_LEGACY symbols with proper ones
2023-07-11 14:06:00 +02:00
cipher_wrap.c
Make naming more consistent
2023-08-14 15:26:28 +01:00
cipher_wrap.h
code style
2023-06-24 13:37:28 +01:00
cipher.c
Provide and use internal function mbedtls_zeroize_and_free()
2023-07-17 15:17:40 +01:00
cmac.c
Merge pull request #7825 from daverodgman/cipher_wrap_size
2023-07-05 15:45:48 +01:00
CMakeLists.txt
Merge pull request #7898 from AndrzejKurek/csr-rfc822-dn
2023-08-16 09:19:46 +00:00
common.h
Merge pull request #7933 from tom-cosgrove-arm/add-mbedtls_zeroize_and_free
2023-08-03 12:56:21 +00:00
constant_time_impl.h
Rename ...if0 to ...else_0
2023-08-10 12:11:31 +01:00
constant_time_internal.h
Fix some renames that were missed
2023-08-10 14:01:51 +01:00
constant_time.c
Remove unnecessary include from constant_time.c
2023-08-15 15:17:22 +01:00
ctr_drbg.c
Update links to Rijndael paper and NIST SP 800-90 DRBGs
2023-08-04 13:55:03 +01:00
debug.c
Merge pull request #7999 from valeriosetti/issue7759
2023-08-10 08:34:57 +00:00
des.c
…
dhm.c
Provide and use internal function mbedtls_zeroize_and_free()
2023-07-17 15:17:40 +01:00
ecdh.c
Update SEC1 link in ecdh.c
2023-04-12 06:07:23 +00:00
ecdsa.c
Merge pull request #7499 from JonathanWitthoeft/development
2023-04-28 12:45:32 +02:00
ecjpake.c
Remove hash_info.[ch]
2023-06-06 10:33:54 +02:00
ecp_curves_new.c
Move variant test to ecp_curves
2023-08-02 10:32:21 +01:00
ecp_curves.c
Move variant test to ecp_curves
2023-08-02 10:32:21 +01:00
ecp_internal_alt.h
…
ecp_invasive.h
Move MBEDTLS_ECP_WITH_MPI_UINT to mbedtls_config.h
2023-07-31 10:57:16 +01:00
ecp.c
Improve doc on special use of A in ecp group structure
2023-08-07 23:02:31 +08:00
entropy_poll.c
Don't force the default windows version down
2023-06-16 14:34:11 +02:00
entropy_poll.h
…
entropy.c
Use MD-light in entropy.c
2023-03-24 10:43:40 +01:00
gcm.c
Reduce size of static data in gcm
2023-07-13 15:57:20 +01:00
hkdf.c
…
hmac_drbg.c
Fix instances of old feature macros being used
2023-03-24 10:43:40 +01:00
lmots.c
Merge pull request #7935 from AgathiyanB/add-enum-casts
2023-07-26 11:27:27 +02:00
lmots.h
Unify PSA to Mbed TLS error translation
2023-03-03 05:23:44 -05:00
lms.c
Merge pull request #7933 from tom-cosgrove-arm/add-mbedtls_zeroize_and_free
2023-08-03 12:56:21 +00:00
Makefile
Merge pull request #7898 from AndrzejKurek/csr-rfc822-dn
2023-08-16 09:19:46 +00:00
md5.c
…
md_psa.h
Make MD<->PSA translation static inline
2023-06-08 12:10:03 +02:00
md_wrap.h
Omit block_size when MD_C is not enabled
2023-06-21 12:02:07 +02:00
md.c
Merge pull request #7933 from tom-cosgrove-arm/add-mbedtls_zeroize_and_free
2023-08-03 12:56:21 +00:00
memory_buffer_alloc.c
…
mps_common.h
Merge branch 'development' into development
2023-06-04 14:57:19 -04:00
mps_error.h
…
mps_reader.c
…
mps_reader.h
…
mps_trace.c
…
mps_trace.h
…
net_sockets.c
Merge pull request #7792 from robUx4/win32_winnt
2023-07-13 19:34:24 +01:00
nist_kw.c
Use fewer bits for block_size
2023-06-24 13:37:28 +01:00
oid.c
library: replace occurencies of ECP_LIGHT with PK_HAVE_ECC_KEYS
2023-06-19 19:24:05 +02:00
padlock.c
…
padlock.h
…
pem.c
Provide and use internal function mbedtls_zeroize_and_free()
2023-07-17 15:17:40 +01:00
pk_internal.h
Create psa_util_internal.h
2023-07-06 12:42:33 +02:00
pk_wrap.c
Merge pull request #7991 from sarveshb14/fix/psa_rsa_signature_using_large_stack
2023-08-16 09:23:29 +00:00
pk_wrap.h
library: replace PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_LEGACY symbols with proper ones
2023-07-11 14:06:00 +02:00
pk.c
Create psa_util_internal.h
2023-07-06 12:42:33 +02:00
pkcs5.c
Create psa_util_internal.h
2023-07-06 12:42:33 +02:00
pkcs7.c
Update wording in comments
2023-03-13 12:15:49 +00:00
pkcs12.c
Create psa_util_internal.h
2023-07-06 12:42:33 +02:00
pkparse.c
pkparse: remove unnecessary header
2023-08-10 06:43:23 +02:00
pkwrite.c
pkwrite: fix internal buffer size in pk_write_ec_pubkey()
2023-08-10 07:40:18 +02:00
pkwrite.h
pkwrite: add new internal symbol to properly size DER buffer
2023-08-10 06:43:23 +02:00
platform_util.c
Merge pull request #7933 from tom-cosgrove-arm/add-mbedtls_zeroize_and_free
2023-08-03 12:56:21 +00:00
platform.c
…
poly1305.c
…
psa_crypto_aead.c
…
psa_crypto_aead.h
Make \retval commands non-empty
2023-02-14 19:21:09 +01:00
psa_crypto_cipher.c
Use fewer bits for block_size
2023-06-24 13:37:28 +01:00
psa_crypto_cipher.h
Make \retval commands non-empty
2023-02-14 19:21:09 +01:00
psa_crypto_client.c
…
psa_crypto_core_common.h
psa: Introduce PSA crypto core common symbols
2023-03-31 09:07:57 +02:00
psa_crypto_core.h
Add utility function to check for drivers init
2023-03-16 09:46:51 +01:00
psa_crypto_driver_wrappers.h
Integrate p256-m as an example driver alongside Mbed TLS and write documentation for the example.
2023-04-28 17:54:09 +01:00
psa_crypto_ecp.c
lib/test: replace BASIC_IMPORT_EXPORT internal symbol with BASIC,IMPORT,EXPORT
2023-06-30 10:16:22 +02:00
psa_crypto_ecp.h
Merge pull request #7098 from gilles-peskine-arm/retval-non-empty
2023-02-24 09:10:53 +00:00
psa_crypto_ffdh.c
psa: replace DH_KEY_PAIR_LEGACY with new symbols
2023-07-27 09:15:34 +02:00
psa_crypto_ffdh.h
Merge pull request #7627 from mprse/ffdh_tls13_v2
2023-07-03 10:12:33 +02:00
psa_crypto_hash.c
…
psa_crypto_hash.h
Remove useless extern declarations and includes
2023-06-21 09:45:36 +02:00
psa_crypto_invasive.h
…
psa_crypto_its.h
…
psa_crypto_mac.c
…
psa_crypto_mac.h
Make \retval commands non-empty
2023-02-14 19:21:09 +01:00
psa_crypto_pake.c
Provide and use internal function mbedtls_zeroize_and_free()
2023-07-17 15:17:40 +01:00
psa_crypto_pake.h
Pacify clang15 warnings about empty /retval
2023-06-20 15:51:46 +01:00
psa_crypto_random_impl.h
Create psa_util_internal.h
2023-07-06 12:42:33 +02:00
psa_crypto_rsa.c
Merge pull request #7902 from valeriosetti/issue7772
2023-07-25 17:13:43 +01:00
psa_crypto_rsa.h
Make \retval commands non-empty
2023-02-14 19:21:09 +01:00
psa_crypto_se.c
Implement and use MBEDTLS_STATIC_ASSERT()
2023-03-08 14:19:51 +00:00
psa_crypto_se.h
…
psa_crypto_slot_management.c
Move the ARRAY_LENGTH definition to common.h
2023-06-13 05:46:47 -04:00
psa_crypto_slot_management.h
Make \retval commands non-empty
2023-02-14 19:21:09 +01:00
psa_crypto_storage.c
Provide and use internal function mbedtls_zeroize_and_free()
2023-07-17 15:17:40 +01:00
psa_crypto_storage.h
Make \retval commands non-empty
2023-02-14 19:21:09 +01:00
psa_crypto.c
Fix PBKDF2 with empty salt segment on platforms where malloc(0)=NULL
2023-08-20 22:05:16 +02:00
psa_its_file.c
…
psa_util_internal.h
psa: fix missed LEGACY symbols caused by the rebase
2023-07-11 16:59:21 +02:00
psa_util.c
psa: fix missed LEGACY symbols caused by the rebase
2023-07-11 16:59:21 +02:00
ripemd160.c
Fix use of sizeof without brackets
2023-02-02 12:40:50 +00:00
rsa_alt_helpers.c
…
rsa_alt_helpers.h
…
rsa.c
Rename ...if0 to ...else_0
2023-08-10 12:11:31 +01:00
sha1.c
…
sha3.c
Fix for big-endian architectures
2023-06-07 19:59:05 +01:00
sha256.c
Add error message for old armclang
2023-07-13 10:40:29 +08:00
sha512.c
Add error message for old armclang
2023-07-13 10:40:29 +08:00
ssl_cache.c
Provide and use internal function mbedtls_zeroize_and_free()
2023-07-17 15:17:40 +01:00
ssl_ciphersuites.c
Merge pull request #7884 from valeriosetti/issue7612
2023-08-01 07:13:36 +00:00
ssl_client.c
tls: replace ECDH_C guards with new helpers
2023-07-07 17:23:53 +02:00
ssl_client.h
…
ssl_cookie.c
Fix wrong array size calculation in error translation code
2023-06-13 05:46:47 -04:00
ssl_debug_helpers.h
…
ssl_misc.h
Merge branch 'development' into safer-ct5
2023-08-07 11:47:35 +01:00
ssl_msg.c
Fix some renames that were missed
2023-08-10 14:01:51 +01:00
ssl_ticket.c
Fix wrong array size calculation in error translation code
2023-06-13 05:46:47 -04:00
ssl_tls12_client.c
Merge pull request #7933 from tom-cosgrove-arm/add-mbedtls_zeroize_and_free
2023-08-03 12:56:21 +00:00
ssl_tls12_server.c
Rename uint->bool operators to reflect input types
2023-08-10 11:58:18 +01:00
ssl_tls13_client.c
tls: use TLS 1.3 guards in ssl_tls13 modules
2023-07-25 11:23:50 +02:00
ssl_tls13_generic.c
ssl_tls13: fix guard for FFDH function
2023-08-11 06:33:52 +02:00
ssl_tls13_invasive.h
…
ssl_tls13_keys.c
Provide and use internal function mbedtls_zeroize_and_free()
2023-07-17 15:17:40 +01:00
ssl_tls13_keys.h
…
ssl_tls13_server.c
Merge pull request #7884 from valeriosetti/issue7612
2023-08-01 07:13:36 +00:00
ssl_tls.c
Merge pull request #7933 from tom-cosgrove-arm/add-mbedtls_zeroize_and_free
2023-08-03 12:56:21 +00:00
threading.c
…
timing.c
…
version.c
…
x509_create.c
Merge pull request #7788 from marekjansta/fix-x509-ec-algorithm-identifier
2023-08-07 19:14:54 +00:00
x509_crl.c
Provide and use internal function mbedtls_zeroize_and_free()
2023-07-17 15:17:40 +01:00
x509_crt.c
Provide and use internal function mbedtls_zeroize_and_free()
2023-07-17 15:17:40 +01:00
x509_csr.c
Provide and use internal function mbedtls_zeroize_and_free()
2023-07-17 15:17:40 +01:00
x509.c
Merge pull request #6003 from gstrauss/x509_time
2023-07-06 09:28:14 +01:00
x509write_crt.c
Merge pull request #7898 from AndrzejKurek/csr-rfc822-dn
2023-08-16 09:19:46 +00:00
x509write_csr.c
Merge pull request #7898 from AndrzejKurek/csr-rfc822-dn
2023-08-16 09:19:46 +00:00
x509write.c
Unify csr and crt san writing functions
2023-07-07 09:05:30 -04:00