TrustedFirmware Git Browser
Code Review Sign In
review.trustedfirmware.org / mirror / mbed-tls.git / 17c3531b4bbc0d6bff37c834a3348c2c2499e378 / library / ssl_tls.c
  1. 17c3531 Add missing volatile identifiers before fi-related variables by Andrzej Kurek · 4 years, 7 months ago
  2. ad3c4ff Add an "SSL" infix to MBEDTLS_DELAYED_SERVER_CERT_VERIFICATION by Andrzej Kurek · 4 years, 8 months ago
  3. 4f5549f Add an "SSL" infix to MBEDTLS_IMMEDIATE_TRANSMISSION by Andrzej Kurek · 4 years, 8 months ago
  4. 0719b3c Add output flushing after each message transmission by Andrzej Kurek · 4 years, 8 months ago
  5. e2134ed Fix certificate management when freeing handshake by Andrzej Kurek · 4 years, 8 months ago
  6. 38c7f2d Refactor the immediate transmission feature by Andrzej Kurek · 4 years, 8 months ago
  7. d886d9f Fix freeing uninitialized fields from the ssl context by Andrzej Kurek · 4 years, 8 months ago
  8. c3dde3f Fix unreachable code error by Andrzej Kurek · 4 years, 8 months ago
  9. 52e08cb Fix unused parameters and ifdefs by Andrzej Kurek · 4 years, 8 months ago
  10. 777d421 Fix define and function names to conform to Mbed TLS rules by Andrzej Kurek · 4 years, 8 months ago
  11. 1315124 Move the new config optimization defines to be optional by Andrzej Kurek · 4 years, 8 months ago
  12. c162895 Add call to mbedtls_x509_crt_free() by Hannes Tschofenig · 4 years, 8 months ago
  13. 2279ffd Adding immediate message transmission by Hannes Tschofenig · 4 years, 8 months ago
  14. cb6410c Wrapper function for calling parse_certificate_verify by Hannes Tschofenig · 4 years, 8 months ago
  15. 1c44816 Merge pull request #3913 from jarvte/memfix_variablebuffer by Andrzej Kurek · 4 years, 8 months ago
  16. b89cf99 Fix possible memory leak when MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH is defined by Teppo Järvelin · 4 years, 8 months ago
  17. c5b0c6e fix uninitialized variables by Shelly Liberman · 4 years, 9 months ago
  18. 560203a Merge pull request #3853 from kjbracey-arm/m_narrowloop by Shelly Liberman · 4 years, 9 months ago
  19. a967a58 [baremetal] Avoid narrow loop counters etc by Kevin Bracey · 4 years, 9 months ago
  20. 585e9e0 Add MBEDTLS_SSL_CONF_TRANSPORT by Kevin Bracey · 4 years, 9 months ago
  21. d859db8 Fix MBEDTLS_SSL_CONF_ENDPOINT flagging by Kevin Bracey · 4 years, 9 months ago
  22. 8b0910a Merge pull request #3815 from AndrzejKurek/cipher-optim-mem-fix by Andrzej Kurek · 4 years, 9 months ago
  23. 28b3b29 ssl_tls.c: Fix unchecked memory allocation by Andrzej Kurek · 4 years, 10 months ago
  24. 2e49d07 Describe the behaviour of buffer resizing on an out-of-memory error by Andrzej Kurek · 4 years, 10 months ago
  25. cd9a6ff Introduce additional flags for buffer upsizing and downsizing by Andrzej Kurek · 4 years, 10 months ago
  26. 79db2f1 Refactor the buffer resize feature to reduce codesize by Andrzej Kurek · 4 years, 10 months ago
  27. f384495 Sideport the variable IO buffer size feature to baremetal by Andrzej Kurek · 4 years, 10 months ago
  28. ff51721 ssl_tls: reduce the complexity of encryption validation by Andrzej Kurek · 5 years ago
  29. 8ec9e13 ssl_tls: Add a flag indicating that encryption succeeded by Andrzej Kurek · 5 years ago
  30. 69bafce Improve the FI resistance in ssl_tls.c key switching by Andrzej Kurek · 4 years, 11 months ago
  31. f7df0d3 Reduce the size of used constant in ssl_tls.c by Andrzej Kurek · 4 years, 11 months ago
  32. a793237 Calculate hashes of ssl encryption and decryption keys by Andrzej Kurek · 4 years, 11 months ago
  33. 1175044 Merge enc/dec cipher contexts in ssl transforms by Andrzej Kurek · 4 years, 11 months ago
  34. 305a5ec Checking in critical places if secured memset() and memcpy() was successful by Piotr Nowicki · 5 years ago
  35. a6348ed Checking in critical places if the mbedtls_platform_zeroize() was successful by Piotr Nowicki · 5 years ago
  36. e3c4ee5 Rename mbedtls_platform_memcmp() to mbedtls_platform_memequal() by Piotr Nowicki · 5 years ago
  37. 3799fc1 Splitting buffers comment added by Shelly Liberman · 5 years ago
  38. c6a7e6b Enhancement fixes by Shelly Liberman · 5 years ago archive/fi_write_user_data fi_write_user_data
  39. 4062d6c Add user pointer and data size duplication to ssl context. by shelib01 · 5 years ago
  40. afec885 Revert a part of the sensitive information duplication changes by Andrzej Kurek · 5 years ago
  41. c417c78 Merge pull request #3481 from AndrzejKurek/fi_duplicate_buffers_2 by Andrzej Kurek · 5 years ago
  42. 45e7199 Minor formatting and cosmetic changes by Andrzej Kurek · 5 years ago
  43. 0919b14 Formatting changes by Andrzej Kurek · 5 years ago
  44. 84bde41 Add FI countermeasures to the ssl module by Andrzej Kurek · 5 years ago
  45. 74f7d0f Duplicate sensitive buffer and buffer length information by Andrzej Kurek · 5 years ago
  46. 78fc139 Add FI countermeasures for sensitive switch instructions by Piotr Nowicki · 5 years ago
  47. e5425a0 Merge pull request #3408 from AndrzejKurek/hamming-distance-improvements by Andrzej Kurek · 5 years ago
  48. e048b91 Add returning a FAULT_DETECTED error on suspected FI attacks by Piotr Nowicki · 5 years ago
  49. 8f52a8a Improve the Hamming distance of ssl_hs_is_proper_fragment return values by Andrzej Kurek · 5 years ago
  50. 478b05c Merge pull request #3355 from AndrzejKurek/fi_error_codes by Andrzej Kurek · 5 years ago
  51. fd56f40 Change the default value of status variables to an error by Andrzej Kurek · 5 years ago
  52. 13bebd0 Keep SSL context const when hw accel is disabled by Manuel Pégourié-Gonnard · 5 years ago
  53. 731d7c0 Fix lack of cookie check on hard reconnect by Manuel Pégourié-Gonnard · 5 years ago
  54. 825ebd4 Merge mbedtls 2.16.6 into baremetal by Andrzej Kurek · 5 years ago
  55. ae48d86 Fix bug in record decompression by Manuel Pégourié-Gonnard · 6 years ago
  56. 92af9a9 Fixes definition error when the deprecated MBEDTLS_ZLIB_SUPPORT and ENABLE_ZLIB_SUPPORT macro are defined/enabled for zlib support in mbedtls by jiblime · 6 years ago
  57. 10a2ffd Merge remote-tracking branch 'upstream/pr/2945' into baremetal by Arto Kinnunen · 6 years ago
  58. ac6d226 Update signature of mbedtls_platform_random_delay by Arto Kinnunen · 6 years ago
  59. 05ca9d4 Merge remote-tracking branch 'public/pr/2979' into baremetal by Simon Butcher · 6 years ago
  60. cafb6c9 Clear internal decrypted buffer after read by Teppo Järvelin · 6 years ago
  61. 7195571 Replace mbedtls_platform_enforce_volatile_reads 2 by Arto Kinnunen · 6 years ago
  62. 8f7e36f Coverity fixes, check hmac return values by Teppo Järvelin · 6 years ago
  63. 5aa4c07 Minor review fixes by Jarno Lamsa · 6 years ago
  64. 015aa44 Make authmode volatile by Jarno Lamsa · 6 years ago
  65. af60cd7 Protect the peer_authenticated flag more by Jarno Lamsa · 6 years ago
  66. 8d09e57 Increase hamming distance for session resume flag by Jarno Lamsa · 6 years ago
  67. 489dccd Adress review comments by Jarno Lamsa · 6 years ago
  68. 88db2ae Use Platform fault when double check fails by Jarno Lamsa · 6 years ago
  69. 0616405 Check that we have all the proper keys by Jarno Lamsa · 6 years ago
  70. e1621d4 Check that the peer_authenticated flag by Jarno Lamsa · 6 years ago
  71. ba4730f Protect setting of peer_authenticated flag by Jarno Lamsa · 6 years ago
  72. 4031a45 Protect key_derivation_done flag by Jarno Lamsa · 6 years ago
  73. 67f0a1e Protect setting of premaster_generated flag by Jarno Lamsa · 6 years ago
  74. acb5eb0 Add a double check to protect from glitch by Jarno Lamsa · 6 years ago
  75. b018009 Use invalid state by Jarno Lamsa · 6 years ago
  76. 2b20516 Make TLS state changes explicit by Jarno Lamsa · 6 years ago
  77. 9d6a535 Return and propagate UECC_FAULT_DETECTED by Manuel Pégourié-Gonnard · 6 years ago
  78. 1a53371 Remove curve parameter from public functions by Manuel Pégourié-Gonnard · 6 years ago
  79. 677b7f6 Fix direct use of struct instead of abstract type by Manuel Pégourié-Gonnard · 6 years ago
  80. 6f4e030 Changed mbedtls_platform_memcpy to memcpy in places which don't handle critical data by Teppo Järvelin · 6 years ago
  81. 91d7938 Changed every memcpy to SCA equivalent mbedtls_platform_memcpy by Teppo Järvelin · 6 years ago
  82. 8a8488c Fix mbedtls_ssl_check_record usage with ext buf by Arto Kinnunen · 6 years ago
  83. e2bf54d Merge remote-tracking branch 'public/pr/2877' into baremetal by Simon Butcher · 6 years ago
  84. 895454d Use plain memset() for public data in ssl_tls.c by Manuel Pégourié-Gonnard · 6 years ago
  85. 54526c3 Use plain memset() for freshly allocated objects by Manuel Pégourié-Gonnard · 6 years ago
  86. 9941933 Use plain memset() in context init functions by Manuel Pégourié-Gonnard · 6 years ago
  87. 7a346b8 Replace memset() with mbedtls_platform_memset() by Manuel Pégourié-Gonnard · 6 years ago
  88. 0efac53 Review fixes: fixed comments to be more accurate and changed one memcmp to safer version by Teppo Järvelin · 6 years ago
  89. 707ceb8 Replaced mbedtls_ssl_safer_memcmp with mbedtls_platform_memcmp by Teppo Järvelin · 6 years ago
  90. 650343c Changed mbedtls_platform_memcmp to memcmp for places that don't have critical data and are under baremetal by Teppo Järvelin · 6 years ago
  91. 61f412e Changed every memcmp to SCA equivalent mbedtls_platform_memcmp by Teppo Järvelin · 6 years ago
  92. 2829bbf Remove dependency from SSL on PK internals by Manuel Pégourié-Gonnard · 6 years ago
  93. e8144aa Merge remote-tracking branch 'origin/pr/657' into baremetal by Simon Butcher · 6 years ago
  94. 88b535a Merge remote-tracking branch 'origin/pr/654' into baremetal by Simon Butcher · 6 years ago
  95. 303d399 Merge remote-tracking branch 'origin/pr/609' into baremetal by Simon Butcher · 6 years ago
  96. 3d7439e Review corrections 6 by Arto Kinnunen · 6 years ago
  97. 84eeb4f Review corrections 5 by Arto Kinnunen · 6 years ago
  98. a3fa06e Review corrections 3 by Arto Kinnunen · 6 years ago
  99. 4f4849a Review corrections 2 by Arto Kinnunen · 6 years ago
  100. 6e3f09b Review corrections by Arto Kinnunen · 6 years ago