1. 2a8e958 Always revoke certificate on CRL by Raoul Strackx · 5 years ago
  2. 84be024 Merge pull request #3594 from gilles-peskine-arm/fix-compat.sh-with-ubuntu-16.04-gnutls-2.7 by Gilles Peskine · 5 years ago
  3. 46b3fc2 Merge pull request #3599 from makise-homura/mbedtls-2.7 by Gilles Peskine · 5 years ago
  4. 329fe7e A different approach of signed-to-unsigned comparison by makise-homura · 5 years ago
  5. 1323fba Update the copy of tests/data_files/server2-sha256.crt in certs.c by Gilles Peskine · 5 years ago
  6. 03c2b8f Backport e2k support to mbedtls-2.7 by makise-homura · 5 years ago
  7. 44bfbe3 Update copyright notices to use Linux Foundation guidance by Bence Szépkúti · 5 years ago
  8. 30c1df3 Merge pull request #3570 from gufe44/net-sockets-fixes-2.7 by Manuel Pégourié-Gonnard · 5 years ago
  9. 3ca3b9e Fix building on NetBSD 9.0 by gufe44 · 5 years ago
  10. 206cb39 Use arc4random_buf instead of rand on NetBSD by gufe44 · 5 years ago
  11. 2a4f899 Bump version to Mbed TLS 2.7.16 by Janos Follath · 5 years ago
  12. 9cdda86 Merge branch 'mbedtls-2.7-restricted' into mbedtls-2.7.16r0 by Janos Follath · 5 years ago
  13. f2027b5 Merge pull request #705 from mpg/l13-hw-starts-finish-2.7-restricted by Manuel Pégourié-Gonnard · 5 years ago
  14. 9695178 Test multi-block output of the hash-based KDF by Manuel Pégourié-Gonnard · 5 years ago
  15. 1381091 Remove SHA-1 as a fallback option by Manuel Pégourié-Gonnard · 5 years ago
  16. 9797288 Improve comment justifying a hard-coded limitation by Manuel Pégourié-Gonnard · 5 years ago
  17. 8745986 Zeroize temporary stack buffer by Manuel Pégourié-Gonnard · 5 years ago
  18. 601128e Fix potential memory overread in seed functions by Manuel Pégourié-Gonnard · 5 years ago
  19. 6d61498 Add fall-back to hash-based KDF for internal ECP DRBG by Manuel Pégourié-Gonnard · 5 years ago
  20. 99bf33f Fix typo in a comment by Manuel Pégourié-Gonnard · 5 years ago
  21. e2828c2 Use HMAC_DRBG by default for ECP internal DRBG by Manuel Pégourié-Gonnard · 5 years ago
  22. 22fe523 Skip redundant checks for NULL f_rng by Manuel Pégourié-Gonnard · 5 years ago
  23. 75036a0 Implement use of internal DRBG for ecp_mul() by Manuel Pégourié-Gonnard · 5 years ago
  24. d90faf9 Add config.h option MBEDTLS_ECP_NO_INTERNAL_RNG by Manuel Pégourié-Gonnard · 5 years ago
  25. 44183d1 Merge pull request #3409 from bensze01/license-2.7 by Janos Follath · 5 years ago
  26. 8352797 Use starts/finish around Lucky 13 dummy compressions by Manuel Pégourié-Gonnard · 5 years ago
  27. 4e9f712 Update license headers to Apache-2.0 OR GPL-2.0-or-later by Bence Szépkúti · 5 years ago
  28. 904775d ssl_client: Align line breaking with MBEDTLS_SSL_DEBUG_* by Ronald Cron · 5 years ago
  29. a32236c Use defines to check alpn ext list validity by Ronald Cron · 5 years ago
  30. 2064355 Return error in case of bad user configurations by Hanno Becker · 8 years ago
  31. d8562b5 Add error condition for bad user configurations by Hanno Becker · 8 years ago
  32. 0e8dc48 Uniformize bounds checks using new macro by Hanno Becker · 8 years ago
  33. 29efc0f Remove unnecessary MBEDTLS_ECP_C preprocessor condition by Ronald Cron · 5 years ago
  34. 8cf6b49 Shorten lines in library/ssl_cli.c to at most 80 characters by Hanno Becker · 8 years ago
  35. 910a751 Introduce macros for constants in SSL ticket implementation by Hanno Becker · 7 years ago
  36. 87e93d0 Merge pull request #3412 from gilles-peskine-arm/montmul-cmp-branch-2.7 by Janos Follath · 5 years ago
  37. f3317e6 Clean up some comments by Gilles Peskine · 5 years ago
  38. fa85cc2 mbedtls_mpi_sub_abs: check the range of the result when it happens by Gilles Peskine · 5 years ago
  39. cc6a6bf Simplify the final reduction in mpi_montmul by Gilles Peskine · 5 years ago
  40. 6f3b68d Move carry propagation out of mpi_sub_hlp by Gilles Peskine · 5 years ago
  41. dc24cec More logical parameter order for mpi_sub_hlp by Gilles Peskine · 5 years ago
  42. ea9ba77 Explicitly cast down from mbedtls_mpi_uint to unsigned char by Gilles Peskine · 5 years ago
  43. 7ff812e Remove a secret-dependent branch in Montgomery multiplication by Gilles Peskine · 5 years ago
  44. 3c44c65 Separate out low-level mpi_safe_cond_assign by Gilles Peskine · 5 years ago
  45. d108d07 Document some internal bignum functions by Gilles Peskine · 5 years ago
  46. 8ff7cc9 Revert "Shut up a clang-analyzer warning" by Gilles Peskine · 5 years ago
  47. d6496af Add a const annotation to the non-changing argument of mpi_sub_mul by Gilles Peskine · 5 years ago
  48. 1539d15 Merge pull request #3353 from gilles-peskine-arm/fix-ecp-mul-memory-leak-2.7 by Manuel Pégourié-Gonnard · 5 years ago
  49. ac631bb Re-generate error.c by Gilles Peskine · 5 years ago
  50. 86c5c61 Fix potential memory leak in EC multiplication by Jonas · 5 years ago
  51. 3fd9297 Guard from undefined behaviour in case of an INT_MAX max_pathlen by Andrzej Kurek · 5 years ago
  52. 0a99708 Merge branch 'mbedtls-2.7-restricted' into prepare-rc-2.7.15-update by Manuel Pégourié-Gonnard · 5 years ago
  53. 6e0806b Merge remote-tracking branch 'restricted/pr/671' into mbedtls-2.7-restricted by Manuel Pégourié-Gonnard · 5 years ago
  54. b4b458f Bump version to Mbed TLS 2.7.15 by Janos Follath · 5 years ago
  55. e170ee7 Merge branch 'mbedtls-2.7-restricted' into mbedtls-2.7.15r0 by Janos Follath · 5 years ago
  56. 29b7b95 Merge pull request #3145 from mpg/fix-reconnect-2.7 by Gilles Peskine · 5 years ago
  57. 54587fc Fix leakage of projective coordinates in ECC by Manuel Pégourié-Gonnard · 5 years ago
  58. 6062b49 Fix bug in handling of DTLS client hard reconnect by Manuel Pégourié-Gonnard · 5 years ago
  59. 4bbbdc3 Improve debug logging of client hard reconnect by Manuel Pégourié-Gonnard · 5 years ago
  60. 2c3351e Correct comment on the configuration option in x509.c by Simon Butcher · 5 years ago
  61. 8758053 Fix compilation issue when DTLS and SSL_HW_RECORD_ACCEL are on by Andres Amaya Garcia · 7 years ago
  62. 0f22670 Bump version to Mbed TLS 2.7.14 by Janos Follath · 5 years ago
  63. 609d79e Fix pkparse bug wrt MBEDTLS_RSA_ALT by Manuel Pégourié-Gonnard · 5 years ago
  64. 869e966 Check public part when parsing private RSA key by Manuel Pégourié-Gonnard · 5 years ago
  65. 8cc0491 Don't pass zero to rsa_complete() as a param by Manuel Pégourié-Gonnard · 5 years ago
  66. 6cf5931 Merge pull request #3028 from gilles-peskine-arm/mpi_copy_shrink-2.7 by Manuel Pégourié-Gonnard · 5 years ago
  67. b40d60f Revert "Merge pull request #3011 from Patater/dev/jp-bennett/development-2.7" by Janos Follath · 6 years ago
  68. 5d11712 Merge pull request #3020 from mpg/fix-ssl-opt-gnutls-no-sha1-2.7 by Janos Follath · 6 years ago
  69. ac3c806 Fix comment to match reality by Manuel Pégourié-Gonnard · 6 years ago
  70. 918b25d Revert "Fix certs.c to match the content of the files" by Manuel Pégourié-Gonnard · 6 years ago
  71. 774c163 Minor comment improvement by Gilles Peskine · 6 years ago
  72. 6a26967 Improve comments in mpi_shrink by Gilles Peskine · 6 years ago
  73. 2aeab87 mpi_copy: make the 0 case slightly more robust by Gilles Peskine · 6 years ago
  74. 205e88c Fix certs.c to match the content of the files by Manuel Pégourié-Gonnard · 6 years ago
  75. 100e147 Parse RSA parameters DP, DQ and QP from PKCS1 private keys by Jack Lloyd · 6 years ago
  76. a67508e Merge pull request #3002 from gilles-peskine-arm/coverity-20200115-2.7 into mbedtls-2.7 by Janos Follath · 6 years ago
  77. 130e136 Merge pull request #3011 from Patater/dev/jp-bennett/development-2.7 by Jaeden Amero · 6 years ago
  78. 791babc Allow loading symlinked certificates by Jonathan Bennett · 6 years ago
  79. 0f595f7 Remove redundant block_size validity check by Gilles Peskine · 6 years ago
  80. d22a793 Add missing return code check on call to mbedtls_md() by Gilles Peskine · 6 years ago
  81. ee88f81 Bump version to Mbed TLS 2.7.13 by Janos Follath · 6 years ago
  82. d8180f8 Merge remote-tracking branch 'origin/mbedtls-2.7' into mbedtls-2.7-restricted by Jaeden Amero · 6 years ago mbedtls-2.7.13
  83. b2be1fc Catch AES failure in mbedtls_ctr_drbg_random by Gilles Peskine · 6 years ago
  84. 2414ce1 Parse HelloVerifyRequest: avoid buffer overread at the start by Gilles Peskine · 6 years ago
  85. 99b6777 Parse HelloVerifyRequest: avoid buffer overread on the cookie by Gilles Peskine · 6 years ago
  86. c5a016d Merge remote-tracking branch 'restricted/pr/666' into mbedtls-2.7-restricted by Jaeden Amero · 6 years ago
  87. e70059d Merge remote-tracking branch 'restricted/pr/668' into mbedtls-2.7-restricted by Jaeden Amero · 6 years ago
  88. 0759736 Zeroize local AES variables before exiting the function by Andrzej Kurek · 6 years ago
  89. b4edac5 mpi_lt_mpi_ct: fix condition handling by Janos Follath · 6 years ago
  90. 5823961 ct_lt_mpi_uint: cast the return value explicitely by Janos Follath · 6 years ago
  91. cff9e6e mbedtls_mpi_lt_mpi_ct: simplify condition by Janos Follath · 6 years ago
  92. 8ec2a95 Rename variable for better readability by Janos Follath · 6 years ago
  93. a2b9a96 mbedtls_mpi_lt_mpi_ct: Improve documentation by Janos Follath · 6 years ago
  94. 51ed14e Make mbedtls_mpi_lt_mpi_ct more portable by Janos Follath · 6 years ago
  95. 3173a53 Document ct_lt_mpi_uint by Janos Follath · 6 years ago
  96. 782cbe5 mpi_lt_mpi_ct: make use of unsigned consistent by Janos Follath · 6 years ago
  97. db9f449 ct_lt_mpi_uint: make use of biL by Janos Follath · 6 years ago
  98. c3b376e Change mbedtls_mpi_cmp_mpi_ct to check less than by Janos Follath · 6 years ago
  99. 8461c0e mbedtls_mpi_cmp_mpi_ct: remove multiplications by Janos Follath · 6 years ago
  100. 8de2d45 Remove excess vertical space by Janos Follath · 6 years ago