- 2c9843f Make mbedtls_sa_ecp_load_public_part return psa_status_t by Paul Elliott · 2 years, 6 months ago
- 7ef174b Correct insufficient memory return documentation. by Paul Elliott · 2 years, 6 months ago
- a1c9409 Move structure init calls as early as possible by Paul Elliott · 2 years, 6 months ago
- ebe225c Move num ops update to only point where work can be done. by Paul Elliott · 2 years, 6 months ago
- 53bb312 Wipe output buffer even when INCOMPLETE is returned. by Paul Elliott · 2 years, 6 months ago
- c569fc2 Switch from nbits to pbits by Paul Elliott · 2 years, 6 months ago
- 6d99f0c Fix errors in psa_wipe_output_buffer() doc comment. by Paul Elliott · 2 years, 6 months ago
- 0290a76 Fix buffer overflow with hashes larger than key size. by Paul Elliott · 2 years, 6 months ago
- 724bd25 Fix missing mbedtls_mpi_free() on signing. by Paul Elliott · 2 years, 6 months ago
- 8432946 Replace allocated hash buffer with array by Paul Elliott · 2 years, 6 months ago
- e6145dc Add documentation comment to internal abort functions by Paul Elliott · 2 years, 6 months ago
- de1114c Fix {sign|verify}_get_num_ops by Paul Elliott · 2 years, 6 months ago
- 939bd94 Move output buffer wiping code to seperate function. by Paul Elliott · 2 years, 6 months ago
- 1243f93 Fix build fails with non ECDSA / restartable builds by Paul Elliott · 2 years, 6 months ago
- eefe472 Move loading of public part of ECP into function by Paul Elliott · 2 years, 6 months ago
- c977441 Ensure that operation is put into error state if error occurs by Paul Elliott · 2 years, 6 months ago
- f9c91a7 Store the hash, rather than the pointer by Paul Elliott · 2 years, 6 months ago
- 813f9cd Non ECDSA algorithms should return not supported by Paul Elliott · 2 years, 6 months ago
- 1bc59df Rename curve_bytes to coordinate_bytes by Paul Elliott · 2 years, 6 months ago
- 096abc4 Remove incorrect copied comment by Paul Elliott · 2 years, 6 months ago
- e17a8fd Remove unneeded warning from internal headers by Paul Elliott · 2 years, 6 months ago
- 4684525 Remove unrequired mpis from sign operation struct by Paul Elliott · 2 years, 6 months ago
- 6ee2408 Remove deterministic alg restriction on sign hash by Paul Elliott · 2 years, 7 months ago
- 068fe07 Improve indentation of hash start functions by Paul Elliott · 2 years, 7 months ago
- 7cc4e81 Ensure max ops gets set regardless of having built-in implementation by Paul Elliott · 2 years, 7 months ago
- 59ad945 Add {sign/verify}_hash_abort_internal by Paul Elliott · 2 years, 8 months ago
- 296ede9 Fix issues with get_{sign/verify}_num_ops by Paul Elliott · 2 years, 8 months ago
- 588f8ed Add internal implementation by Paul Elliott · 2 years, 8 months ago
- 2ba002c Make ECDSA restartable sign and verify functions public by Paul Elliott · 2 years, 8 months ago
- 9fe12f6 PSA level initial implementation by Paul Elliott · 2 years, 8 months ago
- 2d24792 Initial empty driver wrapper implementation by Paul Elliott · 2 years, 8 months ago
- edc6ae9 Merge pull request #7090 from paul-elliott-arm/fix_iar_warnings_dev by Gilles Peskine · 2 years, 6 months ago
- 319a567 Merge pull request #7084 from daverodgman/sizemax-uintmax by Dave Rodgman · 2 years, 6 months ago
- 70341c1 Merge pull request #6773 from yanrayw/6675-change-early_secrets-to-local by Ronald Cron · 2 years, 6 months ago
- 1748de1 Fix IAR Warnings by Paul Elliott · 2 years, 6 months ago
- d3d8c85 Merge pull request #6997 from valeriosetti/issue6858 by Manuel Pégourié-Gonnard · 2 years, 6 months ago
- 178b5bd pk: move MBEDTLS_PK_CAN_ECDSA_SOME macro to pk.h and fix tests by Valerio Setti · 2 years, 6 months ago
- ab1f3c1 Merge pull request #7081 from tom-cosgrove-arm/dont-use-lstrlenW by Dave Rodgman · 2 years, 6 months ago
- 4a5c9ee Remove redundant SIZE_MAX guards by Dave Rodgman · 2 years, 6 months ago
- b8531c4 Merge pull request #6882 from AndrzejKurek/x509_san_parsing_testing-dev by Gilles Peskine · 2 years, 6 months ago
- a22749e Merge pull request #6816 from nick-child-ibm/pkcs7_coverage by Dave Rodgman · 2 years, 6 months ago
- b96c309 Don't use lstrlenW() on Windows by Tom Cosgrove · 2 years, 6 months ago
- 834e65d Merge pull request #6499 from xkqian/tls13_write_end_of_early_data by Ronald Cron · 2 years, 6 months ago
- 78c6f40 Fix code-style by Dave Rodgman · 2 years, 6 months ago
- 14f255f pkcs7: Remove unnecessary dependencies by Nick Child · 2 years, 6 months ago
- ce0caa3 oid: fix comment in #endif by Valerio Setti · 2 years, 6 months ago
- f972ce8 oid: replace ECDSA_C with new macros for ECDSA capabilities by Valerio Setti · 2 years, 6 months ago
- 0de0d86 Rebase code to restore reco-delay and fix some style issues by Xiaokang Qian · 2 years, 6 months ago
- 8dc4ce7 Fix various coding style and comment issues by Xiaokang Qian · 2 years, 6 months ago
- 6b98001 Replace session_negotiate->ciphersuite with handshake->ciphersuite_info->id by Xiaokang Qian · 2 years, 6 months ago
- 53c4c27 Update the comment of ciphersuite check for early data by Xiaokang Qian · 2 years, 6 months ago
- 64bc9bc Add comments to describe the early data behavior-encrypt/rejected... by Xiaokang Qian · 2 years, 6 months ago
- e04afdc Refine the condition of whether re-generate early keys by Xiaokang Qian · 2 years, 6 months ago
- eb31cbc Share the hash check code between ticket and external psk by Xiaokang Qian · 2 years, 6 months ago
- 4ef8ba2 Assign the ciphersuite in finalize_hrr{server_hello} by Xiaokang Qian · 2 years, 6 months ago
- bb88324 Remove useless comments of outbound switch by Xiaokang Qian · 2 years, 6 months ago
- 02f5e14 Combine the alert check of selected_id and ciphercuite by Xiaokang Qian · 2 years, 6 months ago
- 934ce6f Rename the finalize_client{server}_hello() by Xiaokang Qian · 2 years, 6 months ago
- ac4c625 Add hash check of ciphersuite for ticket psk by Xiaokang Qian · 2 years, 6 months ago
- 6be8290 Change to CCS after client hello only if we offer early data by Xiaokang Qian · 2 years, 6 months ago
- 7179f81 Restore the empty lines by Xiaokang Qian · 2 years, 6 months ago
- b584621 Refine the ciphersuite and select id check for early data by Xiaokang Qian · 2 years, 6 months ago
- 44051f6 Refine the state change after write client hello by Xiaokang Qian · 2 years, 6 months ago
- 7892b6c Refine the comment about generating early secrects in post server hello by Xiaokang Qian · 2 years, 6 months ago
- bd0ab06 Skip CCS once we proposed early data even it is rejected by Xiaokang Qian · 2 years, 6 months ago
- f6d8fd3 Improve the coding style of new lines by Xiaokang Qian · 2 years, 6 months ago
- 79f7752 Move state change to finalize client hello by Xiaokang Qian · 2 years, 6 months ago
- 3f616c2 Move selected_identity zero check to post_server_hello by Xiaokang Qian · 2 years, 7 months ago
- 1d8e86c Get hash_alg by mbedtls_psa_translate_md by Xiaokang Qian · 2 years, 7 months ago
- ea28a78 Revert new field and check ciphersuite match when resume by exist info_id by Xiaokang Qian · 2 years, 7 months ago
- 4224244 Improve coding styles and add comments by Xiaokang Qian · 2 years, 7 months ago
- 33ff868 Fix various errors by Xiaokang Qian · 2 years, 7 months ago
- 43a83f2 Move the place where call set_outbound_transform to switch handshake key by Xiaokang Qian · 2 years, 7 months ago
- 9074613 Fix compile error and warnings by Xiaokang Qian · 2 years, 7 months ago
- f10f474 Check server selected cipher suite indicating a Hash associated with the PSK by Xiaokang Qian · 2 years, 7 months ago
- 592021a Add CCS after client hello in case of early data and comp mode by Xiaokang Qian · 2 years, 7 months ago
- 303f82c5 Skip generating early secrets in some cases by Xiaokang Qian · 2 years, 7 months ago
- b46275c Add TLS1_3 guard to finalize_write_client_hello() to fix compile issue by Xiaokang Qian · 2 years, 7 months ago
- 2a67493 Pend a illeagal allert when selected_identity isn't 0 by Xiaokang Qian · 2 years, 7 months ago
- 126929f Move early keys generation into mbedtls_ssl_tls13_finalize_write_client_hello by Xiaokang Qian · 2 years, 7 months ago
- 19d4416 Refine code to remove finalize_write_end_of_early_data() by Xiaokang Qian · 2 years, 7 months ago
- 7094f66 Remove useless duplicted mbedtls_ssl_tls13_ticket_get_psk by Xiaokang Qian · 2 years, 8 months ago
- 854db28 Set hs_psk,ciphercuit_info and kex mode when writing pre-share key by Xiaokang Qian · 2 years, 8 months ago
- 57a138d Update message log for end of early data test cases by Xiaokang Qian · 2 years, 8 months ago
- 742578c Remove end_of_early_data_coordinate() to align with exist style by Xiaokang Qian · 2 years, 8 months ago
- bc75bc0 Switch to MBEDTLS_SSL_END_OF_EARLY_DATA as needed by Xiaokang Qian · 2 years, 8 months ago
- c81a15a Change the comment format of end_of_early_data by Xiaokang Qian · 2 years, 8 months ago
- 7ed30e5 Fix the issue that gnutls server doesn't support packet by Xiaokang Qian · 2 years, 8 months ago
- 8804e6d Put kex_exchange_mode in the guard of TLS13 by Xiaokang Qian · 2 years, 8 months ago
- da8402d Switch outbound back to handshake key after end_of_early_data by Xiaokang Qian · 2 years, 8 months ago
- bf09376 Remove useless prepare_write_end_of_early_data by Xiaokang Qian · 2 years, 8 months ago
- df6f52e Generate early key and switch outbound key to it after write client hello by Xiaokang Qian · 2 years, 8 months ago
- d05ac5d Add extern apis mbedtls_ticket_get_psk. by Xiaokang Qian · 2 years, 8 months ago
- 32af4fb Set ciphersuite info and kex mode in set_session in re-connection by Xiaokang Qian · 2 years, 8 months ago
- 34aab55 Add prepare function to switch transform to early keys by Xiaokang Qian · 2 years, 8 months ago
- 125afcb Add end-of-early-data write by Xiaokang Qian · 2 years, 9 months ago
- 3dafc6c pkcs7: Drop support for signature in contentInfo of signed data by Nick Child · 2 years, 6 months ago
- 5b16e9e pk_wrap: keep ECDSA_C for ECP_RESTARTABLE contexts by Valerio Setti · 2 years, 6 months ago
- dae916b X.509: Add length consistency checks to x509_get_other_name() by Hanno Becker · 6 years ago
- 2a15a0c X.509: Remove red'n bounds checks and zeroiz'n in OtherName parsing by Hanno Becker · 6 years ago