1. 2e1399f Add __attribute__ ((nonstring)) to remove unterminated-string-initialization warning by Felix Conway · 8 weeks ago
  2. fb5e2e5 Mark ssl_tls12_preset_suiteb_sig_algs const by Deomid rojer Ryabkov · 1 year, 5 months ago
  3. e3aaf82 Mark ssl_tls12_preset_default_sig_algs const by Deomid rojer Ryabkov · 1 year, 5 months ago
  4. 91b29a0 Grammar in comments by Gilles Peskine · 3 months ago
  5. 0e4907d Initialize MAC context in internal functions for one-shot MAC by Gilles Peskine · 6 months ago
  6. bbec1c1 Initialize MAC context in internal functions for KDF by Gilles Peskine · 6 months ago
  7. a7a480b Initialize driver context in setup functions by Gilles Peskine · 6 months ago
  8. cdb3781 Update obsolete section title by Gilles Peskine · 6 months ago
  9. afedef5 Constify cipher_wrap:mbedtls_cipher_base_lookup_table by Xavier Chapron · 4 months ago
  10. 1b0e2e9 Add missing ifdef for mbedtls_ssl_tls13_exporter by Max Fillinger · 4 months ago
  11. 40c2024 Add label_len argument to non-PSA tls_prf_generic by Max Fillinger · 4 months ago
  12. 5122dc6 Fix mistake in previous comment change by Max Fillinger · 8 months ago
  13. 7833b18 Fix HkdfLabel comment by Max Fillinger · 8 months ago
  14. 529931a Allow maximum label length in Hkdf-Expand-Label by Max Fillinger · 8 months ago
  15. 76bb753 Fix max. label length in key material exporter by Max Fillinger · 9 months ago
  16. 97a2879 Document BAD_INPUT_DATA error in key material exporter by Max Fillinger · 9 months ago
  17. 8ee2141 Use one maximum key_len for all exported keys by Max Fillinger · 9 months ago
  18. e95edbf Fix output size check for key material exporter by Max Fillinger · 9 months ago
  19. ffc47e6 Increase allowed output size of HKDF-Expand-Label by Max Fillinger · 9 months ago
  20. 8fa7252 Fix #endif comment by Max Fillinger · 9 months ago
  21. 951b886 Create MBEDTLS_SSL_KEYING_MATERIAL_EXPORT option by Max Fillinger · 9 months ago
  22. 7b52328 Remove TLS 1.2 Exporter if we don't have randbytes by Max Fillinger · 10 months ago
  23. 92d2930 Revert "Store randbytes for TLS 1.2 TLS-Exporter" by Max Fillinger · 10 months ago
  24. 6c02ea8 Use fewer magic numbers in TLS-Exporter functions by Max Fillinger · 10 months ago
  25. 76077e2 Add label length argument to tls_prf_generic() by Max Fillinger · 10 months ago
  26. 85b33ee Store randbytes for TLS 1.2 TLS-Exporter by Max Fillinger · 10 months ago
  27. 0118293 Fix build when one of TLS 1.2 or 1.3 is disabled by Max Fillinger · 11 months ago
  28. 9359f4d Fix coding style by Max Fillinger · 11 months ago
  29. 3be83a7 Fix mismatches in function declarations by Max Fillinger · 12 months ago
  30. 1466bf8 Fix key_len check in TLS-Exporter by Max Fillinger · 12 months ago
  31. 404f7a3 Simplify mbedtls_ssl_tls13_exporter by Max Fillinger · 12 months ago
  32. 29f79ea Fix commented out function declaration by Max Fillinger · 12 months ago
  33. 44042f0 Implement TLS-Exporter feature by Max Fillinger · 1 year ago
  34. 544fdc6 Fix printf of enum by Gilles Peskine · 5 months ago
  35. ad84044 Test split, coalesced-split and empty handshake records by Gilles Peskine · 5 months ago
  36. da5f5b2 Add a log message on every SSL state transition by Gilles Peskine · 5 months ago
  37. 49f179d Always call mbedtls_ssl_handshake_set_state by Gilles Peskine · 5 months ago
  38. 05657d9 Revert "Add auto-generated files" by Minos Galanakis · 5 months ago
  39. 22098d4 Add auto-generated files by Minos Galanakis · 5 months ago mbedtls-3.6.3 v3.6.3
  40. e62ef05 Version Bump for 3.6.3 by Minos Galanakis · 5 months ago
  41. 7a95d16 Merge branch 'mbedtls-3.6-restricted' into mbedtls-3.6.3rc0-pr by Minos Galanakis · 5 months ago
  42. b6ad19b Merge pull request #9976 from mpg/defragment-ext-test-3.6 by Manuel Pégourié-Gonnard · 5 months ago gh-readonly-queue/mbedtls-3.6/pr-9976-d3ca688b4b2ab2dcb66ce311f16f3ef909a5fdd8
  43. dfc8e43 Merge remote-tracking branch 'upstream/mbedtls-3.6' into pre-3.6.3-upstream-merge by Minos Galanakis · 5 months ago
  44. c03cd11 Merge pull request #10025 from waleed-elmelegy-arm/mbedtls-3.6-fix-key-deriv-bad-state-error by Gilles Peskine · 5 months ago
  45. 051b1e2 Reduce the level of logging used in tests by Manuel Pégourié-Gonnard · 5 months ago
  46. 00ad6f6 New test function inject_client_content_on_the_wire() by Manuel Pégourié-Gonnard · 6 months ago
  47. 3dbe333 Merge pull request #10051 from Vge0rge/key_id_range_backport by Gilles Peskine · 5 months ago
  48. 26f0044 Merge pull request #1319 from davidhorstmann-arm/calc-finished-check-return-3.6 by David Horstmann · 5 months ago
  49. 104bd06 Merge remote-tracking branch 'origin/features/tls-defragmentation/3.6' into feature_merge_defragmentation_36 by Minos Galanakis · 5 months ago
  50. 43f636f Merge pull request #1316 from gilles-peskine-arm/zeroize-psa-202503-3.6 by Gilles Peskine · 5 months ago
  51. d5e64f7 PSA core: Allow enabling one volatile/builtin key by Georgios Vasilakis · 5 months ago
  52. 8a4ec49 Cleanly reject non-HS in-between HS fragments by Manuel Pégourié-Gonnard · 5 months ago
  53. 443908b Replace zero by PSA_ALG_NONE in key derivation input functions by Waleed Elmelegy · 5 months ago
  54. b5ef7da TLS1.2: Check for failures in Finished calculation by David Horstmann · 5 months ago
  55. c22e315 Fix a log message by Gilles Peskine · 5 months ago
  56. 229e200 Note unused variables when debugging is disabled by Gilles Peskine · 5 months ago
  57. dee9263 Pacify uncrustify by Gilles Peskine · 5 months ago
  58. ce726b2 Fix uninitialized variable by Gilles Peskine · 5 months ago
  59. 0a467cc Unify handshake fragment log messages by Gilles Peskine · 5 months ago
  60. b888cca Fix handshake defragmentation when the record has multiple messages by Gilles Peskine · 5 months ago
  61. 3175fc3 Fix end check before memmove by Gilles Peskine · 5 months ago
  62. 184cac1 Zeroize temporary heap buffers used when deriving an ECC key by Gilles Peskine · 5 months ago
  63. e847afd Zeroize temporary heap buffers used in PSA operations by Gilles Peskine · 5 months ago
  64. 58c3301 Make conversion explicit to silence MSVC warning by Gilles Peskine · 5 months ago
  65. 302f37b Fix dodgy printf calls by Gilles Peskine · 5 months ago
  66. cc856a2 Handshake defragmentation: reassemble incrementally by Gilles Peskine · 5 months ago
  67. 22c51b9 mbedtls_ssl_prepare_handshake_record(): log offsets after decryption by Gilles Peskine · 5 months ago
  68. af0c461 mbedtls_ssl_prepare_handshake_record(): refactor first fragment prep by Gilles Peskine · 5 months ago
  69. 1e81d34 Tweak handshake fragment log message by Gilles Peskine · 5 months ago
  70. 3d490a9 Tweak "waiting for more handshake fragments" log message by Gilles Peskine · 5 months ago
  71. 82cd324 Fix code style for key derivation input function by Waleed Elmelegy · 5 months ago
  72. 72b391f Fix psa_key_derivation_input_integer() not detecting bad state by Waleed Elmelegy · 5 months ago
  73. 05b3835 psa: move definition of psa_can_do_hash() to crypto_extra.h by Valerio Setti · 6 months ago
  74. 4726d20 Remove unused variable in ssl_server.c by Waleed Elmelegy · 6 months ago
  75. 2878a05 Remove obselete checks due to the introduction of handhsake defragmen... by Deomid rojer Ryabkov · 6 months ago
  76. cb72cd2 Don't reset badmac_seen on a DTLS client reconnect by Gilles Peskine · 6 months ago
  77. b710599 Merge in_hsfraglen with badmac_seen_or_in_hsfraglen by Gilles Peskine · 6 months ago
  78. ebdd405 Change the type of in_hsfraglen to unsigned by Gilles Peskine · 6 months ago
  79. f6a676d Rename badmac_seen to badmac_seen_or_in_hsfraglen by Gilles Peskine · 6 months ago
  80. 69f8f45 Minor readability improvement by Gilles Peskine · 6 months ago
  81. bbe8745 Remove in_hshdr by Deomid rojer Ryabkov · 6 months ago
  82. 85ec2b3 Add a safety check for in_hsfraglen by Deomid rojer Ryabkov · 6 months ago
  83. 5c853ea Allow fragments less HS msg header size (4 bytes) by Deomid rojer Ryabkov · 6 months ago
  84. 96e2290 Remove mbedtls_ssl_reset_in_out_pointers by Deomid rojer Ryabkov · 6 months ago
  85. 1f4088c Review comments by Deomid rojer Ryabkov · 7 months ago
  86. 3fc5a4d Defragment incoming TLS handshake messages by Deomid rojer Ryabkov · 1 year, 5 months ago
  87. 2c33c75 Require calling mbedtls_ssl_set_hostname() for security by Gilles Peskine · 6 months ago
  88. 6b88594 Keep track of whether mbedtls_ssl_set_hostname() has been called by Gilles Peskine · 6 months ago
  89. e61852e Access ssl->hostname through abstractions by Gilles Peskine · 6 months ago
  90. 4847765 Update tf-psa-crypto/drivers/builtin/src/ecp.c by minosgalanakis · 12 months ago
  91. abf9f1a PSA interruptible sign/verify: detect invalid curve family in start by Gilles Peskine · 8 months ago
  92. 9058998 Merge pull request #9796 from gilles-peskine-arm/psa-storage-test-cases-never-supported-positive-3.6 by Gilles Peskine · 7 months ago
  93. 8e8dabd Merge pull request #9830 from gilles-peskine-arm/9798-backport-3.6 by Janos Follath · 7 months ago
  94. bc3f917 crypto_config.h: Don't list mechanisms that are not implemented by Gilles Peskine · 7 months ago
  95. e65428e Specify previously missed XMM register clobbers in AES-NI asm blocks by Solar Designer · 8 months ago
  96. 98910a1 Specify register clobbers in mbedtls_aesni_crypt_ecb() by Solar Designer · 8 months ago
  97. a770f30 Merge pull request #9782 from gilles-peskine-arm/psa-storage-test-cases-never-supported-preliminaries-3.6 by Janos Follath · 8 months ago
  98. aebe857 Added debug print in tls13 ssl_tls13_write_key_share_ext by Nadav Tasher · 9 months ago
  99. 7e6d4c1 Make mbedTLS compile with MS-DOS DJGPP by SuperIlu · 8 months ago
  100. 8a8aa59 PSA interruptible sign/verify: detect unsupported mechanism in start by Gilles Peskine · 9 months ago