1. 3ea75b3 Fix SSLv3 MAC computation by Manuel Pégourié-Gonnard · 8 years ago
  2. 917969e Merge branch 'mbedtls-1.3' into mbedtls-1.3-restricted by Manuel Pégourié-Gonnard · 8 years ago
  3. ccbbfdf Merge remote-tracking branch 'public/pr/1186' into mbedtls-1.3 by Manuel Pégourié-Gonnard · 8 years ago
  4. 3790b47 Merge branch 'mbedtls-1.3' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  5. 4905e6c Merge branch 'pr_1045' into mbedtls-1.3 by Gilles Peskine · 8 years ago
  6. 6e20636 Merge remote-tracking branch 'upstream-public/pr/1175' into mbedtls-1.3 by Gilles Peskine · 8 years ago
  7. 258bf59 Merge remote-tracking branch 'upstream-restricted/pr/426' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  8. bb709d7 Fix build without MBEDTLS_FS_IO by Gilles Peskine · 8 years ago
  9. af86fb9 Merge branch 'mbedtls-1.3' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  10. 3a3228c Merge remote-tracking branch 'upstream-public/pr/1155' into mbedtls-1.3 by Gilles Peskine · 8 years ago
  11. 9f423b1 Merge remote-tracking branch 'upstream-public/pr/917' into mbedtls-1.3 by Gilles Peskine · 8 years ago
  12. 2cd7c18 Merge branch 'mbedtls-1.3' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  13. 8c94611 Merge branch 'pr_1083' into mbedtls-1.3 by Gilles Peskine · 8 years ago
  14. f15cbda Merge remote-tracking branch 'upstream-public/pr/1109' into mbedtls-1.3 by Gilles Peskine · 8 years ago
  15. f945a22 Merge remote-tracking branch 'upstream-public/pr/944' into mbedtls-1.3 by Gilles Peskine · 8 years ago
  16. 6f941d6 Merge remote-tracking branch 'upstream-restricted/pr/423' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  17. b087a88 Merge remote-tracking branch 'upstream-restricted/pr/405' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  18. 2bd6ca4 Merge remote-tracking branch 'upstream-restricted/pr/402' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  19. d3dd8d2 Merge remote-tracking branch 'upstream-restricted/pr/387' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  20. b662cc1 Avoid uninitialized variable warning in entropy_gather_internal by Gilles Peskine · 8 years ago
  21. 3036cbe Merge branch 'mbedtls-1.3' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  22. e298532 Merge remote-tracking branch 'upstream-public/pr/1113' into mbedtls-1.3 by Gilles Peskine · 8 years ago
  23. 1dc3443 Merge branch 'iotssl-1368-unsafe-bounds-check-psk-identity-merge-1.3' into mbedtls-1.3-restricted by Gilles Peskine · 8 years ago
  24. 408dfd1 Merge remote-tracking branch 'restricted/pr/418' into mbedtls-1.3-restricted by Manuel Pégourié-Gonnard · 8 years ago
  25. 0a139f9 Modify debug output by Hanno Becker · 8 years ago
  26. fdac76f Add checks for private parameter in ecdsa_sign() by Darryl Green · 8 years ago
  27. 251bab5 Fix heap corruption in ssl_decrypt_buf by Hanno Becker · 8 years ago
  28. c210289 Zeroize stack before returning from mpi_fill_random by Hanno Becker · 8 years ago
  29. 754663f Fix information leak in ecp_gen_keypair_base by Hanno Becker · 8 years ago
  30. 0727ca4 Make mpi_read_binary time constant by Hanno Becker · 8 years ago
  31. bfd0991 Fix handling of HS msgs in ssl_read if renegotiation unused by Hanno Becker · 8 years ago
  32. 268191a Swap branches accepting/refusing renegotiation in in ssl_read by Hanno Becker · 8 years ago
  33. 28474f4 RSA PSS: remove redundant check; changelog by Gilles Peskine · 8 years ago
  34. 5d9224e RSA PSS: fix first byte check for keys of size 8N+1 by Gilles Peskine · 8 years ago
  35. 7addb7f RSA PSS: fix minimum length check for keys of size 8N+1 by Gilles Peskine · 8 years ago
  36. 511bb84 RSA: Fix another buffer overflow in PSS signature verification by Gilles Peskine · 8 years ago
  37. 55db24c RSA: Fix buffer overflow in PSS signature verification by Gilles Peskine · 8 years ago
  38. 7c02d13 Correctly handle leap year in x509_date_is_valid() by Andres AG · 9 years ago
  39. 4491a79 Parse Signature Algorithm ext when renegotiating by Ron Eldor · 8 years ago
  40. cf42873 Fix coding style in x509_parse_int() by Andres Amaya Garcia · 8 years ago
  41. 876214c Change param type for x509_parse_int() to fix warn by Andres Amaya Garcia · 8 years ago
  42. 8388be3 Add brackets around net.c macro arguments by Andres Amaya Garcia · 8 years ago
  43. a4d1857 Fix type in net.c comment by Andres Amaya Garcia · 8 years ago
  44. 6e5e9aa Fix MSVC warning in net.c by Andres Amaya Garcia · 8 years ago
  45. ef4acc5 Minor style and typo corrections by Hanno Becker · 8 years ago
  46. 7c3c97a Don't add extensions for X.509 non-v3 certificates by Hanno Becker · 8 years ago
  47. 3c89dca Omit version from X.509 v1 certificates by Hanno Becker · 8 years ago
  48. b9ac47c Make ssl_set_hostname safe to be called multiple times by Hanno Becker · 8 years ago
  49. 20f4c78 Correct parsing checks in `pk_parse_key` by Hanno Becker · 8 years ago
  50. 1d23339 Remove unreachable branches in pkparse.c by Hanno Becker · 8 years ago
  51. 1f30fa1 Remove unnecessary cast by Hanno Becker · 8 years ago
  52. b299a37 Add missing calls to pem_free in pk_parse by Hanno Becker · 8 years ago
  53. 713c9e1 Use in-place decryption in pk_parse_pkcs8_encrypted_der by Hanno Becker · 8 years ago
  54. 2bc85eb Fix extraction of signature-type from PK context instance by Hanno Becker · 8 years ago
  55. 77359c9 DHM: Fix dhm_check_range() always returning 0 by Janos Follath · 8 years ago
  56. 3d98b97 Modify zeroize internal buffers in md modules by Andres Amaya Garcia · 8 years ago
  57. adb9bd2 Add internal macro ENTROPY_HAVE_DEFAULT indicating default entropy by Hanno Becker · 8 years ago
  58. 27ce0b5 Backport 1.3:Set PEM buffer to zero before freeing it by Ron Eldor · 8 years ago
  59. 03bd022 Update version to 1.3.21 by Simon Butcher · 8 years ago
  60. e13b54e Change PK module preprocessor check on word size by Andres Amaya Garcia · 8 years ago
  61. ab3fbc2 Rename time and index parameter to avoid name conflict. by Hanno Becker · 8 years ago
  62. 5308f47 Fix implementation-defined integer conversion by Janos Follath · 8 years ago
  63. 77644f2 Improve comments by Manuel Pégourié-Gonnard · 8 years ago
  64. d0e7557 Only return VERIFY_FAILED from a single point by Manuel Pégourié-Gonnard · 8 years ago
  65. 8af7bfa Improve behaviour on fatal errors by Manuel Pégourié-Gonnard · 8 years ago
  66. 3df4e4e Prevent signed integer overflow in CSR parsing by Andres AG · 8 years ago
  67. 47f3059 Fix potential integer overflow parsing DER CRT by Andres AG · 8 years ago
  68. 26124be Fix potential integer overflow parsing DER CRL by Andres AG · 8 years ago
  69. 57501ef Backport 1.3: Check rc of mbedtls_mpi_fill_random by Ron Eldor · 9 years ago
  70. 454da1f Backport 1.3: Resource leak fix on windows by Ron Eldor · 9 years ago
  71. 7771824 Backport 1.3: Wrong preproccessor condition fix by Ron Eldor · 9 years ago
  72. 4f1e64e Backport 1.3: check if iv is zero in gcm. by Ron Eldor · 9 years ago
  73. 2d829fb Zeroize buf if mbedtls_base64_decode() fails by Andres Amaya Garcia · 8 years ago
  74. 1bfa46a Zeroize tmp buffer in entropy_update() by Andres Amaya Garcia · 8 years ago
  75. c0dc5b5 Zeroize tmp buf in ctr_drbg_write_seed_file() by Andres Amaya Garcia · 8 years ago
  76. f4660aa Zeroize heap buf on failure in pem.c by Andres Amaya Garcia · 8 years ago
  77. a0ae1db Zeroize buffers in various modules by Andres Amaya Garcia · 8 years ago
  78. c381444 Zeroize tmp buf in mbedtls_mpi_fill_random() by Andres Amaya Garcia · 8 years ago
  79. dd47178 Zeroize tmp bufs in ctr_drbg.c functions by Andres Amaya Garcia · 8 years ago
  80. ff13995 Zeroize return buf on failure in pkparse.c by Andres Amaya Garcia · 8 years ago
  81. beb4283 Zeroize tmp bufs in hmac_drbg.c functions by Andres Amaya Garcia · 8 years ago
  82. fa6fa68 Zeroize tmp bufs in entropy.c functions by Andres Amaya Garcia · 8 years ago
  83. f148312 Zeroize tmp buf on fail in load_file() dhm.c by Andres Amaya Garcia · 8 years ago
  84. b2ee6b4 Prevent bounds check bypass through overflow in PSK identity parsing by Hanno Becker · 8 years ago
  85. 8a2855e Update the version number to 1.3.20 by Simon Butcher · 8 years ago mbedtls-1.3.20
  86. b870179 Merge remote-tracking branch 'restricted/iotssl-1398_backport-1.3' into mbedtls-1.3-restricted by Manuel Pégourié-Gonnard · 8 years ago
  87. 249c30c Merge branch 'mbedtls-1.3' into mbedtls-1.3-restricted by Manuel Pégourié-Gonnard · 8 years ago
  88. 5745778 Don't parse or write extensions in SSLv3 by Hanno Becker · 8 years ago
  89. 7d81093 Merge remote-tracking branch 'restricted/1205' into mbedtls-1.3-restricted by Manuel Pégourié-Gonnard · 8 years ago
  90. 0401a3d Ensure application data records are not kept when fully processed by Hanno Becker · 8 years ago
  91. ce8f919 Merge remote-tracking branch 'restricted/iotssl-1138-rsa-padding-check-1.3-restricted' into mbedtls-1.3-restricted by Manuel Pégourié-Gonnard · 8 years ago
  92. 9105b18 Merge remote-tracking branch 'restricted/IOTSSL-1366/mbedtls-1.3' into mbedtls-1.3-restricted by Manuel Pégourié-Gonnard · 8 years ago
  93. ca3ff06 Merge remote-tracking branch 'hanno/mpi_read_file_underflow_backport-1.3' into mbedtls-1.3 by Manuel Pégourié-Gonnard · 8 years ago
  94. f1ab790 Merge remote-tracking branch 'hanno/sliding_exponentiation_backport-1.3' into mbedtls-1.3 by Manuel Pégourié-Gonnard · 8 years ago
  95. 48ed550 Fix name, documentation & location of config flag by Manuel Pégourié-Gonnard · 8 years ago
  96. 1bf86b7 Add hard assertion to ssl_read_record by Hanno Becker · 8 years ago
  97. d37839e Fix mbedtls_ssl_read by Hanno Becker · 8 years ago
  98. 10699cc Simplify retaining of messages for future processing by Hanno Becker · 8 years ago
  99. 888c2fd Fix implementation of VERIFY_OPTIONAL verification mode by Hanno Becker · 8 years ago
  100. a9ec0cd Restrict MD5 in x509 certificates by Ron Eldor · 8 years ago