- 4823624 Fix carelessly copy pasted comment by Paul Elliott · 4 years, 5 months ago
- 490c5d4 Fix constant flow mask maths by Paul Elliott · 4 years, 5 months ago
- 6f69d4c Remove multiplication from conditional assignments by Paul Elliott · 4 years, 5 months ago
- e8ee0f1 Fix Non CF access to table in base64 decrypt by Paul Elliott · 4 years, 5 months ago
- 6a66737 Optimise unneccesary cf table accesses away by Paul Elliott · 4 years, 5 months ago
- 86cb928 Fix incorrect assumptions about the size of size_t by Paul Elliott · 4 years, 5 months ago
- f13a47b Fixes for MSVC warnings by Paul Elliott · 4 years, 5 months ago
- 738d231 Attempt to make Base64 table access constant flow by Paul Elliott · 4 years, 6 months ago
- bcfa417 Merge pull request #782 from chris-jones-arm/mbedtls-2.16-restricted by Janos Follath · 4 years, 8 months ago
- ad59a2a Fix potential DoS by limiting number sizes in exponentiation by Chris Jones · 4 years, 8 months ago
- 027b601 Add tag check to cert algorithm check by Paul Elliott · 4 years, 9 months ago
- 0525114 Handle random generator failure in mbedtls_mpi_fill_random() by Gilles Peskine · 4 years, 8 months ago
- 70f7f67 Put local variables and buffers in a struct by gabor-mezei-arm · 5 years ago
- f21639f Zeroize internal buffers and variables in MD hashes by gabor-mezei-arm · 5 years ago
- 5feba8d Force cleanup before return by gabor-mezei-arm · 5 years ago
- d5253bb Zeroize internal buffers and variables in PKCS and SHA by gabor-mezei-arm · 5 years ago
- ab9ec32 Fix a typo in a comment by Manuel Pégourié-Gonnard · 5 years ago
- f082847 Add an option to test constant-flow with valgrind by Manuel Pégourié-Gonnard · 5 years ago
- 590b2d9 Add mbedtls_ssl_cf_memcpy_offset() with tests by Manuel Pégourié-Gonnard · 5 years ago
- ce45d1a Use temporary buffer to hold the peer's HMAC by Manuel Pégourié-Gonnard · 5 years ago
- f0b469e Merge branch 'mbedtls-2.16' into mbedtls-2.16-restricted by Manuel Pégourié-Gonnard · 5 years ago
- 14cb46d Merge pull request #3598 from makise-homura/mbedtls-2.16 by Gilles Peskine · 5 years ago
- 8c3fa63 A different approach of signed-to-unsigned comparison by makise-homura · 5 years ago
- 50f6a19 Backport e2k support to mbedtls-2.7 by makise-homura · 5 years ago
- a2947ac Update copyright notices to use Linux Foundation guidance by Bence Szépkúti · 5 years ago
- b9c64e4 Merge pull request #3558 from gufe44/net-sockets-fixes-2.16 by Manuel Pégourié-Gonnard · 5 years ago
- 19735b6 Fix building on NetBSD 9.0 by gufe44 · 5 years ago
- 4ca6050 Merge pull request #734 from gilles-peskine-arm/x509parse_crl-empty_entry-2.16 by Gilles Peskine · 5 years ago
- 9acf943 Merge pull request #3560 from gufe44/netbsd-rand-arc4random_buf-2.16 by Gilles Peskine · 5 years ago
- 3fa7c64 Use arc4random_buf instead of rand on NetBSD by gufe44 · 5 years ago
- 0ca801a Merge pull request #732 from gabor-mezei-arm/689_bp216_zeroising_of_plaintext_buffers by Gilles Peskine · 5 years ago
- de7e036 Merge pull request #3489 from CodeMonkeyLeet/mbedtls-2.16_backport_3464 by Gilles Peskine · 5 years ago
- 6579235 x509_crl_parse: fix 1-byte buffer overflow and entry->raw.tag by Gilles Peskine · 5 years ago
- f1ef895 Merge pull request #728 from mpg/ct-varlen-hmac-2.16 by Manuel Pégourié-Gonnard · 5 years ago
- 3eaa103 Zeroising of plaintext buffers to erase unused application data from memory by gabor-mezei-arm · 5 years ago
- e1b1fff Add comment that was lost while backporting by Manuel Pégourié-Gonnard · 5 years ago
- 253b0de Remove use of C99 construct by Manuel Pégourié-Gonnard · 5 years ago
- 09ac297 Add missing const for consistency by Manuel Pégourié-Gonnard · 5 years ago
- 94fd8dc Fix typos in comments by Manuel Pégourié-Gonnard · 5 years ago
- 5bb6f3c Check errors from the MD layer by Manuel Pégourié-Gonnard · 5 years ago
- a6c1317 Remove unnecessary cast by Manuel Pégourié-Gonnard · 5 years ago
- 74503bb Improve some comments and internal documentation by Manuel Pégourié-Gonnard · 5 years ago
- 1e94128 Factor repeated condition to its own macro by Manuel Pégourié-Gonnard · 5 years ago
- de02b58 Implement cf_hmac() actually with constant flow by Manuel Pégourié-Gonnard · 5 years ago
- a237722 Add MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN by Manuel Pégourié-Gonnard · 5 years ago
- 368fc65 Use existing implementation of cf_hmac() by Manuel Pégourié-Gonnard · 5 years ago
- fde7505 Add dummy constant-flow HMAC function with tests by Manuel Pégourié-Gonnard · 5 years ago
- a60d0f2 Factor repeated preprocessor condition to a macro by Manuel Pégourié-Gonnard · 5 years ago
- 87a602d Clarify some comments by Manuel Pégourié-Gonnard · 5 years ago
- cadcf4c Fix memory leak on error path by Manuel Pégourié-Gonnard · 5 years ago
- 49e94e3 RSA: blind call to mpi_inv_mod() on secret value by Manuel Pégourié-Gonnard · 5 years ago
- 86ad5be RSA: remove redundant GCD call in prepare_blinding() by Manuel Pégourié-Gonnard · 5 years ago
- d96edbc DHM: blind call to mpi_inv_mod() on secret value by Manuel Pégourié-Gonnard · 5 years ago
- 41ee839 DHM: make drawing of blinding value a function by Manuel Pégourié-Gonnard · 5 years ago
- 1535a43 Revise comments for x509write_csr_der_internal by Simon Leet · 5 years ago
- afc2717 Avoid stack-allocation of large memory buffers by Doru Gucea · 7 years ago
- c33e921 Avoid use of large stack buffers in mbedtls_x509_write_crt_pem() by Hanno Becker · 6 years ago
- eeea9ea Perform CRT writing in-place on the output buffer by Hanno Becker · 6 years ago
- beaf396 Adapt x509write_crt.c to coding style by Hanno Becker · 6 years ago
- ef5f8fc Bump version to Mbed TLS 2.16.7 by Janos Follath · 5 years ago
- f69b919 Merge branch 'mbedtls-2.16-restricted' into mbedtls-2.16.7r0 by Janos Follath · 5 years ago
- 3a1944a Merge pull request #704 from mpg/l13-hw-starts-finish-2.16-restricted by Manuel Pégourié-Gonnard · 5 years ago
- 2df1423 Test multi-block output of the hash-based KDF by Manuel Pégourié-Gonnard · 5 years ago
- 2df5857 Remove SHA-1 as a fallback option by Manuel Pégourié-Gonnard · 5 years ago
- 20cd85c Use starts/finish around Lucky 13 dummy compressions by Manuel Pégourié-Gonnard · 5 years ago
- 7d7c004 Improve comment justifying a hard-coded limitation by Manuel Pégourié-Gonnard · 5 years ago
- a90a95b Zeroize temporary stack buffer by Manuel Pégourié-Gonnard · 5 years ago
- 301a9ee Fix potential memory overread in seed functions by Manuel Pégourié-Gonnard · 5 years ago
- 72177e3 Add fall-back to hash-based KDF for internal ECP DRBG by Manuel Pégourié-Gonnard · 5 years ago
- 0defc57 Fix typo in a comment by Manuel Pégourié-Gonnard · 5 years ago
- 18b0b3c Avoid superflous randomization with restartable by Manuel Pégourié-Gonnard · 5 years ago
- c7295f5 Use HMAC_DRBG by default for ECP internal DRBG by Manuel Pégourié-Gonnard · 5 years ago
- c334f41 Skip redundant checks for NULL f_rng by Manuel Pégourié-Gonnard · 5 years ago
- 047986c Add support for RESTARTABLE with internal RNG by Manuel Pégourié-Gonnard · 5 years ago
- d18f051 Move internal drbg init to specific mul functions by Manuel Pégourié-Gonnard · 5 years ago
- fb11d25 Implement use of internal DRBG for ecp_mul() by Manuel Pégourié-Gonnard · 5 years ago
- 23983f3 Add config.h option MBEDTLS_ECP_NO_INTERNAL_RNG by Manuel Pégourié-Gonnard · 5 years ago
- f744bd7 Update license headers to Apache-2.0 OR GPL-2.0-or-later by Bence Szépkúti · 5 years ago
- 32b629d ssl_client: Align line breaking with MBEDTLS_SSL_DEBUG_* by Ronald Cron · 5 years ago
- 157cffe Use defines to check alpn ext list validity by Ronald Cron · 5 years ago
- f250380 Return error in case of bad user configurations by Hanno Becker · 8 years ago
- d729602 Add error condition for bad user configurations by Hanno Becker · 8 years ago
- f8f61aa Uniformize bounds checks using new macro by Hanno Becker · 8 years ago
- 711eea3 Remove unnecessary MBEDTLS_ECP_C preprocessor condition by Ronald Cron · 5 years ago
- 35f8a54 Shorten lines in library/ssl_cli.c to at most 80 characters by Hanno Becker · 8 years ago
- 8f39726 Introduce macros for constants in SSL ticket implementation by Hanno Becker · 7 years ago
- 001eb3c Merge pull request #3411 from gilles-peskine-arm/montmul-cmp-branch-2.16 by Janos Follath · 5 years ago
- de719d5 Clean up some comments by Gilles Peskine · 5 years ago
- 08fd43c mbedtls_mpi_sub_abs: check the range of the result when it happens by Gilles Peskine · 5 years ago
- 635a374 Simplify the final reduction in mpi_montmul by Gilles Peskine · 5 years ago
- 36acd54 Move carry propagation out of mpi_sub_hlp by Gilles Peskine · 5 years ago
- 46bf7da More logical parameter order for mpi_sub_hlp by Gilles Peskine · 5 years ago
- 6a9433e Explicitly cast down from mbedtls_mpi_uint to unsigned char by Gilles Peskine · 5 years ago
- 8f67266 Remove a secret-dependent branch in Montgomery multiplication by Gilles Peskine · 5 years ago
- c81c588 Separate out low-level mpi_safe_cond_assign by Gilles Peskine · 5 years ago
- 3ce3ddf Document some internal bignum functions by Gilles Peskine · 5 years ago
- bdcb396 Revert "Shut up a clang-analyzer warning" by Gilles Peskine · 5 years ago
- e9073a6 Add a const annotation to the non-changing argument of mpi_sub_mul by Gilles Peskine · 5 years ago
- 62b293d Merge pull request #3352 from gilles-peskine-arm/fix-ecp-mul-memory-leak-2.16 by Manuel Pégourié-Gonnard · 5 years ago
- d2f0073 Re-generate error.c by Gilles Peskine · 5 years ago