1. 250a612 Merge pull request #6212 from tom-cosgrove-arm/explicit-warning-re-ct-conditions-not-0-or-1-2.28 by Gilles Peskine · 3 years ago
  2. 81e7423 ssl_tls12_server: fix potential NULL-dereferencing if local certificate was not set. by Leonid Rozenboim · 3 years ago
  3. f211d82 Be explicit about constant time bignum functions that must take a 0 or 1 condition value by Tom Cosgrove · 3 years ago
  4. f222b8e Merge pull request #6161 from daverodgman/backport-cert-symlink by Gilles Peskine · 3 years ago
  5. ddc3845 Merge pull request #6168 from mman/mbedtls-2.28 by Gilles Peskine · 3 years ago
  6. 43dedd8 Use double quotes to include private header file psa_crypto_cipher.h by Martin Man · 3 years ago
  7. 6f227ee Remove use of lstat by Dave Rodgman · 3 years, 1 month ago
  8. 2958bb3 Spelling and grammar improvements by Dave Rodgman · 3 years, 1 month ago
  9. 168bcd6 Don't increase failure count for dangling symlinks by Dave Rodgman · 3 years, 1 month ago
  10. 32ffb2b x509_crt: handle properly broken links when looking for certificates by Eduardo Silva · 6 years ago
  11. 5205c97 Fix a/an typos in doxygen and other comments by Tom Cosgrove · 3 years ago
  12. fe9d08f Bump version by Dave Rodgman · 3 years, 1 month ago
  13. df275c4 Merge remote-tracking branch 'restricted/mbedtls-2.28-restricted' into mbedtls-2.28.1rc0-pr by Dave Rodgman · 3 years, 1 month ago
  14. 77473eb Clarify the need for calling mbedtls_ssl_derive_keys after extension parsing by Andrzej Kurek · 3 years, 1 month ago
  15. c87d97b Rearrange the session resumption code by Andrzej Kurek · 3 years, 2 months ago
  16. 06986de Merge pull request #6066 from AndrzejKurek/fix-some-resource-leaks-2-28 by Paul Elliott · 3 years, 1 month ago
  17. cd5e671 Add a changelog entry for pkparse bugs by Andrzej Kurek · 3 years, 1 month ago
  18. b39b499 Add pem_free() to other error paths in pk_parse_public_key() by Paul Elliott · 3 years, 3 months ago
  19. 763ee3c Fix resource leaks by Leonid Rozenboim · 3 years, 4 months ago
  20. 0ae1c1c Merge pull request #5991 from gilles-peskine-arm/asn1write-0-fix-2.28 by Ronald Cron · 3 years, 1 month ago
  21. 24ed2ca Fix the wrong variable being used for TLS record size checks by Paul Elliott · 3 years, 2 months ago
  22. bb34fee Fix bug whereby 0 was written as 0200 rather than 020100 by Gilles Peskine · 3 years, 2 months ago
  23. 06c5e92 Merge pull request #5863 from wernerlewis/csr_subject_comma_2.28 by Gilles Peskine · 3 years, 1 month ago
  24. c9529f9 Fix null pointer dereference in mpi_mod_int(0, 2) by Gilles Peskine · 3 years, 2 months ago
  25. 4118092 Merge pull request #5825 from polhenarejos/mbedtls-2.28 by Dave Rodgman · 3 years, 1 month ago
  26. 1421efa Fix case where final special char exceeds buffer by Werner Lewis · 3 years, 1 month ago
  27. d904d66 Mark static int SSL functions CHECK_RETURN_CRITICAL by Manuel Pégourié-Gonnard · 3 years, 2 months ago
  28. 06e1fcd Add comments when can_do() is safe to use by Manuel Pégourié-Gonnard · 3 years, 2 months ago
  29. d80d8a4 Add negative tests for opaque mixed-PSK (server) by Manuel Pégourié-Gonnard · 3 years, 2 months ago
  30. a49a00c Add negative tests for opaque mixed-PSK (client) by Manuel Pégourié-Gonnard · 3 years, 2 months ago
  31. b9c7ea4 Improve a comment. by Manuel Pégourié-Gonnard · 3 years, 2 months ago
  32. 5b3f24f Fix unchecked return value from internal function by Manuel Pégourié-Gonnard · 3 years, 2 months ago
  33. 37e5999 Fix potential buffer overread with USE_PSA by Manuel Pégourié-Gonnard · 3 years, 2 months ago
  34. 4353d3d Split a debug message into two - for clarity by Andrzej Kurek · 3 years, 2 months ago
  35. 33f41a8 Add the mbedtls prefix to ssl_check_dtls_clihlo_cookie by Andrzej Kurek · 3 years, 2 months ago
  36. 862acb8 Add cookie parsing tests to test_suite_ssl by Andrzej Kurek · 3 years, 2 months ago
  37. e5af9fa Add missing sid_len in calculations of cookie sizes by Andrzej Kurek · 3 years, 2 months ago
  38. f333dfa More SSL debug messages for ClientHello parsing by Gilles Peskine · 3 years, 6 months ago
  39. 02c9d3b Fix parsing of special chars in X509 DN values by Werner Lewis · 3 years, 3 months ago
  40. ce02537 Merge pull request #5828 from wernerlewis/time_utc_2.28 by Dave Rodgman · 3 years, 2 months ago
  41. 1b54a05 Use ASN1 UTC tags for dates before 2000 by Werner Lewis · 3 years, 3 months ago
  42. b830028 Fix uninitialised memory access in constant time functions by Paul Elliott · 3 years, 3 months ago
  43. bdd6905 Merge pull request #5850 from bootstrap-prime/mbedtls-2.28 by Dave Rodgman · 3 years, 3 months ago
  44. 7ef96ea Fix typos in documentation and constants with typo finding tool by bootstrap-prime · 3 years, 3 months ago
  45. 42313fb psa_raw_key_agreement: return BUFFER_TOO_SMALL when warranted by Gilles Peskine · 3 years, 4 months ago
  46. a002660 Merge pull request #5733 from daverodgman/warmsocks_spellingfixes_2.28 by Dave Rodgman · 3 years, 3 months ago
  47. c46a2f6 Remove spaces. by Pol Henarejos · 3 years, 3 months ago
  48. a93442e Fix for order value for curve448. by Pol Henarejos · 3 years, 3 months ago
  49. 12ddae8 Fix memcpy() UB in mbedtls_asn1_named_data() by Werner Lewis · 3 years, 3 months ago
  50. 0e7791f Redo of PR#5345. Fixed spelling and typographical errors found by CodeSpell. by Shaun Case · 3 years, 8 months ago
  51. 9aa892b Merge pull request #5754 from gilles-peskine-arm/psa-storage-format-test-exercise-2.28 by Gilles Peskine · 3 years, 3 months ago
  52. f7a101a Merge pull request #5730 from gilles-peskine-arm/ssl-opt-auto-psk-2.28 by Gilles Peskine · 3 years, 4 months ago
  53. 4a83c10 Fix RC4 multipart PSA by Gilles Peskine · 3 years, 4 months ago
  54. a16d8fc Merge pull request #5697 from gilles-peskine-arm/psa-test-op-fail-2.28 by Gilles Peskine · 3 years, 4 months ago
  55. a6f99a1 Fix crash with DTLS_CONNECTION_ID but not other SSL features by Gilles Peskine · 3 years, 4 months ago
  56. 03efa0b Fix ARIA support in test driver configuration by Gilles Peskine · 3 years, 4 months ago
  57. d81b5ae Merge pull request #5717 from daverodgman/backport_2.28-alert_reentrant by Gilles Peskine · 3 years, 4 months ago
  58. 9cd8831 Merge pull request #5721 from tom-cosgrove-arm/roneld-1805-2.28 by Manuel Pégourié-Gonnard · 3 years, 4 months ago
  59. b283228 Fix shared library link error with cmake on Windows by Ron Eldor · 8 years ago
  60. 263d8f7 Remove the dependency on MBEDTLS_HAVE_TIME from MBEDTLS_TIMING_C by Andrzej Kurek · 3 years, 4 months ago
  61. 2603fec Remove dummy timing implementation by Andrzej Kurek · 3 years, 4 months ago
  62. d9c66c0 Make alert sending function re-entrant by Hanno Becker · 7 years ago
  63. bc79582 Fix psa_mac_verify() returning BUFFER_TOO_SMALL by Gilles Peskine · 3 years, 5 months ago
  64. 449e02e If a cipher algorithm is not supported, fail during setup by Gilles Peskine · 3 years, 5 months ago
  65. 739c98c Make psa_key_derivation_setup return early if the key agreement is not supported by Gilles Peskine · 4 years, 3 months ago
  66. ea0d95e Make psa_key_derivation_setup return early if the hash is not supported by Gilles Peskine · 4 years, 3 months ago
  67. cdacf04 Simplify is_kdf_alg_supported in psa_key_derivation_setup_kdf by Gilles Peskine · 4 years, 3 months ago
  68. e25dc1c Fix typo "phtreads" to "pthreads" by Artur Allmann · 3 years, 5 months ago
  69. e7dad1f ssl_tls.c: Fix inappropriate use of ssl context by Ronald Cron · 3 years, 4 months ago
  70. f1ed595 ssl_srv.c: Mark ETM as disabled if cipher is not CBC by Ronald Cron · 3 years, 4 months ago
  71. ce514de Merge pull request #5563 from AndrzejKurek/timeless-2.28 by Dave Rodgman · 3 years, 5 months ago
  72. 77daaad Provide a dummy implementation of timing.c by Andrzej Kurek · 3 years, 5 months ago
  73. 516e1b0 Add a missing guard for time.h in net_sockets.c by Andrzej Kurek · 3 years, 5 months ago
  74. 301db66 Do not include time.h without MBEDTLS_HAVE_TIME by Daniel Axtens · 5 years ago
  75. 901c9b7 Erase secrets in allocated memory before freeing said memory by Steven Cooreman · 3 years, 5 months ago
  76. 4b1216b Add missing key destruction calls in ssl_write_client_key_exchange by Andrzej Kurek · 3 years, 5 months ago
  77. 4e92187 Merge pull request #5546 from SiliconLabs/mbedtls-2.28/feature/PSEC-3195-PSA-test-suites-NOT-using-UID-0 by Manuel Pégourié-Gonnard · 3 years, 6 months ago
  78. 9be6168 Update library/psa_its_file.c by PeterSpace · 3 years, 6 months ago
  79. 55f15c7 BUGFIX: psa_its_set now rejects UID = 0 by pespacek · 3 years, 6 months ago
  80. 0178487 Fix missing check on server-chosen curve by Manuel Pégourié-Gonnard · 3 years, 6 months ago
  81. 298d6cc Add mbedtls_ssl_check_curve_tls_id() (internal) by Manuel Pégourié-Gonnard · 3 years, 6 months ago
  82. ca664c7 Merge pull request #5255 from AndrzejKurek/chacha-iv-len-16-fixes-2.x by Manuel Pégourié-Gonnard · 3 years, 6 months ago
  83. 61156f8 Cap the workaround for mbedtls_mpi_safe_cond_assign on MSVC/ARM64 to MSVC versions prior to 17.1. by Tautvydas Žilys · 3 years, 6 months ago
  84. ea4af4d Don't inline mbedtls_mpi_safe_cond_assign on MSVC/ARM64 to avoid a compiler bug. by Tautvydas Žilys · 3 years, 6 months ago
  85. de081ce Reset dhm_P and dhm_G if config call repeated by Glenn Strauss · 3 years, 8 months ago
  86. d41dab3 Bump version to 2.28.0 by Dave Rodgman · 3 years, 8 months ago
  87. 08412e2 Merge remote-tracking branch 'restricted/development_2.x-restricted' into mbedtls-2.28.0rc0-pr by Dave Rodgman · 3 years, 8 months ago
  88. c97cc18 Merge pull request #5327 from gilles-peskine-arm/zeroize-tag-2.28 by Gilles Peskine · 3 years, 8 months ago
  89. f9a0501 mbedtls_cipher_check_tag: jump on error for more robustness to refactoring by Gilles Peskine · 3 years, 8 months ago
  90. 384b98b Merge pull request #5310 from paul-elliott-arm/pkcs12_fix_2.x by Gilles Peskine · 3 years, 8 months ago
  91. 622d804 Initialize hash_len before using it by Gilles Peskine · 3 years, 8 months ago
  92. 8c99a76 PKCS#1v1.5 signature: better cleanup of temporary values by Gilles Peskine · 3 years, 8 months ago
  93. f91b2e5 mbedtls_ssl_parse_finished: zeroize expected finished value on error by Gilles Peskine · 3 years, 8 months ago
  94. 69d3b86 mbedtls_ssl_cookie_check: zeroize expected cookie on cookie mismatch by Gilles Peskine · 3 years, 8 months ago
  95. b3f4e5b PSA hash verification: zeroize expected hash on hash mismatch by Gilles Peskine · 3 years, 8 months ago
  96. dc269bb mbedtls_cipher_check_tag: zeroize expected tag on tag mismatch by Gilles Peskine · 3 years, 8 months ago
  97. c89e209 Remove incorrect hashing by Paul Elliott · 3 years, 8 months ago
  98. 8d7eef4 Add explanation for safety in function by Paul Elliott · 3 years, 8 months ago
  99. 2b3f21d Catch failures of md_hmac operations by Gilles Peskine · 3 years, 8 months ago
  100. d8e2e83 Zeroize local MAC variables by Gilles Peskine · 3 years, 8 months ago