- 250a612 Merge pull request #6212 from tom-cosgrove-arm/explicit-warning-re-ct-conditions-not-0-or-1-2.28 by Gilles Peskine · 3 years ago
- 81e7423 ssl_tls12_server: fix potential NULL-dereferencing if local certificate was not set. by Leonid Rozenboim · 3 years ago
- f211d82 Be explicit about constant time bignum functions that must take a 0 or 1 condition value by Tom Cosgrove · 3 years ago
- f222b8e Merge pull request #6161 from daverodgman/backport-cert-symlink by Gilles Peskine · 3 years ago
- ddc3845 Merge pull request #6168 from mman/mbedtls-2.28 by Gilles Peskine · 3 years ago
- 43dedd8 Use double quotes to include private header file psa_crypto_cipher.h by Martin Man · 3 years ago
- 6f227ee Remove use of lstat by Dave Rodgman · 3 years, 1 month ago
- 2958bb3 Spelling and grammar improvements by Dave Rodgman · 3 years, 1 month ago
- 168bcd6 Don't increase failure count for dangling symlinks by Dave Rodgman · 3 years, 1 month ago
- 32ffb2b x509_crt: handle properly broken links when looking for certificates by Eduardo Silva · 6 years ago
- 5205c97 Fix a/an typos in doxygen and other comments by Tom Cosgrove · 3 years ago
- fe9d08f Bump version by Dave Rodgman · 3 years, 1 month ago
- df275c4 Merge remote-tracking branch 'restricted/mbedtls-2.28-restricted' into mbedtls-2.28.1rc0-pr by Dave Rodgman · 3 years, 1 month ago
- 77473eb Clarify the need for calling mbedtls_ssl_derive_keys after extension parsing by Andrzej Kurek · 3 years, 1 month ago
- c87d97b Rearrange the session resumption code by Andrzej Kurek · 3 years, 2 months ago
- 06986de Merge pull request #6066 from AndrzejKurek/fix-some-resource-leaks-2-28 by Paul Elliott · 3 years, 1 month ago
- cd5e671 Add a changelog entry for pkparse bugs by Andrzej Kurek · 3 years, 1 month ago
- b39b499 Add pem_free() to other error paths in pk_parse_public_key() by Paul Elliott · 3 years, 3 months ago
- 763ee3c Fix resource leaks by Leonid Rozenboim · 3 years, 4 months ago
- 0ae1c1c Merge pull request #5991 from gilles-peskine-arm/asn1write-0-fix-2.28 by Ronald Cron · 3 years, 1 month ago
- 24ed2ca Fix the wrong variable being used for TLS record size checks by Paul Elliott · 3 years, 2 months ago
- bb34fee Fix bug whereby 0 was written as 0200 rather than 020100 by Gilles Peskine · 3 years, 2 months ago
- 06c5e92 Merge pull request #5863 from wernerlewis/csr_subject_comma_2.28 by Gilles Peskine · 3 years, 1 month ago
- c9529f9 Fix null pointer dereference in mpi_mod_int(0, 2) by Gilles Peskine · 3 years, 2 months ago
- 4118092 Merge pull request #5825 from polhenarejos/mbedtls-2.28 by Dave Rodgman · 3 years, 1 month ago
- 1421efa Fix case where final special char exceeds buffer by Werner Lewis · 3 years, 1 month ago
- d904d66 Mark static int SSL functions CHECK_RETURN_CRITICAL by Manuel Pégourié-Gonnard · 3 years, 2 months ago
- 06e1fcd Add comments when can_do() is safe to use by Manuel Pégourié-Gonnard · 3 years, 2 months ago
- d80d8a4 Add negative tests for opaque mixed-PSK (server) by Manuel Pégourié-Gonnard · 3 years, 2 months ago
- a49a00c Add negative tests for opaque mixed-PSK (client) by Manuel Pégourié-Gonnard · 3 years, 2 months ago
- b9c7ea4 Improve a comment. by Manuel Pégourié-Gonnard · 3 years, 2 months ago
- 5b3f24f Fix unchecked return value from internal function by Manuel Pégourié-Gonnard · 3 years, 2 months ago
- 37e5999 Fix potential buffer overread with USE_PSA by Manuel Pégourié-Gonnard · 3 years, 2 months ago
- 4353d3d Split a debug message into two - for clarity by Andrzej Kurek · 3 years, 2 months ago
- 33f41a8 Add the mbedtls prefix to ssl_check_dtls_clihlo_cookie by Andrzej Kurek · 3 years, 2 months ago
- 862acb8 Add cookie parsing tests to test_suite_ssl by Andrzej Kurek · 3 years, 2 months ago
- e5af9fa Add missing sid_len in calculations of cookie sizes by Andrzej Kurek · 3 years, 2 months ago
- f333dfa More SSL debug messages for ClientHello parsing by Gilles Peskine · 3 years, 6 months ago
- 02c9d3b Fix parsing of special chars in X509 DN values by Werner Lewis · 3 years, 3 months ago
- ce02537 Merge pull request #5828 from wernerlewis/time_utc_2.28 by Dave Rodgman · 3 years, 2 months ago
- 1b54a05 Use ASN1 UTC tags for dates before 2000 by Werner Lewis · 3 years, 3 months ago
- b830028 Fix uninitialised memory access in constant time functions by Paul Elliott · 3 years, 3 months ago
- bdd6905 Merge pull request #5850 from bootstrap-prime/mbedtls-2.28 by Dave Rodgman · 3 years, 3 months ago
- 7ef96ea Fix typos in documentation and constants with typo finding tool by bootstrap-prime · 3 years, 3 months ago
- 42313fb psa_raw_key_agreement: return BUFFER_TOO_SMALL when warranted by Gilles Peskine · 3 years, 4 months ago
- a002660 Merge pull request #5733 from daverodgman/warmsocks_spellingfixes_2.28 by Dave Rodgman · 3 years, 3 months ago
- c46a2f6 Remove spaces. by Pol Henarejos · 3 years, 3 months ago
- a93442e Fix for order value for curve448. by Pol Henarejos · 3 years, 3 months ago
- 12ddae8 Fix memcpy() UB in mbedtls_asn1_named_data() by Werner Lewis · 3 years, 3 months ago
- 0e7791f Redo of PR#5345. Fixed spelling and typographical errors found by CodeSpell. by Shaun Case · 3 years, 8 months ago
- 9aa892b Merge pull request #5754 from gilles-peskine-arm/psa-storage-format-test-exercise-2.28 by Gilles Peskine · 3 years, 3 months ago
- f7a101a Merge pull request #5730 from gilles-peskine-arm/ssl-opt-auto-psk-2.28 by Gilles Peskine · 3 years, 4 months ago
- 4a83c10 Fix RC4 multipart PSA by Gilles Peskine · 3 years, 4 months ago
- a16d8fc Merge pull request #5697 from gilles-peskine-arm/psa-test-op-fail-2.28 by Gilles Peskine · 3 years, 4 months ago
- a6f99a1 Fix crash with DTLS_CONNECTION_ID but not other SSL features by Gilles Peskine · 3 years, 4 months ago
- 03efa0b Fix ARIA support in test driver configuration by Gilles Peskine · 3 years, 4 months ago
- d81b5ae Merge pull request #5717 from daverodgman/backport_2.28-alert_reentrant by Gilles Peskine · 3 years, 4 months ago
- 9cd8831 Merge pull request #5721 from tom-cosgrove-arm/roneld-1805-2.28 by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- b283228 Fix shared library link error with cmake on Windows by Ron Eldor · 8 years ago
- 263d8f7 Remove the dependency on MBEDTLS_HAVE_TIME from MBEDTLS_TIMING_C by Andrzej Kurek · 3 years, 4 months ago
- 2603fec Remove dummy timing implementation by Andrzej Kurek · 3 years, 4 months ago
- d9c66c0 Make alert sending function re-entrant by Hanno Becker · 7 years ago
- bc79582 Fix psa_mac_verify() returning BUFFER_TOO_SMALL by Gilles Peskine · 3 years, 5 months ago
- 449e02e If a cipher algorithm is not supported, fail during setup by Gilles Peskine · 3 years, 5 months ago
- 739c98c Make psa_key_derivation_setup return early if the key agreement is not supported by Gilles Peskine · 4 years, 3 months ago
- ea0d95e Make psa_key_derivation_setup return early if the hash is not supported by Gilles Peskine · 4 years, 3 months ago
- cdacf04 Simplify is_kdf_alg_supported in psa_key_derivation_setup_kdf by Gilles Peskine · 4 years, 3 months ago
- e25dc1c Fix typo "phtreads" to "pthreads" by Artur Allmann · 3 years, 5 months ago
- e7dad1f ssl_tls.c: Fix inappropriate use of ssl context by Ronald Cron · 3 years, 4 months ago
- f1ed595 ssl_srv.c: Mark ETM as disabled if cipher is not CBC by Ronald Cron · 3 years, 4 months ago
- ce514de Merge pull request #5563 from AndrzejKurek/timeless-2.28 by Dave Rodgman · 3 years, 5 months ago
- 77daaad Provide a dummy implementation of timing.c by Andrzej Kurek · 3 years, 5 months ago
- 516e1b0 Add a missing guard for time.h in net_sockets.c by Andrzej Kurek · 3 years, 5 months ago
- 301db66 Do not include time.h without MBEDTLS_HAVE_TIME by Daniel Axtens · 5 years ago
- 901c9b7 Erase secrets in allocated memory before freeing said memory by Steven Cooreman · 3 years, 5 months ago
- 4b1216b Add missing key destruction calls in ssl_write_client_key_exchange by Andrzej Kurek · 3 years, 5 months ago
- 4e92187 Merge pull request #5546 from SiliconLabs/mbedtls-2.28/feature/PSEC-3195-PSA-test-suites-NOT-using-UID-0 by Manuel Pégourié-Gonnard · 3 years, 6 months ago
- 9be6168 Update library/psa_its_file.c by PeterSpace · 3 years, 6 months ago
- 55f15c7 BUGFIX: psa_its_set now rejects UID = 0 by pespacek · 3 years, 6 months ago
- 0178487 Fix missing check on server-chosen curve by Manuel Pégourié-Gonnard · 3 years, 6 months ago
- 298d6cc Add mbedtls_ssl_check_curve_tls_id() (internal) by Manuel Pégourié-Gonnard · 3 years, 6 months ago
- ca664c7 Merge pull request #5255 from AndrzejKurek/chacha-iv-len-16-fixes-2.x by Manuel Pégourié-Gonnard · 3 years, 6 months ago
- 61156f8 Cap the workaround for mbedtls_mpi_safe_cond_assign on MSVC/ARM64 to MSVC versions prior to 17.1. by Tautvydas Žilys · 3 years, 6 months ago
- ea4af4d Don't inline mbedtls_mpi_safe_cond_assign on MSVC/ARM64 to avoid a compiler bug. by Tautvydas Žilys · 3 years, 6 months ago
- de081ce Reset dhm_P and dhm_G if config call repeated by Glenn Strauss · 3 years, 8 months ago
- d41dab3 Bump version to 2.28.0 by Dave Rodgman · 3 years, 8 months ago
- 08412e2 Merge remote-tracking branch 'restricted/development_2.x-restricted' into mbedtls-2.28.0rc0-pr by Dave Rodgman · 3 years, 8 months ago
- c97cc18 Merge pull request #5327 from gilles-peskine-arm/zeroize-tag-2.28 by Gilles Peskine · 3 years, 8 months ago
- f9a0501 mbedtls_cipher_check_tag: jump on error for more robustness to refactoring by Gilles Peskine · 3 years, 8 months ago
- 384b98b Merge pull request #5310 from paul-elliott-arm/pkcs12_fix_2.x by Gilles Peskine · 3 years, 8 months ago
- 622d804 Initialize hash_len before using it by Gilles Peskine · 3 years, 8 months ago
- 8c99a76 PKCS#1v1.5 signature: better cleanup of temporary values by Gilles Peskine · 3 years, 8 months ago
- f91b2e5 mbedtls_ssl_parse_finished: zeroize expected finished value on error by Gilles Peskine · 3 years, 8 months ago
- 69d3b86 mbedtls_ssl_cookie_check: zeroize expected cookie on cookie mismatch by Gilles Peskine · 3 years, 8 months ago
- b3f4e5b PSA hash verification: zeroize expected hash on hash mismatch by Gilles Peskine · 3 years, 8 months ago
- dc269bb mbedtls_cipher_check_tag: zeroize expected tag on tag mismatch by Gilles Peskine · 3 years, 8 months ago
- c89e209 Remove incorrect hashing by Paul Elliott · 3 years, 8 months ago
- 8d7eef4 Add explanation for safety in function by Paul Elliott · 3 years, 8 months ago
- 2b3f21d Catch failures of md_hmac operations by Gilles Peskine · 3 years, 8 months ago
- d8e2e83 Zeroize local MAC variables by Gilles Peskine · 3 years, 8 months ago