TrustedFirmware Git Browser
Code Review
Sign In
review.trustedfirmware.org
/
mirror
/
mbed-tls.git
/
4a6446482ad65dc8d39a79390ebfdf64d4b46ffd
/
library
4ce2a9d
Check unused attributes in import and copy
by Gilles Peskine
· 6 years ago
9bc88c6
Document the key creation flow (start, variable, finish, and fail)
by Gilles Peskine
· 6 years ago
e56e878
Remove `extra` parameter from psa_generate_key
by Gilles Peskine
· 6 years ago
772c8b1
psa_get_domain_parameters: for RSA, if e=65537, output an empty string
by Gilles Peskine
· 6 years ago
b699f07
Switch psa_{get,set}_domain_parameters to attributes
by Gilles Peskine
· 6 years ago
3a4f1f8
Set the key size as an attribute
by Gilles Peskine
· 6 years ago
30afafd
Fix build errors with MBEDTLS_PSA_CRYPTO_STORAGE_C disabled
by Gilles Peskine
· 6 years ago
3495b58
Fix loading of 0-sized key on platforms where malloc(0)=NULL
by Gilles Peskine
· 6 years ago
d167b94
Reject invalid key ids/lifetimes in attribute-based creation
by Gilles Peskine
· 6 years ago
8c8f2ab
Implement psa_get_key_attributes
by Gilles Peskine
· 6 years ago
ff5f0e7
Implement atomic-creation psa_{generate,generator_import}_key
by Gilles Peskine
· 6 years ago
db4b3ab
Implement missing attributes setters and getters
by Gilles Peskine
· 6 years ago
4747d19
Implement atomic-creation psa_import_key
by Gilles Peskine
· 6 years ago
87a5e56
Rename functions that inject key material to an allocated handle
by Gilles Peskine
· 6 years ago
a780f24
Merge remote-tracking branch 'upstream-crypto/development' into psa-api-beta2-merge-development
by Gilles Peskine
· 6 years ago
2b522db
fixup! Key derivation by small input steps: proof-of-concept
by Gilles Peskine
· 6 years ago
ab4b201
fixup! Key derivation by small input steps: proof-of-concept
by Gilles Peskine
· 6 years ago
c88644d
Remove "TODO" comments
by Gilles Peskine
· 6 years ago
0216fe1
Implement psa_key_agreement_raw_shared_secret
by Gilles Peskine
· 6 years ago
f9ee633
Fix confusion between HMAC algorithm and the corresponding hash
by Gilles Peskine
· 6 years ago
86095bc
Document rename_replace_existing macro
by Darryl Green
· 6 years ago
fdda7de
Use function-like macro for Windows renaming
by Darryl Green
· 6 years ago
b467934
Use Windows-specific renaming function
by Darryl Green
· 6 years ago
3135184
Merge remote-tracking branch 'upstream-crypto/development' into psa-api-beta2-merge-development
by Gilles Peskine
· 6 years ago
c70a3c7
Merge remote-tracking branch 'tls/development' into development
by Jaeden Amero
· 6 years ago
57773d4
Merge remote-tracking branch 'restricted/pr/551' into development
by Jaeden Amero
· 6 years ago
0ea3377
Merge remote-tracking branch 'restricted/pr/552' into development
by Jaeden Amero
· 6 years ago
c73fde7
Merge remote-tracking branch 'origin/pr/2531' into development
by Jaeden Amero
· 6 years ago
3930e18
Merge remote-tracking branch 'origin/pr/2509' into development
by Jaeden Amero
· 6 years ago
d5d01a0
Merge remote-tracking branch 'origin/pr/2525' into development
by Jaeden Amero
· 6 years ago
11ee071
Add certificate policy of type any policy id
by Ron Eldor
· 6 years ago
3f8d784
Update library version to 2.17.0
by Jaeden Amero
· 6 years ago
mbedtls-2.17.0
57f4d9e
Update crypto submodule to test with private headers
by Jaeden Amero
· 6 years ago
fad3a3e
Fix build error with MSVC on 64-bit systems
by Gilles Peskine
· 6 years ago
e3dbdd8
Gate entropy injection through a dedicated configuration option
by Gilles Peskine
· 6 years ago
6bf4bae
Remove compilation option MBEDTLS_PSA_HAS_ITS_IO
by Gilles Peskine
· 6 years ago
5e80d91
Remove psa_crypto_storage_backend.h
by Gilles Peskine
· 6 years ago
088b77f
Merge psa_crypto_storage_its into psa_crypto_storage
by Gilles Peskine
· 6 years ago
e435f23
Remove psa_crypto_storage_file
by Gilles Peskine
· 6 years ago
2379348
Support ITS over file in PSA crypto
by Gilles Peskine
· 6 years ago
bc1f272
Tests for PSA ITS over files
by Gilles Peskine
· 7 years ago
6194dc2
Implement PSA ITS over files
by Gilles Peskine
· 7 years ago
601bd53
Fix up ITS header files for internal use in crypto
by Gilles Peskine
· 6 years ago
5f54497
Import ITS header files
by Gilles Peskine
· 6 years ago
de0a41b
ecp: Remove dependency on TLS and X.509
by Jaeden Amero
· 7 years ago
ebbc5f7
md: Remove dependency on X.509
by Jaeden Amero
· 6 years ago
2b9eb0b
Merge remote-tracking branch 'tls/development' into development
by Jaeden Amero
· 6 years ago
a96f4fe
Merge remote-tracking branch 'origin/pr/2380' into development
by Jaeden Amero
· 6 years ago
0a9f9b2
Merge remote-tracking branch 'origin/pr/2317' into development
by Jaeden Amero
· 6 years ago
db2c2ce
Merge remote-tracking branch 'origin/pr/2158' into development
by Jaeden Amero
· 6 years ago
c851b08
Merge remote-tracking branch 'origin/pr/1818' into development
by Jaeden Amero
· 6 years ago
7df1bec
Merge remote-tracking branch 'origin/pr/1520' into development
by Jaeden Amero
· 6 years ago
535ee4a
Merge remote-tracking branch 'public/pr/2421' into development
by Simon Butcher
· 6 years ago
archive/mbedtls-2.17
mbedtls-2.17
195bdde
Merge remote-tracking branch 'restricted/pr/528' into development
by Simon Butcher
· 6 years ago
74ac6e3
Merge remote-tracking branch 'public/pr/2028' into development
by Simon Butcher
· 6 years ago
bbed914
Merge remote-tracking branch 'public/pr/2447' into development
by Simon Butcher
· 6 years ago
4a51228
Reduce priority of 3DES ciphersuites
by Andres Amaya Garcia
· 7 years ago
84d9d27
Fix unused variable warning in ssl_parse_certificate_coordinate()
by Hanno Becker
· 6 years ago
6e95914
Add new function mbedtls_asn1_write_named_bitstring()
by Andres Amaya Garcia
· 7 years ago
a78c958
Merge remote-tracking branch 'tls/pr/2028' into development
by Jaeden Amero
· 6 years ago
a9d6ba2
Merge remote-tracking branch 'tls/development' into development
by Jaeden Amero
· 6 years ago
f607813
ECP: remove extra whitespaces
by Janos Follath
· 6 years ago
52ff8e9
Fix ECDH secret export for Mongomery curves
by Janos Follath
· 6 years ago
df9295b
Make ecp_get_type public
by Janos Follath
· 6 years ago
28eb06d
ECP: Catch unsupported import/export
by Janos Follath
· 6 years ago
7780096
Fix typo in ECP module
by Janos Follath
· 6 years ago
bd5580a
Add further debug statements on assertion failures
by Hanno Becker
· 6 years ago
353a6f0
Fix typo in documentation of ssl_parse_certificate_chain()
by Hanno Becker
· 6 years ago
62d58ed
Add debug output in case of assertion failure
by Hanno Becker
· 6 years ago
6883874
Fix typo in SSL ticket documentation
by Hanno Becker
· 6 years ago
accc599
Set peer CRT length only after successful allocation
by Hanno Becker
· 6 years ago
3acc9b9
Remove question in comment about verify flags on cli vs. server
by Hanno Becker
· 6 years ago
6b8fbab
Free peer CRT chain immediately after verifying it
by Hanno Becker
· 6 years ago
0056eab
Parse peer's CRT chain in-place from the input buffer
by Hanno Becker
· 6 years ago
ae553dd
Free peer's public key as soon as it's no longer needed
by Hanno Becker
· 6 years ago
b9d4479
Correct compile-time guards for ssl_clear_peer_cert()
by Hanno Becker
· 6 years ago
e682457
Guard mbedtls_ssl_get_peer_cert() by new compile-time option
by Hanno Becker
· 6 years ago
b6c5eca
Adapt mbedtls_ssl_parse_certificate() to removal of peer_cert field
by Hanno Becker
· 6 years ago
13c327d
Adapt ssl_clear_peer_cert() to removal of `peer_cert` field
by Hanno Becker
· 6 years ago
6d1986e
Adapt mbedtls_ssl_session_copy() to removal of `peer_cert` field
by Hanno Becker
· 6 years ago
94cc26d
Adapt session ticket implementation to removal of `peer_cert` field
by Hanno Becker
· 6 years ago
2a831a4
Adapt client auth detection in ssl_parse_certificate_verify()
by Hanno Becker
· 6 years ago
a1ab9be
Adapt server-side signature verification to use raw public key
by Hanno Becker
· 6 years ago
a6899bb
Adapt client-side signature verification to use raw public key
by Hanno Becker
· 6 years ago
be7f508
Adapt ssl_get_ecdh_params_from_cert() to use raw public key
by Hanno Becker
· 6 years ago
c7d7e29
Adapt ssl_write_encrypted_pms() to use raw public key
by Hanno Becker
· 6 years ago
a274753
Make a copy of peer's raw public key after verifying its CRT chain
by Hanno Becker
· 6 years ago
7517312
Add field for peer's raw public key to TLS handshake param structure
by Hanno Becker
· 6 years ago
494dd7a
Add raw public key buffer bounds to mbedtls_x509_crt struct
by Hanno Becker
· 6 years ago
a887d1a
Remove peer CRT from cache if !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
by Hanno Becker
· 6 years ago
c966bd1
Remove peer CRT from tickets if !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
by Hanno Becker
· 6 years ago
c5fcbb3
Add peer CRT digest to session tickets
by Hanno Becker
· 6 years ago
3dad311
Parse and verify peer CRT chain in local variable
by Hanno Becker
· 6 years ago
177475a
Mitigate triple handshake attack by comparing digests only
by Hanno Becker
· 6 years ago
6bbd94c
Compute digest of peer's end-CRT in mbedtls_ssl_parse_certificate()
by Hanno Becker
· 6 years ago
9198ad1
Extend mbedtls_ssl_session by buffer holding peer CRT digest
by Hanno Becker
· 6 years ago
8d84fd8
Update version_features.c
by Hanno Becker
· 6 years ago
8273df8
Re-classify errors on missing peer CRT
by Hanno Becker
· 6 years ago
0329f75
Increase robustness and documentation of ticket implementation
by Hanno Becker
· 6 years ago
aee8717
Simplify session cache implementation via mbedtls_ssl_session_copy()
by Hanno Becker
· 6 years ago
Next »