- 6e2cf25 Document mutex invariant for CTR_DRBG by Gilles Peskine · 4 years, 6 months ago
- 085b69f Fix mutex leak in CTR_DRBG by Gilles Peskine · 4 years, 6 months ago
- 5710732 Explain the usage of is_valid in pthread mutexes by Gilles Peskine · 4 years, 6 months ago
- 04ea106 Declare MBEDTLS_TEST_HOOKS in config.h by Gilles Peskine · 6 years ago
- dde2022 Bump version to Mbed TLS 2.7.18 by Janos Follath · 4 years, 8 months ago
- 3c463b5 Merge branch 'mbedtls-2.7-restricted' into mbedtls-2.7.18r0-pr by Janos Follath · 4 years, 8 months ago
- dcba585 Merge pull request #3945 from paul-elliott-arm/fix_pem_write_2_7 by Gilles Peskine · 4 years, 8 months ago
- 102bac7 Add tests for buffer corruption after PEM write by Paul Elliott · 4 years, 8 months ago
- 8e556f8 Merge pull request #3937 from geecrypt/mbedtls-2.7 by Ronald Cron · 4 years, 8 months ago
- 5b1cb88 Merge pull request #3725 from gilles-peskine-arm/ecp-bignum-error-checks-2.7 by Gilles Peskine · 4 years, 8 months ago
- 0805cb2 Merge pull request #783 from chris-jones-arm/mbedtls-2.7-restricted by Janos Follath · 4 years, 8 months ago
- ceb9990 Support set *_drbg reseed interval before seed by Gavin Acquroff · 5 years ago
- 8b1f65e Fix potential DoS by limiting number sizes in exponentiation by Chris Jones · 4 years, 8 months ago
- 5af02ce Add tag check to cert algorithm check by Paul Elliott · 4 years, 8 months ago
- 9c7e92b Move declaration to fix C90 warning by Rodrigo Dias Correa · 4 years, 8 months ago
- f75fbab Change function casting in `ssl_calc_finished_tls_sha384` by Rodrigo Dias Correa · 4 years, 8 months ago
- d7853a8 Fix GCC warning in `ssl_calc_finished_tls_sha384` by Rodrigo Dias Correa · 4 years, 8 months ago
- 34018be Fix GCC warning in `ssl_calc_finished_tls_sha384` by Rodrigo Dias Correa · 4 years, 9 months ago
- 375366a Fix mismatched function parameters (prototype/definition) by Rodrigo Dias Correa · 4 years, 9 months ago
- d103823 Fix build failure on gcc-11 by Rodrigo Dias Correa · 4 years, 9 months ago
- 9fc67f0 Backport 2.7: Fix use of uinitialized memory in ssl_parse_encrypted_pms by André Maroneze · 4 years, 9 months ago
- 4159c71 Simplify conditional guards in error.c by Gilles Peskine · 4 years, 9 months ago
- b4756c2 Do not set IV size for ECB mode ciphers by Bence Szépkúti · 4 years, 9 months ago
- acbf9ec Put local variables in a struct by Gilles Peskine · 5 years ago
- 5706e92 Remove a useless zeroization by Gilles Peskine · 5 years ago
- e634564 Restore retry in rsa_prepare_blinding() by Peter Kolbus · 4 years, 11 months ago
- b51c8a2 Fix uncaught error if fix_negative fails by Gilles Peskine · 5 years ago
- 91070e4 Fix memory leak in mbedtls_mpi_sub_abs by Gilles Peskine · 5 years ago
- 45a5958 fix return code by Jens Reimann · 4 years, 11 months ago
- bfdbd43 Put local variables and buffers in a struct by gabor-mezei-arm · 5 years ago
- cb3a742 Zeroize internal buffers and variables in MD hashes by gabor-mezei-arm · 5 years ago
- 77d9401 Force cleanup before return by gabor-mezei-arm · 5 years ago
- 461c5a8 Zeroize internal buffers and variables in PKCS and SHA by gabor-mezei-arm · 5 years ago
- 1939460 adjusting size of sliding window array to correct size. by Daniel Otte · 5 years ago
- 0db765a Bump version to Mbed TLS 2.7.17 by Janos Follath · 5 years ago
- 93c784b Merge branch 'mbedtls-2.7-restricted' by Janos Follath · 5 years ago
- 2a8e958 Always revoke certificate on CRL by Raoul Strackx · 5 years ago
- 520e78b Fix a typo in a comment by Manuel Pégourié-Gonnard · 5 years ago
- 426c2d4 Add an option to test constant-flow with valgrind by Manuel Pégourié-Gonnard · 5 years ago
- 3b490a0 Add mbedtls_ssl_cf_memcpy_offset() with tests by Manuel Pégourié-Gonnard · 5 years ago
- bf7a49e Use temporary buffer to hold the peer's HMAC by Manuel Pégourié-Gonnard · 5 years ago
- d863a67 Merge branch 'mbedtls-2.7' into mbedtls-2.7-restricted by Manuel Pégourié-Gonnard · 5 years ago
- 84be024 Merge pull request #3594 from gilles-peskine-arm/fix-compat.sh-with-ubuntu-16.04-gnutls-2.7 by Gilles Peskine · 5 years ago
- 46b3fc2 Merge pull request #3599 from makise-homura/mbedtls-2.7 by Gilles Peskine · 5 years ago
- 329fe7e A different approach of signed-to-unsigned comparison by makise-homura · 5 years ago
- 1323fba Update the copy of tests/data_files/server2-sha256.crt in certs.c by Gilles Peskine · 5 years ago
- 03c2b8f Backport e2k support to mbedtls-2.7 by makise-homura · 5 years ago
- 44bfbe3 Update copyright notices to use Linux Foundation guidance by Bence Szépkúti · 5 years ago
- 30c1df3 Merge pull request #3570 from gufe44/net-sockets-fixes-2.7 by Manuel Pégourié-Gonnard · 5 years ago
- 3ca3b9e Fix building on NetBSD 9.0 by gufe44 · 5 years ago
- 126b69a Merge pull request #735 from gilles-peskine-arm/x509parse_crl-empty_entry-2.7 by Gilles Peskine · 5 years ago
- 206cb39 Use arc4random_buf instead of rand on NetBSD by gufe44 · 5 years ago
- 691bed7 Merge pull request #733 from gabor-mezei-arm/689_bp27_zeroising_of_plaintext_buffers by Gilles Peskine · 5 years ago
- 78e54b9 x509_crl_parse: fix 1-byte buffer overflow and entry->raw.tag by Gilles Peskine · 5 years ago
- cd542a5 Merge pull request #729 from mpg/ct-varlen-hmac-2.7 by Manuel Pégourié-Gonnard · 5 years ago
- ef73875 Zeroising of plaintext buffers to erase unused application data from memory by gabor-mezei-arm · 5 years ago
- 7cf5ebc Add comment that was lost while backporting by Manuel Pégourié-Gonnard · 5 years ago
- e05e576 Remove use of C99 construct by Manuel Pégourié-Gonnard · 5 years ago
- 2f484bd Add missing const for consistency by Manuel Pégourié-Gonnard · 5 years ago
- 2da9a54 Fix typos in comments by Manuel Pégourié-Gonnard · 5 years ago
- 0cd0c73 Check errors from the MD layer by Manuel Pégourié-Gonnard · 5 years ago
- c9ef5a2 Remove unnecessary cast by Manuel Pégourié-Gonnard · 5 years ago
- ec956b1 Improve some comments and internal documentation by Manuel Pégourié-Gonnard · 5 years ago
- 41df0f2 Factor repeated condition to its own macro by Manuel Pégourié-Gonnard · 5 years ago
- 4508c67 Implement cf_hmac() actually with constant flow by Manuel Pégourié-Gonnard · 5 years ago
- 40597ce Add MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN by Manuel Pégourié-Gonnard · 5 years ago
- d119718 Use existing implementation of cf_hmac() by Manuel Pégourié-Gonnard · 5 years ago
- 3ba2bca Add dummy constant-flow HMAC function with tests by Manuel Pégourié-Gonnard · 5 years ago
- 8ebb88d Factor repeated preprocessor condition to a macro by Manuel Pégourié-Gonnard · 5 years ago
- b2b1d8e Clarify some comments by Manuel Pégourié-Gonnard · 5 years ago
- ab601d6 Fix memory leak on error path by Manuel Pégourié-Gonnard · 5 years ago
- 406c7ae RSA: blind call to mpi_inv_mod() on secret value by Manuel Pégourié-Gonnard · 5 years ago
- 6ab924d RSA: remove redundant GCD call in prepare_blinding() by Manuel Pégourié-Gonnard · 5 years ago
- a35e98a DHM: blind call to mpi_inv_mod() on secret value by Manuel Pégourié-Gonnard · 5 years ago
- f0f43c5 DHM: make drawing of blinding value a function by Manuel Pégourié-Gonnard · 5 years ago
- 2a4f899 Bump version to Mbed TLS 2.7.16 by Janos Follath · 5 years ago
- 9cdda86 Merge branch 'mbedtls-2.7-restricted' into mbedtls-2.7.16r0 by Janos Follath · 5 years ago
- f2027b5 Merge pull request #705 from mpg/l13-hw-starts-finish-2.7-restricted by Manuel Pégourié-Gonnard · 5 years ago
- 9695178 Test multi-block output of the hash-based KDF by Manuel Pégourié-Gonnard · 5 years ago
- 1381091 Remove SHA-1 as a fallback option by Manuel Pégourié-Gonnard · 5 years ago
- 9797288 Improve comment justifying a hard-coded limitation by Manuel Pégourié-Gonnard · 5 years ago
- 8745986 Zeroize temporary stack buffer by Manuel Pégourié-Gonnard · 5 years ago
- 601128e Fix potential memory overread in seed functions by Manuel Pégourié-Gonnard · 5 years ago
- 6d61498 Add fall-back to hash-based KDF for internal ECP DRBG by Manuel Pégourié-Gonnard · 5 years ago
- 99bf33f Fix typo in a comment by Manuel Pégourié-Gonnard · 5 years ago
- e2828c2 Use HMAC_DRBG by default for ECP internal DRBG by Manuel Pégourié-Gonnard · 5 years ago
- 22fe523 Skip redundant checks for NULL f_rng by Manuel Pégourié-Gonnard · 5 years ago
- 75036a0 Implement use of internal DRBG for ecp_mul() by Manuel Pégourié-Gonnard · 5 years ago
- d90faf9 Add config.h option MBEDTLS_ECP_NO_INTERNAL_RNG by Manuel Pégourié-Gonnard · 5 years ago
- 44183d1 Merge pull request #3409 from bensze01/license-2.7 by Janos Follath · 5 years ago
- 8352797 Use starts/finish around Lucky 13 dummy compressions by Manuel Pégourié-Gonnard · 5 years ago
- 4e9f712 Update license headers to Apache-2.0 OR GPL-2.0-or-later by Bence Szépkúti · 5 years ago
- 904775d ssl_client: Align line breaking with MBEDTLS_SSL_DEBUG_* by Ronald Cron · 5 years ago
- a32236c Use defines to check alpn ext list validity by Ronald Cron · 5 years ago
- 2064355 Return error in case of bad user configurations by Hanno Becker · 8 years ago
- d8562b5 Add error condition for bad user configurations by Hanno Becker · 8 years ago
- 0e8dc48 Uniformize bounds checks using new macro by Hanno Becker · 8 years ago
- 29efc0f Remove unnecessary MBEDTLS_ECP_C preprocessor condition by Ronald Cron · 5 years ago
- 8cf6b49 Shorten lines in library/ssl_cli.c to at most 80 characters by Hanno Becker · 8 years ago
- 910a751 Introduce macros for constants in SSL ticket implementation by Hanno Becker · 7 years ago