1. 75475d8 Always revoke certificate on CRL by Raoul Strackx · 5 years ago
  2. 14cb46d Merge pull request #3598 from makise-homura/mbedtls-2.16 by Gilles Peskine · 5 years ago
  3. 8c3fa63 A different approach of signed-to-unsigned comparison by makise-homura · 5 years ago
  4. 50f6a19 Backport e2k support to mbedtls-2.7 by makise-homura · 5 years ago
  5. a2947ac Update copyright notices to use Linux Foundation guidance by Bence Szépkúti · 5 years ago
  6. b9c64e4 Merge pull request #3558 from gufe44/net-sockets-fixes-2.16 by Manuel Pégourié-Gonnard · 5 years ago
  7. 19735b6 Fix building on NetBSD 9.0 by gufe44 · 5 years ago
  8. 9acf943 Merge pull request #3560 from gufe44/netbsd-rand-arc4random_buf-2.16 by Gilles Peskine · 5 years ago
  9. 3fa7c64 Use arc4random_buf instead of rand on NetBSD by gufe44 · 5 years ago
  10. de7e036 Merge pull request #3489 from CodeMonkeyLeet/mbedtls-2.16_backport_3464 by Gilles Peskine · 5 years ago
  11. 1535a43 Revise comments for x509write_csr_der_internal by Simon Leet · 5 years ago
  12. afc2717 Avoid stack-allocation of large memory buffers by Doru Gucea · 7 years ago
  13. c33e921 Avoid use of large stack buffers in mbedtls_x509_write_crt_pem() by Hanno Becker · 6 years ago
  14. eeea9ea Perform CRT writing in-place on the output buffer by Hanno Becker · 6 years ago
  15. beaf396 Adapt x509write_crt.c to coding style by Hanno Becker · 6 years ago
  16. ef5f8fc Bump version to Mbed TLS 2.16.7 by Janos Follath · 5 years ago
  17. f69b919 Merge branch 'mbedtls-2.16-restricted' into mbedtls-2.16.7r0 by Janos Follath · 5 years ago
  18. 3a1944a Merge pull request #704 from mpg/l13-hw-starts-finish-2.16-restricted by Manuel Pégourié-Gonnard · 5 years ago
  19. 2df1423 Test multi-block output of the hash-based KDF by Manuel Pégourié-Gonnard · 5 years ago
  20. 2df5857 Remove SHA-1 as a fallback option by Manuel Pégourié-Gonnard · 5 years ago
  21. 20cd85c Use starts/finish around Lucky 13 dummy compressions by Manuel Pégourié-Gonnard · 5 years ago
  22. 7d7c004 Improve comment justifying a hard-coded limitation by Manuel Pégourié-Gonnard · 5 years ago
  23. a90a95b Zeroize temporary stack buffer by Manuel Pégourié-Gonnard · 5 years ago
  24. 301a9ee Fix potential memory overread in seed functions by Manuel Pégourié-Gonnard · 5 years ago
  25. 72177e3 Add fall-back to hash-based KDF for internal ECP DRBG by Manuel Pégourié-Gonnard · 5 years ago
  26. 0defc57 Fix typo in a comment by Manuel Pégourié-Gonnard · 5 years ago
  27. 18b0b3c Avoid superflous randomization with restartable by Manuel Pégourié-Gonnard · 5 years ago
  28. c7295f5 Use HMAC_DRBG by default for ECP internal DRBG by Manuel Pégourié-Gonnard · 5 years ago
  29. c334f41 Skip redundant checks for NULL f_rng by Manuel Pégourié-Gonnard · 5 years ago
  30. 047986c Add support for RESTARTABLE with internal RNG by Manuel Pégourié-Gonnard · 5 years ago
  31. d18f051 Move internal drbg init to specific mul functions by Manuel Pégourié-Gonnard · 5 years ago
  32. fb11d25 Implement use of internal DRBG for ecp_mul() by Manuel Pégourié-Gonnard · 5 years ago
  33. 23983f3 Add config.h option MBEDTLS_ECP_NO_INTERNAL_RNG by Manuel Pégourié-Gonnard · 5 years ago
  34. f744bd7 Update license headers to Apache-2.0 OR GPL-2.0-or-later by Bence Szépkúti · 5 years ago
  35. 32b629d ssl_client: Align line breaking with MBEDTLS_SSL_DEBUG_* by Ronald Cron · 5 years ago
  36. 157cffe Use defines to check alpn ext list validity by Ronald Cron · 5 years ago
  37. f250380 Return error in case of bad user configurations by Hanno Becker · 8 years ago
  38. d729602 Add error condition for bad user configurations by Hanno Becker · 8 years ago
  39. f8f61aa Uniformize bounds checks using new macro by Hanno Becker · 8 years ago
  40. 711eea3 Remove unnecessary MBEDTLS_ECP_C preprocessor condition by Ronald Cron · 5 years ago
  41. 35f8a54 Shorten lines in library/ssl_cli.c to at most 80 characters by Hanno Becker · 8 years ago
  42. 8f39726 Introduce macros for constants in SSL ticket implementation by Hanno Becker · 7 years ago
  43. 001eb3c Merge pull request #3411 from gilles-peskine-arm/montmul-cmp-branch-2.16 by Janos Follath · 5 years ago
  44. de719d5 Clean up some comments by Gilles Peskine · 5 years ago
  45. 08fd43c mbedtls_mpi_sub_abs: check the range of the result when it happens by Gilles Peskine · 5 years ago
  46. 635a374 Simplify the final reduction in mpi_montmul by Gilles Peskine · 5 years ago
  47. 36acd54 Move carry propagation out of mpi_sub_hlp by Gilles Peskine · 5 years ago
  48. 46bf7da More logical parameter order for mpi_sub_hlp by Gilles Peskine · 5 years ago
  49. 6a9433e Explicitly cast down from mbedtls_mpi_uint to unsigned char by Gilles Peskine · 5 years ago
  50. 8f67266 Remove a secret-dependent branch in Montgomery multiplication by Gilles Peskine · 5 years ago
  51. c81c588 Separate out low-level mpi_safe_cond_assign by Gilles Peskine · 5 years ago
  52. 3ce3ddf Document some internal bignum functions by Gilles Peskine · 5 years ago
  53. bdcb396 Revert "Shut up a clang-analyzer warning" by Gilles Peskine · 5 years ago
  54. e9073a6 Add a const annotation to the non-changing argument of mpi_sub_mul by Gilles Peskine · 5 years ago
  55. 62b293d Merge pull request #3352 from gilles-peskine-arm/fix-ecp-mul-memory-leak-2.16 by Manuel Pégourié-Gonnard · 5 years ago
  56. d2f0073 Re-generate error.c by Gilles Peskine · 5 years ago
  57. 6645fd3 Fix potential memory leak in EC multiplication by Jonas · 5 years ago
  58. acf7f2c Guard from undefined behaviour in case of an INT_MAX max_pathlen by Andrzej Kurek · 5 years ago
  59. dab3fd6 Merge branch 'mbedtls-2.16-restricted' into prepare-rc-2.16.6-updated by Manuel Pégourié-Gonnard · 5 years ago
  60. ef98d49 Merge remote-tracking branch 'restricted/pr/670' into mbedtls-2.16-restricted by Manuel Pégourié-Gonnard · 5 years ago
  61. c04703c Bump version to Mbed TLS 2.16.6 by Janos Follath · 5 years ago
  62. 816305b Merge branch 'mbedtls-2.16-restricted' into mbedtls-2.16.6r0 by Janos Follath · 5 years ago
  63. 5e65619 Merge pull request #3142 from mpg/fix-reconnect-2.16 by Gilles Peskine · 5 years ago
  64. f600416 Fix leakage of projective coordinates in ECC by Manuel Pégourié-Gonnard · 5 years ago
  65. b08a334 Improve debug logging of client hard reconnect by Manuel Pégourié-Gonnard · 5 years ago
  66. 5cc0879 Correct comment on the configuration option in x509.c by Simon Butcher · 5 years ago
  67. 52dbda6 Fix compilation issue when DTLS and SSL_HW_RECORD_ACCEL are on by Andres Amaya Garcia · 7 years ago
  68. 334cf59 Bump version to Mbed TLS 2.16.5 by Janos Follath · 5 years ago
  69. d09fcde Fix pkparse bug wrt MBEDTLS_RSA_ALT by Manuel Pégourié-Gonnard · 5 years ago
  70. 25bb8dc Check public part when parsing private RSA key by Manuel Pégourié-Gonnard · 5 years ago
  71. 9ab0305 Don't pass zero to rsa_complete() as a param by Manuel Pégourié-Gonnard · 5 years ago
  72. 8d9b1c4 Merge pull request #3027 from gilles-peskine-arm/mpi_copy_shrink-2.16 by Manuel Pégourié-Gonnard · 5 years ago
  73. cabf0ee Revert "Merge pull request #3012 from Patater/dev/jp-bennett/development-2.16" by Janos Follath · 6 years ago
  74. 56427c2 Minor comment improvement by Gilles Peskine · 6 years ago
  75. 27c15c7 Improve comments in mpi_shrink by Gilles Peskine · 6 years ago
  76. 3e9f522 mpi_copy: make the 0 case slightly more robust by Gilles Peskine · 6 years ago
  77. b10fd06 Parse RSA parameters DP, DQ and QP from PKCS1 private keys by Jack Lloyd · 6 years ago
  78. bac9f1b Merge pull request #3001 from from gilles-peskine-arm/coverity-20200115-2.16 into mbedtls-2.16 by Janos Follath · 6 years ago
  79. 7550e85 Merge pull request #3012 from Patater/dev/jp-bennett/development-2.16 by Jaeden Amero · 6 years ago
  80. d0c2575 Merge pull request #2992 from yanesca/bump-version-2.16.4 by Janos Follath · 6 years ago
  81. 6f45cb9 Allow loading symlinked certificates by Jonathan Bennett · 6 years ago
  82. 83a5672 Remove redundant block_size validity check by Gilles Peskine · 6 years ago
  83. 42b8194 Fix incrementing pointer instead of value by Manuel Pégourié-Gonnard · 6 years ago
  84. 3a3b161 Add missing return code check on call to mbedtls_md() by Gilles Peskine · 6 years ago
  85. 32b0216 Bump version to Mbed TLS 2.16.4 by Janos Follath · 6 years ago
  86. 39e2c0e Merge remote-tracking branch 'origin/mbedtls-2.16' into mbedtls-2.16-restricted by Jaeden Amero · 6 years ago mbedtls-2.16.4
  87. 86dd950 Catch AES failure in mbedtls_ctr_drbg_random by Gilles Peskine · 6 years ago
  88. d5c4a7c Parse HelloVerifyRequest: avoid buffer overread at the start by Gilles Peskine · 6 years ago
  89. 01a96d6 Parse HelloVerifyRequest: avoid buffer overread on the cookie by Gilles Peskine · 6 years ago
  90. f048605 Merge remote-tracking branch 'restricted/pr/667' into mbedtls-2.16-restricted by Jaeden Amero · 6 years ago
  91. baf2300 Merge remote-tracking branch 'restricted/pr/669' into mbedtls-2.16-restricted by Jaeden Amero · 6 years ago
  92. f18de50 Zeroize local AES variables before exiting the function by Andrzej Kurek · 6 years ago
  93. e25f1ee mpi_lt_mpi_ct: fix condition handling by Janos Follath · 6 years ago
  94. 359a01e ct_lt_mpi_uint: cast the return value explicitely by Janos Follath · 6 years ago
  95. fbe4c94 mbedtls_mpi_lt_mpi_ct: simplify condition by Janos Follath · 6 years ago
  96. 1f21c1d Rename variable for better readability by Janos Follath · 6 years ago
  97. bd87a59 mbedtls_mpi_lt_mpi_ct: Improve documentation by Janos Follath · 6 years ago
  98. 5852518 Make mbedtls_mpi_lt_mpi_ct more portable by Janos Follath · 6 years ago
  99. 45ec990 Document ct_lt_mpi_uint by Janos Follath · 6 years ago
  100. b11ce0e mpi_lt_mpi_ct: make use of unsigned consistent by Janos Follath · 6 years ago