TrustedFirmware Git Browser
Code Review Sign In
review.trustedfirmware.org / mirror / mbed-tls.git / b22e64045b81f677aea3ca115df66e1a5fd2b44d / library / ssl_tls.c
  1. 1315124 Move the new config optimization defines to be optional by Andrzej Kurek · 4 years, 8 months ago
  2. c162895 Add call to mbedtls_x509_crt_free() by Hannes Tschofenig · 4 years, 8 months ago
  3. 2279ffd Adding immediate message transmission by Hannes Tschofenig · 4 years, 8 months ago
  4. cb6410c Wrapper function for calling parse_certificate_verify by Hannes Tschofenig · 4 years, 8 months ago
  5. 1c44816 Merge pull request #3913 from jarvte/memfix_variablebuffer by Andrzej Kurek · 4 years, 8 months ago
  6. b89cf99 Fix possible memory leak when MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH is defined by Teppo Järvelin · 4 years, 8 months ago
  7. c5b0c6e fix uninitialized variables by Shelly Liberman · 4 years, 9 months ago
  8. 560203a Merge pull request #3853 from kjbracey-arm/m_narrowloop by Shelly Liberman · 4 years, 9 months ago
  9. a967a58 [baremetal] Avoid narrow loop counters etc by Kevin Bracey · 4 years, 9 months ago
  10. 585e9e0 Add MBEDTLS_SSL_CONF_TRANSPORT by Kevin Bracey · 4 years, 9 months ago
  11. d859db8 Fix MBEDTLS_SSL_CONF_ENDPOINT flagging by Kevin Bracey · 4 years, 9 months ago
  12. 8b0910a Merge pull request #3815 from AndrzejKurek/cipher-optim-mem-fix by Andrzej Kurek · 4 years, 9 months ago
  13. 28b3b29 ssl_tls.c: Fix unchecked memory allocation by Andrzej Kurek · 4 years, 10 months ago
  14. 2e49d07 Describe the behaviour of buffer resizing on an out-of-memory error by Andrzej Kurek · 4 years, 10 months ago
  15. cd9a6ff Introduce additional flags for buffer upsizing and downsizing by Andrzej Kurek · 4 years, 10 months ago
  16. 79db2f1 Refactor the buffer resize feature to reduce codesize by Andrzej Kurek · 4 years, 10 months ago
  17. f384495 Sideport the variable IO buffer size feature to baremetal by Andrzej Kurek · 4 years, 10 months ago
  18. ff51721 ssl_tls: reduce the complexity of encryption validation by Andrzej Kurek · 5 years ago
  19. 8ec9e13 ssl_tls: Add a flag indicating that encryption succeeded by Andrzej Kurek · 5 years ago
  20. 69bafce Improve the FI resistance in ssl_tls.c key switching by Andrzej Kurek · 4 years, 11 months ago
  21. f7df0d3 Reduce the size of used constant in ssl_tls.c by Andrzej Kurek · 4 years, 11 months ago
  22. a793237 Calculate hashes of ssl encryption and decryption keys by Andrzej Kurek · 4 years, 11 months ago
  23. 1175044 Merge enc/dec cipher contexts in ssl transforms by Andrzej Kurek · 4 years, 11 months ago
  24. 305a5ec Checking in critical places if secured memset() and memcpy() was successful by Piotr Nowicki · 5 years ago
  25. a6348ed Checking in critical places if the mbedtls_platform_zeroize() was successful by Piotr Nowicki · 5 years ago
  26. e3c4ee5 Rename mbedtls_platform_memcmp() to mbedtls_platform_memequal() by Piotr Nowicki · 5 years ago
  27. 3799fc1 Splitting buffers comment added by Shelly Liberman · 5 years ago
  28. c6a7e6b Enhancement fixes by Shelly Liberman · 5 years ago archive/fi_write_user_data fi_write_user_data
  29. 4062d6c Add user pointer and data size duplication to ssl context. by shelib01 · 5 years ago
  30. afec885 Revert a part of the sensitive information duplication changes by Andrzej Kurek · 5 years ago
  31. c417c78 Merge pull request #3481 from AndrzejKurek/fi_duplicate_buffers_2 by Andrzej Kurek · 5 years ago
  32. 45e7199 Minor formatting and cosmetic changes by Andrzej Kurek · 5 years ago
  33. 0919b14 Formatting changes by Andrzej Kurek · 5 years ago
  34. 84bde41 Add FI countermeasures to the ssl module by Andrzej Kurek · 5 years ago
  35. 74f7d0f Duplicate sensitive buffer and buffer length information by Andrzej Kurek · 5 years ago
  36. 78fc139 Add FI countermeasures for sensitive switch instructions by Piotr Nowicki · 5 years ago
  37. e5425a0 Merge pull request #3408 from AndrzejKurek/hamming-distance-improvements by Andrzej Kurek · 5 years ago
  38. e048b91 Add returning a FAULT_DETECTED error on suspected FI attacks by Piotr Nowicki · 5 years ago
  39. 8f52a8a Improve the Hamming distance of ssl_hs_is_proper_fragment return values by Andrzej Kurek · 5 years ago
  40. 478b05c Merge pull request #3355 from AndrzejKurek/fi_error_codes by Andrzej Kurek · 5 years ago
  41. fd56f40 Change the default value of status variables to an error by Andrzej Kurek · 5 years ago
  42. 13bebd0 Keep SSL context const when hw accel is disabled by Manuel Pégourié-Gonnard · 5 years ago
  43. 731d7c0 Fix lack of cookie check on hard reconnect by Manuel Pégourié-Gonnard · 5 years ago
  44. 825ebd4 Merge mbedtls 2.16.6 into baremetal by Andrzej Kurek · 5 years ago
  45. ae48d86 Fix bug in record decompression by Manuel Pégourié-Gonnard · 6 years ago
  46. 92af9a9 Fixes definition error when the deprecated MBEDTLS_ZLIB_SUPPORT and ENABLE_ZLIB_SUPPORT macro are defined/enabled for zlib support in mbedtls by jiblime · 6 years ago
  47. 10a2ffd Merge remote-tracking branch 'upstream/pr/2945' into baremetal by Arto Kinnunen · 6 years ago
  48. ac6d226 Update signature of mbedtls_platform_random_delay by Arto Kinnunen · 6 years ago
  49. 05ca9d4 Merge remote-tracking branch 'public/pr/2979' into baremetal by Simon Butcher · 6 years ago
  50. cafb6c9 Clear internal decrypted buffer after read by Teppo Järvelin · 6 years ago
  51. 7195571 Replace mbedtls_platform_enforce_volatile_reads 2 by Arto Kinnunen · 6 years ago
  52. 8f7e36f Coverity fixes, check hmac return values by Teppo Järvelin · 6 years ago
  53. 5aa4c07 Minor review fixes by Jarno Lamsa · 6 years ago
  54. 015aa44 Make authmode volatile by Jarno Lamsa · 6 years ago
  55. af60cd7 Protect the peer_authenticated flag more by Jarno Lamsa · 6 years ago
  56. 8d09e57 Increase hamming distance for session resume flag by Jarno Lamsa · 6 years ago
  57. 489dccd Adress review comments by Jarno Lamsa · 6 years ago
  58. 88db2ae Use Platform fault when double check fails by Jarno Lamsa · 6 years ago
  59. 0616405 Check that we have all the proper keys by Jarno Lamsa · 6 years ago
  60. e1621d4 Check that the peer_authenticated flag by Jarno Lamsa · 6 years ago
  61. ba4730f Protect setting of peer_authenticated flag by Jarno Lamsa · 6 years ago
  62. 4031a45 Protect key_derivation_done flag by Jarno Lamsa · 6 years ago
  63. 67f0a1e Protect setting of premaster_generated flag by Jarno Lamsa · 6 years ago
  64. acb5eb0 Add a double check to protect from glitch by Jarno Lamsa · 6 years ago
  65. b018009 Use invalid state by Jarno Lamsa · 6 years ago
  66. 2b20516 Make TLS state changes explicit by Jarno Lamsa · 6 years ago
  67. 9d6a535 Return and propagate UECC_FAULT_DETECTED by Manuel Pégourié-Gonnard · 6 years ago
  68. 1a53371 Remove curve parameter from public functions by Manuel Pégourié-Gonnard · 6 years ago
  69. 677b7f6 Fix direct use of struct instead of abstract type by Manuel Pégourié-Gonnard · 6 years ago
  70. 6f4e030 Changed mbedtls_platform_memcpy to memcpy in places which don't handle critical data by Teppo Järvelin · 6 years ago
  71. 91d7938 Changed every memcpy to SCA equivalent mbedtls_platform_memcpy by Teppo Järvelin · 6 years ago
  72. 8a8488c Fix mbedtls_ssl_check_record usage with ext buf by Arto Kinnunen · 6 years ago
  73. e2bf54d Merge remote-tracking branch 'public/pr/2877' into baremetal by Simon Butcher · 6 years ago
  74. 895454d Use plain memset() for public data in ssl_tls.c by Manuel Pégourié-Gonnard · 6 years ago
  75. 54526c3 Use plain memset() for freshly allocated objects by Manuel Pégourié-Gonnard · 6 years ago
  76. 9941933 Use plain memset() in context init functions by Manuel Pégourié-Gonnard · 6 years ago
  77. 7a346b8 Replace memset() with mbedtls_platform_memset() by Manuel Pégourié-Gonnard · 6 years ago
  78. 0efac53 Review fixes: fixed comments to be more accurate and changed one memcmp to safer version by Teppo Järvelin · 6 years ago
  79. 707ceb8 Replaced mbedtls_ssl_safer_memcmp with mbedtls_platform_memcmp by Teppo Järvelin · 6 years ago
  80. 650343c Changed mbedtls_platform_memcmp to memcmp for places that don't have critical data and are under baremetal by Teppo Järvelin · 6 years ago
  81. 61f412e Changed every memcmp to SCA equivalent mbedtls_platform_memcmp by Teppo Järvelin · 6 years ago
  82. 2829bbf Remove dependency from SSL on PK internals by Manuel Pégourié-Gonnard · 6 years ago
  83. e8144aa Merge remote-tracking branch 'origin/pr/657' into baremetal by Simon Butcher · 6 years ago
  84. 88b535a Merge remote-tracking branch 'origin/pr/654' into baremetal by Simon Butcher · 6 years ago
  85. 303d399 Merge remote-tracking branch 'origin/pr/609' into baremetal by Simon Butcher · 6 years ago
  86. 3d7439e Review corrections 6 by Arto Kinnunen · 6 years ago
  87. 84eeb4f Review corrections 5 by Arto Kinnunen · 6 years ago
  88. a3fa06e Review corrections 3 by Arto Kinnunen · 6 years ago
  89. 4f4849a Review corrections 2 by Arto Kinnunen · 6 years ago
  90. 6e3f09b Review corrections by Arto Kinnunen · 6 years ago
  91. 0b62ce8 Use function for 16/24/32-bit BE conversion by Arto Kinnunen · 6 years ago
  92. 7fce190 Merge remote-tracking branch 'origin/pr/635' into HEAD by Simon Butcher · 6 years ago
  93. 9ec3fe0 Introduce configuration option to remove CRT verification callbacks by Hanno Becker · 6 years ago
  94. a5cedbc Introduce MD handle type by Hanno Becker · 6 years ago
  95. 7bcf2b5 Introduce version comparing functions by Hanno Becker · 6 years ago
  96. 982da7e TinyCrypt ECDHE-PSK: Implement mbedtls_ssl_psk_derive_premaster() by Hanno Becker · 6 years ago
  97. ecf5d3f TinyCrypt SSL: Extend scope of use of TC in PMS derivation by Hanno Becker · 6 years ago
  98. ee902df TinyCrypt SSL: Implement mbedtls_ssl_check_curve() for TinyCrypt by Hanno Becker · 6 years ago
  99. 7e9c2e0 TinyCrypt SSL: Adapt ssl_parse_certificate_verify() to TinyCrypt by Hanno Becker · 6 years ago
  100. c64d5af Fixup: Don't use legacy ECC error code from TinyCrypt by Hanno Becker · 6 years ago