- 21bfbdd Fix misuse of MD API in SSL constant-flow HMAC by Manuel Pégourié-Gonnard · 4 years, 3 months ago
- d48d5c6 Fix size_t and longlong specifiers for MinGW by Paul Elliott · 4 years, 7 months ago
- 3891caf Misc review requested fixes by Paul Elliott · 4 years, 8 months ago
- 9f35211 Fixes for invalid printf format specifiers by Paul Elliott · 4 years, 8 months ago
- 3aae5d4 Merge pull request #781 from mpg/cipher-auth-crypt-restricted by Janos Follath · 4 years, 8 months ago
- f5cf71e Stop using deprecated functions in the library by Manuel Pégourié-Gonnard · 4 years, 8 months ago
- 883d304 Fix: Add missing arguments to debug message. by Christian von Arnim · 4 years, 8 months ago
- a817ea4 Check presence of DTLS timers only once by Hanno Becker · 4 years, 10 months ago
- 6d6f8a4 Clarify descriptions of constant-flow helpers by Manuel Pégourié-Gonnard · 4 years, 10 months ago archive/better-cf-padding-checks better-cf-padding-checks
- 822b372 Remove last use of non-bit operations by Manuel Pégourié-Gonnard · 4 years, 11 months ago
- 2a59fb4 Add explicit cast when truncating values by Manuel Pégourié-Gonnard · 5 years ago
- 6e2a9a7 Factor repeated code in ssl_cf functions by Manuel Pégourié-Gonnard · 5 years ago
- 2ddec43 Use bit operations for constant-flow padding check by Manuel Pégourié-Gonnard · 5 years ago
- d2ce916 Merge branch 'development-restricted' by Janos Follath · 5 years ago
- d4ac4e0 Merge pull request #736 from mpg/cf-varpos-copy-dev-restricted by Janos Follath · 5 years ago
- ed19762 Merge pull request #3574 from makise-homura/e2k_support by Gilles Peskine · 5 years ago
- af9513b A different approach of signed-to-unsigned comparison by makise-homura · 5 years ago
- ba6fc97 Fix a typo in a comment by Manuel Pégourié-Gonnard · 5 years ago
- abccfc1 Merge development into development-restricted by Dan Handley · 5 years ago
- de1cf2c5 Make mbedtls_ssl_cf_memcpy_offset() constant-flow by Manuel Pégourié-Gonnard · 5 years ago
- 7fe2c5f Add mbedtls_ssl_cf_memcpy_offset() with tests by Manuel Pégourié-Gonnard · 5 years ago
- 3c31afa Use temporary buffer to hold the peer's HMAC by Manuel Pégourié-Gonnard · 5 years ago
- 1e14827 Update copyright notices to use Linux Foundation guidance by Bence Szépkúti · 5 years ago
- 0be6aa9 Get back -Wsign-compare and fix sources according to it by makise-homura · 5 years ago
- e900b59 Merge pull request #719 from gabor-mezei-arm/689_zeroising_of_plaintext_buffers by Gilles Peskine · 5 years ago
- f009542 Add missing const for consistency by Manuel Pégourié-Gonnard · 5 years ago
- e747843 Fix a whitespace issue by Manuel Pégourié-Gonnard · 5 years ago
- e0765f3 Use int ret = MBEDTLS_ERROR_CORRUPTION_DETECTED; idiom by Manuel Pégourié-Gonnard · 5 years ago
- 44c9fdd Check errors from the MD layer by Manuel Pégourié-Gonnard · 5 years ago
- 9713e13 Remove unnecessary cast by Manuel Pégourié-Gonnard · 5 years ago
- baccf80 Improve some comments and internal documentation by Manuel Pégourié-Gonnard · 5 years ago
- ed0e864 Factor repeated condition to its own macro by Manuel Pégourié-Gonnard · 5 years ago
- 7a8b1e6 Implement cf_hmac() actually with constant flow by Manuel Pégourié-Gonnard · 5 years ago
- a321413 Zeroising of plaintext buffers to erase unused application data from memory by gabor-mezei-arm · 5 years ago
- 65a6fa3 Make cf_hmac() STATIC_TESTABLE by Manuel Pégourié-Gonnard · 5 years ago
- 8aa29e3 Use existing implementation of cf_hmac() by Manuel Pégourié-Gonnard · 5 years ago
- 045f094 Add dummy constant-flow HMAC function with tests by Manuel Pégourié-Gonnard · 5 years ago
- 2df1f1f Factor repeated preprocessor condition to a macro by Manuel Pégourié-Gonnard · 5 years ago
- 527b878 Merge pull request #3454 from gilles-peskine-arm/include-common-h-development by Manuel Pégourié-Gonnard · 5 years ago
- db09ef6 Include common.h instead of config.h in library source files by Gilles Peskine · 5 years ago
- f4e3fc9 Use starts/finish around Lucky 13 dummy compressions by Manuel Pégourié-Gonnard · 5 years ago
- f486e28 Document precondition of nonce-generating function in ssl_msg.c by Hanno Becker · 5 years ago
- 1595281 Improve documentation of nonce-generating function in ssl_msg.c by Hanno Becker · 5 years ago
- 1cda266 Spell out check for non-zero'ness by Hanno Becker · 5 years ago
- 16bf0e2 Fix debug print of explicit IV by Hanno Becker · 5 years ago
- 7cca358 Fix indentation in debug statement in ssl_msg.c by Hanno Becker · 5 years ago
- ceef848 Rename TLS 1.3 padding granularity macro by Hanno Becker · 5 years ago
- c3f7b0b Fix #endif indicator comment by Hanno Becker · 5 years ago
- 67a37db Add missing configuration guards to SSL record protection helpers by Hanno Becker · 5 years ago
- 1399692 Introduce configuration option for TLS 1.3 padding granularity by Hanno Becker · 5 years ago
- c0eefa8 Introduce helper function to retrieve explicit IV len for transform by Hanno Becker · 5 years ago
- 1726380 Simplify AEAD nonce derivation by Hanno Becker · 5 years ago
- df8be22 TLS record protection: Add helper function for nonce derivation by Hanno Becker · 5 years ago
- bd5ed1d TLS record protection: Add explicit IV after record protection. by Hanno Becker · 5 years ago
- 1cb6c2a TLS record protection: Rewrite AAD setup and add case of TLS 1.3 by Hanno Becker · 5 years ago
- 9231340 Improve documentation of (D)TLSInnerPlaintext handling by Hanno Becker · 5 years ago
- ccc13d0 TLS 1.3: Implement TLSInnerPlaintext parsing/building by Hanno Becker · 5 years ago
- 581bc1b Remove ref to CID from inner plaintext parsing/building functions by Hanno Becker · 5 years ago
- 66e21ef Merge pull request #3163 from AndrzejKurek/variable-buffers-renegotiation by Jaeden Amero · 5 years ago
- 90c6e84 Split the maximum fragment length into two - an input and output MFL by Andrzej Kurek · 5 years ago
- 243d70f Improve debug logging of client hard reconnect by Manuel Pégourié-Gonnard · 5 years ago
- 824655c Fix lack of cookie check on hard reconnect by Manuel Pégourié-Gonnard · 5 years ago
- 21d1cbc Merge pull request #2262 from andresag01/iotssl-2544-deprecate-record-accel by Manuel Pégourié-Gonnard · 5 years ago
- b33cc76 Add I/O buffer length fields to mbedtls_ssl_context by Darryl Green · 6 years ago
- e07bc20 Fix compile errors with MBEDTLS_SSL_HW_RECORD_ACCEL by Manuel Pégourié-Gonnard · 5 years ago
- 9d062f9 Move ssl_mac() from ssl_tls.c to ssl_msg.c by Hanno Becker · 5 years ago
- f1a3828 Adapt preamble for newly created ssl_msg.c by Hanno Becker · 5 years ago
- af752d4 Remove code from ssl_tls.c & ssl_msg.c to get disjoint functionality by Hanno Becker · 5 years ago
- 6e7051a Add guarded ssl_msg.c to Makefiles by Hanno Becker · 5 years ago
- abd9cef Duplicate ssl_tls.c as ssl_tls_old.c and ssl_msg.c by Hanno Becker · 5 years ago[Renamed from library/ssl_tls.c]
- 8949071 Move ssl_get_current_mtu() to public namespace by Hanno Becker · 5 years ago
- 533ab5f Move flight and message buffering functions to public namespace by Hanno Becker · 5 years ago
- 40cdaa1 Move ssl_start_renegotiation() to public namespace by Hanno Becker · 5 years ago
- ce5f5fd Move ssl_handshake_wrapup_free_hs_transform() to public namespace by Hanno Becker · 5 years ago
- 786300f Move ssl_resend_hello_request() to public namespace by Hanno Becker · 5 years ago
- 7e8e6a6 Move ssl_dtls_replay_reset() to public namespace by Hanno Becker · 5 years ago
- 43aefe2 Move ssl_session_reset_int() to public namespace by Hanno Becker · 5 years ago
- 3e6f8ab Move SSL internal pointer updating routines to public namespace by Hanno Becker · 5 years ago
- 7876d12 Move ssl_check_timer() to public namespace by Hanno Becker · 5 years ago
- dd77229 Move ssl_ep_len() to public namespace by Hanno Becker · 5 years ago
- 0f57a65 Move ssl_set_timer() to public namespace by Hanno Becker · 5 years ago
- c40b685 Fix bug in record decompression by Manuel Pégourié-Gonnard · 6 years ago
- 9f25b8d Fixes definition error when the deprecated MBEDTLS_ZLIB_SUPPORT and ENABLE_ZLIB_SUPPORT macro are defined/enabled for zlib support in mbedtls by jiblime · 6 years ago
- 73c616b Put includes in alphabetical order by Janos Follath · 6 years ago
- 865b3eb Initialize return values to an error by Janos Follath · 6 years ago
- 1a61d45 Merge pull request #2841 from k-stachowiak/improve-memory-operation-clarity by Jaeden Amero · 6 years ago
- 9926eaf Do not allow configuring zero-length PSK by Piotr Nowicki · 6 years ago
- 5d74241 Merge remote-tracking branch 'origin/pr/2854' into development by Jaeden Amero · 6 years ago
- 7f8089b Fix mbedtls_ssl_check_record usage with ext buf by Arto Kinnunen · 6 years ago
- 6c0da64 Shorter version of mbedtls_ssl_send_fatal_handshake_failure by irwir · 6 years ago
- 89af51f Resolve #2801 - remove repetitive assignment to ssl->in_msg (the first value was never used) by irwir · 6 years ago
- 734f0cf Resolve #2800 - move declaration to avoid unused variable warning in case MBEDTLS_SSL_PROTO_DTLS was undefined by irwir · 6 years ago
- 40883e9 Resolve #2717 - remove erroneous sizeof (the operator was applied to constant integer number) by irwir · 6 years ago
- 311f54d tls_prf: support an empty master secret by Gilles Peskine · 6 years ago
- 95b68ef Improve clarity of a memory operation call by k-stachowiak · 6 years ago
- fa63645 ssl: Remove key exporter bug workaround by Jaeden Amero · 6 years ago
- 361b10d Fix SSL context deserialization by Hanno Becker · 6 years ago
- 81053a5 Use multipart PSA key derivation API by k-stachowiak · 6 years ago
- b7b486c Fix compiler warning by Jarno Lamsa · 6 years ago
- 8c51b7c Add debug messages by Jarno Lamsa · 6 years ago