- 67397fa Merge pull request #5704 from mprse/mixed_psk_2cx by Manuel Pégourié-Gonnard · 3 years, 3 months ago
- 169bf0b Fix comments (#endif flags) by Przemek Stekiel · 3 years, 3 months ago
- 8855e36 Merge pull request #5674 from superna9999/5668-abstract-tls-mode-cleanup by Gilles Peskine · 3 years, 3 months ago
- 8a4b7fd Optimize code by Przemek Stekiel · 3 years, 3 months ago
- 8abcee9 Fix typos by Przemek Stekiel · 3 years, 3 months ago
- 2230e6c Simplify PSA transform->ivlen set in ssl_tls12_populate_transform() by Neil Armstrong · 3 years, 3 months ago
- 301711e Simplify mbedtls_ssl_get_base_mode by Gilles Peskine · 3 years, 3 months ago
- e108d98 Simplify mbedtls_ssl_get_mode by Gilles Peskine · 3 years, 3 months ago
- 99114f3 Fix build flags for opaque/raw psk checks by Przemek Stekiel · 3 years, 3 months ago
- b293aaa Enable support for psa opaque DHE-PSK key exchange on the client side by Przemek Stekiel · 3 years, 3 months ago
- 19b80f8 Enable support for psa opaque ECDHE-PSK key exchange on the client side by Przemek Stekiel · 3 years, 4 months ago
- 51a1f36 setup_psa_key_derivation(): change salt parameter to other_secret by Przemek Stekiel · 3 years, 4 months ago
- c203340 Add support for psa rsa-psk key exchange by Przemek Stekiel · 3 years, 4 months ago
- ae4ed30 Fix naming: random bytes are the seed (not salt) in derivation process by Przemek Stekiel · 3 years, 4 months ago
- 1f02703 setup_psa_key_derivation(): add optional salt parameter by Przemek Stekiel · 3 years, 4 months ago
- 55132c6 Merge pull request #5703 from superna9999/5322-ecdh-remove-legacy-context by Manuel Pégourié-Gonnard · 3 years, 3 months ago
- f2c82f0 Introduce MBEDTLS_SSL_SOME_SUITES_USE_CBC_ETM macro to determine if Encrypt-then-MAC with CBC is used in a ciphersuite by Neil Armstrong · 3 years, 4 months ago
- ccc074e Use correct condition to use encrypt_then_mac in ssl_tls.c by Neil Armstrong · 3 years, 4 months ago
- d1be767 Use PSA_BLOCK_CIPHER_BLOCK_LENGTH instead of PSA_BLOCK_CIPHER_BLOCK_MAX_SIZE in ssl_tls12_populate_transform() by Neil Armstrong · 3 years, 4 months ago
- 6b27c97 Rename mbedtls_get_mode() to mbedtls_ssl_get_mode() by Neil Armstrong · 3 years, 4 months ago
- ab555e0 Rename mbedtls_get_mode_from_XXX to mbedtls_ssl_get_mode_from_XXX by Neil Armstrong · 3 years, 4 months ago
- a0eeb7f Remove cipher_info in ssl_tls12_populate_transform() when USE_PSA_CRYPTO is defined by Neil Armstrong · 3 years, 4 months ago
- 7fea33e Use mbedtls_get_mode_from_ciphersuite() in ssl_tls12_populate_transform() by Neil Armstrong · 3 years, 4 months ago
- 4bf4c86 Introduce mbedtls_get_mode_from_ciphersuite() by reusing mbedtls_get_mode_from_transform() logic by Neil Armstrong · 3 years, 4 months ago
- 8a0f3e8 Introduce mbedtls_ssl_mode_t & mbedtls_get_mode_from_transform() by Neil Armstrong · 3 years, 4 months ago
- 4d3a604 Change default config version to development style by XiaokangQian · 3 years, 3 months ago
- 060d867 Update parse_key_share in server side and version config by XiaokangQian · 3 years, 3 months ago
- 75d40ef Refine code base on review by XiaokangQian · 3 years, 3 months ago
- 8f9dfe4 Fix comments about coding styles and test cases by XiaokangQian · 3 years, 4 months ago
- ed582dd Update based on comments by XiaokangQian · 3 years, 4 months ago
- c4b8c99 Rebase and solve conflicts and issues by XiaokangQian · 3 years, 4 months ago
- a2da9c7 Merge pull request #5631 from gstrauss/enum-tls-vers by Paul Elliott · 3 years, 3 months ago
- 041a376 Remove some tls_ver < MBEDTLS_SSL_VERSION_TLS1_2 checks by Glenn Strauss · 3 years, 5 months ago
- 60bfe60 mbedtls_ssl_ciphersuite_t min_tls_version,max_tls_version by Glenn Strauss · 3 years, 5 months ago
- 2dfcea2 mbedtls_ssl_config min_tls_version, max_tls_version by Glenn Strauss · 3 years, 5 months ago
- da7851c Rename mbedtls_ssl_session minor_ver to tls_version by Glenn Strauss · 3 years, 5 months ago
- 07c6416 Rename mbedtls_ssl_transform minor_ver to tls_version by Glenn Strauss · 3 years, 5 months ago
- dff8462 Unify internal/external TLS protocol version enums by Glenn Strauss · 3 years, 5 months ago
- f3f4641 Remove ecdh_ctx variable, init & free when USE_PSA_CRYPTO isn't selected by Neil Armstrong · 3 years, 4 months ago
- a33a255 Disable non-PSA ECDHE code in mbedtls_ssl_psk_derive_premaster() when USE_PSA_CRYPTO is selected by Neil Armstrong · 3 years, 4 months ago
- 236e17e Introduce mbedtls_ssl_hs_cb_t typedef by Glenn Strauss · 3 years, 5 months ago
- 1b05aff Merge pull request #5624 from superna9999/5312-tls-server-ecdh by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- f716a70 Rename mbedtls_ssl_handshake_params variable ecdh_psa_shared_key to ecdh_psa_privkey_is_external by Neil Armstrong · 3 years, 4 months ago
- 0e980e8 Merge pull request #5640 from ronald-cron-arm/version-negotiation-2 by Ronald Cron · 3 years, 4 months ago
- 33a9d61 Merge pull request #5638 from paul-elliott-arm/ssl_cid_accessors by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- 451114f Merge pull request #5647 from superna9999/5179-follow-up-tls-record-hmac-no-mdinfo by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- 0113cf1 Add accessor for own cid to ssl context by Paul Elliott · 3 years, 5 months ago
- 8113d25 Add ecdh_psa_shared_key flag to protect PSA privkey if imported by Neil Armstrong · 3 years, 4 months ago
- a980adf Merge pull request #5637 from ronald-cron-arm/version-negotiation-1 by Ronald Cron · 3 years, 4 months ago
- 1fa4f68 ssl_tls.c: Return in error if default config fails by Ronald Cron · 3 years, 4 months ago
- 37bdaab tls: Simplify the logic of the config version check and test it by Ronald Cron · 3 years, 4 months ago
- e451295 Remove md_info in ssl_tls12_populate_transform() when USE_PSA_CRYPTO is defined by Neil Armstrong · 3 years, 5 months ago
- 3304f25 Merge pull request #5653 from paul-elliott-arm/handshake_over by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- f660655 TLS: Allow hybrid TLS 1.2/1.3 in default configurations by Ronald Cron · 3 years, 5 months ago
- e71639d Simplify TLS major version default value setting by Ronald Cron · 3 years, 5 months ago
- 9f0fba3 Add logic to switch to TLS 1.2 by Ronald Cron · 3 years, 6 months ago
- e1d3f06 Allow hybrid TLS 1.3 + TLS 1.2 configuration by Ronald Cron · 3 years, 6 months ago
- fbd9f99 ssl_tls.c: Move some client specific functions to ssl_client.c by Ronald Cron · 3 years, 5 months ago
- 27c85e7 ssl_tls.c: Unify TLS 1.2 and TLS 1.3 SSL state logs by Ronald Cron · 3 years, 5 months ago
- 8f6d39a Make some handshake TLS 1.3 utility routines available for TLS 1.2 by Ronald Cron · 3 years, 5 months ago
- 086ee0b ssl_tls.c: Reject TLS 1.3 version configuration for server by Ronald Cron · 3 years, 5 months ago
- a25cf58 ssl_tls.c: Remove one unnecessary minor version check by Ronald Cron · 3 years, 5 months ago
- c2f13a0 ssl_tls.c: Modify mbedtls_ssl_set_calc_verify_md() by Ronald Cron · 3 years, 5 months ago
- 4dcbca9 ssl_tls.c: Move mbedtls_ssl_set_calc_verify_md() to TLS 1.2 section by Ronald Cron · 3 years, 5 months ago
- 81591aa ssl_tls.c: Remove ssl_set_handshake_prfs unnecessary minor_ver param by Ronald Cron · 3 years, 5 months ago
- f12b81d ssl_tls.c: Fix PSA ECDH private key destruction by Ronald Cron · 3 years, 5 months ago
- 8540cf6 ssl_tls.c: Propose PKCS1 v1.5 signatures with SHA_384/512 by Ronald Cron · 3 years, 5 months ago
- 39f2f73 Merge pull request #5630 from ronald-cron-arm/restore-full-compat-testing by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- fb39f15 ssl_tls.c: Use ETM status only in CBC mode case by Ronald Cron · 3 years, 4 months ago
- 9b93c0d Change cookie parameters for dtls and tls 1.3 by XiaokangQian · 3 years, 6 months ago
- 27b0d94 Use mbedtls_ssl_is_handshake_over() by Paul Elliott · 3 years, 4 months ago
- f4042f0 Merge pull request #5573 from superna9999/5176-5177-5178-5179-tsl-record-hmac by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- 8d7afc6 Merge pull request #5523 from ronald-cron-arm/one-flush-output-development by Ronald Cron · 3 years, 4 months ago
- 29c0c04 Only make PSA HMAC key exportable when NULL or CBC & not EtM in ssl_tls12_populate_transform() by Neil Armstrong · 3 years, 5 months ago
- 3f20b77 Improve comment by Ronald Cron · 3 years, 5 months ago
- 66dbf91 TLS 1.3: Do not send handshake data in handshake step handlers by Ronald Cron · 3 years, 6 months ago
- 6828d8f Return MBEDTLS_ERR_SSL_BAD_INPUT_DATA if MAC algorithm isn't supported in ssl_tls.c by Neil Armstrong · 3 years, 5 months ago
- 321116c Remove spurious debug in ssl_tls12_populate_transform() by Neil Armstrong · 3 years, 5 months ago
- 6989407 Add accessor to retrieve SNI during handshake by Glenn Strauss · 3 years, 6 months ago
- 36872db Provide means to reset handshake cert list by Glenn Strauss · 3 years, 6 months ago
- 2ed9527 Add server certificate selection callback by Glenn Strauss · 3 years, 6 months ago
- e858996 Use PSA version of mbedtls_ct_hmac() in mbedtls_ssl_decrypt_buf() by Neil Armstrong · 3 years, 5 months ago
- cf8841a Remove non-PSA MAC keys in mbedtls_ssl_transform when MBEDTLS_USE_PSA_CRYPTO is defined by Neil Armstrong · 3 years, 5 months ago
- 0760ade Setup & Import HMAC keys in ssl_tls12_populate_transform() by Neil Armstrong · 3 years, 5 months ago
- 39b8e7d Add, Initialize & Free HMAC keys in mbedtls_ssl_transform by Neil Armstrong · 3 years, 5 months ago
- c63a1e0 Fix mbedtls_ssl_get_version() for TLSv1.3 by Gilles Peskine · 3 years, 7 months ago
- e1a0c25 New function to access the TLS version from a context as an enum by Gilles Peskine · 3 years, 7 months ago
- f1b23ca move wrong comments by Jerry Yu · 3 years, 5 months ago
- 18621df remove extra empty line by Jerry Yu · 3 years, 5 months ago
- 50f2f70 remove extra guards by Jerry Yu · 3 years, 5 months ago
- 840fbb2 guards populate_transform reference by Jerry Yu · 3 years, 5 months ago
- 4f9e3ef move session_save/load_tls12 by Jerry Yu · 3 years, 5 months ago
- d9d91da move sig_hash_* by Jerry Yu · 3 years, 5 months ago
- ee40f9d move get_key_exchange_md_tls12 by Jerry Yu · 3 years, 5 months ago
- 9bccc4c move populate_transform by Jerry Yu · 3 years, 5 months ago
- e93ffcd move tls_prf_get_type by Jerry Yu · 3 years, 5 months ago
- 392112c move tls12prf_from_cs by Jerry Yu · 3 years, 5 months ago
- 0b3d7c1 move parse_finished by Jerry Yu · 3 years, 5 months ago
- 3c8e47b move write_finished by Jerry Yu · 3 years, 5 months ago
- 2a9fff5 move wrapup by Jerry Yu · 3 years, 5 months ago