- e6c3aa7 Fix minor issues and clean up the code by Andrzej Kurek · 4 years, 7 months ago
- 38c7f2d Refactor the immediate transmission feature by Andrzej Kurek · 4 years, 8 months ago
- 52e08cb Fix unused parameters and ifdefs by Andrzej Kurek · 4 years, 8 months ago
- 777d421 Fix define and function names to conform to Mbed TLS rules by Andrzej Kurek · 4 years, 8 months ago
- 32846c6 Moving the ecdhe_computed variable into the handshake structure by Hannes Tschofenig · 4 years, 8 months ago
- 3463056 Making sure that the ECDHE pre-computation is only done once. by Hannes Tschofenig · 4 years, 8 months ago
- e151a35 Adding early ECDHE key generation to ssl_cli.c by Hannes Tschofenig · 4 years, 8 months ago
- 635f868 Adding delayed server cert verification to client state machine by Hannes Tschofenig · 4 years, 8 months ago
- 585e9e0 Add MBEDTLS_SSL_CONF_TRANSPORT by Kevin Bracey · 4 years, 9 months ago
- f4d2c7d Improve FI resistance of pk verification in ssl_cli.c by Andrzej Kurek · 4 years, 10 months ago
- 6c30be8 ssl: call signature verification twice for non-restartable operations by Andrzej Kurek · 5 years ago
- e3c4ee5 Rename mbedtls_platform_memcmp() to mbedtls_platform_memequal() by Piotr Nowicki · 5 years ago
- afec885 Revert a part of the sensitive information duplication changes by Andrzej Kurek · 5 years ago
- 84bde41 Add FI countermeasures to the ssl module by Andrzej Kurek · 5 years ago
- 74f7d0f Duplicate sensitive buffer and buffer length information by Andrzej Kurek · 5 years ago
- e048b91 Add returning a FAULT_DETECTED error on suspected FI attacks by Piotr Nowicki · 5 years ago
- 478b05c Merge pull request #3355 from AndrzejKurek/fi_error_codes by Andrzej Kurek · 5 years ago
- fd56f40 Change the default value of status variables to an error by Andrzej Kurek · 5 years ago
- 825ebd4 Merge mbedtls 2.16.6 into baremetal by Andrzej Kurek · 5 years ago
- ac6d226 Update signature of mbedtls_platform_random_delay by Arto Kinnunen · 6 years ago
- 7195571 Replace mbedtls_platform_enforce_volatile_reads 2 by Arto Kinnunen · 6 years ago
- 5aa4c07 Minor review fixes by Jarno Lamsa · 6 years ago
- 8d09e57 Increase hamming distance for session resume flag by Jarno Lamsa · 6 years ago
- 0616405 Check that we have all the proper keys by Jarno Lamsa · 6 years ago
- e1621d4 Check that the peer_authenticated flag by Jarno Lamsa · 6 years ago
- 67f0a1e Protect setting of premaster_generated flag by Jarno Lamsa · 6 years ago
- 98801af Protect setting of hello_random flag by Jarno Lamsa · 6 years ago
- 6122b59 Address review comments by Jarno Lamsa · 6 years ago
- 46afd5d Fix CI issues by Jarno Lamsa · 6 years ago
- 47aab8d Protect return value from mbedtls_pk_verify by Jarno Lamsa · 6 years ago
- 70abd7a Add enumeration for invalid state by Jarno Lamsa · 6 years ago
- 2b20516 Make TLS state changes explicit by Jarno Lamsa · 6 years ago
- 9d6a535 Return and propagate UECC_FAULT_DETECTED by Manuel Pégourié-Gonnard · 6 years ago
- 1a53371 Remove curve parameter from public functions by Manuel Pégourié-Gonnard · 6 years ago
- 677b7f6 Fix direct use of struct instead of abstract type by Manuel Pégourié-Gonnard · 6 years ago
- 6f4e030 Changed mbedtls_platform_memcpy to memcpy in places which don't handle critical data by Teppo Järvelin · 6 years ago
- 91d7938 Changed every memcpy to SCA equivalent mbedtls_platform_memcpy by Teppo Järvelin · 6 years ago
- 707ceb8 Replaced mbedtls_ssl_safer_memcmp with mbedtls_platform_memcmp by Teppo Järvelin · 6 years ago
- 61f412e Changed every memcmp to SCA equivalent mbedtls_platform_memcmp by Teppo Järvelin · 6 years ago
- 2829bbf Remove dependency from SSL on PK internals by Manuel Pégourié-Gonnard · 6 years ago
- 020d9ba Introduce abstraction mbedtls_pk_handle_t by Manuel Pégourié-Gonnard · 6 years ago
- e8144aa Merge remote-tracking branch 'origin/pr/657' into baremetal by Simon Butcher · 6 years ago
- 3d7439e Review corrections 6 by Arto Kinnunen · 6 years ago
- 84eeb4f Review corrections 5 by Arto Kinnunen · 6 years ago
- 9b3b194 Review corrections 4 by Arto Kinnunen · 6 years ago
- a3fa06e Review corrections 3 by Arto Kinnunen · 6 years ago
- 4f4849a Review corrections 2 by Arto Kinnunen · 6 years ago
- 6e3f09b Review corrections by Arto Kinnunen · 6 years ago
- 0b62ce8 Use function for 16/24/32-bit BE conversion by Arto Kinnunen · 6 years ago
- 7fce190 Merge remote-tracking branch 'origin/pr/635' into HEAD by Simon Butcher · 6 years ago
- 7bcf2b5 Introduce version comparing functions by Hanno Becker · 6 years ago
- d91ede1 TinyCrypt ECDHE-PSK: Implement ClientKeyExchange writing by Hanno Becker · 6 years ago
- c7effc0 TinyCrypt SSL: Extend scope use of TC in CliKeyExchange writing by Hanno Becker · 6 years ago
- 7352bd1 TinyCrypt SSL: Extend scope of SrvKeyExchange parsing by Hanno Becker · 6 years ago
- b3a2448 TinyCrypt SSL: Impl. ECDH-param extraction from CRT for TinyCrypt by Hanno Becker · 6 years ago
- 27b7e50 TinyCrypt SSL: Declare EC-related TLS RFC constants in SSL namespace by Hanno Becker · 6 years ago
- 88889c6 Fixup: Add missing TinyCrypt guards by Hanno Becker · 6 years ago
- 1521ec5 Remove TinyCrypt PRNG configuration from ssl_cli.c by Hanno Becker · 6 years ago
- 7cb5c11 Missing uECC ECDSA flagging by Jarno Lamsa · 6 years ago
- ad78931 Signature wrapper for uECC by Jarno Lamsa · 6 years ago
- 2f41b24 Remove calc_verify SSL function pointer by Hanno Becker · 6 years ago
- 533f5b1 Remove ssl_optimize_checksum() by Hanno Becker · 6 years ago
- 4009d8f Make function mbedtls_ssl_set_hostname(...) as optional by Teppo Järvelin · 6 years ago
- f0f01e1 Merge remote-tracking branch 'origin/pr/630' into baremetal by Simon Butcher · 6 years ago
- 434ab19 Merge remote-tracking branch 'origin/pr/629' into baremetal by Simon Butcher · 6 years ago
- b72fc6a Don't use const var in initialization of another const var by Hanno Becker · 6 years ago
- 8295ff0 tinyCrypt: Don't store public ECDH-share in handshake struct by Hanno Becker · 6 years ago
- 29d1655 Add MBEDTLS_ECDH_C guards to ECDH code-paths using legacy ECDH by Hanno Becker · 6 years ago
- 975b9ee Fix guards around use of legacy ECDH context by Hanno Becker · 6 years ago
- 621113f tinyCrypt: Write client's key share by Hanno Becker · 6 years ago
- a3c2c17 tinyCrypt: Share ECDH secret calculation code-path by Hanno Becker · 6 years ago
- 75f12d1 tinyCrypt: Add ServerKeyExchange parsing code by Hanno Becker · 6 years ago
- ef982d5 tinyCrypt: Bind RNG wrapper to tinyCrypt in mbedtls_ssl_setup() by Hanno Becker · 6 years ago
- e12aafb tinyCrypt: Initial commit towards ECDHE support by Jarno Lamsa · 6 years ago
- 3328b18 Move ssl_process_in_server_key_exchange to avoid func use-before-def by Hanno Becker · 6 years ago
- 4e46709 Document precoditions on some HS parsing/writing functions by Hanno Becker · 6 years ago
- 7d552fa Avoid collision of ssl_xxx_key_exchange_yyy() func names in cli/srv by Hanno Becker · 6 years ago
- 48e526b Document parameter precondition for ssl_rsa_generate_partial_pms() by Hanno Becker · 6 years ago
- aa49620 Minor documentation improvement to ssl_rsa_encrypt_partial_pms() by Hanno Becker · 6 years ago
- 084694d Fix copy-pasta in documentation for outgoing CliKeyExchange by Hanno Becker · 6 years ago
- 44a29f4 Remove redundant use of local variable in CliKeyExch writing by Hanno Becker · 6 years ago
- ae22dd3 Simplify logic of restartable ECDHE in CliKeyExch writing by Hanno Becker · 6 years ago
- 91cf769 Remove restartable ECP return code check from ECDH suite handling by Hanno Becker · 6 years ago
- 8793fab Fix two typos in comments by Manuel Pégourié-Gonnard · 6 years ago
- 587c1ae Make IAR happy by dummy-initializing an unused variable by Hanno Becker · 6 years ago
- a855cb6 Avoid unused variable warning in ServerKeyExchange parsing by Hanno Becker · 6 years ago
- 868cb58 Rename SSL_PROC_CHK -> MBEDTLS_SSL_CHK by Hanno Becker · 6 years ago
- 9a12243 Introduce getter function for RNG context by Hanno Becker · 6 years ago
- 4ec73cb Restructure SrvKeyExchange: Move parsing code by Hanno Becker · 6 years ago
- 8b7b879 Restructure SrvKeyExchange: Move msg skipping for PSK and RSA-PSK by Hanno Becker · 7 years ago
- eb76c20 Restructure SrvKeyExchange: Move code for skipping SrvKeyExchange by Hanno Becker · 7 years ago
- fca604d Restructure SrvKeyExchange: Move static DH parameter extraction by Hanno Becker · 7 years ago
- 04769dd Restructure SrvKeyExchange: Add frame for structure by Hanno Becker · 7 years ago
- 09d2364 Share code between In-CliKeyExch and Out-CliKeyExch by Hanno Becker · 6 years ago
- 4f68b04 Restructure outgoing CliKeyExch: Remove old code by Hanno Becker · 6 years ago
- 87e3c9a Restructure outgoing CliKeyExch: Move writing code by Hanno Becker · 7 years ago
- 01290c7 Restructure outgoing CliKeyExch: Move RSA/RSA-PSK PMS generation by Hanno Becker · 7 years ago
- 6fb638b Restructure outgoing CliKeyExch: Move PMS assembly code by Hanno Becker · 7 years ago
- 5d39768 Restructure outgoing CliKeyExch: Add frame for new structure by Hanno Becker · 7 years ago
- 8844055 Remove compression field from SSL session if compression disabled by Hanno Becker · 6 years ago