- 6c242a0 Merge pull request #5634 from superna9999/5625-pk-opaque-rsa-basics by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- 927410d Merge pull request #5611 from superna9999/5318-tls-ecdhe-psk by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- 43b0943 Merge pull request #1946 from hanno-arm/alert_reentrant by Gilles Peskine · 3 years, 4 months ago
- eaf3086 Merge pull request #1133 from RonEld/1805 by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- e1730e4 Merge pull request #5708 from AndrzejKurek/timeless-struggles by Gilles Peskine · 3 years, 4 months ago
- 95a8923 Comment decrypt & encrypt callback entries of mbedtls_pk_ecdsa_opaque_info as not relevant by Neil Armstrong · 3 years, 4 months ago
- 7df6677 Remove now invalid comment in pk_opaque_ecdsa_can_do() by Neil Armstrong · 3 years, 4 months ago
- 56e71d4 Update documentation of mbedtls_pk_setup_opaque() by Neil Armstrong · 3 years, 4 months ago
- eccf88f Only accept RSA key pair in mbedtls_pk_setup_opaque() by Neil Armstrong · 3 years, 4 months ago
- 5e18f74 Make alert sending function re-entrant by Hanno Becker · 7 years ago
- 5735369 Remove the dependency on MBEDTLS_HAVE_TIME from MBEDTLS_TIMING_C by Andrzej Kurek · 3 years, 4 months ago
- 236e17e Introduce mbedtls_ssl_hs_cb_t typedef by Glenn Strauss · 3 years, 5 months ago
- c1152e4 Handle and return translated PSA errors in mbedtls_pk_wrap_as_opaque() by Neil Armstrong · 3 years, 5 months ago
- 7e1b4a4 Use PSA_BITS_TO_BYTES instead of open-coded calculation in mbedtls_pk_wrap_as_opaque() by Neil Armstrong · 3 years, 5 months ago
- 295aeb1 Add support for RSA Opaque PK key in mbedtls_pk_write_pubkey_der() by Neil Armstrong · 3 years, 5 months ago
- b980c9b Add support for RSA in pk_opaque_sign_wrap() by Neil Armstrong · 3 years, 5 months ago
- ca5b55f Add support for RSA in mbedtls_pk_wrap_as_opaque() by Neil Armstrong · 3 years, 5 months ago
- eabbf9d Add support for RSA PK Opaque key by Neil Armstrong · 3 years, 5 months ago
- 714b660 Remove dummy timing implementation by Andrzej Kurek · 3 years, 4 months ago
- 1b05aff Merge pull request #5624 from superna9999/5312-tls-server-ecdh by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- 8583627 psa_ssl_status_to_mbedtls: add conversion of PSA_ERROR_BUFFER_TOO_SMALL by Przemek Stekiel · 3 years, 4 months ago
- 1039ba5 Check if not using Opaque PSK in ECHDE-PSK PSA version of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- ede381c Get PSK length & check for buffer size before writting in ECHDE-PSK PSA version of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- 3cae167 Check buffer pointers before storing peer's public key in ECHDE-PSK PSA version of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- e18ff95 Get PSK length & check for buffer size before writting in ECHDE-PSK PSA version of ssl_write_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- b7ca76b Use intermediate pointer for readability and rename PMS pointer in ECHDE-PSK PSA version of ssl_write_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- fdf20cb Fix command indentation in ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- 2d63da9 Introduce zlen size variable in ECHDE-PSK part of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 5 months ago
- d6e2759 Change to more appropriate pointer declaration in ECHDE-PSK part of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 5 months ago
- fb0a81e Return PSA translated errors in ECHDE-PSK part of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 5 months ago
- 5a1455d Remove useless braces in ECHDE-PSK part of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 5 months ago
- 3bcef08 Update comments in ECHDE-PSK part of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 5 months ago
- 549a3e4 Initialize uninitialized variable in ECHDE-PSK part of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 5 months ago
- fc834f2 Introduce content_len_size variable in ECHDE-PSK part of ssl_write_client_key_exchange() by Neil Armstrong · 3 years, 5 months ago
- 0bdb68a Introduce zlen size variable in ECHDE-PSK part of ssl_write_client_key_exchange() by Neil Armstrong · 3 years, 5 months ago
- d8420ca Change to more appropriate pointer declaration in ECHDE-PSK part of ssl_write_client_key_exchange() by Neil Armstrong · 3 years, 5 months ago
- c530aa6 Return PSA translated errors in ECHDE-PSK part of ssl_write_client_key_exchange() by Neil Armstrong · 3 years, 5 months ago
- b9f319a Remove useless braces in ECHDE-PSK part of ssl_write_client_key_exchange() by Neil Armstrong · 3 years, 5 months ago
- 2540045 Update comments in ECHDE-PSK part of ssl_write_client_key_exchange() by Neil Armstrong · 3 years, 5 months ago
- bc5e8f9 Initialize uninitialized variables in ECHDE-PSK part of ssl_write_client_key_exchange() by Neil Armstrong · 3 years, 5 months ago
- 039db29 Implement PSA server-side ECDHE-PSK by Neil Armstrong · 3 years, 5 months ago
- 868af82 Implement PSA client-side ECDHE-PSK by Neil Armstrong · 3 years, 5 months ago
- a9f9335 ssl_tls13_generate_and_write_ecdh_key_exchange(): remove redundant check by Przemek Stekiel · 3 years, 4 months ago
- e88d190 Set ecdh_psa_privkey_is_external to 1 right after setting ecdh_psa_privkey in ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 4 months ago
- f716a70 Rename mbedtls_ssl_handshake_params variable ecdh_psa_shared_key to ecdh_psa_privkey_is_external by Neil Armstrong · 3 years, 4 months ago
- de68e39 Merge pull request #5568 from superna9999/5159-pk-rsa-verification by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- 0e980e8 Merge pull request #5640 from ronald-cron-arm/version-negotiation-2 by Ronald Cron · 3 years, 4 months ago
- 33a9d61 Merge pull request #5638 from paul-elliott-arm/ssl_cid_accessors by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- 6a25159 Merge pull request #5648 from gabor-mezei-arm/5403_hkdf_use_internal_psa_implementations by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- 451114f Merge pull request #5647 from superna9999/5179-follow-up-tls-record-hmac-no-mdinfo by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- 0113cf1 Add accessor for own cid to ssl context by Paul Elliott · 3 years, 5 months ago
- 11218dd ssl_client.c: Fix unused parameter by Ronald Cron · 3 years, 4 months ago
- bdb4f58 Add and update documentation of some minor version fields by Ronald Cron · 3 years, 4 months ago
- 82c785f Make handshake::min_minor_ver client only by Ronald Cron · 3 years, 4 months ago
- 91477a7 Switch handshake->ecdh_bits to size_t and remove now useless cast & limit checks by Neil Armstrong · 3 years, 4 months ago
- 1335222 Return translated PSA error in PSA version of ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 4 months ago
- f788253 Fix comment typo in PSA version of ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 4 months ago
- 80325d0 Allow ECDSA PK Opaque keys for ECDH Derivation by Neil Armstrong · 3 years, 5 months ago
- 104a7c1 Handle Opaque PK EC keys in ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 5 months ago
- 8113d25 Add ecdh_psa_shared_key flag to protect PSA privkey if imported by Neil Armstrong · 3 years, 5 months ago
- 5cd5f76 Use mbedtls_platform_zeroize() in ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 5 months ago
- 4f33fbc Use PSA define for max EC key pair size in ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 5 months ago
- 306d607 Fix indentation issue in PSA version of ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 5 months ago
- 062de7d Use PSA_BITS_TO_BYTES instead of open-coded calculation in PSA version of ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 5 months ago
- 1f4b396 Implement PSA server-side ECDH-RSA/ECDSA by Neil Armstrong · 3 years, 5 months ago
- 6476726 Fix comments by Ronald Cron · 3 years, 4 months ago
- a980adf Merge pull request #5637 from ronald-cron-arm/version-negotiation-1 by Ronald Cron · 3 years, 4 months ago
- ba120bb ssl_tls13_client.c: Fix ciphersuite final validation by Ronald Cron · 3 years, 4 months ago
- 8fdad9e ssl_tls12_client.c: Remove duplicate of ciphersuite validation by Ronald Cron · 3 years, 4 months ago
- 757a2ab ssl_client.c: Extend and export ciphersuite validation function by Ronald Cron · 3 years, 4 months ago
- f735cf1 ssl_tls.c: Fix ciphersuite selection regarding protocol version by Ronald Cron · 3 years, 4 months ago
- 9847338 ssl_tls13_client.c: Add check in supported_versions parsing by Ronald Cron · 3 years, 4 months ago
- 1fa4f68 ssl_tls.c: Return in error if default config fails by Ronald Cron · 3 years, 4 months ago
- a77fc27 ssl_tls13_client.c: versions ext writing : Fix available space check by Ronald Cron · 3 years, 4 months ago
- 37bdaab tls: Simplify the logic of the config version check and test it by Ronald Cron · 3 years, 4 months ago
- 3cffc5c tls: Remove unnecessary checks of MBEDTLS_CIPHERSUITE_NODTLS by Ronald Cron · 3 years, 4 months ago
- 150d579 ssl_client.c: Improve coding style by Ronald Cron · 3 years, 4 months ago
- e451295 Remove md_info in ssl_tls12_populate_transform() when USE_PSA_CRYPTO is defined by Neil Armstrong · 3 years, 5 months ago
- 253e9e7 Use mbedtls_rsa_info directly in rsa_verify_wrap() by Neil Armstrong · 3 years, 5 months ago
- ea54dbe Fix comment typo in rsa_verify_wrap() by Neil Armstrong · 3 years, 5 months ago
- 19e6bc4 Use new PSA to mbedtls PK error mapping functions in rsa_verify_wrap() by Neil Armstrong · 3 years, 5 months ago
- 8a44bb4 Handle INVALID_SIGNATURE instead of INVALID_PADDING in rsa_verify_wrap() by Neil Armstrong · 3 years, 5 months ago
- 82cf804 Fix 80 characters indentation in rsa_verify_wrap() by Neil Armstrong · 3 years, 5 months ago
- 6baea78 Use now shared RSA_PUB_DER_MAX_BYTES define in pk_wrap.c by Neil Armstrong · 3 years, 5 months ago
- a33280a Check psa_destroy_key() return in rsa_verify_wrap() by Neil Armstrong · 3 years, 5 months ago
- 059a80c Map INVALID_PADDING from PSA to MbedTLS error in rsa_verify_wrap() by Neil Armstrong · 3 years, 5 months ago
- 52f41f8 PK: RSA verification PSA wrap implementation by Neil Armstrong · 3 years, 5 months ago
- da41b38 Improve and fix comments by Ronald Cron · 3 years, 4 months ago
- 3304f25 Merge pull request #5653 from paul-elliott-arm/handshake_over by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- e42d8bf Add macro guard for header file by Gabor Mezei · 3 years, 4 months ago
- abed05f Merge pull request #5652 from arturallmann/issue-commit by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- 8ecd993 ssl_client.c: Fix state change for DTLS 1.2 by Ronald Cron · 3 years, 4 months ago
- f660655 TLS: Allow hybrid TLS 1.2/1.3 in default configurations by Ronald Cron · 3 years, 5 months ago
- e71639d Simplify TLS major version default value setting by Ronald Cron · 3 years, 5 months ago
- dbe87f0 Propose TLS 1.3 and TLS 1.2 by Ronald Cron · 3 years, 6 months ago
- 9f0fba3 Add logic to switch to TLS 1.2 by Ronald Cron · 3 years, 6 months ago
- e1d3f06 Allow hybrid TLS 1.3 + TLS 1.2 configuration by Ronald Cron · 3 years, 6 months ago
- fbd9f99 ssl_tls.c: Move some client specific functions to ssl_client.c by Ronald Cron · 3 years, 5 months ago
- 7320e64 ssl_tls12_client.c: Switch to generic Client Hello state handler by Ronald Cron · 3 years, 5 months ago
- 27c85e7 ssl_tls.c: Unify TLS 1.2 and TLS 1.3 SSL state logs by Ronald Cron · 3 years, 5 months ago