1. bc58902 Add prefix to BYTES_TO_T_UINT_* by Janos Follath · 4 years, 1 month ago
  2. 7d4ebdd Reject low-order points on Curve448 early by Janos Follath · 4 years, 1 month ago
  3. 1c6a439 Use mbedtls_mpi_lset() more by Janos Follath · 4 years, 1 month ago
  4. bc96a79 Move mpi constant macros to bn_mul.h by Janos Follath · 4 years, 1 month ago
  5. b4c676e Prevent memory leak in ecp_check_pubkey_x25519() by Janos Follath · 4 years, 1 month ago
  6. 520f0a0 Avoid complaints about undeclared non-static symbols by Manuel Pégourié-Gonnard · 4 years, 1 month ago
  7. ae48111 Use more compact encoding of Montgomery curve constants by Manuel Pégourié-Gonnard · 4 years, 1 month ago
  8. 10b8e5a Use a more compact encoding of bad points by Manuel Pégourié-Gonnard · 4 years, 1 month ago
  9. f2268d1 Reject low-order points on Curve25519 early by Manuel Pégourié-Gonnard · 4 years, 1 month ago
  10. 82a5a9d Merge branch 'development_2.x' into development_2.x-restricted by Manuel Pégourié-Gonnard · 4 years, 1 month ago
  11. 51859aa Fix fd range for select on Windows by Gilles Peskine · 4 years, 2 months ago
  12. 0f6351f Refactor file descriptor checks into a common function by Gilles Peskine · 4 years, 2 months ago
  13. c94b6b0 Homogenize coding patterns by Manuel Pégourié-Gonnard · 4 years, 2 months ago
  14. f216f0d Fix missing state check for tls12_prf output by Gilles Peskine · 4 years, 2 months ago
  15. 0b3bde5 Silence MSVC type conversion warnings by Manuel Pégourié-Gonnard · 4 years, 2 months ago
  16. f10d289 Simplify sign selection by Manuel Pégourié-Gonnard · 4 years, 2 months ago
  17. 5325b97 Avoid UB caused by conversion to int by Manuel Pégourié-Gonnard · 4 years, 2 months ago
  18. 464fe6a Use bit operations for mpi_safe_cond_swap() by Manuel Pégourié-Gonnard · 4 years, 2 months ago
  19. c3be399 Use bit operations for mpi_safe_cond_assign() by Manuel Pégourié-Gonnard · 4 years, 2 months ago
  20. eaafa49 Avoid using == for sensitive comparisons by Manuel Pégourié-Gonnard · 4 years, 2 months ago
  21. e10e8db Use constant-time look-up for modular exponentiation by Manuel Pégourié-Gonnard · 4 years, 5 months ago
  22. c4c0d81 Merge branch 'development_2.x' into development_2.x-restricted by Manuel Pégourié-Gonnard · 4 years, 2 months ago
  23. 7a4c758 Merge pull request #4541 from mpg/fix-ssl-cf-hmac-alt-2.x by Gilles Peskine · 4 years, 2 months ago
  24. 74f66bb Fix non-constant-time comparison in mbedtls_mpi_random by Gilles Peskine · 4 years, 4 months ago
  25. 62da8ac Merge pull request #4276 from gilles-peskine-arm/random-range-uniformity by Manuel Pégourié-Gonnard · 4 years, 2 months ago
  26. 23422e4 Note that the byte order in mpi_fill_random_internal() is deliberate by Gilles Peskine · 4 years, 2 months ago
  27. c0b68bf Use MBEDTLS_MPI_CHK where warranted by Gilles Peskine · 4 years, 2 months ago
  28. 3130ce2 New internal function mbedtls_mpi_resize_clear by Gilles Peskine · 4 years, 2 months ago
  29. 1177907 Use ternary operator with the most common case first by Gilles Peskine · 4 years, 2 months ago
  30. 3f61363 Correct some comments about ECC in mbedtls_mpi_random by Gilles Peskine · 4 years, 4 months ago
  31. 104eb82 DHM: add notes about leading zeros by Gilles Peskine · 4 years, 4 months ago
  32. a16001e mpi_fill_random_internal: remove spurious grow() call by Gilles Peskine · 4 years, 4 months ago
  33. e39ee8e MPI random test: use more iterations for small numbers by Gilles Peskine · 4 years, 4 months ago
  34. ef13251 Contextualize comment about mbedtls_mpi_random retries by Gilles Peskine · 4 years, 4 months ago
  35. 8f45470 Fix mbedtls_mpi_random when N has leading zeros by Gilles Peskine · 4 years, 4 months ago
  36. 16e3668 DHM: use mbedtls_mpi_random for blinding and key generation by Gilles Peskine · 4 years, 4 months ago
  37. 58df4c9 dhm_check_range: microoptimization by Gilles Peskine · 4 years, 4 months ago
  38. 87fdb1f DHM refactoring: use dhm_random_below in dhm_make_common by Gilles Peskine · 4 years, 4 months ago
  39. b4e815f DHM blinding: don't accept P-1 as a blinding value by Gilles Peskine · 4 years, 4 months ago
  40. 0853bb2 DHM refactoring: unify mbedtls_dhm_make_{params,public} by Gilles Peskine · 4 years, 4 months ago
  41. 6466d34 ECP: use mbedtls_mpi_random for blinding by Gilles Peskine · 4 years, 4 months ago
  42. aeab0fb Preserve MBEDTLS_ERR_ECP_RANDOM_FAILED in case of a hostile RNG by Gilles Peskine · 4 years, 4 months ago
  43. 9312ba5 mbedtls_mpi_random: check for invalid arguments by Gilles Peskine · 4 years, 4 months ago
  44. 4699fa4 Move mbedtls_mpi_random to the bignum module by Gilles Peskine · 4 years, 4 months ago
  45. 7967ec5 mbedtls_ecp_gen_privkey_sw: generalize to mbedtls_mpi_random by Gilles Peskine · 4 years, 4 months ago
  46. eadf31d mbedtls_ecp_gen_privkey_mx: simplify the size calculation logic by Gilles Peskine · 4 years, 4 months ago
  47. 4f77674 mbedtls_ecp_gen_privkey_mx: make bit manipulations unconditional by Gilles Peskine · 4 years, 4 months ago
  48. 6acfc9c mbedtls_ecp_gen_privkey_mx: remove the exception for all-zero by Gilles Peskine · 4 years, 4 months ago
  49. 3838f28 mbedtls_ecp_gen_privkey_mx: rename n_bits to high_bit by Gilles Peskine · 4 years, 4 months ago
  50. de33213 mbedtls_ecp_gen_privkey: create subfunctions for each curve type by Gilles Peskine · 4 years, 5 months ago
  51. 570a8cd Fix null pointer arithmetic in error case by Gilles Peskine · 4 years, 2 months ago
  52. 9df7209 Merge pull request #4546 from Patater/psa-without-genprime-fix-2.x by Ronald Cron · 4 years, 2 months ago
  53. 66c616a CAMELLIA: add missing context init/free by Gilles Peskine · 4 years, 2 months ago
  54. ccbbb2c ARIA: add missing context init/free by Gilles Peskine · 4 years, 2 months ago
  55. c17f293 psa: Support RSA signature without MBEDTLS_GENPRIME by Jaeden Amero · 4 years, 3 months ago
  56. d76f7ba Merge pull request #4529 from hanno-arm/ssl_session_cache_fix_backport_2x by Janos Follath · 4 years, 3 months ago
  57. d135b57 Merge pull request #4412 from gilles-peskine-arm/undefined-reference-2.27 by Gilles Peskine · 4 years, 3 months ago
  58. a33cb76 Merge pull request #4493 from netfoundry/gcc11.fixes_2.x by Gilles Peskine · 4 years, 3 months ago
  59. 05c11e3 Merge pull request #4503 from gilles-peskine-arm/ciphersuite-sha384-guard-2.x by Gilles Peskine · 4 years, 3 months ago
  60. ad0e012 Fix missing compilation guard around psa_crypto_driver_wrappers.c by Gilles Peskine · 4 years, 3 months ago
  61. c54010c Split SHA-512 and SHA-384 guards for hash availability code by Gilles Peskine · 4 years, 3 months ago
  62. fc9c07f Fix unused variable with MBEDTLS_SHA512_NO_SHA384 by Gilles Peskine · 4 years, 3 months ago
  63. d2d5937 Remove dead code under MBEDTLS_SHA512_NO_SHA384 by Gilles Peskine · 4 years, 3 months ago
  64. 367379d Fix dependencies on SHA384 cipher suites by Gilles Peskine · 4 years, 3 months ago
  65. 3d23e28 Fix dependency for TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 by Gilles Peskine · 4 years, 3 months ago
  66. 21bfbdd Fix misuse of MD API in SSL constant-flow HMAC by Manuel Pégourié-Gonnard · 4 years, 3 months ago
  67. 83e3671 Don't check ciphersuite and compression in SSL session cache lookup by Hanno Becker · 4 years, 4 months ago
  68. 48f052f mbedtls_ecp_gen_privkey: minor refactoring by Gilles Peskine · 4 years, 5 months ago
  69. 54650b3 Merge pull request #4505 from d3zd3z/bp2x-posix-define by Gilles Peskine · 4 years, 3 months ago
  70. bed4e9e Merge pull request #4357 from gabor-mezei-arm/3267_Implement_psa_sign_message_and_verify by Gilles Peskine · 4 years, 3 months ago
  71. bb66dac Fix spurious -Wstringop-overflow with GCC 11.1 by Gilles Peskine · 4 years, 3 months ago
  72. a79c30b Check if feature macro is defined before define it by Flavio Ceolin · 5 years ago
  73. 4e54f25 avoid "maybe-uninitialized" and "free-nonheap-object" errors/warnings with gcc11 by Shawn Carey · 4 years, 3 months ago
  74. f25c976 Enable fallback to software implementation in psa_sign/verify_message driver by gabor-mezei-arm · 4 years, 3 months ago
  75. c979578 Unify variable type and rename to be unambiguous by gabor-mezei-arm · 4 years, 3 months ago
  76. 63c7a66 Update documentation by gabor-mezei-arm · 4 years, 3 months ago
  77. bbb1952 Refactor out mac_sign_setup and mac_verify_setup by Steven Cooreman · 4 years, 3 months ago
  78. f8ad212 Be explicit about why the zero-length check is there by Steven Cooreman · 4 years, 3 months ago
  79. a6474de Supply actual key bits to PSA_MAC_LENGTH during MAC setup by Steven Cooreman · 4 years, 3 months ago
  80. 9621f44 Correctly mark unused arguments when MAC algorithms are compiled out by Steven Cooreman · 4 years, 3 months ago
  81. 63fa40e Add sanity tests for CMAC-(3)DES through PSA Crypto by Steven Cooreman · 4 years, 3 months ago
  82. aaf9944 Use the proper define guards in the MAC driver by Steven Cooreman · 4 years, 3 months ago
  83. 2a18f56 Remove superfluous checking from MAC driver by Steven Cooreman · 4 years, 3 months ago
  84. 15f0d92 Move is_sign and mac_size checking back to PSA core scope by Steven Cooreman · 4 years, 3 months ago
  85. bd1f608 Minor documentation and language fixes by Steven Cooreman · 4 years, 3 months ago
  86. dba0644 Remove superfluous check by Steven Cooreman · 4 years, 3 months ago
  87. e68bb52 Remove unused variable from MAC driver structure by Steven Cooreman · 4 years, 3 months ago
  88. af81a71 Remove superfluous length check by Steven Cooreman · 4 years, 3 months ago
  89. 9878a16 Code flow and style improvements by Steven Cooreman · 4 years, 3 months ago
  90. 22dea1d Base the PSA implementation of TLS 1.2 PRF on the MAC API by Steven Cooreman · 4 years, 3 months ago
  91. b27e350 Make HKDF use the generic MAC API by Steven Cooreman · 4 years, 3 months ago
  92. 4f7cae6 Rename HMAC operation structure by Steven Cooreman · 4 years, 3 months ago
  93. a2a1b80 Make safer_memcmp available to all compile units under PSA by Steven Cooreman · 4 years, 3 months ago
  94. b4b9b28 Remove redundant key_set from MAC operation structure by Steven Cooreman · 4 years, 3 months ago
  95. 6e6451e Code flow/readability improvements after review by Steven Cooreman · 4 years, 3 months ago
  96. 5c85ef0 Remove unused items from MAC operation context structure by Steven Cooreman · 4 years, 3 months ago
  97. 2d9a3f9 Add testing of the MAC driver entry points by Steven Cooreman · 4 years, 3 months ago
  98. f64b25e Rename internal HMAC structure type to match convention by Steven Cooreman · 4 years, 5 months ago
  99. 76720f6 Complete, document and fully use internal HMAC API by Steven Cooreman · 4 years, 5 months ago
  100. 87885df Migrate MAC finish calls into the software driver by Steven Cooreman · 4 years, 5 months ago