- ef7730c [Backport 2.16] Mark basic constraints critical as appropriate. by Darren Krahn · 4 years, 11 months ago
- 3b7523e Fix an incorrect error code if RSA private operation glitched by Gilles Peskine · 4 years, 8 months ago
- 69029cd Bump version to Mbed TLS 2.16.9 by Janos Follath · 4 years, 8 months ago
- 15e860c Merge branch 'mbedtls-2.16-restricted' into mbedtls-2.16.9r0-pr by Janos Follath · 4 years, 8 months ago
- 319b593 Remove Extraneous bytes from buffer post pem write by Paul Elliott · 4 years, 9 months ago
- 3f35b87 Merge pull request #3938 from geecrypt/mbedtls-2.16 by Ronald Cron · 4 years, 8 months ago
- 8ed9ac8 Merge pull request #3513 from gilles-peskine-arm/ecp-bignum-error-checks-2.16 by Gilles Peskine · 4 years, 8 months ago
- bcfa417 Merge pull request #782 from chris-jones-arm/mbedtls-2.16-restricted by Janos Follath · 4 years, 8 months ago
- 77cb30c Support set *_drbg reseed interval before seed by Gavin Acquroff · 5 years ago
- ad59a2a Fix potential DoS by limiting number sizes in exponentiation by Chris Jones · 4 years, 8 months ago
- 027b601 Add tag check to cert algorithm check by Paul Elliott · 4 years, 8 months ago
- e98bbbe Merge pull request #3925 from rodrigo-dc/mbedtls-2.16 by Gilles Peskine · 4 years, 8 months ago
- d2d0e70 Move declaration to fix C90 warning by Rodrigo Dias Correa · 4 years, 8 months ago
- 0b9bc0b Change function casting in `ssl_calc_finished_tls_sha384` by Rodrigo Dias Correa · 4 years, 8 months ago
- 671600c Fix GCC warning in `ssl_calc_finished_tls_sha384` by Rodrigo Dias Correa · 4 years, 8 months ago
- 56ad24c Fix GCC warning in `ssl_calc_finished_tls_sha384` by Rodrigo Dias Correa · 4 years, 9 months ago
- 1a0c7fb Fix mismatched function parameters (prototype/definition) by Rodrigo Dias Correa · 4 years, 9 months ago
- 0391ea3 Fix build failure on gcc-11 by Rodrigo Dias Correa · 4 years, 9 months ago
- 0525114 Handle random generator failure in mbedtls_mpi_fill_random() by Gilles Peskine · 4 years, 8 months ago
- debf3ae Merge pull request #3879 from chris-jones-arm/mbedtls-2.16 by Gilles Peskine · 4 years, 8 months ago
- e78a0c3 Fix another use of uinitialized memory in ssl_parse_encrypted_pms by André Maroneze · 4 years, 9 months ago
- 076c97e Simplify conditional guards in error.c by Gilles Peskine · 4 years, 9 months ago
- 0a63560 Fixes two _POSIX_C_SOURCE typos. by Chris Jones · 4 years, 9 months ago
- 23cb65e Merge pull request #3863 from gabor-mezei-arm/3818_bp216_MBEDTLS_AES_SETKEY_DEC_ALT_excludes_MBEDTLS_CIPHER_MODE_XTS by Gilles Peskine · 4 years, 9 months ago
- 13b8a26 Make the aes xts methods independent from MBEDTLS_AES_SETKEY_DEC_ALT by gabor-mezei-arm · 4 years, 9 months ago
- 567bd95 Do not set IV size for ECB mode ciphers by Bence Szépkúti · 4 years, 9 months ago
- 91ee763 Put local variables in a struct by Gilles Peskine · 5 years ago
- 02c7b48 Remove a useless zeroization by Gilles Peskine · 5 years ago
- 90b5458 Fix the build when _GNU_SOURCE is defined to a non-empty value by Gilles Peskine · 4 years, 10 months ago
- b2aeb75 Restore retry in rsa_prepare_blinding() by Peter Kolbus · 4 years, 11 months ago
- 84d4f02 fix return code by Jens Reimann · 4 years, 11 months ago
- 70f7f67 Put local variables and buffers in a struct by gabor-mezei-arm · 5 years ago
- f21639f Zeroize internal buffers and variables in MD hashes by gabor-mezei-arm · 5 years ago
- 5feba8d Force cleanup before return by gabor-mezei-arm · 5 years ago
- d5253bb Zeroize internal buffers and variables in PKCS and SHA by gabor-mezei-arm · 5 years ago
- 359d049 adjusting size of sliding window array to correct size. by Daniel Otte · 5 years ago
- 1bfb580 Bump version to Mbed TLS 2.16.8 by Janos Follath · 5 years ago
- 36169d4 Merge branch 'mbedtls-2.16-restricted' by Janos Follath · 5 years ago
- 75475d8 Always revoke certificate on CRL by Raoul Strackx · 5 years ago
- ab9ec32 Fix a typo in a comment by Manuel Pégourié-Gonnard · 5 years ago
- f082847 Add an option to test constant-flow with valgrind by Manuel Pégourié-Gonnard · 5 years ago
- 590b2d9 Add mbedtls_ssl_cf_memcpy_offset() with tests by Manuel Pégourié-Gonnard · 5 years ago
- ce45d1a Use temporary buffer to hold the peer's HMAC by Manuel Pégourié-Gonnard · 5 years ago
- f0b469e Merge branch 'mbedtls-2.16' into mbedtls-2.16-restricted by Manuel Pégourié-Gonnard · 5 years ago
- 14cb46d Merge pull request #3598 from makise-homura/mbedtls-2.16 by Gilles Peskine · 5 years ago
- 8c3fa63 A different approach of signed-to-unsigned comparison by makise-homura · 5 years ago
- 50f6a19 Backport e2k support to mbedtls-2.7 by makise-homura · 5 years ago
- a2947ac Update copyright notices to use Linux Foundation guidance by Bence Szépkúti · 5 years ago
- b9c64e4 Merge pull request #3558 from gufe44/net-sockets-fixes-2.16 by Manuel Pégourié-Gonnard · 5 years ago
- 19735b6 Fix building on NetBSD 9.0 by gufe44 · 5 years ago
- 4ca6050 Merge pull request #734 from gilles-peskine-arm/x509parse_crl-empty_entry-2.16 by Gilles Peskine · 5 years ago
- 9acf943 Merge pull request #3560 from gufe44/netbsd-rand-arc4random_buf-2.16 by Gilles Peskine · 5 years ago
- 3fa7c64 Use arc4random_buf instead of rand on NetBSD by gufe44 · 5 years ago
- 0ca801a Merge pull request #732 from gabor-mezei-arm/689_bp216_zeroising_of_plaintext_buffers by Gilles Peskine · 5 years ago
- de7e036 Merge pull request #3489 from CodeMonkeyLeet/mbedtls-2.16_backport_3464 by Gilles Peskine · 5 years ago
- 6579235 x509_crl_parse: fix 1-byte buffer overflow and entry->raw.tag by Gilles Peskine · 5 years ago
- f1ef895 Merge pull request #728 from mpg/ct-varlen-hmac-2.16 by Manuel Pégourié-Gonnard · 5 years ago
- 3eaa103 Zeroising of plaintext buffers to erase unused application data from memory by gabor-mezei-arm · 5 years ago
- e1b1fff Add comment that was lost while backporting by Manuel Pégourié-Gonnard · 5 years ago
- 253b0de Remove use of C99 construct by Manuel Pégourié-Gonnard · 5 years ago
- 09ac297 Add missing const for consistency by Manuel Pégourié-Gonnard · 5 years ago
- 94fd8dc Fix typos in comments by Manuel Pégourié-Gonnard · 5 years ago
- 5bb6f3c Check errors from the MD layer by Manuel Pégourié-Gonnard · 5 years ago
- a6c1317 Remove unnecessary cast by Manuel Pégourié-Gonnard · 5 years ago
- 74503bb Improve some comments and internal documentation by Manuel Pégourié-Gonnard · 5 years ago
- 1e94128 Factor repeated condition to its own macro by Manuel Pégourié-Gonnard · 5 years ago
- de02b58 Implement cf_hmac() actually with constant flow by Manuel Pégourié-Gonnard · 5 years ago
- a237722 Add MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN by Manuel Pégourié-Gonnard · 5 years ago
- 368fc65 Use existing implementation of cf_hmac() by Manuel Pégourié-Gonnard · 5 years ago
- fde7505 Add dummy constant-flow HMAC function with tests by Manuel Pégourié-Gonnard · 5 years ago
- a60d0f2 Factor repeated preprocessor condition to a macro by Manuel Pégourié-Gonnard · 5 years ago
- 87a602d Clarify some comments by Manuel Pégourié-Gonnard · 5 years ago
- cadcf4c Fix memory leak on error path by Manuel Pégourié-Gonnard · 5 years ago
- 49e94e3 RSA: blind call to mpi_inv_mod() on secret value by Manuel Pégourié-Gonnard · 5 years ago
- 86ad5be RSA: remove redundant GCD call in prepare_blinding() by Manuel Pégourié-Gonnard · 5 years ago
- d96edbc DHM: blind call to mpi_inv_mod() on secret value by Manuel Pégourié-Gonnard · 5 years ago
- 41ee839 DHM: make drawing of blinding value a function by Manuel Pégourié-Gonnard · 5 years ago
- 7d6326d Fix uncaught error if fix_negative fails by Gilles Peskine · 5 years ago
- 84697ca Fix memory leak in mbedtls_mpi_sub_abs by Gilles Peskine · 5 years ago
- 1535a43 Revise comments for x509write_csr_der_internal by Simon Leet · 5 years ago
- afc2717 Avoid stack-allocation of large memory buffers by Doru Gucea · 7 years ago
- c33e921 Avoid use of large stack buffers in mbedtls_x509_write_crt_pem() by Hanno Becker · 6 years ago
- eeea9ea Perform CRT writing in-place on the output buffer by Hanno Becker · 6 years ago
- beaf396 Adapt x509write_crt.c to coding style by Hanno Becker · 6 years ago
- ef5f8fc Bump version to Mbed TLS 2.16.7 by Janos Follath · 5 years ago
- f69b919 Merge branch 'mbedtls-2.16-restricted' into mbedtls-2.16.7r0 by Janos Follath · 5 years ago
- 3a1944a Merge pull request #704 from mpg/l13-hw-starts-finish-2.16-restricted by Manuel Pégourié-Gonnard · 5 years ago
- 2df1423 Test multi-block output of the hash-based KDF by Manuel Pégourié-Gonnard · 5 years ago
- 2df5857 Remove SHA-1 as a fallback option by Manuel Pégourié-Gonnard · 5 years ago
- 20cd85c Use starts/finish around Lucky 13 dummy compressions by Manuel Pégourié-Gonnard · 5 years ago
- 7d7c004 Improve comment justifying a hard-coded limitation by Manuel Pégourié-Gonnard · 5 years ago
- a90a95b Zeroize temporary stack buffer by Manuel Pégourié-Gonnard · 5 years ago
- 301a9ee Fix potential memory overread in seed functions by Manuel Pégourié-Gonnard · 5 years ago
- 72177e3 Add fall-back to hash-based KDF for internal ECP DRBG by Manuel Pégourié-Gonnard · 5 years ago
- 0defc57 Fix typo in a comment by Manuel Pégourié-Gonnard · 5 years ago
- 18b0b3c Avoid superflous randomization with restartable by Manuel Pégourié-Gonnard · 5 years ago
- c7295f5 Use HMAC_DRBG by default for ECP internal DRBG by Manuel Pégourié-Gonnard · 5 years ago
- c334f41 Skip redundant checks for NULL f_rng by Manuel Pégourié-Gonnard · 5 years ago
- 047986c Add support for RESTARTABLE with internal RNG by Manuel Pégourié-Gonnard · 5 years ago
- d18f051 Move internal drbg init to specific mul functions by Manuel Pégourié-Gonnard · 5 years ago