1. ef7730c [Backport 2.16] Mark basic constraints critical as appropriate. by Darren Krahn · 4 years, 11 months ago
  2. 3b7523e Fix an incorrect error code if RSA private operation glitched by Gilles Peskine · 4 years, 8 months ago
  3. 69029cd Bump version to Mbed TLS 2.16.9 by Janos Follath · 4 years, 8 months ago
  4. 15e860c Merge branch 'mbedtls-2.16-restricted' into mbedtls-2.16.9r0-pr by Janos Follath · 4 years, 8 months ago
  5. 319b593 Remove Extraneous bytes from buffer post pem write by Paul Elliott · 4 years, 9 months ago
  6. 3f35b87 Merge pull request #3938 from geecrypt/mbedtls-2.16 by Ronald Cron · 4 years, 8 months ago
  7. 8ed9ac8 Merge pull request #3513 from gilles-peskine-arm/ecp-bignum-error-checks-2.16 by Gilles Peskine · 4 years, 8 months ago
  8. bcfa417 Merge pull request #782 from chris-jones-arm/mbedtls-2.16-restricted by Janos Follath · 4 years, 8 months ago
  9. 77cb30c Support set *_drbg reseed interval before seed by Gavin Acquroff · 5 years ago
  10. ad59a2a Fix potential DoS by limiting number sizes in exponentiation by Chris Jones · 4 years, 8 months ago
  11. 027b601 Add tag check to cert algorithm check by Paul Elliott · 4 years, 8 months ago
  12. e98bbbe Merge pull request #3925 from rodrigo-dc/mbedtls-2.16 by Gilles Peskine · 4 years, 8 months ago
  13. d2d0e70 Move declaration to fix C90 warning by Rodrigo Dias Correa · 4 years, 8 months ago
  14. 0b9bc0b Change function casting in `ssl_calc_finished_tls_sha384` by Rodrigo Dias Correa · 4 years, 8 months ago
  15. 671600c Fix GCC warning in `ssl_calc_finished_tls_sha384` by Rodrigo Dias Correa · 4 years, 8 months ago
  16. 56ad24c Fix GCC warning in `ssl_calc_finished_tls_sha384` by Rodrigo Dias Correa · 4 years, 9 months ago
  17. 1a0c7fb Fix mismatched function parameters (prototype/definition) by Rodrigo Dias Correa · 4 years, 9 months ago
  18. 0391ea3 Fix build failure on gcc-11 by Rodrigo Dias Correa · 4 years, 9 months ago
  19. 0525114 Handle random generator failure in mbedtls_mpi_fill_random() by Gilles Peskine · 4 years, 8 months ago
  20. debf3ae Merge pull request #3879 from chris-jones-arm/mbedtls-2.16 by Gilles Peskine · 4 years, 8 months ago
  21. e78a0c3 Fix another use of uinitialized memory in ssl_parse_encrypted_pms by André Maroneze · 4 years, 9 months ago
  22. 076c97e Simplify conditional guards in error.c by Gilles Peskine · 4 years, 9 months ago
  23. 0a63560 Fixes two _POSIX_C_SOURCE typos. by Chris Jones · 4 years, 9 months ago
  24. 23cb65e Merge pull request #3863 from gabor-mezei-arm/3818_bp216_MBEDTLS_AES_SETKEY_DEC_ALT_excludes_MBEDTLS_CIPHER_MODE_XTS by Gilles Peskine · 4 years, 9 months ago
  25. 13b8a26 Make the aes xts methods independent from MBEDTLS_AES_SETKEY_DEC_ALT by gabor-mezei-arm · 4 years, 9 months ago
  26. 567bd95 Do not set IV size for ECB mode ciphers by Bence Szépkúti · 4 years, 9 months ago
  27. 91ee763 Put local variables in a struct by Gilles Peskine · 5 years ago
  28. 02c7b48 Remove a useless zeroization by Gilles Peskine · 5 years ago
  29. 90b5458 Fix the build when _GNU_SOURCE is defined to a non-empty value by Gilles Peskine · 4 years, 10 months ago
  30. b2aeb75 Restore retry in rsa_prepare_blinding() by Peter Kolbus · 4 years, 11 months ago
  31. 84d4f02 fix return code by Jens Reimann · 4 years, 11 months ago
  32. 70f7f67 Put local variables and buffers in a struct by gabor-mezei-arm · 5 years ago
  33. f21639f Zeroize internal buffers and variables in MD hashes by gabor-mezei-arm · 5 years ago
  34. 5feba8d Force cleanup before return by gabor-mezei-arm · 5 years ago
  35. d5253bb Zeroize internal buffers and variables in PKCS and SHA by gabor-mezei-arm · 5 years ago
  36. 359d049 adjusting size of sliding window array to correct size. by Daniel Otte · 5 years ago
  37. 1bfb580 Bump version to Mbed TLS 2.16.8 by Janos Follath · 5 years ago
  38. 36169d4 Merge branch 'mbedtls-2.16-restricted' by Janos Follath · 5 years ago
  39. 75475d8 Always revoke certificate on CRL by Raoul Strackx · 5 years ago
  40. ab9ec32 Fix a typo in a comment by Manuel Pégourié-Gonnard · 5 years ago
  41. f082847 Add an option to test constant-flow with valgrind by Manuel Pégourié-Gonnard · 5 years ago
  42. 590b2d9 Add mbedtls_ssl_cf_memcpy_offset() with tests by Manuel Pégourié-Gonnard · 5 years ago
  43. ce45d1a Use temporary buffer to hold the peer's HMAC by Manuel Pégourié-Gonnard · 5 years ago
  44. f0b469e Merge branch 'mbedtls-2.16' into mbedtls-2.16-restricted by Manuel Pégourié-Gonnard · 5 years ago
  45. 14cb46d Merge pull request #3598 from makise-homura/mbedtls-2.16 by Gilles Peskine · 5 years ago
  46. 8c3fa63 A different approach of signed-to-unsigned comparison by makise-homura · 5 years ago
  47. 50f6a19 Backport e2k support to mbedtls-2.7 by makise-homura · 5 years ago
  48. a2947ac Update copyright notices to use Linux Foundation guidance by Bence Szépkúti · 5 years ago
  49. b9c64e4 Merge pull request #3558 from gufe44/net-sockets-fixes-2.16 by Manuel Pégourié-Gonnard · 5 years ago
  50. 19735b6 Fix building on NetBSD 9.0 by gufe44 · 5 years ago
  51. 4ca6050 Merge pull request #734 from gilles-peskine-arm/x509parse_crl-empty_entry-2.16 by Gilles Peskine · 5 years ago
  52. 9acf943 Merge pull request #3560 from gufe44/netbsd-rand-arc4random_buf-2.16 by Gilles Peskine · 5 years ago
  53. 3fa7c64 Use arc4random_buf instead of rand on NetBSD by gufe44 · 5 years ago
  54. 0ca801a Merge pull request #732 from gabor-mezei-arm/689_bp216_zeroising_of_plaintext_buffers by Gilles Peskine · 5 years ago
  55. de7e036 Merge pull request #3489 from CodeMonkeyLeet/mbedtls-2.16_backport_3464 by Gilles Peskine · 5 years ago
  56. 6579235 x509_crl_parse: fix 1-byte buffer overflow and entry->raw.tag by Gilles Peskine · 5 years ago
  57. f1ef895 Merge pull request #728 from mpg/ct-varlen-hmac-2.16 by Manuel Pégourié-Gonnard · 5 years ago
  58. 3eaa103 Zeroising of plaintext buffers to erase unused application data from memory by gabor-mezei-arm · 5 years ago
  59. e1b1fff Add comment that was lost while backporting by Manuel Pégourié-Gonnard · 5 years ago
  60. 253b0de Remove use of C99 construct by Manuel Pégourié-Gonnard · 5 years ago
  61. 09ac297 Add missing const for consistency by Manuel Pégourié-Gonnard · 5 years ago
  62. 94fd8dc Fix typos in comments by Manuel Pégourié-Gonnard · 5 years ago
  63. 5bb6f3c Check errors from the MD layer by Manuel Pégourié-Gonnard · 5 years ago
  64. a6c1317 Remove unnecessary cast by Manuel Pégourié-Gonnard · 5 years ago
  65. 74503bb Improve some comments and internal documentation by Manuel Pégourié-Gonnard · 5 years ago
  66. 1e94128 Factor repeated condition to its own macro by Manuel Pégourié-Gonnard · 5 years ago
  67. de02b58 Implement cf_hmac() actually with constant flow by Manuel Pégourié-Gonnard · 5 years ago
  68. a237722 Add MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN by Manuel Pégourié-Gonnard · 5 years ago
  69. 368fc65 Use existing implementation of cf_hmac() by Manuel Pégourié-Gonnard · 5 years ago
  70. fde7505 Add dummy constant-flow HMAC function with tests by Manuel Pégourié-Gonnard · 5 years ago
  71. a60d0f2 Factor repeated preprocessor condition to a macro by Manuel Pégourié-Gonnard · 5 years ago
  72. 87a602d Clarify some comments by Manuel Pégourié-Gonnard · 5 years ago
  73. cadcf4c Fix memory leak on error path by Manuel Pégourié-Gonnard · 5 years ago
  74. 49e94e3 RSA: blind call to mpi_inv_mod() on secret value by Manuel Pégourié-Gonnard · 5 years ago
  75. 86ad5be RSA: remove redundant GCD call in prepare_blinding() by Manuel Pégourié-Gonnard · 5 years ago
  76. d96edbc DHM: blind call to mpi_inv_mod() on secret value by Manuel Pégourié-Gonnard · 5 years ago
  77. 41ee839 DHM: make drawing of blinding value a function by Manuel Pégourié-Gonnard · 5 years ago
  78. 7d6326d Fix uncaught error if fix_negative fails by Gilles Peskine · 5 years ago
  79. 84697ca Fix memory leak in mbedtls_mpi_sub_abs by Gilles Peskine · 5 years ago
  80. 1535a43 Revise comments for x509write_csr_der_internal by Simon Leet · 5 years ago
  81. afc2717 Avoid stack-allocation of large memory buffers by Doru Gucea · 7 years ago
  82. c33e921 Avoid use of large stack buffers in mbedtls_x509_write_crt_pem() by Hanno Becker · 6 years ago
  83. eeea9ea Perform CRT writing in-place on the output buffer by Hanno Becker · 6 years ago
  84. beaf396 Adapt x509write_crt.c to coding style by Hanno Becker · 6 years ago
  85. ef5f8fc Bump version to Mbed TLS 2.16.7 by Janos Follath · 5 years ago
  86. f69b919 Merge branch 'mbedtls-2.16-restricted' into mbedtls-2.16.7r0 by Janos Follath · 5 years ago
  87. 3a1944a Merge pull request #704 from mpg/l13-hw-starts-finish-2.16-restricted by Manuel Pégourié-Gonnard · 5 years ago
  88. 2df1423 Test multi-block output of the hash-based KDF by Manuel Pégourié-Gonnard · 5 years ago
  89. 2df5857 Remove SHA-1 as a fallback option by Manuel Pégourié-Gonnard · 5 years ago
  90. 20cd85c Use starts/finish around Lucky 13 dummy compressions by Manuel Pégourié-Gonnard · 5 years ago
  91. 7d7c004 Improve comment justifying a hard-coded limitation by Manuel Pégourié-Gonnard · 5 years ago
  92. a90a95b Zeroize temporary stack buffer by Manuel Pégourié-Gonnard · 5 years ago
  93. 301a9ee Fix potential memory overread in seed functions by Manuel Pégourié-Gonnard · 5 years ago
  94. 72177e3 Add fall-back to hash-based KDF for internal ECP DRBG by Manuel Pégourié-Gonnard · 5 years ago
  95. 0defc57 Fix typo in a comment by Manuel Pégourié-Gonnard · 5 years ago
  96. 18b0b3c Avoid superflous randomization with restartable by Manuel Pégourié-Gonnard · 5 years ago
  97. c7295f5 Use HMAC_DRBG by default for ECP internal DRBG by Manuel Pégourié-Gonnard · 5 years ago
  98. c334f41 Skip redundant checks for NULL f_rng by Manuel Pégourié-Gonnard · 5 years ago
  99. 047986c Add support for RESTARTABLE with internal RNG by Manuel Pégourié-Gonnard · 5 years ago
  100. d18f051 Move internal drbg init to specific mul functions by Manuel Pégourié-Gonnard · 5 years ago