- ae89dcc library: tls12: remove usage of MBEDTLS_PK_USE_PSA_EC_DATA by Valerio Setti · 3 months ago
- f670ba5 Always call mbedtls_ssl_handshake_set_state by Gilles Peskine · 5 months ago
- 1cd1e01 Correct code style by Ben Taylor · 4 months ago
- fd52984 resolved ci failures by Ben Taylor · 5 months ago
- 602b296 pre-test version of the mbedtls_ssl_conf_rng removal by Ben Taylor · 5 months ago
- 440cb2a Remove RNG from x509 and PK by Ben Taylor · 5 months ago
- 58535da Only check for certificates if it is supported by Gabor Mezei · 5 months ago
- e99e591 Remove key exchange based on encryption/decryption by Gabor Mezei · 5 months ago
- e1e2730 Remove `MBEDTLS_KEY_EXCHANGE_RSA_ENABLED` config option by Gabor Mezei · 5 months ago
- 28f8e20 Merge pull request #9872 from rojer/tls_hs_defrag_in by Manuel Pégourié-Gonnard · 5 months ago
- b8621b6 ssl_ciphersuites: remove references to DHE-RSA key exchanges by Valerio Setti · 6 months ago
- 89743b5 ssl_tls: remove code related to DHE-RSA by Valerio Setti · 6 months ago
- cf4e6a1 Remove unused variable in ssl_server.c by Waleed Elmelegy · 6 months ago
- afa11db Remove obselete checks due to the introduction of handhsake defragmen... by Deomid rojer Ryabkov · 6 months ago
- df5e1b6 Rm dead !USE_PSA code: ssl_tls12_server.c (part 2) by Manuel Pégourié-Gonnard · 6 months ago
- 5891676 Rm dead !USE_PSA code: ssl_tls12_server.c (part 1) by Manuel Pégourié-Gonnard · 6 months ago
- 189dcf6 Merge pull request #9910 from valeriosetti/issue9684 by Ronald Cron · 6 months ago gh-readonly-queue/development/pr-9910-7e1154c959fec59aabb9dfa60daed067d0779026
- 48659a1 ssl_tls: remove usage of DHE-PSK by Valerio Setti · 6 months ago
- 6402c35 Remove internal helper mbedtls_ssl_get_groups() by Manuel Pégourié-Gonnard · 7 months ago
- 712e9a1 Remove MBEDTLS_KEY_EXCHANGE_RSA_PSK by Gilles Peskine · 10 months ago
- ac767e5 Remove MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED by Gilles Peskine · 10 months ago
- 0f6bc41 Update includes for each library file by Harry Ramsey · 10 months ago
- 7a4aa4d Make mbedtls_ssl_check_cert_usage() work for 1.3 by Manuel Pégourié-Gonnard · 12 months ago
- 94f7022 Clean up mbedtls_ssl_check_cert_usage() by Manuel Pégourié-Gonnard · 12 months ago
- 7e39028 Fix build of v3.6 with unset MBEDTLS_DHM_C but MBEDTLS_USE_PSA_CRYPTO set (fixes #9188) by Michael Schuster · 1 year, 2 months ago
- 8c60b16 Merge pull request #8643 from gilles-peskine-arm/tls12_server-pk_opaque-dead_code by Gilles Peskine · 1 year, 2 months ago
- 139a418 Merge pull request #8587 from yanrayw/issue/4911/ssl_setup-check-RNG-configuration by Ronald Cron · 1 year, 5 months ago
- 84b9f1b mbedtls_ecp_write_key_ext(): migrate internally by Gilles Peskine · 1 year, 5 months ago
- 0ecb5fd Merge pull request #8574 from ronald-cron-arm/ssl-tickets by Manuel Pégourié-Gonnard · 1 year, 5 months ago
- b4f5076 debug: move internal functions declarations to an internal header file by Valerio Setti · 1 year, 6 months ago
- 3c0072b ssl_ticket.c: Base ticket age check on the ticket creation time by Ronald Cron · 1 year, 8 months ago
- 17ef8df ssl_session: Define unconditionally the endpoint field by Ronald Cron · 1 year, 8 months ago
- 4bf4473 Merge pull request #8633 from Wenxing-hou/clear_clienthello_comment by Gilles Peskine · 1 year, 7 months ago gh-readonly-queue/development/pr-8633-0e6fdc4f1d1bf7093e8a8f43e3cfbc742f1e8b2b
- a4b38f2 Merge pull request #8579 from valeriosetti/issue7995 by Manuel Pégourié-Gonnard · 1 year, 7 months ago
- c6d2df8 Guard configuration-specific code by Gilles Peskine · 1 year, 7 months ago
- 3b9de38 Make clienthello comment clear by Wenxing Hou · 1 year, 8 months ago
- 202bb71 ssl_tls12_server: do not export/import opaque keys by Valerio Setti · 1 year, 8 months ago
- bced8bc ssl_tls12_server: export/import PK parsed key in TLS side by Valerio Setti · 1 year, 8 months ago
- 197199f tls12 & tls13 server: remove RNG check in `write_server_hello` by Yanray Wang · 1 year, 8 months ago
- f9362b7 pk_internal: small renaming for mbedtls_pk_get_group_id() by Valerio Setti · 1 year, 8 months ago
- c37ad44 misc type fixes in ssl by Dave Rodgman · 1 year, 9 months ago
- a3d0f61 Use MBEDTLS_GET_UINTxx_BE macro by Dave Rodgman · 1 year, 9 months ago
- e4a6f5a Use size_t cast for pointer subtractions by Dave Rodgman · 1 year, 9 months ago
- 16799db update headers by Dave Rodgman · 1 year, 9 months ago
- f6f4695 Merge pull request #8320 from valeriosetti/issue8263 by Gilles Peskine · 1 year, 9 months ago gh-readonly-queue/development/pr-8320-62418dd20b8eccd121a865c3ba2173547b88ffbb
- 74cb404 ssl: improve ssl_check_key_curve() by Valerio Setti · 1 year, 10 months ago
- 4d0e846 ssl: reorganize guards surrounding ssl_get_ecdh_params_from_cert() by Valerio Setti · 1 year, 10 months ago
- e7cefae ssl: fix getting group id in ssl_check_key_curve() by Valerio Setti · 1 year, 10 months ago
- 3713bee Remove leftover local debug line by Gilles Peskine · 1 year, 10 months ago
- 530c423 Improve some debug messages and error codes by Gilles Peskine · 1 year, 10 months ago
- c8df898 Fix buffer overflow in TLS 1.2 ClientKeyExchange parsing by Gilles Peskine · 1 year, 10 months ago
- eda1b1f Merge pull request #7921 from valeriosetti/issue7613 by Gilles Peskine · 1 year, 10 months ago
- b7825ce Rename uint->bool operators to reflect input types by Dave Rodgman · 2 years ago
- c98f8d9 Merge branch 'development' into safer-ct5 by Dave Rodgman · 2 years ago
- e9646ec tls: fix guards for ECDSA support by Valerio Setti · 2 years ago
- 45d56f3 tls: replace ECDSA_C and PK_CAN_ECDSA_SOME with key exchange related ones by Valerio Setti · 2 years, 1 month ago
- de8f56e Merge pull request #7884 from valeriosetti/issue7612 by Manuel Pégourié-Gonnard · 2 years ago
- bb07377 Merge pull request #7935 from AgathiyanB/add-enum-casts by Gilles Peskine · 2 years ago
- ea59c43 tls: fix a comment a rename a variable/symbol by Valerio Setti · 2 years ago
- 60d3b91 tls: use TLS 1.2 macros in ssl_tls12_server.c by Valerio Setti · 2 years ago
- 8b52b88 Add type casts in ssl library by Agathiyan Bragadeesh · 2 years, 1 month ago
- c2232ea tls: replace PK_CAN_ECDH guards with new helpers by Valerio Setti · 2 years, 1 month ago
- 7aeec54 tls: replace ECDH_C guards with new helpers by Valerio Setti · 2 years, 1 month ago
- 46b2d2b Fix code style by Przemek Stekiel · 2 years, 1 month ago
- 615cbcd Provide additional comments for claryfication by Przemek Stekiel · 2 years, 1 month ago
- 7ac93be Adapt names: dh -> xxdh by Przemek Stekiel · 2 years, 1 month ago
- 6f19985 Adapt handshake fields to ffdh by Przemek Stekiel · 2 years, 1 month ago
- 56b159a Merge pull request #7627 from mprse/ffdh_tls13_v2 by Manuel Pégourié-Gonnard · 2 years, 1 month ago
- 9fbb0cf Merge remote-tracking branch 'origin/development' into safer-ct5 by Dave Rodgman · 2 years, 1 month ago
- 7dda271 Fix description of functions by Przemek Stekiel · 2 years, 1 month ago
- db041cc Merge pull request #7665 from AndrzejKurek/optimize-error-translation-code-size by Tom Cosgrove · 2 years, 1 month ago
- 6835b4a tls: always zeroize buffer on exit by Valerio Setti · 2 years, 1 month ago
- 3589a4c tls: keep buffer declaration in a single line by Valerio Setti · 2 years, 1 month ago
- b46217d tls: never destroy a priavte key that is not owned/created by TLS module by Valerio Setti · 2 years, 1 month ago
- 0813b6f tls: optimize code in ssl_get_ecdh_params_from_cert() by Valerio Setti · 2 years, 1 month ago
- 1e4a030 Fix wrong array size calculation in error translation code by Andrzej Kurek · 2 years, 2 months ago
- 1c7a998 Add missing ifdefs by Andrzej Kurek · 2 years, 2 months ago
- 0064484 Optimize error translation code size by Andrzej Kurek · 2 years, 2 months ago
- c216d94 Merge remote-tracking branch 'origin/development' into safer-ct5 by Dave Rodgman · 2 years, 2 months ago
- 75a5a9c Code cleanup by Przemek Stekiel · 2 years, 2 months ago
- da4fba6 Further code optimizations by Przemek Stekiel · 2 years, 2 months ago
- 24e50d3 Compile out length check to silent the compiler warning by Przemek Stekiel · 2 years, 2 months ago
- 6076f41 Remove hash_info.[ch] by Manuel Pégourié-Gonnard · 2 years, 4 months ago
- 8857984 Replace hash_info macro with MD macro by Manuel Pégourié-Gonnard · 2 years, 4 months ago
- 7b11368 Merge pull request #7438 from valeriosetti/issue7074 by Manuel Pégourié-Gonnard · 2 years, 2 months ago
- 293eedd Use new CT interface in ssl_tls12_server.c by Dave Rodgman · 2 years, 2 months ago
- d040509 tls: use pk_get_group_id() instead of directly accessing PK's structure by Valerio Setti · 2 years, 2 months ago
- f9f0ba8 Use functions in alignment.h to get value by Thomas Daubney · 2 years, 2 months ago
- 9720778 tls/x509: minor enhancement for using the new private key format by Valerio Setti · 2 years, 2 months ago
- 3f00b84 pk: fix build issues by Valerio Setti · 2 years, 3 months ago
- 77a7568 pk: align library and tests code to the new internal functions by Valerio Setti · 2 years, 3 months ago
- 4f387ef pk: use better naming for the new key ID field by Valerio Setti · 2 years, 3 months ago
- 048cd44 pk: fix library code for using the new opaque key solution by Valerio Setti · 2 years, 3 months ago
- fe01ec2 tls12: srv: Use sizeof() instead of constant by Ronald Cron · 2 years, 4 months ago
- c564938 Add downgrade protection mechanism by Ronald Cron · 2 years, 4 months ago
- 6291b23 tls: Add logic in handshake step to enable server version negotiation by Ronald Cron · 2 years, 5 months ago
- 77a904c ssl: remove useless guard by Valerio Setti · 2 years, 4 months ago
- 1fa5c56 ssl_tls: fix guard symbols for EC accelerated tests by Valerio Setti · 2 years, 4 months ago
- 6ef9bb3 Implement and use MBEDTLS_STATIC_ASSERT() by Tom Cosgrove · 2 years, 5 months ago
- 8a045ce Unify PSA to Mbed TLS error translation by Andrzej Kurek · 2 years, 7 months ago