1. 1b0e2e9 Add missing ifdef for mbedtls_ssl_tls13_exporter by Max Fillinger · 4 months ago
  2. 40c2024 Add label_len argument to non-PSA tls_prf_generic by Max Fillinger · 4 months ago
  3. 5122dc6 Fix mistake in previous comment change by Max Fillinger · 8 months ago
  4. 7833b18 Fix HkdfLabel comment by Max Fillinger · 8 months ago
  5. 529931a Allow maximum label length in Hkdf-Expand-Label by Max Fillinger · 8 months ago
  6. 76bb753 Fix max. label length in key material exporter by Max Fillinger · 9 months ago
  7. 97a2879 Document BAD_INPUT_DATA error in key material exporter by Max Fillinger · 9 months ago
  8. 8ee2141 Use one maximum key_len for all exported keys by Max Fillinger · 9 months ago
  9. e95edbf Fix output size check for key material exporter by Max Fillinger · 9 months ago
  10. ffc47e6 Increase allowed output size of HKDF-Expand-Label by Max Fillinger · 9 months ago
  11. 8fa7252 Fix #endif comment by Max Fillinger · 9 months ago
  12. 951b886 Create MBEDTLS_SSL_KEYING_MATERIAL_EXPORT option by Max Fillinger · 9 months ago
  13. 7b52328 Remove TLS 1.2 Exporter if we don't have randbytes by Max Fillinger · 9 months ago
  14. 92d2930 Revert "Store randbytes for TLS 1.2 TLS-Exporter" by Max Fillinger · 9 months ago
  15. 6c02ea8 Use fewer magic numbers in TLS-Exporter functions by Max Fillinger · 9 months ago
  16. 76077e2 Add label length argument to tls_prf_generic() by Max Fillinger · 9 months ago
  17. 85b33ee Store randbytes for TLS 1.2 TLS-Exporter by Max Fillinger · 10 months ago
  18. 0118293 Fix build when one of TLS 1.2 or 1.3 is disabled by Max Fillinger · 11 months ago
  19. 9359f4d Fix coding style by Max Fillinger · 11 months ago
  20. 3be83a7 Fix mismatches in function declarations by Max Fillinger · 12 months ago
  21. 1466bf8 Fix key_len check in TLS-Exporter by Max Fillinger · 12 months ago
  22. 404f7a3 Simplify mbedtls_ssl_tls13_exporter by Max Fillinger · 12 months ago
  23. 29f79ea Fix commented out function declaration by Max Fillinger · 12 months ago
  24. 44042f0 Implement TLS-Exporter feature by Max Fillinger · 1 year ago
  25. 544fdc6 Fix printf of enum by Gilles Peskine · 5 months ago
  26. ad84044 Test split, coalesced-split and empty handshake records by Gilles Peskine · 5 months ago
  27. da5f5b2 Add a log message on every SSL state transition by Gilles Peskine · 5 months ago
  28. 49f179d Always call mbedtls_ssl_handshake_set_state by Gilles Peskine · 5 months ago
  29. 05657d9 Revert "Add auto-generated files" by Minos Galanakis · 4 months ago
  30. 22098d4 Add auto-generated files by Minos Galanakis · 5 months ago mbedtls-3.6.3 v3.6.3
  31. e62ef05 Version Bump for 3.6.3 by Minos Galanakis · 5 months ago
  32. 7a95d16 Merge branch 'mbedtls-3.6-restricted' into mbedtls-3.6.3rc0-pr by Minos Galanakis · 5 months ago
  33. b6ad19b Merge pull request #9976 from mpg/defragment-ext-test-3.6 by Manuel Pégourié-Gonnard · 5 months ago gh-readonly-queue/mbedtls-3.6/pr-9976-d3ca688b4b2ab2dcb66ce311f16f3ef909a5fdd8
  34. dfc8e43 Merge remote-tracking branch 'upstream/mbedtls-3.6' into pre-3.6.3-upstream-merge by Minos Galanakis · 5 months ago
  35. c03cd11 Merge pull request #10025 from waleed-elmelegy-arm/mbedtls-3.6-fix-key-deriv-bad-state-error by Gilles Peskine · 5 months ago
  36. 051b1e2 Reduce the level of logging used in tests by Manuel Pégourié-Gonnard · 5 months ago
  37. 00ad6f6 New test function inject_client_content_on_the_wire() by Manuel Pégourié-Gonnard · 6 months ago
  38. 3dbe333 Merge pull request #10051 from Vge0rge/key_id_range_backport by Gilles Peskine · 5 months ago
  39. 26f0044 Merge pull request #1319 from davidhorstmann-arm/calc-finished-check-return-3.6 by David Horstmann · 5 months ago
  40. 104bd06 Merge remote-tracking branch 'origin/features/tls-defragmentation/3.6' into feature_merge_defragmentation_36 by Minos Galanakis · 5 months ago
  41. 43f636f Merge pull request #1316 from gilles-peskine-arm/zeroize-psa-202503-3.6 by Gilles Peskine · 5 months ago
  42. d5e64f7 PSA core: Allow enabling one volatile/builtin key by Georgios Vasilakis · 5 months ago
  43. 8a4ec49 Cleanly reject non-HS in-between HS fragments by Manuel Pégourié-Gonnard · 5 months ago
  44. 443908b Replace zero by PSA_ALG_NONE in key derivation input functions by Waleed Elmelegy · 5 months ago
  45. b5ef7da TLS1.2: Check for failures in Finished calculation by David Horstmann · 5 months ago
  46. c22e315 Fix a log message by Gilles Peskine · 5 months ago
  47. 229e200 Note unused variables when debugging is disabled by Gilles Peskine · 5 months ago
  48. dee9263 Pacify uncrustify by Gilles Peskine · 5 months ago
  49. ce726b2 Fix uninitialized variable by Gilles Peskine · 5 months ago
  50. 0a467cc Unify handshake fragment log messages by Gilles Peskine · 5 months ago
  51. b888cca Fix handshake defragmentation when the record has multiple messages by Gilles Peskine · 5 months ago
  52. 3175fc3 Fix end check before memmove by Gilles Peskine · 5 months ago
  53. 184cac1 Zeroize temporary heap buffers used when deriving an ECC key by Gilles Peskine · 5 months ago
  54. e847afd Zeroize temporary heap buffers used in PSA operations by Gilles Peskine · 5 months ago
  55. 58c3301 Make conversion explicit to silence MSVC warning by Gilles Peskine · 5 months ago
  56. 302f37b Fix dodgy printf calls by Gilles Peskine · 5 months ago
  57. cc856a2 Handshake defragmentation: reassemble incrementally by Gilles Peskine · 5 months ago
  58. 22c51b9 mbedtls_ssl_prepare_handshake_record(): log offsets after decryption by Gilles Peskine · 5 months ago
  59. af0c461 mbedtls_ssl_prepare_handshake_record(): refactor first fragment prep by Gilles Peskine · 5 months ago
  60. 1e81d34 Tweak handshake fragment log message by Gilles Peskine · 5 months ago
  61. 3d490a9 Tweak "waiting for more handshake fragments" log message by Gilles Peskine · 5 months ago
  62. 82cd324 Fix code style for key derivation input function by Waleed Elmelegy · 5 months ago
  63. 72b391f Fix psa_key_derivation_input_integer() not detecting bad state by Waleed Elmelegy · 5 months ago
  64. 05b3835 psa: move definition of psa_can_do_hash() to crypto_extra.h by Valerio Setti · 5 months ago
  65. 4726d20 Remove unused variable in ssl_server.c by Waleed Elmelegy · 6 months ago
  66. 2878a05 Remove obselete checks due to the introduction of handhsake defragmen... by Deomid rojer Ryabkov · 6 months ago
  67. cb72cd2 Don't reset badmac_seen on a DTLS client reconnect by Gilles Peskine · 6 months ago
  68. b710599 Merge in_hsfraglen with badmac_seen_or_in_hsfraglen by Gilles Peskine · 6 months ago
  69. ebdd405 Change the type of in_hsfraglen to unsigned by Gilles Peskine · 6 months ago
  70. f6a676d Rename badmac_seen to badmac_seen_or_in_hsfraglen by Gilles Peskine · 6 months ago
  71. 69f8f45 Minor readability improvement by Gilles Peskine · 6 months ago
  72. bbe8745 Remove in_hshdr by Deomid rojer Ryabkov · 6 months ago
  73. 85ec2b3 Add a safety check for in_hsfraglen by Deomid rojer Ryabkov · 6 months ago
  74. 5c853ea Allow fragments less HS msg header size (4 bytes) by Deomid rojer Ryabkov · 6 months ago
  75. 96e2290 Remove mbedtls_ssl_reset_in_out_pointers by Deomid rojer Ryabkov · 6 months ago
  76. 1f4088c Review comments by Deomid rojer Ryabkov · 7 months ago
  77. 3fc5a4d Defragment incoming TLS handshake messages by Deomid rojer Ryabkov · 1 year, 5 months ago
  78. 2c33c75 Require calling mbedtls_ssl_set_hostname() for security by Gilles Peskine · 6 months ago
  79. 6b88594 Keep track of whether mbedtls_ssl_set_hostname() has been called by Gilles Peskine · 6 months ago
  80. e61852e Access ssl->hostname through abstractions by Gilles Peskine · 6 months ago
  81. 4847765 Update tf-psa-crypto/drivers/builtin/src/ecp.c by minosgalanakis · 12 months ago
  82. abf9f1a PSA interruptible sign/verify: detect invalid curve family in start by Gilles Peskine · 8 months ago
  83. 9058998 Merge pull request #9796 from gilles-peskine-arm/psa-storage-test-cases-never-supported-positive-3.6 by Gilles Peskine · 7 months ago
  84. 8e8dabd Merge pull request #9830 from gilles-peskine-arm/9798-backport-3.6 by Janos Follath · 7 months ago
  85. bc3f917 crypto_config.h: Don't list mechanisms that are not implemented by Gilles Peskine · 7 months ago
  86. e65428e Specify previously missed XMM register clobbers in AES-NI asm blocks by Solar Designer · 8 months ago
  87. 98910a1 Specify register clobbers in mbedtls_aesni_crypt_ecb() by Solar Designer · 8 months ago
  88. a770f30 Merge pull request #9782 from gilles-peskine-arm/psa-storage-test-cases-never-supported-preliminaries-3.6 by Janos Follath · 8 months ago
  89. aebe857 Added debug print in tls13 ssl_tls13_write_key_share_ext by Nadav Tasher · 8 months ago
  90. 7e6d4c1 Make mbedTLS compile with MS-DOS DJGPP by SuperIlu · 8 months ago
  91. 8a8aa59 PSA interruptible sign/verify: detect unsupported mechanism in start by Gilles Peskine · 9 months ago
  92. 808b541 PSA sign/verify: more uniform error on an unsupported hash by Gilles Peskine · 1 year, 4 months ago
  93. dcf42a0 Update references to test helpers by David Horstmann · 9 months ago
  94. 346d2f4 Merge pull request #9731 from gilles-peskine-arm/coverity-20241004-3.6 by Paul Elliott · 9 months ago
  95. c8b668d mbedtls_psa_ecp_generate_key: don't calculate the public key by Gilles Peskine · 9 months ago
  96. 5dea5f3 mbedtls_ecdsa_raw_to_der and mbedtls_ecdsa_der_to_raw: reject bits==0 by Gilles Peskine · 10 months ago
  97. 91972cc Merge pull request #9608 from gilles-peskine-arm/outcome-check-repeated-configurations-all.sh-preliminaries-3.6 by Gilles Peskine · 9 months ago gh-readonly-queue/mbedtls-3.6/pr-9608-0b8b7a1ee1d3704199660540dc8a4efa546f1593
  98. 0b8b7a1 Merge pull request #9448 from valeriosetti/psa-use-static-slots-backport by Gilles Peskine · 9 months ago
  99. 0f170ad Merge pull request #9714 from ThePassionate/mbedtls-1022-3.6.0 by David Horstmann · 10 months ago
  100. 66b39d4 net/mbedtls_net_connect: Preventing double close problem by makejian · 10 months ago