- fb2460a Fixed some minor typos in comments. by Ari Weiler-Ofek · 7 weeks ago
- ad84044 Test split, coalesced-split and empty handshake records by Gilles Peskine · 5 months ago
- 49f179d Always call mbedtls_ssl_handshake_set_state by Gilles Peskine · 5 months ago
- 8a4ec49 Cleanly reject non-HS in-between HS fragments by Manuel Pégourié-Gonnard · 5 months ago
- c22e315 Fix a log message by Gilles Peskine · 5 months ago
- 229e200 Note unused variables when debugging is disabled by Gilles Peskine · 5 months ago
- dee9263 Pacify uncrustify by Gilles Peskine · 5 months ago
- 0a467cc Unify handshake fragment log messages by Gilles Peskine · 5 months ago
- b888cca Fix handshake defragmentation when the record has multiple messages by Gilles Peskine · 5 months ago
- 3175fc3 Fix end check before memmove by Gilles Peskine · 5 months ago
- 58c3301 Make conversion explicit to silence MSVC warning by Gilles Peskine · 5 months ago
- 302f37b Fix dodgy printf calls by Gilles Peskine · 5 months ago
- cc856a2 Handshake defragmentation: reassemble incrementally by Gilles Peskine · 5 months ago
- 22c51b9 mbedtls_ssl_prepare_handshake_record(): log offsets after decryption by Gilles Peskine · 5 months ago
- af0c461 mbedtls_ssl_prepare_handshake_record(): refactor first fragment prep by Gilles Peskine · 5 months ago
- 1e81d34 Tweak handshake fragment log message by Gilles Peskine · 5 months ago
- 3d490a9 Tweak "waiting for more handshake fragments" log message by Gilles Peskine · 5 months ago
- b710599 Merge in_hsfraglen with badmac_seen_or_in_hsfraglen by Gilles Peskine · 5 months ago
- ebdd405 Change the type of in_hsfraglen to unsigned by Gilles Peskine · 5 months ago
- f6a676d Rename badmac_seen to badmac_seen_or_in_hsfraglen by Gilles Peskine · 5 months ago
- 69f8f45 Minor readability improvement by Gilles Peskine · 5 months ago
- bbe8745 Remove in_hshdr by Deomid rojer Ryabkov · 6 months ago
- 85ec2b3 Add a safety check for in_hsfraglen by Deomid rojer Ryabkov · 6 months ago
- 5c853ea Allow fragments less HS msg header size (4 bytes) by Deomid rojer Ryabkov · 6 months ago
- 1f4088c Review comments by Deomid rojer Ryabkov · 6 months ago
- 3fc5a4d Defragment incoming TLS handshake messages by Deomid rojer Ryabkov · 1 year, 5 months ago
- 5a668dd Reduce level of non-error debug message by Gilles Peskine · 11 months ago
- 015d222 Remove transitional always-on internal option by Gilles Peskine · 11 months ago
- 78df03a Separate accepting TLS 1.3 middlebox compatibility from sending it by Gilles Peskine · 11 months ago
- 9f44c88 Rename some "new_session_tickets" symbols by Ronald Cron · 11 months ago
- 97dc583 Improve debug logs by Ronald Cron · 11 months ago
- d67f801 Do not add a new field in the SSL config by Ronald Cron · 11 months ago
- b675b2b TLS 1.3: Ignore tickets if disabled at runtime by Ronald Cron · 11 months ago
- 698c8e9 ssl_msg.c: Rename _check_new_session_ticket to _is_new_session_ticket by Ronald Cron · 1 year, 4 months ago
- 6071f61 tls13: cli: Ignore tickets if not supported by Ronald Cron · 1 year, 4 months ago
- 3641df2 tls13: cli: Rename STATE_SENT to STATE_IND_SENT by Ronald Cron · 1 year, 5 months ago
- 05d7cfb tls13: cli: Rename STATE_UNKNOWN to STATE_IDLE by Ronald Cron · 1 year, 5 months ago
- d288466 tls13: cli: Split early data user status and internal state by Ronald Cron · 1 year, 5 months ago
- 61fd13c Merge remote-tracking branch 'mbedtls/development' into tls13-cli-max-early-data-size by Ronald Cron · 1 year, 5 months ago
- db944a7 ssl_msg.c: Fix log position by Ronald Cron · 1 year, 5 months ago
- 5dbfcce tls13: cli: Fix error code not checked by Ronald Cron · 1 year, 5 months ago
- de9b03d tls13: Rename early_data_count to total_early_data_size by Ronald Cron · 1 year, 5 months ago
- 62f971a tls13: cli: Enforce maximum size of early data by Ronald Cron · 1 year, 5 months ago
- 01d273d Enforce maximum size of early data in case of HRR by Ronald Cron · 1 year, 6 months ago
- 919e596 Enforce maximum size of early data when rejected by Ronald Cron · 1 year, 6 months ago
- d406924 Improve comments/documentation by Ronald Cron · 1 year, 5 months ago
- 4922190 tls13: write_early_data: Add endpoint check by Ronald Cron · 1 year, 5 months ago
- b62732e tls13: cli: Add mbedtls_ssl_write_early_data() API by Xiaokang Qian · 1 year, 8 months ago
- 5c9cc0b Merge pull request #8727 from ronald-cron-arm/tls13-ignore-early-data-when-rejected by Manuel Pégourié-Gonnard · 1 year, 6 months ago
- 71c6e65 tls13: ssl_msg.c: Improve/add comments by Ronald Cron · 1 year, 6 months ago
- 32c28ce Merge pull request #8715 from valeriosetti/issue7964 by Manuel Pégourié-Gonnard · 1 year, 6 months ago
- f57d14b Ignore early data app msg before 2nd client hello by Jerry Yu · 1 year, 9 months ago
- 2995d35 tls13: srv: Deprotect and discard early data records by Ronald Cron · 1 year, 6 months ago
- 164537c tls13: early data: Improve, add comments by Ronald Cron · 1 year, 6 months ago
- ed7d4bf tls13: srv: Simplify mbedtls_ssl_read_early_data() API by Ronald Cron · 1 year, 6 months ago
- 0883b8b tls13: Introduce early_data_state SSL context field by Ronald Cron · 1 year, 6 months ago
- d9ca354 tls13: srv: Add mbedtls_ssl_read_early_data() API by Jerry Yu · 1 year, 8 months ago
- 739a1d4 tls: Add internal function ssl_read_application_data() by Jerry Yu · 2 years, 8 months ago
- b4f5076 debug: move internal functions declarations to an internal header file by Valerio Setti · 1 year, 6 months ago
- ad4f0ad Merge pull request #8514 from mschulz-at-hilscher/fixes/uninitialized-variable-in-ssl_msg by Manuel Pégourié-Gonnard · 1 year, 8 months ago gh-readonly-queue/development/pr-8514-40f3f1c36fe9efb4fd6f0bc1bb743855e854a243
- c37ad44 misc type fixes in ssl by Dave Rodgman · 1 year, 9 months ago
- a3d0f61 Use MBEDTLS_GET_UINTxx_BE macro by Dave Rodgman · 1 year, 9 months ago
- e4a6f5a Use size_t cast for pointer subtractions by Dave Rodgman · 1 year, 9 months ago
- 9916b06 Fix uninitialized variable warnings. by Matthias Schulz · 1 year, 9 months ago
- 16799db update headers by Dave Rodgman · 1 year, 9 months ago
- e570704 ssl: use MBEDTLS_SSL_HAVE_[CCM/GCM/CHACHAPOLY/AEAD] macros for ssl code by Valerio Setti · 1 year, 10 months ago
- d4a10ce cipher/tls: use new symbols for guarding AEAD code by Valerio Setti · 1 year, 10 months ago
- ca1e605 Merge remote-tracking branch 'upstream-public/development' into development-restricted-merge-20230925 by Gilles Peskine · 1 year, 10 months ago
- faf0b86 mbedtls_ssl_decrypt_buf(): fix buffer overread with stream cipher by Gilles Peskine · 1 year, 11 months ago
- 7d52f2a Improve use of ct interface in mbedtls_ssl_decrypt_buf by Dave Rodgman · 1 year, 11 months ago
- 9d8a7d6 Use the correct variable when tracking padding length by Tom Cosgrove · 1 year, 11 months ago
- 48fb8a3 Fix some renames that were missed by Dave Rodgman · 2 years ago
- 98ddc01 Rename ...if0 to ...else_0 by Dave Rodgman · 2 years ago
- b7825ce Rename uint->bool operators to reflect input types by Dave Rodgman · 2 years ago
- c98f8d9 Merge branch 'development' into safer-ct5 by Dave Rodgman · 2 years ago
- 1d4d944 Merge pull request #7933 from tom-cosgrove-arm/add-mbedtls_zeroize_and_free by Dave Rodgman · 2 years ago
- bb07377 Merge pull request #7935 from AgathiyanB/add-enum-casts by Gilles Peskine · 2 years ago
- ca8c61b Provide and use internal function mbedtls_zeroize_and_free() by Tom Cosgrove · 2 years ago
- 8b52b88 Add type casts in ssl library by Agathiyan Bragadeesh · 2 years, 1 month ago
- 2be8c63 Create psa_util_internal.h by Manuel Pégourié-Gonnard · 2 years, 2 months ago
- 9fbb0cf Merge remote-tracking branch 'origin/development' into safer-ct5 by Dave Rodgman · 2 years, 1 month ago
- 1e4a030 Fix wrong array size calculation in error translation code by Andrzej Kurek · 2 years, 2 months ago
- 0064484 Optimize error translation code size by Andrzej Kurek · 2 years, 2 months ago
- a81373f Use new CT interface in ssl_msg.c by Dave Rodgman · 2 years, 2 months ago
- 2801f7f Move mbedtls_ct_hmac into ssl_msg.c by Dave Rodgman · 2 years, 3 months ago
- 756b028 Merge pull request #7171 from daverodgman/pr5527 by Dave Rodgman · 2 years, 5 months ago
- 8a045ce Unify PSA to Mbed TLS error translation by Andrzej Kurek · 2 years, 7 months ago
- f684025 Add corresponding fix for mbedtls_ssl_write by Dave Rodgman · 2 years, 5 months ago
- 937d6d5 Update library/ssl_msg.c by ashesman · 3 years, 5 months ago
- 358f94a Fixed undefined behavior in ssl_read if buf parameter is NULL. by Ashley Duncan · 3 years, 6 months ago
- b8b07aa Handle errors from functions that now return int by Manuel Pégourié-Gonnard · 2 years, 6 months ago
- 4a5c9ee Remove redundant SIZE_MAX guards by Dave Rodgman · 2 years, 6 months ago
- 449bd83 Switch to the new code style by Gilles Peskine · 2 years, 7 months ago
- cd0a565 Merge pull request #6703 from yuhaoth/pr/tls13-misc-from-prototype by Gilles Peskine · 2 years, 7 months ago
- a9ac612 Merge pull request #6666 from daverodgman/fast_unaligned by Manuel Pégourié-Gonnard · 2 years, 8 months ago
- 0c2a738 fix various issues by Jerry Yu · 2 years, 8 months ago
- 2e19981 tls13: guards transform negotiate by Jerry Yu · 2 years, 8 months ago
- 1797b05 Fix typos prior to release by Tom Cosgrove · 2 years, 8 months ago
- ffc330f Merge pull request #6264 from hannestschofenig/rfc9146_2 by Manuel Pégourié-Gonnard · 2 years, 8 months ago
- 5a1d00f Merge remote-tracking branch 'origin/development' into fast_xor by Dave Rodgman · 2 years, 8 months ago