1. d904d66 Mark static int SSL functions CHECK_RETURN_CRITICAL by Manuel Pégourié-Gonnard · 3 years, 1 month ago
  2. 06e1fcd Add comments when can_do() is safe to use by Manuel Pégourié-Gonnard · 3 years, 2 months ago
  3. 0e7791f Redo of PR#5345. Fixed spelling and typographical errors found by CodeSpell. by Shaun Case · 3 years, 7 months ago
  4. a6f99a1 Fix crash with DTLS_CONNECTION_ID but not other SSL features by Gilles Peskine · 3 years, 4 months ago
  5. e7dad1f ssl_tls.c: Fix inappropriate use of ssl context by Ronald Cron · 3 years, 4 months ago
  6. 298d6cc Add mbedtls_ssl_check_curve_tls_id() (internal) by Manuel Pégourié-Gonnard · 3 years, 6 months ago
  7. de081ce Reset dhm_P and dhm_G if config call repeated by Glenn Strauss · 3 years, 7 months ago
  8. 08412e2 Merge remote-tracking branch 'restricted/development_2.x-restricted' into mbedtls-2.28.0rc0-pr by Dave Rodgman · 3 years, 8 months ago
  9. 622d804 Initialize hash_len before using it by Gilles Peskine · 3 years, 8 months ago
  10. f91b2e5 mbedtls_ssl_parse_finished: zeroize expected finished value on error by Gilles Peskine · 3 years, 8 months ago
  11. 2b3f21d Catch failures of md_hmac operations by Gilles Peskine · 3 years, 8 months ago
  12. 0f6c6bc [session] fix a session copy bug by 吴敬辉 · 3 years, 8 months ago
  13. 3a95d2b psa: Fix the size of hash buffers by Ronald Cron · 3 years, 10 months ago
  14. 18a4494 Rename constant-time functions to have mbedtls_ct prefix by Gabor Mezei · 3 years, 9 months ago
  15. e24dea8 Move mbedtls_cf_memcmp to a new public header by Gabor Mezei · 3 years, 10 months ago
  16. 378e7eb Unify memcmp functions by gabor-mezei-arm · 4 years ago
  17. 944c107 Move contatnt-time memcmp functions to the contant-time module by gabor-mezei-arm · 3 years, 10 months ago
  18. a651e6f Tidy up grouped MBEDTLS_BYTE_x macros by Joe Subbiani · 4 years ago
  19. 2f98d79 Tidy up ssl_*.c grouped MBEDTLS_BYTE_x macros by Joe Subbiani · 4 years ago
  20. ad1115a Use byte reading macros in places not using a byte mask by Joe Subbiani · 4 years, 1 month ago
  21. c045dc1 Replace MBEDTLS_CHAR_x with MBEDTLS_BYTE_x by Joe Subbiani · 4 years, 1 month ago
  22. 6b897c9 Add Character byte reading macros by Joe Subbiani · 4 years, 1 month ago
  23. dd5f624 Fix TLS alert codes by Dave Rodgman · 4 years, 1 month ago
  24. a33cb76 Merge pull request #4493 from netfoundry/gcc11.fixes_2.x by Gilles Peskine · 4 years, 2 months ago
  25. c54010c Split SHA-512 and SHA-384 guards for hash availability code by Gilles Peskine · 4 years, 3 months ago
  26. fc9c07f Fix unused variable with MBEDTLS_SHA512_NO_SHA384 by Gilles Peskine · 4 years, 3 months ago
  27. d2d5937 Remove dead code under MBEDTLS_SHA512_NO_SHA384 by Gilles Peskine · 4 years, 3 months ago
  28. bb66dac Fix spurious -Wstringop-overflow with GCC 11.1 by Gilles Peskine · 4 years, 3 months ago
  29. b744990 Fix missed size_t printf by Paul Elliott · 4 years, 5 months ago
  30. d48d5c6 Fix size_t and longlong specifiers for MinGW by Paul Elliott · 4 years, 7 months ago
  31. 3891caf Misc review requested fixes by Paul Elliott · 4 years, 8 months ago
  32. 9f35211 Fixes for invalid printf format specifiers by Paul Elliott · 4 years, 8 months ago
  33. 069fa96 Use size_t instead of uint32_t for ssl I/O buffer lengths by Andrzej Kurek · 4 years, 7 months ago
  34. 4a06379 Refactor the variable I/O buffer size feature by Andrzej Kurek · 4 years, 9 months ago
  35. f06a614 Change function casting in `ssl_calc_finished_tls_sha384` by Rodrigo Dias Correa · 4 years, 8 months ago
  36. d596ca8 Fix GCC warning in `ssl_calc_finished_tls_sha384` by Rodrigo Dias Correa · 4 years, 8 months ago
  37. eb5d014 Fix GCC warning in `ssl_calc_finished_tls_sha384` by Rodrigo Dias Correa · 4 years, 9 months ago
  38. 2c42457 Fix mismatched function parameters (prototype/definition) by Rodrigo Dias Correa · 4 years, 9 months ago
  39. 2630f67 Fix build failure on gcc-11 by Rodrigo Dias Correa · 4 years, 9 months ago
  40. cf56a0a psa: Move from key handle to key identifier by Ronald Cron · 5 years ago
  41. c26f8d4 Introduce psa_key_handle_is_null inline function by Ronald Cron · 5 years ago
  42. 91e9515 Introduce PSA_KEY_HANDLE_INIT macro by Ronald Cron · 5 years ago
  43. 5ef72d2 Style and typos by Johan Pascal · 4 years, 9 months ago
  44. 2258a4f Do not return a structure, use a return parameter by Johan Pascal · 4 years, 9 months ago
  45. 0dbcd1d Make API safer by Johan Pascal · 4 years, 9 months ago
  46. 20c7db3 API modified so server side can get mki value by Johan Pascal · 4 years, 9 months ago
  47. 76fdf1d Minor fix and improvements by Johan Pascal · 4 years, 9 months ago
  48. d387aa0 style + missing cast by Johan Pascal · 4 years, 10 months ago
  49. aae4d22 Improve code readability +micro optimization +style by Johan Pascal · 4 years, 10 months ago
  50. a455cd9 mbedtls_ssl_get_srtp_profile_as_string declared and defined in ssl.h by Johan Pascal · 4 years, 10 months ago
  51. f6417ec mki length feats in a uint16_t by Johan Pascal · 4 years, 10 months ago
  52. 253d026 set protection profile API gets a MBEDTLS_TLS_SRTP_UNSET terminated list by Johan Pascal · 4 years, 10 months ago
  53. 43f9490 SRTP profiles definition use macros only by Johan Pascal · 4 years, 10 months ago
  54. 4f09926 use_srtp extension shall not interfere in the handshake settings by Johan Pascal · 4 years, 10 months ago
  55. d576fdb Style + fix bound check in write_use_srt_ext by Johan Pascal · 4 years, 10 months ago
  56. 9bc97ca SRTP-DTLS protection profile configuration list not copied into ssl_config by Johan Pascal · 4 years, 10 months ago
  57. 8526957 Minor style modifications by Johan Pascal · 5 years ago
  58. b64eab7 fix style by Johan Pascal · 5 years ago
  59. 65b56ef Change key derivation for srtp by Ron Eldor · 6 years ago
  60. 313d7b5 Add variable validation by Ron Eldor · 7 years ago
  61. 089c9fe Improve readability by Ron Eldor · 7 years ago
  62. a978804 Style fixes by Ron Eldor · 7 years ago
  63. ef72faf Style fixes by Ron Eldor · 7 years ago
  64. b465539 Add tests and code to support by Ron Eldor · 7 years ago
  65. 1c399bd Set authmode to optional, if not set by Ron Eldor · 7 years ago
  66. 57cc70e Enforce SRTP mandatory HS messages by Ron Eldor · 7 years ago
  67. a37326a Make keyu material length in \ out by Ron Eldor · 7 years ago
  68. 591f162 support mki value by Ron Eldor · 8 years ago
  69. 3adb992 Add mki value and some review comments by Ron Eldor · 8 years ago
  70. 701984d Comply with mbedtls naming rules by Johan Pascal · 8 years ago
  71. 2d9470b Improve DTLS SRTP API with a dedicated function to get generated keys by Johan Pascal · 9 years ago
  72. bbc057a Move available dtls srtp profile list to ssl_config by Johan Pascal · 9 years ago
  73. b62bb51 Add RFC5764 - SRTP key generation during DTLS handshake by Johan Pascal · 10 years ago
  74. a817ea4 Check presence of DTLS timers only once by Hanno Becker · 4 years, 9 months ago
  75. 1e14827 Update copyright notices to use Linux Foundation guidance by Bence Szépkúti · 5 years ago
  76. db09ef6 Include common.h instead of config.h in library source files by Gilles Peskine · 5 years ago
  77. c4b6656 Merge pull request #3405 from AndrzejKurek/variable-buffers-cid-serialization by danh-arm · 5 years ago
  78. b657783 Update iv and len context pointers manually when reallocating buffers by Andrzej Kurek · 5 years ago
  79. a92e3de Merge pull request #873 from hanno-arm/ssl_write_client_hello by Manuel Pégourié-Gonnard · 5 years ago
  80. 8216dd3 Use defines to check alpn ext list validity by Ronald Cron · 5 years ago
  81. f93c2d7 Add support for TLS 1.3 record protection to ssl_populate_transform() by Hanno Becker · 5 years ago
  82. 447558d Improve documentation of ssl_populate_transform() by Hanno Becker · 5 years ago
  83. c39a80d Merge pull request #3312 from sander-visser/cleanup-nullptr-deref by Gilles Peskine · 5 years ago
  84. 1a4a3f5 Merge pull request #3311 from sander-visser/validate-tls-mac-key-len by Janos Follath · 5 years ago
  85. 3888b03 Add variable initialization to large SSL TLS function. by sander-visser · 5 years ago
  86. b8aa207 Scope reduction to enable NULL check to protect dereferencing. by sander-visser · 5 years ago
  87. 1abe8ee Expose SSL HW record acceleration error. by sander-visser · 5 years ago
  88. d3085ab Avoid re-assigning zero to `ret` variable. Resolve #3182. by irwir · 5 years ago
  89. 5d318cc Merge pull request #3130 from gbryant-arm/generic-psk by Manuel Pégourié-Gonnard · 5 years ago
  90. 8ea6872 Improve pointer calculations when resizing I/O buffers by Andrzej Kurek · 5 years ago
  91. 90c6e84 Split the maximum fragment length into two - an input and output MFL by Andrzej Kurek · 5 years ago
  92. 0c9b195 Return internal error if no PSK is found when deriving the premaster secret by Guilhem Bryant · 5 years ago
  93. 03d3711 Fix bracket style by Guilhem Bryant · 5 years ago
  94. b5f04e4 Properly initialise psk and psk_len by Guilhem Bryant · 5 years ago
  95. 61b0fe6 Initialise psk_len in mbedtls_ssl_psk_derive_premaster() by Guilhem Bryant · 5 years ago
  96. 82194c8 Fix bracketing style in ssl_tls.c by Guilhem Bryant · 5 years ago
  97. c5285d8 Use internal PSK getter by Guilhem Bryant · 5 years ago
  98. 5e7d6fd Merge 'mbedtls/development' into merge-crypto-unremoved-20200304 by Gilles Peskine · 5 years ago
  99. eccd888 Rename identifiers containing double-underscore by Gilles Peskine · 5 years ago
  100. 21d1cbc Merge pull request #2262 from andresag01/iotssl-2544-deprecate-record-accel by Manuel Pégourié-Gonnard · 5 years ago