1. 853cfbd Add a note about processor memory reordering by Gilles Peskine · 8 weeks ago
  2. 8c67ac0 Fix race condition in mbedtls_aesni_has_support by Gilles Peskine · 8 weeks ago
  3. 3f82706 Merge pull request #1349 from felixc-arm/pem-integer-underflow-3.6 by David Horstmann · 9 weeks ago
  4. 6165e71 Add fix for PEM underflow by Felix Conway · 2 months ago
  5. 1e9267c Merge pull request #1340 from mpg/fix-string-to-names-uaf-3.6 by Manuel Pégourié-Gonnard · 3 months ago
  6. 219c336 Merge pull request #1306 from davidhorstmann-arm/pkcs7-padding-side-channel-fix-3.6 by Manuel Pégourié-Gonnard · 3 months ago
  7. acdcb7f Restore behaviour of mbedtls_x509write_set_foo_name() by Manuel Pégourié-Gonnard · 3 months ago
  8. 19d2c91 Fix undocumented free() in x509_string_to_names() by Manuel Pégourié-Gonnard · 3 months ago
  9. afedef5 Constify cipher_wrap:mbedtls_cipher_base_lookup_table by Xavier Chapron · 4 months ago
  10. 1b0e2e9 Add missing ifdef for mbedtls_ssl_tls13_exporter by Max Fillinger · 4 months ago
  11. 40c2024 Add label_len argument to non-PSA tls_prf_generic by Max Fillinger · 4 months ago
  12. 5122dc6 Fix mistake in previous comment change by Max Fillinger · 8 months ago
  13. 7833b18 Fix HkdfLabel comment by Max Fillinger · 8 months ago
  14. 529931a Allow maximum label length in Hkdf-Expand-Label by Max Fillinger · 8 months ago
  15. 76bb753 Fix max. label length in key material exporter by Max Fillinger · 9 months ago
  16. 97a2879 Document BAD_INPUT_DATA error in key material exporter by Max Fillinger · 9 months ago
  17. 8ee2141 Use one maximum key_len for all exported keys by Max Fillinger · 9 months ago
  18. e95edbf Fix output size check for key material exporter by Max Fillinger · 9 months ago
  19. ffc47e6 Increase allowed output size of HKDF-Expand-Label by Max Fillinger · 9 months ago
  20. 8fa7252 Fix #endif comment by Max Fillinger · 9 months ago
  21. 951b886 Create MBEDTLS_SSL_KEYING_MATERIAL_EXPORT option by Max Fillinger · 9 months ago
  22. 7b52328 Remove TLS 1.2 Exporter if we don't have randbytes by Max Fillinger · 10 months ago
  23. 92d2930 Revert "Store randbytes for TLS 1.2 TLS-Exporter" by Max Fillinger · 10 months ago
  24. 6c02ea8 Use fewer magic numbers in TLS-Exporter functions by Max Fillinger · 10 months ago
  25. 76077e2 Add label length argument to tls_prf_generic() by Max Fillinger · 10 months ago
  26. 85b33ee Store randbytes for TLS 1.2 TLS-Exporter by Max Fillinger · 10 months ago
  27. 0118293 Fix build when one of TLS 1.2 or 1.3 is disabled by Max Fillinger · 11 months ago
  28. 9359f4d Fix coding style by Max Fillinger · 11 months ago
  29. 3be83a7 Fix mismatches in function declarations by Max Fillinger · 12 months ago
  30. 1466bf8 Fix key_len check in TLS-Exporter by Max Fillinger · 12 months ago
  31. 404f7a3 Simplify mbedtls_ssl_tls13_exporter by Max Fillinger · 12 months ago
  32. 29f79ea Fix commented out function declaration by Max Fillinger · 12 months ago
  33. 44042f0 Implement TLS-Exporter feature by Max Fillinger · 1 year ago
  34. 544fdc6 Fix printf of enum by Gilles Peskine · 5 months ago
  35. ad84044 Test split, coalesced-split and empty handshake records by Gilles Peskine · 5 months ago
  36. da5f5b2 Add a log message on every SSL state transition by Gilles Peskine · 5 months ago
  37. 49f179d Always call mbedtls_ssl_handshake_set_state by Gilles Peskine · 5 months ago
  38. 850e5b3 Document assumption of mbedtls_get_pkcs_padding by David Horstmann · 4 months ago
  39. 5a5440e Update to the new name in usages as well by David Horstmann · 4 months ago
  40. 05657d9 Revert "Add auto-generated files" by Minos Galanakis · 5 months ago
  41. 22098d4 Add auto-generated files by Minos Galanakis · 5 months ago mbedtls-3.6.3 v3.6.3
  42. e62ef05 Version Bump for 3.6.3 by Minos Galanakis · 5 months ago
  43. 7a95d16 Merge branch 'mbedtls-3.6-restricted' into mbedtls-3.6.3rc0-pr by Minos Galanakis · 5 months ago
  44. b6ad19b Merge pull request #9976 from mpg/defragment-ext-test-3.6 by Manuel Pégourié-Gonnard · 5 months ago gh-readonly-queue/mbedtls-3.6/pr-9976-d3ca688b4b2ab2dcb66ce311f16f3ef909a5fdd8
  45. dfc8e43 Merge remote-tracking branch 'upstream/mbedtls-3.6' into pre-3.6.3-upstream-merge by Minos Galanakis · 5 months ago
  46. c03cd11 Merge pull request #10025 from waleed-elmelegy-arm/mbedtls-3.6-fix-key-deriv-bad-state-error by Gilles Peskine · 5 months ago
  47. 051b1e2 Reduce the level of logging used in tests by Manuel Pégourié-Gonnard · 5 months ago
  48. 00ad6f6 New test function inject_client_content_on_the_wire() by Manuel Pégourié-Gonnard · 6 months ago
  49. 3dbe333 Merge pull request #10051 from Vge0rge/key_id_range_backport by Gilles Peskine · 5 months ago
  50. 26f0044 Merge pull request #1319 from davidhorstmann-arm/calc-finished-check-return-3.6 by David Horstmann · 5 months ago
  51. 104bd06 Merge remote-tracking branch 'origin/features/tls-defragmentation/3.6' into feature_merge_defragmentation_36 by Minos Galanakis · 5 months ago
  52. 43f636f Merge pull request #1316 from gilles-peskine-arm/zeroize-psa-202503-3.6 by Gilles Peskine · 5 months ago
  53. d5e64f7 PSA core: Allow enabling one volatile/builtin key by Georgios Vasilakis · 5 months ago
  54. 8a4ec49 Cleanly reject non-HS in-between HS fragments by Manuel Pégourié-Gonnard · 5 months ago
  55. 443908b Replace zero by PSA_ALG_NONE in key derivation input functions by Waleed Elmelegy · 5 months ago
  56. b5ef7da TLS1.2: Check for failures in Finished calculation by David Horstmann · 5 months ago
  57. c22e315 Fix a log message by Gilles Peskine · 5 months ago
  58. 229e200 Note unused variables when debugging is disabled by Gilles Peskine · 5 months ago
  59. dee9263 Pacify uncrustify by Gilles Peskine · 5 months ago
  60. ce726b2 Fix uninitialized variable by Gilles Peskine · 5 months ago
  61. 0a467cc Unify handshake fragment log messages by Gilles Peskine · 5 months ago
  62. b888cca Fix handshake defragmentation when the record has multiple messages by Gilles Peskine · 5 months ago
  63. 3175fc3 Fix end check before memmove by Gilles Peskine · 5 months ago
  64. 184cac1 Zeroize temporary heap buffers used when deriving an ECC key by Gilles Peskine · 5 months ago
  65. e847afd Zeroize temporary heap buffers used in PSA operations by Gilles Peskine · 5 months ago
  66. ab7bb57 Appease check-names with prefix by David Horstmann · 5 months ago
  67. 58c3301 Make conversion explicit to silence MSVC warning by Gilles Peskine · 5 months ago
  68. 302f37b Fix dodgy printf calls by Gilles Peskine · 5 months ago
  69. cc856a2 Handshake defragmentation: reassemble incrementally by Gilles Peskine · 5 months ago
  70. 22c51b9 mbedtls_ssl_prepare_handshake_record(): log offsets after decryption by Gilles Peskine · 5 months ago
  71. af0c461 mbedtls_ssl_prepare_handshake_record(): refactor first fragment prep by Gilles Peskine · 5 months ago
  72. 1e81d34 Tweak handshake fragment log message by Gilles Peskine · 5 months ago
  73. 3d490a9 Tweak "waiting for more handshake fragments" log message by Gilles Peskine · 5 months ago
  74. 82cd324 Fix code style for key derivation input function by Waleed Elmelegy · 5 months ago
  75. 72b391f Fix psa_key_derivation_input_integer() not detecting bad state by Waleed Elmelegy · 5 months ago
  76. 05b3835 psa: move definition of psa_can_do_hash() to crypto_extra.h by Valerio Setti · 6 months ago
  77. 4726d20 Remove unused variable in ssl_server.c by Waleed Elmelegy · 6 months ago
  78. 2878a05 Remove obselete checks due to the introduction of handhsake defragmen... by Deomid rojer Ryabkov · 6 months ago
  79. cb72cd2 Don't reset badmac_seen on a DTLS client reconnect by Gilles Peskine · 6 months ago
  80. b710599 Merge in_hsfraglen with badmac_seen_or_in_hsfraglen by Gilles Peskine · 6 months ago
  81. ebdd405 Change the type of in_hsfraglen to unsigned by Gilles Peskine · 6 months ago
  82. f6a676d Rename badmac_seen to badmac_seen_or_in_hsfraglen by Gilles Peskine · 6 months ago
  83. 69f8f45 Minor readability improvement by Gilles Peskine · 6 months ago
  84. bbe8745 Remove in_hshdr by Deomid rojer Ryabkov · 6 months ago
  85. 85ec2b3 Add a safety check for in_hsfraglen by Deomid rojer Ryabkov · 6 months ago
  86. 5c853ea Allow fragments less HS msg header size (4 bytes) by Deomid rojer Ryabkov · 6 months ago
  87. 96e2290 Remove mbedtls_ssl_reset_in_out_pointers by Deomid rojer Ryabkov · 6 months ago
  88. 1f4088c Review comments by Deomid rojer Ryabkov · 7 months ago
  89. 3fc5a4d Defragment incoming TLS handshake messages by Deomid rojer Ryabkov · 1 year, 5 months ago
  90. 2c33c75 Require calling mbedtls_ssl_set_hostname() for security by Gilles Peskine · 6 months ago
  91. 6b88594 Keep track of whether mbedtls_ssl_set_hostname() has been called by Gilles Peskine · 6 months ago
  92. e61852e Access ssl->hostname through abstractions by Gilles Peskine · 6 months ago
  93. 4847765 Update tf-psa-crypto/drivers/builtin/src/ecp.c by minosgalanakis · 12 months ago
  94. 32d8c90 Disable check-names for static padding function by David Horstmann · 7 months ago
  95. 652ea21 Fix timing side-channel in PKCS7 padding by David Horstmann · 7 months ago
  96. d37e0c4 Add constant-flow testing for PKCS7 padding by David Horstmann · 7 months ago
  97. abf9f1a PSA interruptible sign/verify: detect invalid curve family in start by Gilles Peskine · 8 months ago
  98. 9058998 Merge pull request #9796 from gilles-peskine-arm/psa-storage-test-cases-never-supported-positive-3.6 by Gilles Peskine · 7 months ago
  99. 8e8dabd Merge pull request #9830 from gilles-peskine-arm/9798-backport-3.6 by Janos Follath · 7 months ago
  100. bc3f917 crypto_config.h: Don't list mechanisms that are not implemented by Gilles Peskine · 7 months ago