1. 8b586af Subdivide rsa_rsassa_pkcs1_v15_encode by Gilles Peskine · 8 years ago
  2. 87ae197 Add explicit uint truncation casts by Hanno Becker · 8 years ago
  3. 71b0060 Merge branch 'development' into iotssl-247 by Hanno Becker · 8 years ago
  4. d4d6057 Address issues found by coverity by Hanno Becker · 8 years ago
  5. 3a760a1 Add size check for RSA modulus to `mbedtls_rsa_complete` by Hanno Becker · 8 years ago
  6. f8c028a Minor corrections by Hanno Becker · 8 years ago
  7. c36aab6 Swap D,E parameters in mbedtls_rsa_deduce_primes by Hanno Becker · 8 years ago
  8. ebd2c02 Don't require P,Q in `rsa_private` if neither CRT nor blinding used by Hanno Becker · 8 years ago
  9. b82a5b5 Fix typos and mixup related to RSA_NO_CRT by Hanno Becker · 8 years ago
  10. a565f54 Introduce new files rsa_internal.[ch] for RSA helper functions by Hanno Becker · 8 years ago
  11. 705fc68 Unify sanity checks for RSA private and public keys by Hanno Becker · 8 years ago
  12. e867489 Remove outdated comments from `mbedtls_rsa_complete` by Hanno Becker · 8 years ago
  13. 7f25f85 Adapt uses of `mbedtls_rsa_complete` to removed PRNG argument by Hanno Becker · 8 years ago
  14. f9e184b Remove PRNG argument from `mbedtls_rsa_complete` by Hanno Becker · 8 years ago
  15. 68b4d58 Remove PRNG argument from `mbedtls_rsa_deduce_moduli` by Hanno Becker · 8 years ago
  16. 0f65e0c Rename `rsa_deduce_moduli` to `rsa_deduce_primes` by Hanno Becker · 8 years ago
  17. 8ba6ce4 Rename `rsa_deduce_private` to `rsa_deduce_private_exponent` by Hanno Becker · 8 years ago
  18. 45a0ef3 Correct memory leak in `mbedtls_rsa_validate_crt` by Hanno Becker · 8 years ago
  19. e58d38c Minor improvements by Hanno Becker · 8 years ago
  20. 2b2f898 Streamline code-path in rsa_rsassa_pkcs1_v15_encode by Hanno Becker · 8 years ago
  21. 64a8c0a Verify PKCS1 v1.5 signature without parsing by Hanno Becker · 8 years ago
  22. fdf3803 Outsource code for generating PKCS1 v1.5 encoding by Hanno Becker · 8 years ago
  23. 171a8f1 Move constant time memcmp for signature verification by Hanno Becker · 8 years ago
  24. b5beaa8 Check that 1 < D, E < N in `mbedtls_rsa_validate_params` by Hanno Becker · 8 years ago
  25. c6fc878 Remove `mbedtls_rsa_check_crt` by Hanno Becker · 8 years ago
  26. 98838b0 Minor improvements by Hanno Becker · 8 years ago
  27. 7471631 Make input arguments to `mbedtls_rsa_import_raw` constant by Hanno Becker · 8 years ago
  28. bdefff1 Change signature of `mbedtls_rsa_deduce_private` by Hanno Becker · 8 years ago
  29. ba5b755 Change signature and semantics of `mbedtls_rsa_deduce_moduli` by Hanno Becker · 8 years ago
  30. 56bae95 Improve style and documentation, fix typo by Hanno Becker · 8 years ago
  31. bead717 Correct typo in rsa.c by Hanno Becker · 8 years ago
  32. ba1ba11 Check that length is properly set in `mbedtls_rsa_check_pubkey` by Hanno Becker · 8 years ago
  33. 2f8f06a Don't always recompute context length in mbedtls_rsa_get_len by Hanno Becker · 8 years ago
  34. 2cca6f3 Always deduce N from P, Q in mbedtls_rsa_complete by Hanno Becker · 8 years ago
  35. 45037ce Add check for presence of relevant parameters in mbedtls_rsa_private by Hanno Becker · 8 years ago
  36. b269a85 Change mbedtls_rsa_check_privkey to use new helper functions by Hanno Becker · 8 years ago
  37. d9431a7 Minor comments improvement by Hanno Becker · 8 years ago
  38. d363799 Add mbedtls_rsa_validate_crt by Hanno Becker · 8 years ago
  39. d56d83a Remove double-checking code from rsa_deduce_moduli and rsa_complete by Hanno Becker · 8 years ago
  40. 750e8b4 Rename rsa_check_params->rsa_validate_params and change error codes by Hanno Becker · 8 years ago
  41. fb81c0e Guard primality checks in RSA module by MBEDTLS_GENPRIME by Hanno Becker · 8 years ago
  42. ab37731 Add support for alternative RSA implementations by Hanno Becker · 8 years ago
  43. 6345dd3 Adapt rsa_check_privkey to deal with NO_CRT option by Hanno Becker · 8 years ago
  44. bee3aae Adapt rsa_gen_key to deal with RSA_NO_CRT option by Hanno Becker · 8 years ago
  45. dc95c89 Adapt rsa_deduce_crt to deal with RSA_NO_CRT option by Hanno Becker · 8 years ago
  46. 33c30a0 Adapt rsa_copy and rsa_free to deal with RSA_NO_CRT option by Hanno Becker · 8 years ago
  47. 23344b5 Adapt rsa_complete to deal with RSA_NO_CRT option by Hanno Becker · 8 years ago
  48. 83aad1f Adapt gen_key example program to new RSA interface by Hanno Becker · 8 years ago
  49. 3a70116 Adapt RSA selftest to new RSA interface by Hanno Becker · 8 years ago
  50. 617c1ae Implement new RSA interface functions by Hanno Becker · 8 years ago
  51. e2e8b8d Implement RSA helper functions by Hanno Becker · 8 years ago
  52. b86b143 Merge remote-tracking branch 'restricted/iotssl-1138-rsa-padding-check-restricted' into development-restricted by Manuel Pégourié-Gonnard · 8 years ago
  53. a0bf6ec Merge remote-tracking branch 'restricted/IOTSSL-1366/development-restricted' into development-restricted by Manuel Pégourié-Gonnard · 8 years ago
  54. 18ac716 RSA: wipe more stack buffers by Gilles Peskine · 8 years ago
  55. 4a7f6a0 RSA: wipe stack buffers by Gilles Peskine · 8 years ago
  56. f9203b4 Add exponent blinding to RSA with CRT by Janos Follath · 8 years ago
  57. e81102e Add exponent blinding to RSA without CRT by Janos Follath · 8 years ago
  58. c1380de RSA PKCS1v1.5 verification: check padding length by Manuel Pégourié-Gonnard · 8 years ago
  59. e7e7650 More length checks in RSA PKCS1v15 verify by Gilles Peskine · 8 years ago
  60. 0e17eb0 More length checks in RSA PKCS1v15 verify by Gilles Peskine · 8 years ago
  61. ef44178 Restore P>Q in RSA key generation (#558) by Janos Follath · 9 years ago
  62. ab069c6 Merge branch 'development' into development-restricted by Simon Butcher · 9 years ago
  63. e7be5bd Fixed unchecked calls to mbedtls_md_setup in rsa.c (#502) by Brian J Murray · 9 years ago
  64. f991128 Revert accidental changes to file mode of rsa.c by Simon Butcher · 9 years ago
  65. a338691 Merge branch 'development' into development-restricted by Janos Follath · 9 years ago
  66. 50cdede Revert accidental changes to file mode of rsa.c by Simon Butcher · 9 years ago
  67. 04b591e Merge branch 'development' for weekly test report. by Janos Follath · 9 years ago
  68. 9c22e73 Merge branch 'development' by Simon Butcher · 9 years ago
  69. 65b1fa6 Fixes warnings found by Clang static analyser by Simon Butcher · 9 years ago
  70. 930a370 fix indentation in output of selftest.c by Brian Murray · 9 years ago
  71. 38d1888 Cleanup ifdef statements by Paul Bakker · 9 years ago
  72. e735303 Shut up a few clang-analyze warnings about use of uninitialized variables by Nicholas Wilson · 9 years ago
  73. 94bafdf Merge branch 'development' by Simon Butcher · 9 years ago
  74. c21bec8 Merge branch 'development' by Simon Butcher · 9 years ago
  75. 21cc574 Cleanup ifdef statements by Paul Bakker · 9 years ago
  76. f4743a6 Merge pull request #457 from NWilson/clang-analyze-fixes by Paul Bakker · 9 years ago
  77. 2300776 Merge branch 'development' by Simon Butcher · 9 years ago
  78. 1ed9f99 Fix null pointer dereference in the RSA module. by Janos Follath · 9 years ago
  79. 3f5c875 Adds test for odd bit length RSA key size by Simon Butcher · 9 years ago
  80. 10c575b Fix odd bitlength RSA key generation by Janos Follath · 9 years ago
  81. 409401c Shut up a few clang-analyze warnings about use of uninitialized variables by Nicholas Wilson · 9 years ago
  82. 078bcdd Merge branch 'IOTSSL-628-BufferOverread' by Simon Butcher · 9 years ago
  83. 0203745 Swap C++ comments to C for style consistency in rsa.c by Simon Butcher · 9 years ago
  84. c69fa50 Removing 'if' branch from the fix. by Janos Follath · 9 years ago
  85. b6eb1ca Length check added by Janos Follath · 9 years ago
  86. 370717b Add precision about exploitability in ChangeLog by Manuel Pégourié-Gonnard · 9 years ago
  87. eddfe8f Included tests for the overflow by Janos Follath · 9 years ago
  88. c17cda1 Moved underflow test to better reflect time constant behaviour. by Janos Follath · 9 years ago
  89. b8afe1b Included test for integer underflow. by Janos Follath · 9 years ago
  90. bdae02c Corrected references for RSA and DHM by Simon Butcher · 10 years ago
  91. 1285ab5 Fix for memory leak in RSA-SSA signing by Simon Butcher · 10 years ago
  92. fb84d38 Try to prevent some misuse of RSA functions by Manuel Pégourié-Gonnard · 10 years ago
  93. 5f50104 Add counter-measure against RSA-CRT attack by Manuel Pégourié-Gonnard · 10 years ago
  94. 37ff140 Change main license to Apache 2.0 by Manuel Pégourié-Gonnard · 10 years ago
  95. 4d04cdc Fix RSA mutex fix by Manuel Pégourié-Gonnard · 10 years ago
  96. 1385a28 Fix possible mutex lock/unlock mismatch by Manuel Pégourié-Gonnard · 10 years ago
  97. d1004f0 Fix printed output of some selftests by Manuel Pégourié-Gonnard · 10 years ago
  98. 6fb8187 Update date in copyright line by Manuel Pégourié-Gonnard · 10 years ago
  99. c0696c2 Rename mbedtls_mpi_msb to mbedtls_mpi_bitlen by Manuel Pégourié-Gonnard · 10 years ago
  100. bdd7828 Always check return status of mutex_(un)lock() by Manuel Pégourié-Gonnard · 10 years ago