1. a60d0f2 Factor repeated preprocessor condition to a macro by Manuel Pégourié-Gonnard · 5 years ago
  2. ef5f8fc Bump version to Mbed TLS 2.16.7 by Janos Follath · 5 years ago
  3. f69b919 Merge branch 'mbedtls-2.16-restricted' into mbedtls-2.16.7r0 by Janos Follath · 5 years ago
  4. 3a1944a Merge pull request #704 from mpg/l13-hw-starts-finish-2.16-restricted by Manuel Pégourié-Gonnard · 5 years ago
  5. 2df1423 Test multi-block output of the hash-based KDF by Manuel Pégourié-Gonnard · 5 years ago
  6. 2df5857 Remove SHA-1 as a fallback option by Manuel Pégourié-Gonnard · 5 years ago
  7. 20cd85c Use starts/finish around Lucky 13 dummy compressions by Manuel Pégourié-Gonnard · 5 years ago
  8. 7d7c004 Improve comment justifying a hard-coded limitation by Manuel Pégourié-Gonnard · 5 years ago
  9. a90a95b Zeroize temporary stack buffer by Manuel Pégourié-Gonnard · 5 years ago
  10. 301a9ee Fix potential memory overread in seed functions by Manuel Pégourié-Gonnard · 5 years ago
  11. 72177e3 Add fall-back to hash-based KDF for internal ECP DRBG by Manuel Pégourié-Gonnard · 5 years ago
  12. 0defc57 Fix typo in a comment by Manuel Pégourié-Gonnard · 5 years ago
  13. 18b0b3c Avoid superflous randomization with restartable by Manuel Pégourié-Gonnard · 5 years ago
  14. c7295f5 Use HMAC_DRBG by default for ECP internal DRBG by Manuel Pégourié-Gonnard · 5 years ago
  15. c334f41 Skip redundant checks for NULL f_rng by Manuel Pégourié-Gonnard · 5 years ago
  16. 047986c Add support for RESTARTABLE with internal RNG by Manuel Pégourié-Gonnard · 5 years ago
  17. d18f051 Move internal drbg init to specific mul functions by Manuel Pégourié-Gonnard · 5 years ago
  18. fb11d25 Implement use of internal DRBG for ecp_mul() by Manuel Pégourié-Gonnard · 5 years ago
  19. 23983f3 Add config.h option MBEDTLS_ECP_NO_INTERNAL_RNG by Manuel Pégourié-Gonnard · 5 years ago
  20. f744bd7 Update license headers to Apache-2.0 OR GPL-2.0-or-later by Bence Szépkúti · 5 years ago
  21. 32b629d ssl_client: Align line breaking with MBEDTLS_SSL_DEBUG_* by Ronald Cron · 5 years ago
  22. 157cffe Use defines to check alpn ext list validity by Ronald Cron · 5 years ago
  23. f250380 Return error in case of bad user configurations by Hanno Becker · 8 years ago
  24. d729602 Add error condition for bad user configurations by Hanno Becker · 8 years ago
  25. f8f61aa Uniformize bounds checks using new macro by Hanno Becker · 8 years ago
  26. 711eea3 Remove unnecessary MBEDTLS_ECP_C preprocessor condition by Ronald Cron · 5 years ago
  27. 35f8a54 Shorten lines in library/ssl_cli.c to at most 80 characters by Hanno Becker · 8 years ago
  28. 8f39726 Introduce macros for constants in SSL ticket implementation by Hanno Becker · 7 years ago
  29. 001eb3c Merge pull request #3411 from gilles-peskine-arm/montmul-cmp-branch-2.16 by Janos Follath · 5 years ago
  30. de719d5 Clean up some comments by Gilles Peskine · 5 years ago
  31. 08fd43c mbedtls_mpi_sub_abs: check the range of the result when it happens by Gilles Peskine · 5 years ago
  32. 635a374 Simplify the final reduction in mpi_montmul by Gilles Peskine · 5 years ago
  33. 36acd54 Move carry propagation out of mpi_sub_hlp by Gilles Peskine · 5 years ago
  34. 46bf7da More logical parameter order for mpi_sub_hlp by Gilles Peskine · 5 years ago
  35. 6a9433e Explicitly cast down from mbedtls_mpi_uint to unsigned char by Gilles Peskine · 5 years ago
  36. 8f67266 Remove a secret-dependent branch in Montgomery multiplication by Gilles Peskine · 5 years ago
  37. c81c588 Separate out low-level mpi_safe_cond_assign by Gilles Peskine · 5 years ago
  38. 3ce3ddf Document some internal bignum functions by Gilles Peskine · 5 years ago
  39. bdcb396 Revert "Shut up a clang-analyzer warning" by Gilles Peskine · 5 years ago
  40. e9073a6 Add a const annotation to the non-changing argument of mpi_sub_mul by Gilles Peskine · 5 years ago
  41. 62b293d Merge pull request #3352 from gilles-peskine-arm/fix-ecp-mul-memory-leak-2.16 by Manuel Pégourié-Gonnard · 5 years ago
  42. d2f0073 Re-generate error.c by Gilles Peskine · 5 years ago
  43. 6645fd3 Fix potential memory leak in EC multiplication by Jonas · 5 years ago
  44. acf7f2c Guard from undefined behaviour in case of an INT_MAX max_pathlen by Andrzej Kurek · 5 years ago
  45. dab3fd6 Merge branch 'mbedtls-2.16-restricted' into prepare-rc-2.16.6-updated by Manuel Pégourié-Gonnard · 5 years ago
  46. ef98d49 Merge remote-tracking branch 'restricted/pr/670' into mbedtls-2.16-restricted by Manuel Pégourié-Gonnard · 5 years ago
  47. c04703c Bump version to Mbed TLS 2.16.6 by Janos Follath · 5 years ago
  48. 816305b Merge branch 'mbedtls-2.16-restricted' into mbedtls-2.16.6r0 by Janos Follath · 5 years ago
  49. 5e65619 Merge pull request #3142 from mpg/fix-reconnect-2.16 by Gilles Peskine · 5 years ago
  50. f600416 Fix leakage of projective coordinates in ECC by Manuel Pégourié-Gonnard · 5 years ago
  51. b08a334 Improve debug logging of client hard reconnect by Manuel Pégourié-Gonnard · 5 years ago
  52. 5cc0879 Correct comment on the configuration option in x509.c by Simon Butcher · 5 years ago
  53. 52dbda6 Fix compilation issue when DTLS and SSL_HW_RECORD_ACCEL are on by Andres Amaya Garcia · 7 years ago
  54. 334cf59 Bump version to Mbed TLS 2.16.5 by Janos Follath · 5 years ago
  55. d09fcde Fix pkparse bug wrt MBEDTLS_RSA_ALT by Manuel Pégourié-Gonnard · 5 years ago
  56. 25bb8dc Check public part when parsing private RSA key by Manuel Pégourié-Gonnard · 5 years ago
  57. 9ab0305 Don't pass zero to rsa_complete() as a param by Manuel Pégourié-Gonnard · 5 years ago
  58. 8d9b1c4 Merge pull request #3027 from gilles-peskine-arm/mpi_copy_shrink-2.16 by Manuel Pégourié-Gonnard · 5 years ago
  59. cabf0ee Revert "Merge pull request #3012 from Patater/dev/jp-bennett/development-2.16" by Janos Follath · 6 years ago
  60. 56427c2 Minor comment improvement by Gilles Peskine · 6 years ago
  61. 27c15c7 Improve comments in mpi_shrink by Gilles Peskine · 6 years ago
  62. 3e9f522 mpi_copy: make the 0 case slightly more robust by Gilles Peskine · 6 years ago
  63. b10fd06 Parse RSA parameters DP, DQ and QP from PKCS1 private keys by Jack Lloyd · 6 years ago
  64. bac9f1b Merge pull request #3001 from from gilles-peskine-arm/coverity-20200115-2.16 into mbedtls-2.16 by Janos Follath · 6 years ago
  65. 7550e85 Merge pull request #3012 from Patater/dev/jp-bennett/development-2.16 by Jaeden Amero · 6 years ago
  66. d0c2575 Merge pull request #2992 from yanesca/bump-version-2.16.4 by Janos Follath · 6 years ago
  67. 6f45cb9 Allow loading symlinked certificates by Jonathan Bennett · 6 years ago
  68. 83a5672 Remove redundant block_size validity check by Gilles Peskine · 6 years ago
  69. 42b8194 Fix incrementing pointer instead of value by Manuel Pégourié-Gonnard · 6 years ago
  70. 3a3b161 Add missing return code check on call to mbedtls_md() by Gilles Peskine · 6 years ago
  71. 32b0216 Bump version to Mbed TLS 2.16.4 by Janos Follath · 6 years ago
  72. 39e2c0e Merge remote-tracking branch 'origin/mbedtls-2.16' into mbedtls-2.16-restricted by Jaeden Amero · 6 years ago mbedtls-2.16.4
  73. 86dd950 Catch AES failure in mbedtls_ctr_drbg_random by Gilles Peskine · 6 years ago
  74. d5c4a7c Parse HelloVerifyRequest: avoid buffer overread at the start by Gilles Peskine · 6 years ago
  75. 01a96d6 Parse HelloVerifyRequest: avoid buffer overread on the cookie by Gilles Peskine · 6 years ago
  76. f048605 Merge remote-tracking branch 'restricted/pr/667' into mbedtls-2.16-restricted by Jaeden Amero · 6 years ago
  77. baf2300 Merge remote-tracking branch 'restricted/pr/669' into mbedtls-2.16-restricted by Jaeden Amero · 6 years ago
  78. f18de50 Zeroize local AES variables before exiting the function by Andrzej Kurek · 6 years ago
  79. e25f1ee mpi_lt_mpi_ct: fix condition handling by Janos Follath · 6 years ago
  80. 359a01e ct_lt_mpi_uint: cast the return value explicitely by Janos Follath · 6 years ago
  81. fbe4c94 mbedtls_mpi_lt_mpi_ct: simplify condition by Janos Follath · 6 years ago
  82. 1f21c1d Rename variable for better readability by Janos Follath · 6 years ago
  83. bd87a59 mbedtls_mpi_lt_mpi_ct: Improve documentation by Janos Follath · 6 years ago
  84. 5852518 Make mbedtls_mpi_lt_mpi_ct more portable by Janos Follath · 6 years ago
  85. 45ec990 Document ct_lt_mpi_uint by Janos Follath · 6 years ago
  86. b11ce0e mpi_lt_mpi_ct: make use of unsigned consistent by Janos Follath · 6 years ago
  87. 7a34bcf ct_lt_mpi_uint: make use of biL by Janos Follath · 6 years ago
  88. 867a3ab Change mbedtls_mpi_cmp_mpi_ct to check less than by Janos Follath · 6 years ago
  89. 4f6cf38 mbedtls_mpi_cmp_mpi_ct: remove multiplications by Janos Follath · 6 years ago
  90. 3d82645 Remove excess vertical space by Janos Follath · 6 years ago
  91. 4ea2319 Remove declaration after statement by Janos Follath · 6 years ago
  92. 4c3408b Fix side channel vulnerability in ECDSA by Janos Follath · 6 years ago
  93. b9f6f9b Add new, constant time mpi comparison by Janos Follath · 6 years ago
  94. d65df1f ECDSA: Fix side channel vulnerability by Janos Follath · 6 years ago
  95. 912ffe4 CTR_DRBG: support set_entropy_len() before seed() by Gilles Peskine · 6 years ago
  96. c4280ac CTR_DRBG: Don't use functions before they're defined by Gilles Peskine · 6 years ago
  97. c68b70c HMAC_DRBG: support set_entropy_len() before seed() by Gilles Peskine · 6 years ago
  98. 069fb0e Merge remote-tracking branch 'origin/pr/2860' into mbedtls-2.16 by Jaeden Amero · 6 years ago
  99. 1989218 Move MBEDTLS_CTR_DRBG_USE_128_BIT_KEY to the correct section by Gilles Peskine · 6 years ago
  100. da59306 Merge remote-tracking branch 'origin/pr/2578' into mbedtls-2.16 by Jaeden Amero · 6 years ago