Log - a9f86e03ed3c3c22f65a535f438adf2ab0cf1854 - mirror/mbed-tls

a9f86e0 Make the compiler work-around more specific by Manuel Pégourié-Gonnard · 11 years ago
57291a7 Work around a compiler bug on OS X. by Manuel Pégourié-Gonnard · 11 years ago
97a11c1 CMake: allow to build both shared and static at once by hasufell · 11 years ago
be04673 Forbid sequence number wrapping by Manuel Pégourié-Gonnard · 11 years ago
50a5c53 Reject certs and CRLs from the future by Paul Bakker · 11 years ago
0d844dd Add x509parse_time_future() by Paul Bakker · 11 years ago
963918b Countermeasure against "triple handshake" attack by Manuel Pégourié-Gonnard · 11 years ago
397858b Avoid "unreachable code" warning by Manuel Pégourié-Gonnard · 11 years ago
6d841c2 Fix verion-major intolerance by Manuel Pégourié-Gonnard · 11 years ago
c675e4b Fix bug in RSA PKCS#1 v1.5 "reversed" operations by Manuel Pégourié-Gonnard · 12 years ago
1e7c3d2 net_is_block() renamed to net_would_block() and corrected behaviour on by Paul Bakker · 11 years ago
1dc45f1 Added MPI_CHK around unguarded mpi calls by Paul Bakker · 12 years ago
7837026 Remove a few dead stores by Paul Bakker · 11 years ago
d220f8b Fix potential memory leak in bignum selftest by Manuel Pégourié-Gonnard · 12 years ago
7fd620b Fix misplaced initialisation. by Manuel Pégourié-Gonnard · 12 years ago
b55f578 Fix missing error checking in gcm by Manuel Pégourié-Gonnard · 12 years ago
4091141 Add a length check in ssl_derive_keys() by Paul Bakker · 11 years ago
d83584e Fixed potential overflow in certificate size in ssl_write_certificate() by Paul Bakker · 12 years ago
78e8196 Added missing MPI_CHK() around some statements by Paul Bakker · 12 years ago
40cc914 Fixed x509_crt_parse_path() bug on Windows platforms by Paul Bakker · 11 years ago
9975c5d Check PKCS 1.5 padding in a more constant-time way by Manuel Pégourié-Gonnard · 12 years ago
d237d26 Check OAEP padding in a more constant-time way by Manuel Pégourié-Gonnard · 12 years ago
3411464 RSA-OAEP decrypt: reorganise code by Manuel Pégourié-Gonnard · 12 years ago
a1caf6e SSL now gracefully handles missing RNG by Paul Bakker · 12 years ago
c941adb Fixed X.509 hostname comparison (with non-regular characters) by Paul Bakker · 11 years ago
8354819 Makefile now produces a .so.X with SOVERSION in it by Paul Bakker · 12 years ago
5c8434c Safer buffer comparisons in the SSL modules by Manuel Pégourié-Gonnard · 12 years ago
c3ec63d Minor change that makes life easier for static analyzers / compilers by Paul Bakker · 12 years ago
e46b177 Make get_pkcs_padding() constant-time by Paul Bakker · 11 years ago
52cb87b Forced cast to prevent MSVC compiler warning by Paul Bakker · 11 years ago
4c9301a Convert SOCKET to int to prevent compiler warnings under MSVC. by Paul Bakker · 12 years ago
9ccb211 Introduced POLARSSL_HAVE_READDIR_R for systems without it by Paul Bakker · 11 years ago
ff6e247 RSA blinding: check highly unlikely cases by Paul Bakker · 11 years ago
6b06502 Changed RSA blinding to a slower but thread-safe version by Paul Bakker · 12 years ago polarssl-1.2.10
adace27 Prepped for 1.2.10 release by Paul Bakker · 12 years ago
2f1481e Additional fixed to rsa.c with regards to blinding by Paul Bakker · 12 years ago
62087ee Fixed memory leak in rsa.c introduced in 43f9799 by Paul Bakker · 12 years ago
e45574e Prepped for 1.2.9 release by Paul Bakker · 12 years ago
915ee19 Do not allow SHA256/SHA384 ciphersuites in < TLS 1.2 by Paul Bakker · 12 years ago
43f9799 RSA blinding on CRT operations to counter timing attacks by Paul Bakker · 12 years ago
88a2264 Fixed potential file descriptor leaks by Paul Bakker · 12 years ago
f65fbee x509_verify() now case insensitive for cn (RFC 6125 6.4) by Paul Bakker · 12 years ago
a565ace Fixed potential memory leak when failing to resume a session by Paul Bakker · 12 years ago
a13d744 Fixed potential heap buffer overflow on large hostname setting by Paul Bakker · 12 years ago
fe7c24c Fixed potential negative value misinterpretation in load_file() by Paul Bakker · 12 years ago
433fad2 Removed errant printf in x509parse_self_test() by Paul Bakker · 12 years ago
21360ca ssl_write_certificate_request() can handle empty ca_chain by Paul Bakker · 12 years ago polarssl-1.2.8
1d41950 Prepared for PolarSSL release 1.2.8 by Paul Bakker · 12 years ago
da7fdbd Fixed minor comment typo by Paul Bakker · 12 years ago
14a222c Moved PKCS#12 PBE functions to cipher / md layer where possible by Paul Bakker · 12 years ago
2be71fa Fixed values for 2-key Triple DES in cipher layer by Paul Bakker · 12 years ago
b495d3a x509parse_crt() and x509parse_crt_der() return X509 password related codes by Paul Bakker · 12 years ago
1fc7dfe Removed redundant free()s by Paul Bakker · 12 years ago
ff3a4b0 Added missing free() by Paul Bakker · 12 years ago
1fd4321 PKCS#5 v2 PBES2 support and use in PKCS#8 encrypted certificates by Paul Bakker · 12 years ago
19bd297 PKCS#5 module added. Moved PBKDF2 functionality inside and deprecated by Paul Bakker · 12 years ago
52b845b Fixed bignum.c and bn_mul.h to support Thumb2 and LLVM compiler by Paul Bakker · 12 years ago
67812d3 Fixed location of brackets in pkcs12.c by Paul Bakker · 12 years ago
cbfcaa9 x509parse_crtpath() is now reentrant and uses more portable stat() by Paul Bakker · 12 years ago
d6d4109 Changed x509parse_crt_der() to support adding to chain. by Paul Bakker · 12 years ago
4087c47 Added mechanism to provide alternative cipher / hash implementations by Paul Bakker · 12 years ago
cf6e95d Parsing of PKCS#8 encrypted private key files added and PKCS#12 basis by Paul Bakker · 12 years ago
65a1909 Internally split up x509parse_key() by Paul Bakker · 12 years ago
1922a4e ssl_parse_certificate() now calls x509parse_crt_der() directly by Paul Bakker · 12 years ago
6417186 x509parse_crt() now better handles PEM error situations by Paul Bakker · 12 years ago
9255e83 pem_read_buffer() already update use_len after header and footer are read by Paul Bakker · 12 years ago
eae09db Fixed const correctness issues that have no impact on the ABI by Paul Bakker · 12 years ago
f922630 Fixed offset for cert_type list in ssl_parse_certificate_request() by Paul Bakker · 12 years ago
7c3c389 Secure renegotiation extension should only be sent in case client supports secure renegotiation by Paul Bakker · 12 years ago
822e958 Prepared for PolarSSL 1.2.7 release by Paul Bakker · 12 years ago polarssl-1.2.7
f42e5cc Cleanup of the GCM code by Paul Bakker · 12 years ago
8a4ec44 Blowfish has default of 128-bit keysize in cipher layer by Paul Bakker · 12 years ago
a627298 Ability to specify allowed ciphersuites based on the protocol version. by Paul Bakker · 12 years ago
90f042d Prepared for PolarSSL 1.2.6 release by Paul Bakker · 12 years ago polarssl-1.2.6
e81beda The SSL session cache module (ssl_cache) now also retains peer_cert information (not the entire chain) by Paul Bakker · 12 years ago
78a8c71 Re-added support for parsing and handling SSLv2 Client Hello messages by Paul Bakker · 12 years ago
37286a5 Fixed net_bind() for specified IP addresses on little endian systems by Paul Bakker · 12 years ago
926c8e4 Fixed possible NULL pointer exception in ssl_get_ciphersuite() by Paul Bakker · 12 years ago
8804f69 Removed timing differences due to bad padding from RSA decrypt for by Paul Bakker · 12 years ago
a43231c Added support for custom labels when using rsa_rsaes_oaep_encrypt() or rsa_rsaes_oaep_decrypt() by Paul Bakker · 12 years ago
b386913 Split up the RSA PKCS#1 encrypt, decrypt, sign and verify functions by Paul Bakker · 12 years ago
8ddb645 Added conversion to int for a t_uint value to prevent compiler warnings by Paul Bakker · 12 years ago
3d2dc0f Corrected GCM counter incrementation to use only 32-bits instead of 128-bits by Paul Bakker · 12 years ago
e47b34b Removed further timing differences during SSL message decryption in ssl_decrypt_buf() by Paul Bakker · 12 years ago
2ca8ad1 Made x509parse.c also work with missing hash header files by Paul Bakker · 12 years ago
86f04f4 Fixed comment by Paul Bakker · 12 years ago
c046350 Fixed memory leak in ssl_free() and ssl_reset() for active session by Paul Bakker · 12 years ago
c7a2da4 Updated for PolarSSL 1.2.5 by Paul Bakker · 13 years ago polarssl-1.2.5
40865c8 Added sending of alert messages in case of decryption failures as per RFC by Paul Bakker · 13 years ago
d66f070 Disable debug messages that can introduce a timing side channel. by Paul Bakker · 13 years ago
4582999 Fixed timing difference resulting from badly formatted padding. by Paul Bakker · 13 years ago
8fe40dc Allow enabling of dummy error_strerror() to support some use-cases by Paul Bakker · 13 years ago
14c56a3 Updated for PolarSSL 1.2.4 by Paul Bakker · 13 years ago polarssl-1.2.4
1961b70 Added ssl_handshake_step() to allow single stepping the handshake process by Paul Bakker · 13 years ago
9c94cdd Correctly handle CertificateRequest with empty DN list in <= TLS 1.1 by Paul Bakker · 13 years ago
21dca69 Handle future version properly in ssl_write_certificate_request() by Paul Bakker · 13 years ago
02303e8 Moved md_init_ctx() calls around to minimize exit points by Paul Bakker · 13 years ago
40628ba Memory leak when using RSA_PKCS_V21 operations fixed by Paul Bakker · 13 years ago
fb1ba78 Updated for release 1.2.3 by Paul Bakker · 13 years ago polarssl-1.2.3
bc3d984 Fixed multiple DN size by Paul Bakker · 13 years ago