1. df275c4 Merge remote-tracking branch 'restricted/mbedtls-2.28-restricted' into mbedtls-2.28.1rc0-pr by Dave Rodgman · 3 years, 1 month ago
  2. 77473eb Clarify the need for calling mbedtls_ssl_derive_keys after extension parsing by Andrzej Kurek · 3 years, 1 month ago
  3. c87d97b Rearrange the session resumption code by Andrzej Kurek · 3 years, 2 months ago
  4. 06986de Merge pull request #6066 from AndrzejKurek/fix-some-resource-leaks-2-28 by Paul Elliott · 3 years, 1 month ago
  5. cd5e671 Add a changelog entry for pkparse bugs by Andrzej Kurek · 3 years, 1 month ago
  6. b39b499 Add pem_free() to other error paths in pk_parse_public_key() by Paul Elliott · 3 years, 3 months ago
  7. 763ee3c Fix resource leaks by Leonid Rozenboim · 3 years, 4 months ago
  8. 0ae1c1c Merge pull request #5991 from gilles-peskine-arm/asn1write-0-fix-2.28 by Ronald Cron · 3 years, 1 month ago
  9. 24ed2ca Fix the wrong variable being used for TLS record size checks by Paul Elliott · 3 years, 2 months ago
  10. bb34fee Fix bug whereby 0 was written as 0200 rather than 020100 by Gilles Peskine · 3 years, 2 months ago
  11. 06c5e92 Merge pull request #5863 from wernerlewis/csr_subject_comma_2.28 by Gilles Peskine · 3 years, 1 month ago
  12. c9529f9 Fix null pointer dereference in mpi_mod_int(0, 2) by Gilles Peskine · 3 years, 2 months ago
  13. 4118092 Merge pull request #5825 from polhenarejos/mbedtls-2.28 by Dave Rodgman · 3 years, 1 month ago
  14. 1421efa Fix case where final special char exceeds buffer by Werner Lewis · 3 years, 1 month ago
  15. d904d66 Mark static int SSL functions CHECK_RETURN_CRITICAL by Manuel Pégourié-Gonnard · 3 years, 2 months ago
  16. 06e1fcd Add comments when can_do() is safe to use by Manuel Pégourié-Gonnard · 3 years, 2 months ago
  17. d80d8a4 Add negative tests for opaque mixed-PSK (server) by Manuel Pégourié-Gonnard · 3 years, 2 months ago
  18. a49a00c Add negative tests for opaque mixed-PSK (client) by Manuel Pégourié-Gonnard · 3 years, 2 months ago
  19. b9c7ea4 Improve a comment. by Manuel Pégourié-Gonnard · 3 years, 2 months ago
  20. 5b3f24f Fix unchecked return value from internal function by Manuel Pégourié-Gonnard · 3 years, 2 months ago
  21. 37e5999 Fix potential buffer overread with USE_PSA by Manuel Pégourié-Gonnard · 3 years, 2 months ago
  22. 4353d3d Split a debug message into two - for clarity by Andrzej Kurek · 3 years, 2 months ago
  23. 33f41a8 Add the mbedtls prefix to ssl_check_dtls_clihlo_cookie by Andrzej Kurek · 3 years, 2 months ago
  24. 862acb8 Add cookie parsing tests to test_suite_ssl by Andrzej Kurek · 3 years, 2 months ago
  25. e5af9fa Add missing sid_len in calculations of cookie sizes by Andrzej Kurek · 3 years, 2 months ago
  26. f333dfa More SSL debug messages for ClientHello parsing by Gilles Peskine · 3 years, 6 months ago
  27. 02c9d3b Fix parsing of special chars in X509 DN values by Werner Lewis · 3 years, 3 months ago
  28. ce02537 Merge pull request #5828 from wernerlewis/time_utc_2.28 by Dave Rodgman · 3 years, 2 months ago
  29. 1b54a05 Use ASN1 UTC tags for dates before 2000 by Werner Lewis · 3 years, 3 months ago
  30. b830028 Fix uninitialised memory access in constant time functions by Paul Elliott · 3 years, 3 months ago
  31. bdd6905 Merge pull request #5850 from bootstrap-prime/mbedtls-2.28 by Dave Rodgman · 3 years, 3 months ago
  32. 7ef96ea Fix typos in documentation and constants with typo finding tool by bootstrap-prime · 3 years, 3 months ago
  33. 42313fb psa_raw_key_agreement: return BUFFER_TOO_SMALL when warranted by Gilles Peskine · 3 years, 4 months ago
  34. a002660 Merge pull request #5733 from daverodgman/warmsocks_spellingfixes_2.28 by Dave Rodgman · 3 years, 3 months ago
  35. c46a2f6 Remove spaces. by Pol Henarejos · 3 years, 3 months ago
  36. a93442e Fix for order value for curve448. by Pol Henarejos · 3 years, 3 months ago
  37. 12ddae8 Fix memcpy() UB in mbedtls_asn1_named_data() by Werner Lewis · 3 years, 3 months ago
  38. 0e7791f Redo of PR#5345. Fixed spelling and typographical errors found by CodeSpell. by Shaun Case · 3 years, 8 months ago
  39. 9aa892b Merge pull request #5754 from gilles-peskine-arm/psa-storage-format-test-exercise-2.28 by Gilles Peskine · 3 years, 3 months ago
  40. f7a101a Merge pull request #5730 from gilles-peskine-arm/ssl-opt-auto-psk-2.28 by Gilles Peskine · 3 years, 4 months ago
  41. 4a83c10 Fix RC4 multipart PSA by Gilles Peskine · 3 years, 4 months ago
  42. a16d8fc Merge pull request #5697 from gilles-peskine-arm/psa-test-op-fail-2.28 by Gilles Peskine · 3 years, 4 months ago
  43. a6f99a1 Fix crash with DTLS_CONNECTION_ID but not other SSL features by Gilles Peskine · 3 years, 4 months ago
  44. 03efa0b Fix ARIA support in test driver configuration by Gilles Peskine · 3 years, 4 months ago
  45. d81b5ae Merge pull request #5717 from daverodgman/backport_2.28-alert_reentrant by Gilles Peskine · 3 years, 4 months ago
  46. 9cd8831 Merge pull request #5721 from tom-cosgrove-arm/roneld-1805-2.28 by Manuel Pégourié-Gonnard · 3 years, 4 months ago
  47. b283228 Fix shared library link error with cmake on Windows by Ron Eldor · 8 years ago
  48. 263d8f7 Remove the dependency on MBEDTLS_HAVE_TIME from MBEDTLS_TIMING_C by Andrzej Kurek · 3 years, 4 months ago
  49. 2603fec Remove dummy timing implementation by Andrzej Kurek · 3 years, 4 months ago
  50. d9c66c0 Make alert sending function re-entrant by Hanno Becker · 7 years ago
  51. bc79582 Fix psa_mac_verify() returning BUFFER_TOO_SMALL by Gilles Peskine · 3 years, 5 months ago
  52. 449e02e If a cipher algorithm is not supported, fail during setup by Gilles Peskine · 3 years, 5 months ago
  53. 739c98c Make psa_key_derivation_setup return early if the key agreement is not supported by Gilles Peskine · 4 years, 3 months ago
  54. ea0d95e Make psa_key_derivation_setup return early if the hash is not supported by Gilles Peskine · 4 years, 3 months ago
  55. cdacf04 Simplify is_kdf_alg_supported in psa_key_derivation_setup_kdf by Gilles Peskine · 4 years, 3 months ago
  56. e25dc1c Fix typo "phtreads" to "pthreads" by Artur Allmann · 3 years, 5 months ago
  57. e7dad1f ssl_tls.c: Fix inappropriate use of ssl context by Ronald Cron · 3 years, 4 months ago
  58. f1ed595 ssl_srv.c: Mark ETM as disabled if cipher is not CBC by Ronald Cron · 3 years, 4 months ago
  59. ce514de Merge pull request #5563 from AndrzejKurek/timeless-2.28 by Dave Rodgman · 3 years, 5 months ago
  60. 77daaad Provide a dummy implementation of timing.c by Andrzej Kurek · 3 years, 5 months ago
  61. 516e1b0 Add a missing guard for time.h in net_sockets.c by Andrzej Kurek · 3 years, 5 months ago
  62. 301db66 Do not include time.h without MBEDTLS_HAVE_TIME by Daniel Axtens · 5 years ago
  63. 901c9b7 Erase secrets in allocated memory before freeing said memory by Steven Cooreman · 3 years, 5 months ago
  64. 4b1216b Add missing key destruction calls in ssl_write_client_key_exchange by Andrzej Kurek · 3 years, 5 months ago
  65. 4e92187 Merge pull request #5546 from SiliconLabs/mbedtls-2.28/feature/PSEC-3195-PSA-test-suites-NOT-using-UID-0 by Manuel Pégourié-Gonnard · 3 years, 6 months ago
  66. 9be6168 Update library/psa_its_file.c by PeterSpace · 3 years, 6 months ago
  67. 55f15c7 BUGFIX: psa_its_set now rejects UID = 0 by pespacek · 3 years, 6 months ago
  68. 0178487 Fix missing check on server-chosen curve by Manuel Pégourié-Gonnard · 3 years, 6 months ago
  69. 298d6cc Add mbedtls_ssl_check_curve_tls_id() (internal) by Manuel Pégourié-Gonnard · 3 years, 6 months ago
  70. ca664c7 Merge pull request #5255 from AndrzejKurek/chacha-iv-len-16-fixes-2.x by Manuel Pégourié-Gonnard · 3 years, 6 months ago
  71. 61156f8 Cap the workaround for mbedtls_mpi_safe_cond_assign on MSVC/ARM64 to MSVC versions prior to 17.1. by Tautvydas Žilys · 3 years, 6 months ago
  72. ea4af4d Don't inline mbedtls_mpi_safe_cond_assign on MSVC/ARM64 to avoid a compiler bug. by Tautvydas Žilys · 3 years, 6 months ago
  73. de081ce Reset dhm_P and dhm_G if config call repeated by Glenn Strauss · 3 years, 8 months ago
  74. d41dab3 Bump version to 2.28.0 by Dave Rodgman · 3 years, 8 months ago
  75. 08412e2 Merge remote-tracking branch 'restricted/development_2.x-restricted' into mbedtls-2.28.0rc0-pr by Dave Rodgman · 3 years, 8 months ago
  76. c97cc18 Merge pull request #5327 from gilles-peskine-arm/zeroize-tag-2.28 by Gilles Peskine · 3 years, 8 months ago
  77. f9a0501 mbedtls_cipher_check_tag: jump on error for more robustness to refactoring by Gilles Peskine · 3 years, 8 months ago
  78. 384b98b Merge pull request #5310 from paul-elliott-arm/pkcs12_fix_2.x by Gilles Peskine · 3 years, 8 months ago
  79. 622d804 Initialize hash_len before using it by Gilles Peskine · 3 years, 8 months ago
  80. 8c99a76 PKCS#1v1.5 signature: better cleanup of temporary values by Gilles Peskine · 3 years, 8 months ago
  81. f91b2e5 mbedtls_ssl_parse_finished: zeroize expected finished value on error by Gilles Peskine · 3 years, 8 months ago
  82. 69d3b86 mbedtls_ssl_cookie_check: zeroize expected cookie on cookie mismatch by Gilles Peskine · 3 years, 8 months ago
  83. b3f4e5b PSA hash verification: zeroize expected hash on hash mismatch by Gilles Peskine · 3 years, 8 months ago
  84. dc269bb mbedtls_cipher_check_tag: zeroize expected tag on tag mismatch by Gilles Peskine · 3 years, 8 months ago
  85. c89e209 Remove incorrect hashing by Paul Elliott · 3 years, 8 months ago
  86. 8d7eef4 Add explanation for safety in function by Paul Elliott · 3 years, 8 months ago
  87. 2b3f21d Catch failures of md_hmac operations by Gilles Peskine · 3 years, 8 months ago
  88. d8e2e83 Zeroize local MAC variables by Gilles Peskine · 3 years, 8 months ago
  89. 7412eb4 Better fix for empty password / salt by Paul Elliott · 3 years, 9 months ago
  90. fe724fe Fix for pkcs12 with NULL or zero length password by Paul Elliott · 3 years, 9 months ago
  91. c3319e7 Merge pull request #5189 from gilles-peskine-arm/struct_reordering_2.x by Manuel Pégourié-Gonnard · 3 years, 8 months ago
  92. 9ac32eb Merge pull request #863 from davidhorstmann-arm/2.x-fix-session-copy-bug by Manuel Pégourié-Gonnard · 3 years, 8 months ago
  93. 3a755f5 Add documentation for the functions by Gabor Mezei · 3 years, 8 months ago
  94. 46ca2f7 Unify function parameters by Gabor Mezei · 3 years, 8 months ago
  95. df29332 Make mbedtls_ct_uchar_mask_of_range function static by Gabor Mezei · 3 years, 8 months ago
  96. f554ce2 Delete base64_invasive.h due to functions are moved to the constant-time module by Gabor Mezei · 3 years, 9 months ago
  97. 3d4dba8 Move mbedtls_ct_base64_dec_value function to the constant-time module by Gabor Mezei · 3 years, 9 months ago
  98. 200708d Move mbedtls_ct_base64_enc_char function to the constant-time module by Gabor Mezei · 3 years, 9 months ago
  99. 46f79c3 Move mbedtls_ct_uchar_mask_of_range function to the constant-time module by Gabor Mezei · 3 years, 9 months ago
  100. 7464f37 Rename functions to have suitable name by Gabor Mezei · 3 years, 9 months ago