1. f362775 Merge remote-tracking branch 'restricted/mbedtls-3.6-restricted' into mbedtls-3.6.4rc0-pr by Minos Galanakis · 6 weeks ago
  2. 54ceaf7 Merge pull request #10200 from aslze/mbedtls-3.6 by David Horstmann · 7 weeks ago
  3. 7df8992 fix: additional MSVC v142 build issue with tls1.3 configuration enabled. by Ronald Cron · 7 weeks ago
  4. a84be59 Merge pull request #1366 from gilles-peskine-arm/base64-decode-clean-3.6 by David Horstmann · 7 weeks ago
  5. 3c9ad42 Merge pull request #1367 from gilles-peskine-arm/aesni_has_support-volatile-3.6 by Gilles Peskine · 8 weeks ago
  6. 853cfbd Add a note about processor memory reordering by Gilles Peskine · 8 weeks ago
  7. 766be1f Replace __attribute__((nonstring)) with macro MBEDTLS_ATTRIBUTE_UNTERMINATED_STRING by Felix Conway · 8 weeks ago
  8. 51dccfb Improve some explanations by Gilles Peskine · 8 weeks ago
  9. 2e1399f Add __attribute__ ((nonstring)) to remove unterminated-string-initialization warning by Felix Conway · 8 weeks ago
  10. a795252 Merge pull request #1359 from Mbed-TLS/bugfix_1351_1352_1353_lms_drivers_3.6bp by Gilles Peskine · 8 weeks ago
  11. 7ed3653 Merge pull request #1363 from gilles-peskine-arm/3.6-restricted-merge-20250606 by Manuel Pégourié-Gonnard · 8 weeks ago
  12. cae4434 Merge pull request #1347 from mpg/fix-asn1-store-named-data-null-deref-3.6 by Manuel Pégourié-Gonnard · 8 weeks ago
  13. 8c67ac0 Fix race condition in mbedtls_aesni_has_support by Gilles Peskine · 8 weeks ago
  14. 2b3d6a8 mbedtls_base64_decode: insist on correct padding by Gilles Peskine · 9 weeks ago
  15. df2f0aa lms.c: Updated documentation by Minos Galanakis · 9 weeks ago
  16. 7df273b Merge remote-tracking branch 'mbedtls-3.6' into mbedtls-3.6-restricted by Gilles Peskine · 9 weeks ago
  17. 84999d1 Fix mbedtls_base64_decode() accepting invalid inputs with 4n+1 digits by Gilles Peskine · 9 weeks ago
  18. 9b3051f Built-in lms driver: always zeroize output-buffer in create_merkle_leaf_value by Minos Galanakis · 9 weeks ago
  19. ae449bf Built-in lms driver:Check return values of Merkle node creation by Minos Galanakis · 9 weeks ago
  20. caaffc1 Built-in lms/lmots driver: Harden public key import against enum truncation by Minos Galanakis · 9 weeks ago
  21. 548e2db Built-in lms driver: Added input guard by Minos Galanakis · 9 weeks ago
  22. 3f82706 Merge pull request #1349 from felixc-arm/pem-integer-underflow-3.6 by David Horstmann · 9 weeks ago
  23. 6165e71 Add fix for PEM underflow by Felix Conway · 10 weeks ago
  24. e51bde0 Fix possible UB in mbedtls_asn1_write_raw_buffer() by Manuel Pégourié-Gonnard · 9 weeks ago
  25. 2df7ab7 Fix bug in mbedtls_asn1_store_named_data() by Manuel Pégourié-Gonnard · 2 months ago
  26. 1e9267c Merge pull request #1340 from mpg/fix-string-to-names-uaf-3.6 by Manuel Pégourié-Gonnard · 3 months ago
  27. fb5e2e5 Mark ssl_tls12_preset_suiteb_sig_algs const by Deomid rojer Ryabkov · 1 year, 5 months ago
  28. e3aaf82 Mark ssl_tls12_preset_default_sig_algs const by Deomid rojer Ryabkov · 1 year, 5 months ago
  29. 91b29a0 Grammar in comments by Gilles Peskine · 3 months ago
  30. 0e4907d Initialize MAC context in internal functions for one-shot MAC by Gilles Peskine · 6 months ago
  31. bbec1c1 Initialize MAC context in internal functions for KDF by Gilles Peskine · 6 months ago
  32. a7a480b Initialize driver context in setup functions by Gilles Peskine · 6 months ago
  33. 219c336 Merge pull request #1306 from davidhorstmann-arm/pkcs7-padding-side-channel-fix-3.6 by Manuel Pégourié-Gonnard · 3 months ago
  34. acdcb7f Restore behaviour of mbedtls_x509write_set_foo_name() by Manuel Pégourié-Gonnard · 3 months ago
  35. 19d2c91 Fix undocumented free() in x509_string_to_names() by Manuel Pégourié-Gonnard · 3 months ago
  36. cdb3781 Update obsolete section title by Gilles Peskine · 6 months ago
  37. afedef5 Constify cipher_wrap:mbedtls_cipher_base_lookup_table by Xavier Chapron · 4 months ago
  38. 1b0e2e9 Add missing ifdef for mbedtls_ssl_tls13_exporter by Max Fillinger · 4 months ago
  39. 40c2024 Add label_len argument to non-PSA tls_prf_generic by Max Fillinger · 4 months ago
  40. 5122dc6 Fix mistake in previous comment change by Max Fillinger · 8 months ago
  41. 7833b18 Fix HkdfLabel comment by Max Fillinger · 8 months ago
  42. 529931a Allow maximum label length in Hkdf-Expand-Label by Max Fillinger · 8 months ago
  43. 76bb753 Fix max. label length in key material exporter by Max Fillinger · 9 months ago
  44. 97a2879 Document BAD_INPUT_DATA error in key material exporter by Max Fillinger · 9 months ago
  45. 8ee2141 Use one maximum key_len for all exported keys by Max Fillinger · 9 months ago
  46. e95edbf Fix output size check for key material exporter by Max Fillinger · 9 months ago
  47. ffc47e6 Increase allowed output size of HKDF-Expand-Label by Max Fillinger · 9 months ago
  48. 8fa7252 Fix #endif comment by Max Fillinger · 9 months ago
  49. 951b886 Create MBEDTLS_SSL_KEYING_MATERIAL_EXPORT option by Max Fillinger · 9 months ago
  50. 7b52328 Remove TLS 1.2 Exporter if we don't have randbytes by Max Fillinger · 10 months ago
  51. 92d2930 Revert "Store randbytes for TLS 1.2 TLS-Exporter" by Max Fillinger · 10 months ago
  52. 6c02ea8 Use fewer magic numbers in TLS-Exporter functions by Max Fillinger · 10 months ago
  53. 76077e2 Add label length argument to tls_prf_generic() by Max Fillinger · 10 months ago
  54. 85b33ee Store randbytes for TLS 1.2 TLS-Exporter by Max Fillinger · 10 months ago
  55. 0118293 Fix build when one of TLS 1.2 or 1.3 is disabled by Max Fillinger · 11 months ago
  56. 9359f4d Fix coding style by Max Fillinger · 11 months ago
  57. 3be83a7 Fix mismatches in function declarations by Max Fillinger · 12 months ago
  58. 1466bf8 Fix key_len check in TLS-Exporter by Max Fillinger · 12 months ago
  59. 404f7a3 Simplify mbedtls_ssl_tls13_exporter by Max Fillinger · 12 months ago
  60. 29f79ea Fix commented out function declaration by Max Fillinger · 12 months ago
  61. 44042f0 Implement TLS-Exporter feature by Max Fillinger · 1 year ago
  62. 544fdc6 Fix printf of enum by Gilles Peskine · 5 months ago
  63. ad84044 Test split, coalesced-split and empty handshake records by Gilles Peskine · 5 months ago
  64. da5f5b2 Add a log message on every SSL state transition by Gilles Peskine · 5 months ago
  65. 49f179d Always call mbedtls_ssl_handshake_set_state by Gilles Peskine · 5 months ago
  66. 850e5b3 Document assumption of mbedtls_get_pkcs_padding by David Horstmann · 4 months ago
  67. 5a5440e Update to the new name in usages as well by David Horstmann · 4 months ago
  68. 05657d9 Revert "Add auto-generated files" by Minos Galanakis · 4 months ago
  69. 22098d4 Add auto-generated files by Minos Galanakis · 5 months ago mbedtls-3.6.3 v3.6.3
  70. e62ef05 Version Bump for 3.6.3 by Minos Galanakis · 5 months ago
  71. 7a95d16 Merge branch 'mbedtls-3.6-restricted' into mbedtls-3.6.3rc0-pr by Minos Galanakis · 5 months ago
  72. b6ad19b Merge pull request #9976 from mpg/defragment-ext-test-3.6 by Manuel Pégourié-Gonnard · 5 months ago gh-readonly-queue/mbedtls-3.6/pr-9976-d3ca688b4b2ab2dcb66ce311f16f3ef909a5fdd8
  73. dfc8e43 Merge remote-tracking branch 'upstream/mbedtls-3.6' into pre-3.6.3-upstream-merge by Minos Galanakis · 5 months ago
  74. c03cd11 Merge pull request #10025 from waleed-elmelegy-arm/mbedtls-3.6-fix-key-deriv-bad-state-error by Gilles Peskine · 5 months ago
  75. 051b1e2 Reduce the level of logging used in tests by Manuel Pégourié-Gonnard · 5 months ago
  76. 00ad6f6 New test function inject_client_content_on_the_wire() by Manuel Pégourié-Gonnard · 6 months ago
  77. 3dbe333 Merge pull request #10051 from Vge0rge/key_id_range_backport by Gilles Peskine · 5 months ago
  78. 26f0044 Merge pull request #1319 from davidhorstmann-arm/calc-finished-check-return-3.6 by David Horstmann · 5 months ago
  79. 104bd06 Merge remote-tracking branch 'origin/features/tls-defragmentation/3.6' into feature_merge_defragmentation_36 by Minos Galanakis · 5 months ago
  80. 43f636f Merge pull request #1316 from gilles-peskine-arm/zeroize-psa-202503-3.6 by Gilles Peskine · 5 months ago
  81. d5e64f7 PSA core: Allow enabling one volatile/builtin key by Georgios Vasilakis · 5 months ago
  82. 8a4ec49 Cleanly reject non-HS in-between HS fragments by Manuel Pégourié-Gonnard · 5 months ago
  83. 443908b Replace zero by PSA_ALG_NONE in key derivation input functions by Waleed Elmelegy · 5 months ago
  84. b5ef7da TLS1.2: Check for failures in Finished calculation by David Horstmann · 5 months ago
  85. c22e315 Fix a log message by Gilles Peskine · 5 months ago
  86. 229e200 Note unused variables when debugging is disabled by Gilles Peskine · 5 months ago
  87. dee9263 Pacify uncrustify by Gilles Peskine · 5 months ago
  88. ce726b2 Fix uninitialized variable by Gilles Peskine · 5 months ago
  89. 0a467cc Unify handshake fragment log messages by Gilles Peskine · 5 months ago
  90. b888cca Fix handshake defragmentation when the record has multiple messages by Gilles Peskine · 5 months ago
  91. 3175fc3 Fix end check before memmove by Gilles Peskine · 5 months ago
  92. 184cac1 Zeroize temporary heap buffers used when deriving an ECC key by Gilles Peskine · 5 months ago
  93. e847afd Zeroize temporary heap buffers used in PSA operations by Gilles Peskine · 5 months ago
  94. ab7bb57 Appease check-names with prefix by David Horstmann · 5 months ago
  95. 58c3301 Make conversion explicit to silence MSVC warning by Gilles Peskine · 5 months ago
  96. 302f37b Fix dodgy printf calls by Gilles Peskine · 5 months ago
  97. cc856a2 Handshake defragmentation: reassemble incrementally by Gilles Peskine · 5 months ago
  98. 22c51b9 mbedtls_ssl_prepare_handshake_record(): log offsets after decryption by Gilles Peskine · 5 months ago
  99. af0c461 mbedtls_ssl_prepare_handshake_record(): refactor first fragment prep by Gilles Peskine · 5 months ago
  100. 1e81d34 Tweak handshake fragment log message by Gilles Peskine · 5 months ago