- 364fd8b More SSL debug messages for ClientHello parsing by Gilles Peskine · 3 years, 5 months ago
- 8ecd668 Keep raw PSK when set via mbedtls_ssl_conf_psk() and feed as input_bytes by Neil Armstrong · 3 years, 3 months ago
- 80f6f32 Make mbedtls_ssl_psk_derive_premaster() only for when MBEDTLS_USE_PSA_CRYPTO is not selected by Neil Armstrong · 3 years, 3 months ago
- cd05f0b Drop skip PMS generation for opaque XXX-PSK now Opaque PSA key is always present when MBEDTLS_USE_PSA_CRYPTO selected by Neil Armstrong · 3 years, 3 months ago
- e952a30 Remove RAW PSK when MBEDTLS_USE_PSA_CRYPTO is selected by Neil Armstrong · 3 years, 3 months ago
- 61f237a Remove PSA-only code dealing with non-opaque PSA key by Neil Armstrong · 3 years, 3 months ago
- 67397fa Merge pull request #5704 from mprse/mixed_psk_2cx by Manuel Pégourié-Gonnard · 3 years, 3 months ago
- 8855e36 Merge pull request #5674 from superna9999/5668-abstract-tls-mode-cleanup by Gilles Peskine · 3 years, 3 months ago
- 99114f3 Fix build flags for opaque/raw psk checks by Przemek Stekiel · 3 years, 3 months ago
- cb322ea Enable support for psa opaque DHE-PSK key exchange on the server side by Przemek Stekiel · 3 years, 3 months ago
- 14d11b0 Enable support for psa opaque ECDHE-PSK key exchange on the server side by Przemek Stekiel · 3 years, 4 months ago
- aeb710f Enable support for psa opaque RSA-PSK key exchange on the server side by Przemek Stekiel · 3 years, 4 months ago
- 55132c6 Merge pull request #5703 from superna9999/5322-ecdh-remove-legacy-context by Manuel Pégourié-Gonnard · 3 years, 3 months ago
- 76b7407 Use MBEDTLS_SSL_SOME_SUITES_USE_CBC_ETM to enable ssl_write_encrypt_then_mac_ext() by Neil Armstrong · 3 years, 4 months ago
- ab555e0 Rename mbedtls_get_mode_from_XXX to mbedtls_ssl_get_mode_from_XXX by Neil Armstrong · 3 years, 4 months ago
- fe635e4 Use mbedtls_get_mode_from_ciphersuite() in server-side ssl_write_encrypt_then_mac_ext() by Neil Armstrong · 3 years, 4 months ago
- a2da9c7 Merge pull request #5631 from gstrauss/enum-tls-vers by Paul Elliott · 3 years, 3 months ago
- 8315811 Remove restrictive proto ver negotiation checks by Glenn Strauss · 3 years, 4 months ago
- 041a376 Remove some tls_ver < MBEDTLS_SSL_VERSION_TLS1_2 checks by Glenn Strauss · 3 years, 5 months ago
- e3af4cb mbedtls_ssl_(read|write)_version using tls_version by Glenn Strauss · 3 years, 5 months ago
- 60bfe60 mbedtls_ssl_ciphersuite_t min_tls_version,max_tls_version by Glenn Strauss · 3 years, 5 months ago
- da7851c Rename mbedtls_ssl_session minor_ver to tls_version by Glenn Strauss · 3 years, 5 months ago
- 913b364 Simplify compile-time PSA/non-PSA ECDH(E) code in ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- 3ea0149 Store TLS1.2 ECDH point format only when USE_PSA_CRYPTO isn't selected by Neil Armstrong · 3 years, 4 months ago
- d91526c Refactor to make PSA and non-PSA ECDH(E) server code exclusive by Neil Armstrong · 3 years, 4 months ago
- 927410d Merge pull request #5611 from superna9999/5318-tls-ecdhe-psk by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- 1b05aff Merge pull request #5624 from superna9999/5312-tls-server-ecdh by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- 1039ba5 Check if not using Opaque PSK in ECHDE-PSK PSA version of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- ede381c Get PSK length & check for buffer size before writting in ECHDE-PSK PSA version of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- 3cae167 Check buffer pointers before storing peer's public key in ECHDE-PSK PSA version of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- fdf20cb Fix command indentation in ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- 2d63da9 Introduce zlen size variable in ECHDE-PSK part of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- d6e2759 Change to more appropriate pointer declaration in ECHDE-PSK part of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- fb0a81e Return PSA translated errors in ECHDE-PSK part of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- 5a1455d Remove useless braces in ECHDE-PSK part of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- 3bcef08 Update comments in ECHDE-PSK part of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- 549a3e4 Initialize uninitialized variable in ECHDE-PSK part of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- 039db29 Implement PSA server-side ECDHE-PSK by Neil Armstrong · 3 years, 5 months ago
- e88d190 Set ecdh_psa_privkey_is_external to 1 right after setting ecdh_psa_privkey in ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 4 months ago
- f716a70 Rename mbedtls_ssl_handshake_params variable ecdh_psa_shared_key to ecdh_psa_privkey_is_external by Neil Armstrong · 3 years, 4 months ago
- 91477a7 Switch handshake->ecdh_bits to size_t and remove now useless cast & limit checks by Neil Armstrong · 3 years, 4 months ago
- 1335222 Return translated PSA error in PSA version of ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 4 months ago
- f788253 Fix comment typo in PSA version of ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 4 months ago
- 104a7c1 Handle Opaque PK EC keys in ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 4 months ago
- 8113d25 Add ecdh_psa_shared_key flag to protect PSA privkey if imported by Neil Armstrong · 3 years, 4 months ago
- 5cd5f76 Use mbedtls_platform_zeroize() in ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 4 months ago
- 4f33fbc Use PSA define for max EC key pair size in ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 4 months ago
- 306d607 Fix indentation issue in PSA version of ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 4 months ago
- 062de7d Use PSA_BITS_TO_BYTES instead of open-coded calculation in PSA version of ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 4 months ago
- 1f4b396 Implement PSA server-side ECDH-RSA/ECDSA by Neil Armstrong · 3 years, 5 months ago
- 3cffc5c tls: Remove unnecessary checks of MBEDTLS_CIPHERSUITE_NODTLS by Ronald Cron · 3 years, 4 months ago
- 90f0120 ssl_tls12_server.c: Simplify TLS version check in ClientHello by Ronald Cron · 3 years, 5 months ago
- 8457c12 ssl_tls12_server.c: Remove some unnecessary checks on TLS minor version by Ronald Cron · 3 years, 5 months ago
- b894ac7 ssl_tls12_server.c: Remove some dead code for versions of TLS < 1.2 by Ronald Cron · 3 years, 5 months ago
- de1adee Rename ssl_cli/srv.c by Ronald Cron · 3 years, 5 months ago[Renamed from library/ssl_srv.c]
- 862902d ssl_srv.c: Mark ETM as disabled if cipher is not CBC by Ronald Cron · 3 years, 4 months ago
- 560ef59 Merge pull request #5613 from mprse/tls_ecdh_2a by Manuel Pégourié-Gonnard · 3 years, 5 months ago
- dd482bf Modify own_pubkey_max_len calculation by Przemek Stekiel · 3 years, 5 months ago
- a4e15cc Fix comment: add fields size by Przemek Stekiel · 3 years, 5 months ago
- 855938e Move mbedtls_ecdh_setup() to no-psa path by Przemek Stekiel · 3 years, 5 months ago
- 338b61d Fix code style by Przemek Stekiel · 3 years, 5 months ago
- ce1d792 Remove duplicated code by Przemek Stekiel · 3 years, 5 months ago
- fc91a1f Use PSA for private key generation and public key export only for ECDHE keys by Przemek Stekiel · 3 years, 5 months ago
- a21af3d Use mbedtls_psa_parse_tls_ecc_group() instead PSA_KEY_TYPE_ECC_KEY_PAIR( mbedtls_ecc_group_to_psa() ) by Przemek Stekiel · 3 years, 5 months ago
- 0a60c12 Add intermediate variables to increase code readability by Przemek Stekiel · 3 years, 5 months ago
- e9f0044 Destroy ecdh_psa_privkey on failure by Przemek Stekiel · 3 years, 5 months ago
- 130c4b5 Use PSA version of key agreement only for ECDHE keys by Przemek Stekiel · 3 years, 5 months ago
- fd32e96 ssl_parse_client_key_exchange(): read the curve identifier and the peer's public key and compute the shared secret using PSA by Przemek Stekiel · 3 years, 5 months ago
- b6ce0b6 ssl_prepare_server_key_exchange(): generate a private/public key and write out the curve identifier and public key using PSA by Przemek Stekiel · 3 years, 5 months ago
- 6989407 Add accessor to retrieve SNI during handshake by Glenn Strauss · 3 years, 6 months ago
- 2ed9527 Add server certificate selection callback by Glenn Strauss · 3 years, 6 months ago
- e754193 Remove guard inside ssl_srv.c by Jerry Yu · 3 years, 6 months ago
- fb4b647 tls13_only: improve guards of files. by Jerry Yu · 3 years, 6 months ago
- c5aef88 tls13_only: guard ssl_{cli,srv}.c with TLS1_2 by Jerry Yu · 3 years, 7 months ago
- c3091b1 tls13_only: compile pass by Jerry Yu · 3 years, 7 months ago
- 8c010eb Fix comments, code style, remove debug code by Przemyslaw Stekiel · 3 years, 6 months ago
- 2c87a20 ssl_write_encrypt_then_mac_ext(): adapt to psa crypto by Przemyslaw Stekiel · 3 years, 6 months ago
- 9719885 fix coding style issues by Jerry Yu · 3 years, 6 months ago
- eb821c6 remove check_sig_hash by Jerry Yu · 3 years, 6 months ago
- 24811fb replace check_sig_hash with is_offered by Jerry Yu · 3 years, 6 months ago
- 1bab301 Add signature algorithm supported check by Jerry Yu · 3 years, 6 months ago
- 713013f fix various issues by Jerry Yu · 3 years, 6 months ago
- 6106fdc fix build fail without TLS13 by Jerry Yu · 3 years, 7 months ago
- 1abd1bc Change write_sig_alg_ext of tls12 by Jerry Yu · 3 years, 7 months ago
- 0e5bcb6 Replace directly access for sig_hashes by Jerry Yu · 3 years, 7 months ago
- 18cd439 Align signature_algorithms extension name by Jerry Yu · 3 years, 7 months ago
- d491ea4 fix comment issue by Jerry Yu · 3 years, 7 months ago
- b925f21 fix comment issues by Jerry Yu · 3 years, 7 months ago
- ffef9c5 fix alignment issue by Jerry Yu · 3 years, 7 months ago
- b47d0f8 Replace SUPPORTED_ELLIPTIC_CURVES with SUPPORTED_GROUPS by Jerry Yu · 3 years, 7 months ago
- 69a6342 psa: Fix the size of hash buffers by Ronald Cron · 3 years, 10 months ago
- be7b21d Merge branch 'development' into 3649_move_constant_time_functions_into_separate_module by Gabor Mezei · 3 years, 8 months ago
- 01f3dae Refactor elliptic curve extension for NamedGroups by Brett Warren · 4 years ago
- 22c9a6f Rename internal header constant_time.h to constant_time_internal.h by Gabor Mezei · 3 years, 9 months ago
- 90437e3 Rename constant-time functions to have mbedtls_ct prefix by Gabor Mezei · 3 years, 9 months ago
- 765862c Move mbedtls_cf_memcmp to a new public header by Gabor Mezei · 3 years, 9 months ago
- d96a5c2 Fix wrong usage of counter len macro by Jerry Yu · 3 years, 10 months ago
- 9cb5569 Propagate usage of mask generation functions by gabor-mezei-arm · 4 years ago
- 4602564 Unify memcmp functions by gabor-mezei-arm · 4 years ago
- db9a38c Move contatnt-time memcmp functions to the contant-time module by gabor-mezei-arm · 3 years, 10 months ago