1. 635f868 Adding delayed server cert verification to client state machine by Hannes Tschofenig · 4 years, 8 months ago
  2. 585e9e0 Add MBEDTLS_SSL_CONF_TRANSPORT by Kevin Bracey · 4 years, 9 months ago
  3. f4d2c7d Improve FI resistance of pk verification in ssl_cli.c by Andrzej Kurek · 4 years, 10 months ago
  4. 6c30be8 ssl: call signature verification twice for non-restartable operations by Andrzej Kurek · 5 years ago
  5. e3c4ee5 Rename mbedtls_platform_memcmp() to mbedtls_platform_memequal() by Piotr Nowicki · 5 years ago
  6. afec885 Revert a part of the sensitive information duplication changes by Andrzej Kurek · 5 years ago
  7. 84bde41 Add FI countermeasures to the ssl module by Andrzej Kurek · 5 years ago
  8. 74f7d0f Duplicate sensitive buffer and buffer length information by Andrzej Kurek · 5 years ago
  9. e048b91 Add returning a FAULT_DETECTED error on suspected FI attacks by Piotr Nowicki · 5 years ago
  10. 478b05c Merge pull request #3355 from AndrzejKurek/fi_error_codes by Andrzej Kurek · 5 years ago
  11. fd56f40 Change the default value of status variables to an error by Andrzej Kurek · 5 years ago
  12. 825ebd4 Merge mbedtls 2.16.6 into baremetal by Andrzej Kurek · 5 years ago
  13. ac6d226 Update signature of mbedtls_platform_random_delay by Arto Kinnunen · 6 years ago
  14. 7195571 Replace mbedtls_platform_enforce_volatile_reads 2 by Arto Kinnunen · 6 years ago
  15. 5aa4c07 Minor review fixes by Jarno Lamsa · 6 years ago
  16. 8d09e57 Increase hamming distance for session resume flag by Jarno Lamsa · 6 years ago
  17. 0616405 Check that we have all the proper keys by Jarno Lamsa · 6 years ago
  18. e1621d4 Check that the peer_authenticated flag by Jarno Lamsa · 6 years ago
  19. 67f0a1e Protect setting of premaster_generated flag by Jarno Lamsa · 6 years ago
  20. 98801af Protect setting of hello_random flag by Jarno Lamsa · 6 years ago
  21. 6122b59 Address review comments by Jarno Lamsa · 6 years ago
  22. 46afd5d Fix CI issues by Jarno Lamsa · 6 years ago
  23. 47aab8d Protect return value from mbedtls_pk_verify by Jarno Lamsa · 6 years ago
  24. 70abd7a Add enumeration for invalid state by Jarno Lamsa · 6 years ago
  25. 2b20516 Make TLS state changes explicit by Jarno Lamsa · 6 years ago
  26. 9d6a535 Return and propagate UECC_FAULT_DETECTED by Manuel Pégourié-Gonnard · 6 years ago
  27. 1a53371 Remove curve parameter from public functions by Manuel Pégourié-Gonnard · 6 years ago
  28. 677b7f6 Fix direct use of struct instead of abstract type by Manuel Pégourié-Gonnard · 6 years ago
  29. 6f4e030 Changed mbedtls_platform_memcpy to memcpy in places which don't handle critical data by Teppo Järvelin · 6 years ago
  30. 91d7938 Changed every memcpy to SCA equivalent mbedtls_platform_memcpy by Teppo Järvelin · 6 years ago
  31. 707ceb8 Replaced mbedtls_ssl_safer_memcmp with mbedtls_platform_memcmp by Teppo Järvelin · 6 years ago
  32. 61f412e Changed every memcmp to SCA equivalent mbedtls_platform_memcmp by Teppo Järvelin · 6 years ago
  33. 2829bbf Remove dependency from SSL on PK internals by Manuel Pégourié-Gonnard · 6 years ago
  34. 020d9ba Introduce abstraction mbedtls_pk_handle_t by Manuel Pégourié-Gonnard · 6 years ago
  35. e8144aa Merge remote-tracking branch 'origin/pr/657' into baremetal by Simon Butcher · 6 years ago
  36. 3d7439e Review corrections 6 by Arto Kinnunen · 6 years ago
  37. 84eeb4f Review corrections 5 by Arto Kinnunen · 6 years ago
  38. 9b3b194 Review corrections 4 by Arto Kinnunen · 6 years ago
  39. a3fa06e Review corrections 3 by Arto Kinnunen · 6 years ago
  40. 4f4849a Review corrections 2 by Arto Kinnunen · 6 years ago
  41. 6e3f09b Review corrections by Arto Kinnunen · 6 years ago
  42. 0b62ce8 Use function for 16/24/32-bit BE conversion by Arto Kinnunen · 6 years ago
  43. 7fce190 Merge remote-tracking branch 'origin/pr/635' into HEAD by Simon Butcher · 6 years ago
  44. 7bcf2b5 Introduce version comparing functions by Hanno Becker · 6 years ago
  45. d91ede1 TinyCrypt ECDHE-PSK: Implement ClientKeyExchange writing by Hanno Becker · 6 years ago
  46. c7effc0 TinyCrypt SSL: Extend scope use of TC in CliKeyExchange writing by Hanno Becker · 6 years ago
  47. 7352bd1 TinyCrypt SSL: Extend scope of SrvKeyExchange parsing by Hanno Becker · 6 years ago
  48. b3a2448 TinyCrypt SSL: Impl. ECDH-param extraction from CRT for TinyCrypt by Hanno Becker · 6 years ago
  49. 27b7e50 TinyCrypt SSL: Declare EC-related TLS RFC constants in SSL namespace by Hanno Becker · 6 years ago
  50. 88889c6 Fixup: Add missing TinyCrypt guards by Hanno Becker · 6 years ago
  51. 1521ec5 Remove TinyCrypt PRNG configuration from ssl_cli.c by Hanno Becker · 6 years ago
  52. 7cb5c11 Missing uECC ECDSA flagging by Jarno Lamsa · 6 years ago
  53. ad78931 Signature wrapper for uECC by Jarno Lamsa · 6 years ago
  54. 2f41b24 Remove calc_verify SSL function pointer by Hanno Becker · 6 years ago
  55. 533f5b1 Remove ssl_optimize_checksum() by Hanno Becker · 6 years ago
  56. 4009d8f Make function mbedtls_ssl_set_hostname(...) as optional by Teppo Järvelin · 6 years ago
  57. f0f01e1 Merge remote-tracking branch 'origin/pr/630' into baremetal by Simon Butcher · 6 years ago
  58. 434ab19 Merge remote-tracking branch 'origin/pr/629' into baremetal by Simon Butcher · 6 years ago
  59. b72fc6a Don't use const var in initialization of another const var by Hanno Becker · 6 years ago
  60. 8295ff0 tinyCrypt: Don't store public ECDH-share in handshake struct by Hanno Becker · 6 years ago
  61. 29d1655 Add MBEDTLS_ECDH_C guards to ECDH code-paths using legacy ECDH by Hanno Becker · 6 years ago
  62. 975b9ee Fix guards around use of legacy ECDH context by Hanno Becker · 6 years ago
  63. 621113f tinyCrypt: Write client's key share by Hanno Becker · 6 years ago
  64. a3c2c17 tinyCrypt: Share ECDH secret calculation code-path by Hanno Becker · 6 years ago
  65. 75f12d1 tinyCrypt: Add ServerKeyExchange parsing code by Hanno Becker · 6 years ago
  66. ef982d5 tinyCrypt: Bind RNG wrapper to tinyCrypt in mbedtls_ssl_setup() by Hanno Becker · 6 years ago
  67. e12aafb tinyCrypt: Initial commit towards ECDHE support by Jarno Lamsa · 6 years ago
  68. 3328b18 Move ssl_process_in_server_key_exchange to avoid func use-before-def by Hanno Becker · 6 years ago
  69. 4e46709 Document precoditions on some HS parsing/writing functions by Hanno Becker · 6 years ago
  70. 7d552fa Avoid collision of ssl_xxx_key_exchange_yyy() func names in cli/srv by Hanno Becker · 6 years ago
  71. 48e526b Document parameter precondition for ssl_rsa_generate_partial_pms() by Hanno Becker · 6 years ago
  72. aa49620 Minor documentation improvement to ssl_rsa_encrypt_partial_pms() by Hanno Becker · 6 years ago
  73. 084694d Fix copy-pasta in documentation for outgoing CliKeyExchange by Hanno Becker · 6 years ago
  74. 44a29f4 Remove redundant use of local variable in CliKeyExch writing by Hanno Becker · 6 years ago
  75. ae22dd3 Simplify logic of restartable ECDHE in CliKeyExch writing by Hanno Becker · 6 years ago
  76. 91cf769 Remove restartable ECP return code check from ECDH suite handling by Hanno Becker · 6 years ago
  77. 8793fab Fix two typos in comments by Manuel Pégourié-Gonnard · 6 years ago
  78. 587c1ae Make IAR happy by dummy-initializing an unused variable by Hanno Becker · 6 years ago
  79. a855cb6 Avoid unused variable warning in ServerKeyExchange parsing by Hanno Becker · 6 years ago
  80. 868cb58 Rename SSL_PROC_CHK -> MBEDTLS_SSL_CHK by Hanno Becker · 6 years ago
  81. 9a12243 Introduce getter function for RNG context by Hanno Becker · 6 years ago
  82. 4ec73cb Restructure SrvKeyExchange: Move parsing code by Hanno Becker · 6 years ago
  83. 8b7b879 Restructure SrvKeyExchange: Move msg skipping for PSK and RSA-PSK by Hanno Becker · 7 years ago
  84. eb76c20 Restructure SrvKeyExchange: Move code for skipping SrvKeyExchange by Hanno Becker · 7 years ago
  85. fca604d Restructure SrvKeyExchange: Move static DH parameter extraction by Hanno Becker · 7 years ago
  86. 04769dd Restructure SrvKeyExchange: Add frame for structure by Hanno Becker · 7 years ago
  87. 09d2364 Share code between In-CliKeyExch and Out-CliKeyExch by Hanno Becker · 6 years ago
  88. 4f68b04 Restructure outgoing CliKeyExch: Remove old code by Hanno Becker · 6 years ago
  89. 87e3c9a Restructure outgoing CliKeyExch: Move writing code by Hanno Becker · 7 years ago
  90. 01290c7 Restructure outgoing CliKeyExch: Move RSA/RSA-PSK PMS generation by Hanno Becker · 7 years ago
  91. 6fb638b Restructure outgoing CliKeyExch: Move PMS assembly code by Hanno Becker · 7 years ago
  92. 5d39768 Restructure outgoing CliKeyExch: Add frame for new structure by Hanno Becker · 7 years ago
  93. 8844055 Remove compression field from SSL session if compression disabled by Hanno Becker · 6 years ago
  94. de62da9 Use separate functions to pend fatal and non-fatal alerts by Hanno Becker · 6 years ago
  95. 1facd55 Replace xxx_send_alert by xxx_pend_alert to save code by Hanno Becker · 6 years ago
  96. 3b014fc Merge remote-tracking branch 'origin/pr/604' into baremetal by Simon Butcher · 6 years ago
  97. 981f81d Add missing uses of mbedtls_ssl_get_minor() by Hanno Becker · 6 years ago
  98. f1bc9e1 Introduce helper functions to traverse signature hashes by Hanno Becker · 6 years ago
  99. feb1cee Merge remote-tracking branch 'origin/pr/602' into baremetal by Simon Butcher · 6 years ago
  100. 7decea9 Simplify supported EC extension writing code by Hanno Becker · 6 years ago