TrustedFirmware Git Browser
Code Review
Sign In
review.trustedfirmware.org
/
mirror
/
mbed-tls
/
cb6410c67d95facd80eefd4cbbeefaf04c9eb3ab
/
library
/
ssl_cli.c
635f868
Adding delayed server cert verification to client state machine
by Hannes Tschofenig
· 4 years, 8 months ago
585e9e0
Add MBEDTLS_SSL_CONF_TRANSPORT
by Kevin Bracey
· 4 years, 9 months ago
f4d2c7d
Improve FI resistance of pk verification in ssl_cli.c
by Andrzej Kurek
· 4 years, 10 months ago
6c30be8
ssl: call signature verification twice for non-restartable operations
by Andrzej Kurek
· 5 years ago
e3c4ee5
Rename mbedtls_platform_memcmp() to mbedtls_platform_memequal()
by Piotr Nowicki
· 5 years ago
afec885
Revert a part of the sensitive information duplication changes
by Andrzej Kurek
· 5 years ago
84bde41
Add FI countermeasures to the ssl module
by Andrzej Kurek
· 5 years ago
74f7d0f
Duplicate sensitive buffer and buffer length information
by Andrzej Kurek
· 5 years ago
e048b91
Add returning a FAULT_DETECTED error on suspected FI attacks
by Piotr Nowicki
· 5 years ago
478b05c
Merge pull request #3355 from AndrzejKurek/fi_error_codes
by Andrzej Kurek
· 5 years ago
fd56f40
Change the default value of status variables to an error
by Andrzej Kurek
· 5 years ago
825ebd4
Merge mbedtls 2.16.6 into baremetal
by Andrzej Kurek
· 5 years ago
ac6d226
Update signature of mbedtls_platform_random_delay
by Arto Kinnunen
· 6 years ago
7195571
Replace mbedtls_platform_enforce_volatile_reads 2
by Arto Kinnunen
· 6 years ago
5aa4c07
Minor review fixes
by Jarno Lamsa
· 6 years ago
8d09e57
Increase hamming distance for session resume flag
by Jarno Lamsa
· 6 years ago
0616405
Check that we have all the proper keys
by Jarno Lamsa
· 6 years ago
e1621d4
Check that the peer_authenticated flag
by Jarno Lamsa
· 6 years ago
67f0a1e
Protect setting of premaster_generated flag
by Jarno Lamsa
· 6 years ago
98801af
Protect setting of hello_random flag
by Jarno Lamsa
· 6 years ago
6122b59
Address review comments
by Jarno Lamsa
· 6 years ago
46afd5d
Fix CI issues
by Jarno Lamsa
· 6 years ago
47aab8d
Protect return value from mbedtls_pk_verify
by Jarno Lamsa
· 6 years ago
70abd7a
Add enumeration for invalid state
by Jarno Lamsa
· 6 years ago
2b20516
Make TLS state changes explicit
by Jarno Lamsa
· 6 years ago
9d6a535
Return and propagate UECC_FAULT_DETECTED
by Manuel Pégourié-Gonnard
· 6 years ago
1a53371
Remove curve parameter from public functions
by Manuel Pégourié-Gonnard
· 6 years ago
677b7f6
Fix direct use of struct instead of abstract type
by Manuel Pégourié-Gonnard
· 6 years ago
6f4e030
Changed mbedtls_platform_memcpy to memcpy in places which don't handle critical data
by Teppo Järvelin
· 6 years ago
91d7938
Changed every memcpy to SCA equivalent mbedtls_platform_memcpy
by Teppo Järvelin
· 6 years ago
707ceb8
Replaced mbedtls_ssl_safer_memcmp with mbedtls_platform_memcmp
by Teppo Järvelin
· 6 years ago
61f412e
Changed every memcmp to SCA equivalent mbedtls_platform_memcmp
by Teppo Järvelin
· 6 years ago
2829bbf
Remove dependency from SSL on PK internals
by Manuel Pégourié-Gonnard
· 6 years ago
020d9ba
Introduce abstraction mbedtls_pk_handle_t
by Manuel Pégourié-Gonnard
· 6 years ago
e8144aa
Merge remote-tracking branch 'origin/pr/657' into baremetal
by Simon Butcher
· 6 years ago
3d7439e
Review corrections 6
by Arto Kinnunen
· 6 years ago
84eeb4f
Review corrections 5
by Arto Kinnunen
· 6 years ago
9b3b194
Review corrections 4
by Arto Kinnunen
· 6 years ago
a3fa06e
Review corrections 3
by Arto Kinnunen
· 6 years ago
4f4849a
Review corrections 2
by Arto Kinnunen
· 6 years ago
6e3f09b
Review corrections
by Arto Kinnunen
· 6 years ago
0b62ce8
Use function for 16/24/32-bit BE conversion
by Arto Kinnunen
· 6 years ago
7fce190
Merge remote-tracking branch 'origin/pr/635' into HEAD
by Simon Butcher
· 6 years ago
7bcf2b5
Introduce version comparing functions
by Hanno Becker
· 6 years ago
d91ede1
TinyCrypt ECDHE-PSK: Implement ClientKeyExchange writing
by Hanno Becker
· 6 years ago
c7effc0
TinyCrypt SSL: Extend scope use of TC in CliKeyExchange writing
by Hanno Becker
· 6 years ago
7352bd1
TinyCrypt SSL: Extend scope of SrvKeyExchange parsing
by Hanno Becker
· 6 years ago
b3a2448
TinyCrypt SSL: Impl. ECDH-param extraction from CRT for TinyCrypt
by Hanno Becker
· 6 years ago
27b7e50
TinyCrypt SSL: Declare EC-related TLS RFC constants in SSL namespace
by Hanno Becker
· 6 years ago
88889c6
Fixup: Add missing TinyCrypt guards
by Hanno Becker
· 6 years ago
1521ec5
Remove TinyCrypt PRNG configuration from ssl_cli.c
by Hanno Becker
· 6 years ago
7cb5c11
Missing uECC ECDSA flagging
by Jarno Lamsa
· 6 years ago
ad78931
Signature wrapper for uECC
by Jarno Lamsa
· 6 years ago
2f41b24
Remove calc_verify SSL function pointer
by Hanno Becker
· 6 years ago
533f5b1
Remove ssl_optimize_checksum()
by Hanno Becker
· 6 years ago
4009d8f
Make function mbedtls_ssl_set_hostname(...) as optional
by Teppo Järvelin
· 6 years ago
f0f01e1
Merge remote-tracking branch 'origin/pr/630' into baremetal
by Simon Butcher
· 6 years ago
434ab19
Merge remote-tracking branch 'origin/pr/629' into baremetal
by Simon Butcher
· 6 years ago
b72fc6a
Don't use const var in initialization of another const var
by Hanno Becker
· 6 years ago
8295ff0
tinyCrypt: Don't store public ECDH-share in handshake struct
by Hanno Becker
· 6 years ago
29d1655
Add MBEDTLS_ECDH_C guards to ECDH code-paths using legacy ECDH
by Hanno Becker
· 6 years ago
975b9ee
Fix guards around use of legacy ECDH context
by Hanno Becker
· 6 years ago
621113f
tinyCrypt: Write client's key share
by Hanno Becker
· 6 years ago
a3c2c17
tinyCrypt: Share ECDH secret calculation code-path
by Hanno Becker
· 6 years ago
75f12d1
tinyCrypt: Add ServerKeyExchange parsing code
by Hanno Becker
· 6 years ago
ef982d5
tinyCrypt: Bind RNG wrapper to tinyCrypt in mbedtls_ssl_setup()
by Hanno Becker
· 6 years ago
e12aafb
tinyCrypt: Initial commit towards ECDHE support
by Jarno Lamsa
· 6 years ago
3328b18
Move ssl_process_in_server_key_exchange to avoid func use-before-def
by Hanno Becker
· 6 years ago
4e46709
Document precoditions on some HS parsing/writing functions
by Hanno Becker
· 6 years ago
7d552fa
Avoid collision of ssl_xxx_key_exchange_yyy() func names in cli/srv
by Hanno Becker
· 6 years ago
48e526b
Document parameter precondition for ssl_rsa_generate_partial_pms()
by Hanno Becker
· 6 years ago
aa49620
Minor documentation improvement to ssl_rsa_encrypt_partial_pms()
by Hanno Becker
· 6 years ago
084694d
Fix copy-pasta in documentation for outgoing CliKeyExchange
by Hanno Becker
· 6 years ago
44a29f4
Remove redundant use of local variable in CliKeyExch writing
by Hanno Becker
· 6 years ago
ae22dd3
Simplify logic of restartable ECDHE in CliKeyExch writing
by Hanno Becker
· 6 years ago
91cf769
Remove restartable ECP return code check from ECDH suite handling
by Hanno Becker
· 6 years ago
8793fab
Fix two typos in comments
by Manuel Pégourié-Gonnard
· 6 years ago
587c1ae
Make IAR happy by dummy-initializing an unused variable
by Hanno Becker
· 6 years ago
a855cb6
Avoid unused variable warning in ServerKeyExchange parsing
by Hanno Becker
· 6 years ago
868cb58
Rename SSL_PROC_CHK -> MBEDTLS_SSL_CHK
by Hanno Becker
· 6 years ago
9a12243
Introduce getter function for RNG context
by Hanno Becker
· 6 years ago
4ec73cb
Restructure SrvKeyExchange: Move parsing code
by Hanno Becker
· 6 years ago
8b7b879
Restructure SrvKeyExchange: Move msg skipping for PSK and RSA-PSK
by Hanno Becker
· 7 years ago
eb76c20
Restructure SrvKeyExchange: Move code for skipping SrvKeyExchange
by Hanno Becker
· 7 years ago
fca604d
Restructure SrvKeyExchange: Move static DH parameter extraction
by Hanno Becker
· 7 years ago
04769dd
Restructure SrvKeyExchange: Add frame for structure
by Hanno Becker
· 7 years ago
09d2364
Share code between In-CliKeyExch and Out-CliKeyExch
by Hanno Becker
· 6 years ago
4f68b04
Restructure outgoing CliKeyExch: Remove old code
by Hanno Becker
· 6 years ago
87e3c9a
Restructure outgoing CliKeyExch: Move writing code
by Hanno Becker
· 7 years ago
01290c7
Restructure outgoing CliKeyExch: Move RSA/RSA-PSK PMS generation
by Hanno Becker
· 7 years ago
6fb638b
Restructure outgoing CliKeyExch: Move PMS assembly code
by Hanno Becker
· 7 years ago
5d39768
Restructure outgoing CliKeyExch: Add frame for new structure
by Hanno Becker
· 7 years ago
8844055
Remove compression field from SSL session if compression disabled
by Hanno Becker
· 6 years ago
de62da9
Use separate functions to pend fatal and non-fatal alerts
by Hanno Becker
· 6 years ago
1facd55
Replace xxx_send_alert by xxx_pend_alert to save code
by Hanno Becker
· 6 years ago
3b014fc
Merge remote-tracking branch 'origin/pr/604' into baremetal
by Simon Butcher
· 6 years ago
981f81d
Add missing uses of mbedtls_ssl_get_minor()
by Hanno Becker
· 6 years ago
f1bc9e1
Introduce helper functions to traverse signature hashes
by Hanno Becker
· 6 years ago
feb1cee
Merge remote-tracking branch 'origin/pr/602' into baremetal
by Simon Butcher
· 6 years ago
7decea9
Simplify supported EC extension writing code
by Hanno Becker
· 6 years ago
Next »