- ef15ce5 Add ChangeLog entry by Janos Follath · 4 years, 1 month ago
- bc58902 Add prefix to BYTES_TO_T_UINT_* by Janos Follath · 4 years, 1 month ago
- 51ccd62 Fix ecp_check_pub() test cases by Janos Follath · 4 years, 1 month ago
- be89c35 Add ecp_check_pub tests for Curve 448 by Janos Follath · 4 years, 1 month ago
- 7d4ebdd Reject low-order points on Curve448 early by Janos Follath · 4 years, 1 month ago
- 7017425 Add DoS test case for ecp_check_pub by Janos Follath · 4 years, 1 month ago
- 1c6a439 Use mbedtls_mpi_lset() more by Janos Follath · 4 years, 1 month ago
- bc96a79 Move mpi constant macros to bn_mul.h by Janos Follath · 4 years, 1 month ago
- d31a30c Remove redundant ecp_check_pub() tests by Janos Follath · 4 years, 1 month ago
- b4c676e Prevent memory leak in ecp_check_pubkey_x25519() by Janos Follath · 4 years, 1 month ago
- 520f0a0 Avoid complaints about undeclared non-static symbols by Manuel Pégourié-Gonnard · 4 years, 1 month ago
- ae48111 Use more compact encoding of Montgomery curve constants by Manuel Pégourié-Gonnard · 4 years, 1 month ago
- 10b8e5a Use a more compact encoding of bad points by Manuel Pégourié-Gonnard · 4 years, 1 month ago
- 6a5f574 Add test for check_pubkey for x25519 by Manuel Pégourié-Gonnard · 4 years, 1 month ago
- f2268d1 Reject low-order points on Curve25519 early by Manuel Pégourié-Gonnard · 4 years, 1 month ago
- 82a5a9d Merge branch 'development_2.x' into development_2.x-restricted by Manuel Pégourié-Gonnard · 4 years, 2 months ago
- c158213 Merge pull request #4678 from JoeSubbiani/FixedMissingContextFree-test_suite_aes by Dave Rodgman · 4 years, 2 months ago
- b7a87e3 Merge pull request #835 from mpg/rsa-lookup-2.x-restricted by Manuel Pégourié-Gonnard · 4 years, 2 months ago
- 3f0538d Merge pull request #4688 from gilles-peskine-arm/winsock-fd-range-2.x by Manuel Pégourié-Gonnard · 4 years, 2 months ago
- 7d5fa2b Reword changelog - Test Resource Leak by Joe Subbiani · 4 years, 2 months ago
- 51859aa Fix fd range for select on Windows by Gilles Peskine · 4 years, 2 months ago
- 0f6351f Refactor file descriptor checks into a common function by Gilles Peskine · 4 years, 2 months ago
- 02945bc Update changelog formatting - Missing Free Context by Joe Subbiani · 4 years, 2 months ago
- 707186d Update changelog formatting Missing Free Context by Joe Subbiani · 4 years, 2 months ago
- 5e1fac8 Update changelog formatting - Missing Free Context by Joe Subbiani · 4 years, 2 months ago
- 2af8d04 Changelog entry for Free Context in test_suite_aes fix by Joe Subbiani · 4 years, 2 months ago
- 67889a5 Free context in at the end of aes_crypt_xts_size() by JoeSubbiani · 4 years, 2 months ago
- c94b6b0 Homogenize coding patterns by Manuel Pégourié-Gonnard · 4 years, 2 months ago
- f97a963 Merge pull request #4656 from gilles-peskine-arm/psa_key_derivation-bad_workflow-20210527-2.x by Gilles Peskine · 4 years, 2 months ago
- fbf9aff Merge pull request #830 from gilles-peskine-arm/ecp_max_bits-check-2.x by Manuel Pégourié-Gonnard · 4 years, 2 months ago
- 8d54b69 Fix copypasta in test data by Gilles Peskine · 4 years, 2 months ago
- a172cf5 Use UNUSED wherever applicable in derive_input tests by Gilles Peskine · 4 years, 2 months ago
- f216f0d Fix missing state check for tls12_prf output by Gilles Peskine · 4 years, 2 months ago
- d40a21c Key derivation: add test cases where the secret is missing by Gilles Peskine · 4 years, 2 months ago
- f627931 Add bad-workflow key derivation tests by Gilles Peskine · 4 years, 2 months ago
- 0faba4e More explicit names for some bad-workflow key derivation tests by Gilles Peskine · 4 years, 2 months ago
- 3223940 Update MBEDTLS_ECP_MAX_BITS_MIN when adding a curve by Gilles Peskine · 4 years, 2 months ago
- 33c92f0 Determine MBEDTLS_ECP_MAX_BITS automatically by Gilles Peskine · 4 years, 2 months ago
- e57bad4 Check MBEDTLS_ECP_MAX_xxx constants in unit tests by Gilles Peskine · 4 years, 2 months ago
- 6dba320 Fail the build if MBEDTLS_ECP_MAX_BITS is not large enough by Gilles Peskine · 4 years, 2 months ago
- 7576f55 Add ChangeLog entry about RSA side channel. by Manuel Pégourié-Gonnard · 4 years, 2 months ago
- 0b3bde5 Silence MSVC type conversion warnings by Manuel Pégourié-Gonnard · 4 years, 2 months ago
- f10d289 Simplify sign selection by Manuel Pégourié-Gonnard · 4 years, 2 months ago
- 5325b97 Avoid UB caused by conversion to int by Manuel Pégourié-Gonnard · 4 years, 2 months ago
- 464fe6a Use bit operations for mpi_safe_cond_swap() by Manuel Pégourié-Gonnard · 4 years, 2 months ago
- c3be399 Use bit operations for mpi_safe_cond_assign() by Manuel Pégourié-Gonnard · 4 years, 2 months ago
- eaafa49 Avoid using == for sensitive comparisons by Manuel Pégourié-Gonnard · 4 years, 2 months ago
- e10e8db Use constant-time look-up for modular exponentiation by Manuel Pégourié-Gonnard · 4 years, 5 months ago
- c4c0d81 Merge branch 'development_2.x' into development_2.x-restricted by Manuel Pégourié-Gonnard · 4 years, 2 months ago
- 766edb8 Merge pull request #4635 from Patater/mbed-can-do-timing-2.x by Ronald Cron · 4 years, 2 months ago
- 78719ea Merge pull request #4646 from daverodgman/travis-disable-osx-development_2.x by Dave Rodgman · 4 years, 2 months ago
- fcf958a Disable OS X builds on Travis by Dave Rodgman · 4 years, 2 months ago
- 128c94d config: Allow Mbed to implement TIMING_C by Jaeden Amero · 4 years, 2 months ago
- 7a4c758 Merge pull request #4541 from mpg/fix-ssl-cf-hmac-alt-2.x by Gilles Peskine · 4 years, 2 months ago
- 8639048 Merge pull request #831 from gilles-peskine-arm/mpi_fill_random-constant_time_comparison-development_2.x-restricted by Manuel Pégourié-Gonnard · 4 years, 2 months ago
- 74f66bb Fix non-constant-time comparison in mbedtls_mpi_random by Gilles Peskine · 4 years, 4 months ago
- 62da8ac Merge pull request #4276 from gilles-peskine-arm/random-range-uniformity by Manuel Pégourié-Gonnard · 4 years, 2 months ago
- 23422e4 Note that the byte order in mpi_fill_random_internal() is deliberate by Gilles Peskine · 4 years, 2 months ago
- c0b68bf Use MBEDTLS_MPI_CHK where warranted by Gilles Peskine · 4 years, 2 months ago
- 3130ce2 New internal function mbedtls_mpi_resize_clear by Gilles Peskine · 4 years, 2 months ago
- e4f937f Lift function call out of inner loop by Gilles Peskine · 4 years, 2 months ago
- f37b9f7 Fix mistakes in test case descriptions by Gilles Peskine · 4 years, 2 months ago
- 1177907 Use ternary operator with the most common case first by Gilles Peskine · 4 years, 2 months ago
- b72b7e6 Fix long-standing obsolete comment by Gilles Peskine · 4 years, 2 months ago
- 3f61363 Correct some comments about ECC in mbedtls_mpi_random by Gilles Peskine · 4 years, 4 months ago
- 346d20d DHM: add test case with x_size < 0 by Gilles Peskine · 4 years, 4 months ago
- 9e96679 DHM tests: add some explanations by Gilles Peskine · 4 years, 4 months ago
- 104eb82 DHM: add notes about leading zeros by Gilles Peskine · 4 years, 4 months ago
- a16001e mpi_fill_random_internal: remove spurious grow() call by Gilles Peskine · 4 years, 4 months ago
- 3d60ece Note that the "0 limb in ..." tests rely on undocumented behavior by Gilles Peskine · 4 years, 4 months ago
- 33701a6 mbedtls_mpi_random: document MBEDTLS_ERR_MPI_NOT_ACCEPTABLE by Gilles Peskine · 4 years, 4 months ago
- e39ee8e MPI random test: use more iterations for small numbers by Gilles Peskine · 4 years, 4 months ago
- 38de7ee MPI random test: Add test cases with lower_bound > upper_bound by Gilles Peskine · 4 years, 4 months ago
- c520d7a MPI random test: fix small-range test stats check when min > 1 by Gilles Peskine · 4 years, 4 months ago
- 8190d31 MPI random test: Add a few more small-range tests by Gilles Peskine · 4 years, 4 months ago
- b66cc7d Fix copypasta in test case description by Gilles Peskine · 4 years, 4 months ago
- ef13251 Contextualize comment about mbedtls_mpi_random retries by Gilles Peskine · 4 years, 4 months ago
- 3b05615 Better document and slightly simplify >>2^n heuristic by Gilles Peskine · 4 years, 4 months ago
- f467e1a MPI random: add unit tests with a previously nonzero value by Gilles Peskine · 4 years, 4 months ago
- 8f45470 Fix mbedtls_mpi_random when N has leading zeros by Gilles Peskine · 4 years, 4 months ago
- be4b5dd Add changelog entry for non-uniform MPI random generation by Gilles Peskine · 4 years, 4 months ago
- 16e3668 DHM: use mbedtls_mpi_random for blinding and key generation by Gilles Peskine · 4 years, 4 months ago
- 58df4c9 dhm_check_range: microoptimization by Gilles Peskine · 4 years, 4 months ago
- 87fdb1f DHM refactoring: use dhm_random_below in dhm_make_common by Gilles Peskine · 4 years, 4 months ago
- b4e815f DHM blinding: don't accept P-1 as a blinding value by Gilles Peskine · 4 years, 4 months ago
- 0853bb2 DHM refactoring: unify mbedtls_dhm_make_{params,public} by Gilles Peskine · 4 years, 4 months ago
- 33ec863 Test mbedtls_dhm_make_params with different x_size by Gilles Peskine · 4 years, 4 months ago
- a2ce04e Repeat a few DH tests by Gilles Peskine · 4 years, 4 months ago
- dc0b6e4 Test range and format of dhm_make_params output by Gilles Peskine · 4 years, 4 months ago
- 6466d34 ECP: use mbedtls_mpi_random for blinding by Gilles Peskine · 4 years, 4 months ago
- aeab0fb Preserve MBEDTLS_ERR_ECP_RANDOM_FAILED in case of a hostile RNG by Gilles Peskine · 4 years, 4 months ago
- cba4b35 Changelog entry for adding mbedtls_mpi_random() by Gilles Peskine · 4 years, 4 months ago
- 9312ba5 mbedtls_mpi_random: check for invalid arguments by Gilles Peskine · 4 years, 4 months ago
- 4699fa4 Move mbedtls_mpi_random to the bignum module by Gilles Peskine · 4 years, 4 months ago
- 7967ec5 mbedtls_ecp_gen_privkey_sw: generalize to mbedtls_mpi_random by Gilles Peskine · 4 years, 4 months ago
- 6373fab mbedtls_ecp_gen_privkey_sw: range and coverage tests by Gilles Peskine · 4 years, 4 months ago
- eadf31d mbedtls_ecp_gen_privkey_mx: simplify the size calculation logic by Gilles Peskine · 4 years, 5 months ago
- 4f77674 mbedtls_ecp_gen_privkey_mx: make bit manipulations unconditional by Gilles Peskine · 4 years, 5 months ago
- 6acfc9c mbedtls_ecp_gen_privkey_mx: remove the exception for all-zero by Gilles Peskine · 4 years, 5 months ago
- 1888285 Add unit tests for mbedtls_ecp_gen_privkey_mx by Gilles Peskine · 4 years, 5 months ago