- e034348 Add generated files by David Horstmann · 10 months ago
- dff776e Bump version to 3.6.2 by David Horstmann · 10 months ago
- 3188178 pkwrite: fix buffer overrun by Valerio Setti · 10 months ago
- 0d11176 Add generated files by David Horstmann · 11 months ago
- 1d2dcfc Bump version to 3.6.1 by David Horstmann · 11 months ago
- 9f10979 Merge branch 'mbedtls-3.6-restricted' into mbedtls-3.6.1rc0-pr by David Horstmann · 11 months ago
- c46edd4 Fix/Improve documentation by Ronald Cron · 11 months ago
- 9f44c88 Rename some "new_session_tickets" symbols by Ronald Cron · 11 months ago
- ba45a44 Move session tickets getter functions to ssl_misc.h by Ronald Cron · 11 months ago
- 97dc583 Improve debug logs by Ronald Cron · 11 months ago
- d67f801 Do not add a new field in the SSL config by Ronald Cron · 11 months ago
- b675b2b TLS 1.3: Ignore tickets if disabled at runtime by Ronald Cron · 11 months ago
- bedddd7 Add mbedtls_ssl_conf_enable_new_session_tickets() API by Ronald Cron · 11 months ago
- 57dbd69 TLS 1.3 server: move crypto_init after protocol negotiation by Gilles Peskine · 11 months ago
- 5047627 Error translation and init are needed in PSK-only builds as well by Gilles Peskine · 11 months ago
- 069bccd Call psa_crypto_init in the library when required for TLS 1.3 by Gilles Peskine · 11 months ago
- 4002e6f Merge remote-tracking branch 'mbedtls-3.6' into mbedtls-3.6-restricted by Gilles Peskine · 11 months ago
- 86a4c25 Merge pull request #9499 from waleed-elmelegy-arm/fix-legacy-compression-issue-3.6 by Gilles Peskine · 12 months ago
- df0ef8a Merge pull request #9281 from mpg/rsapub by Gilles Peskine · 12 months ago
- a1c4f4c Improve comments explaining legacy_methods_compression handling by Waleed Elmelegy · 1 year, 1 month ago
- 3918598 Correct a small typo in ssl_tls13_parse_client_hello() by Waleed Elmelegy · 1 year, 1 month ago
- 566ed54 Improve handling of legacy_compression_methods in ssl_tls13_parse_client_hello() by Waleed Elmelegy · 1 year, 1 month ago
- 41e0cdf Fix issue in handling legacy_compression_methods in ssl_tls13_parse_client_hello() by Waleed Elmelegy · 1 year, 2 months ago
- 5f31697 Add header for mbedtls_mpi_exp_mod_unsafe() by Janos Follath · 12 months ago
- 273d07b Merge pull request #9240 from gilles-peskine-arm/psa-keystore-dynamic-3.6 by Manuel Pégourié-Gonnard · 12 months ago
- 82976f3 Make mbedtls_mpi_exp_mod_unsafe internal by Janos Follath · 12 months ago
- 11cac75 Simplify and explain the overflow check for maximum slice length by Gilles Peskine · 12 months ago
- 6298d73 Merge pull request #1265 from mpg/refactor-tls123-verif by Manuel Pégourié-Gonnard · 12 months ago
- 7e551a2 Merge pull request #1263 from mpg/fix-tls13-optional-ku by Manuel Pégourié-Gonnard · 12 months ago
- 9183ba1 Add overflow check for maximum key slot length by David Horstmann · 12 months ago
- 4312491 Tweak macro check to allow 3 extra key slices by David Horstmann · 12 months ago
- a8e13d7 Fix incorrect comments on slice numbering by David Horstmann · 12 months ago
- c32a4a2 Fix guards around function now used by 1.3 as well by Manuel Pégourié-Gonnard · 12 months ago
- 565da76 Fix typos in comments by Manuel Pégourié-Gonnard · 12 months ago
- f2aa65f Improve some comments by Manuel Pégourié-Gonnard · 12 months ago
- ce60330 Merge 1.2 and 1.3 certificate verification by Manuel Pégourié-Gonnard · 12 months ago
- d37054c Minor refactoring of generic SSL certificate verif by Manuel Pégourié-Gonnard · 12 months ago
- dee6ffa Add support for context f_vrfy callback in 1.3 by Manuel Pégourié-Gonnard · 12 months ago
- e910ac8 Improve a variable's name by Manuel Pégourié-Gonnard · 12 months ago
- 523a7e4 Restrict the scope of a few variables by Manuel Pégourié-Gonnard · 12 months ago
- cb7f632 tls13: Add support for trusted certificate callback by Ronald Cron · 1 year, 4 months ago
- 2b98a4e Allow no authentication of the server in 1.3 by Manuel Pégourié-Gonnard · 12 months ago
- e1cc926 Allow optional authentication of the server in 1.3 by Manuel Pégourié-Gonnard · 12 months ago
- 4d4c0c7 Add comments about 1.3 server sending no cert by Manuel Pégourié-Gonnard · 12 months ago
- 85b864e Rm translation code for unused flag by Manuel Pégourié-Gonnard · 12 months ago
- 8a14aaa Simplify certificate curve check for 1.2 by Manuel Pégourié-Gonnard · 12 months ago
- 4938b69 Make mbedtls_ssl_check_cert_usage() work for 1.3 by Manuel Pégourié-Gonnard · 12 months ago
- 96a0c5c Clean up mbedtls_ssl_check_cert_usage() by Manuel Pégourié-Gonnard · 12 months ago
- afb2079 Clean up initialization in _core_exp_mod() by Janos Follath · 12 months ago
- 8786dd7 Disable optionally safe test hook in threading builds by Janos Follath · 12 months ago
- a112691 Fix optionally safe hooks declarations by Janos Follath · 12 months ago
- c2ec6fa Free allocated memory where methods were returning without freeing by Gowtham Suresh Kumar · 12 months ago
- 9d72df8 Optimise public RSA operations by Janos Follath · 12 months ago
- 2c62441 Fix mpi_core_exp_mod documentation by Janos Follath · 12 months ago
- 68c0e3d Fix Mbed-TLS build when WIN32_LEAN_AND_MEAN macro is defined globally by Sergey Markelov · 12 months ago
- e0842aa Add tests for optionally safe codepaths by Janos Follath · 12 months ago
- 020b9ab Use actual exponent size for window calculation by Janos Follath · 12 months ago
- a5fc8f3 Move _public parameters next to their target by Janos Follath · 12 months ago
- 0c292b2 Make MBEDTLS_MPI_IS_PUBLIC thumb friendly by Janos Follath · 12 months ago
- 90b4271 Move MBEDTLS_MPI_IS_* macros to bignum_core.h by Janos Follath · 12 months ago
- bb3f295 Move mixed security code to small local functions by Janos Follath · 12 months ago
- 38ff70e Make _optionally_safe functions internal by Janos Follath · 12 months ago
- 7f9470a Merge pull request #9451 from minosgalanakis/fix-v3.6-issues-9186-and-9188-bp by Gilles Peskine · 12 months ago
- 1dfb6b5 Clarify some internal documentation by Gilles Peskine · 12 months ago
- ac43de0 Make integer downsizing explicit by Gilles Peskine · 1 year, 2 months ago
- 3bc9d2b Dynamic key store: make full-key-store tests work effectively by Gilles Peskine · 1 year, 1 month ago
- a81282c Microoptimizations when MBEDTLS_PSA_KEY_STORE_DYNAMIC is disabled by Gilles Peskine · 1 year, 2 months ago
- e8199f5 Dynamic key store: implementation by Gilles Peskine · 1 year, 2 months ago
- 47ad2f7 psa_key_slot_t: different fields in free vs occupied slots by Gilles Peskine · 1 year, 2 months ago
- 5064af6 Dynamic key store: preparatory refactoring by Gilles Peskine · 1 year, 2 months ago
- 3b41e1d Merge pull request #9403 from gilles-peskine-arm/psa-keystore-dynamic-prep-3.6 by Gilles Peskine · 12 months ago
- ef41d8c Fix 1.3 failure to update flags for (ext)KeyUsage by Manuel Pégourié-Gonnard · 12 months ago
- e217673 Merge remote-tracking branch 'public/mbedtls-3.6' into merge-3.6 by Manuel Pégourié-Gonnard · 12 months ago
- 5eca402 Fix inverted assertion message by Gilles Peskine · 12 months ago
- 4a85ff3 Rename one more deprecated identifier by Gilles Peskine · 1 year, 1 month ago
- 0d619b2 Documentation improvements by Gilles Peskine · 1 year, 1 month ago
- 52504f8 Rename internal function psa_key_production_parameters_are_default by Gilles Peskine · 1 year, 1 month ago
- f36d785 Implement psa_generate_key_custom by Gilles Peskine · 1 year, 2 months ago
- 4d0d0ec Move the -Wmissing-prototypes option from library/CMakeLists.txt to the top-level CMakeLists.txt for GCC & Clang by Michael Schuster · 1 year, 2 months ago
- 5be4fd7 Fix build of v3.6 with unset MBEDTLS_DHM_C but MBEDTLS_USE_PSA_CRYPTO set (fixes #9188) by Michael Schuster · 1 year, 2 months ago
- c9184fe Fix server mode only build of v3.6 with MBEDTLS_SSL_CLI_C unset (fixes #9186) by Michael Schuster · 1 year, 2 months ago
- e55bc34 Merge pull request #1257 from gilles-peskine-arm/psa-drbg-no-hmac-document-3.6 by Gilles Peskine · 1 year ago
- 4269ee6 Fix stack buffer overflow in ECDSA signature format conversions by Gilles Peskine · 1 year, 1 month ago
- 5d66039 Force MBEDTLS_PSA_HMAC_DRBG_MD_TYPE based on CTR_DRBG by Gilles Peskine · 1 year, 1 month ago
- 7dea096 Fix overlap between volatile keys and built-in keys by Gilles Peskine · 1 year, 1 month ago
- 708ec09 Assert that the key ID range for volatile keys is large enough by Gilles Peskine · 1 year, 1 month ago
- b6bf370 Assert that key ID ranges don't overlap by Gilles Peskine · 1 year, 1 month ago
- d72ad73 Prevent mbedtls_psa_register_se_key with volatile keys by Gilles Peskine · 1 year, 2 months ago
- 86c6037 Reorder blocks to avoid double negations by Gilles Peskine · 1 year, 1 month ago
- 4804847 Make it possible to enable CTR_DRBG/PSA without a PSA AES driver by Gilles Peskine · 1 year, 1 month ago
- cd693c3 MBEDTLS_STATIC_ASSERT: make it work outside of a function by Gilles Peskine · 1 year, 2 months ago
- 83da5ab Fix typo in platform_util.c by Michael Grand (TrustnGo) · 1 year, 2 months ago
- 422a276 Merge pull request #9045 from Troy-Butler/handle-null-args by Gilles Peskine · 1 year, 1 month ago
- 41204b8 Merge pull request #9272 from sezrab/silence-3.6 by Gilles Peskine · 1 year, 1 month ago
- c030418 Merge pull request #9341 from gilles-peskine-arm/psa_cipher_decrypt-ccm_star-iv_length_enforcement-3.6 by Gilles Peskine · 1 year, 1 month ago
- acef7b3 Merge pull request #9132 from andre-rosa/check-overflow-when-reading-padding-len-on-aes-128-cbc-decryption-for-mbedtls-3.6 by Gilles Peskine · 1 year, 1 month ago
- b47c3b3 psa_cipher_decrypt CCM*: fix rejection of messages shorter than 3 bytes by Gilles Peskine · 1 year, 1 month ago
- 75ed587 Add optionally unsafe variant of exp_mod for perf by Manuel Pégourié-Gonnard · 1 year, 2 months ago
- 38bc960 Silence gcc 12.2.0 warning by Patrick Wildt · 1 year, 3 months ago
- 8fb5df8 Merge pull request #9248 from sezrab/fix-function-parameter-3.6 by Tom Cosgrove · 1 year, 2 months ago