Rivoreo Source Code Repositories
src.rivoreo.one
/
security
/
mbedtls
/
f6a19bd728d5a94b2575477942210cdb2a93ef70
f6a19bd
Possible resource leak on FILE* removed in X509 parse
by Paul Bakker
· 12 years ago
c72d3f7
Possible resource leak on FILE* removed in CTR_DRBG
by Paul Bakker
· 12 years ago
45bda90
Comments for extra PSK ciphersuites added to config.h
by Paul Bakker
· 12 years ago
40afb4b
Added PSK GCM, SHA256 and SHA384 ciphers from RFC5487
by Paul Bakker
· 12 years ago
0c5fac2
Reordered ID's to numerical order
by Paul Bakker
· 12 years ago
a1bf92d
Added PSK NULL ciphers from RFC4785
by Paul Bakker
· 12 years ago
b91c2b5
PSK and DHE-PSK addition to ChangeLog
by Paul Bakker
· 12 years ago
bc956d9
Added missing config.h include
by Paul Bakker
· 12 years ago
48f7a5d
DHE-PSK based ciphersuite support added and cleaner key exchange based
by Paul Bakker
· 12 years ago
188c8de
Only allow missing SereverKeyExchange message in bare PSK mode
by Paul Bakker
· 12 years ago
bcbe2d8
Prettier printing of the lists for longer ciphersuite names
by Paul Bakker
· 12 years ago
e07f41d
Introduced defines to control availability of specific SSL Key Exchange methods.
by Paul Bakker
· 12 years ago
7ad00f9
Sanity checks added to config.h
by Paul Bakker
· 12 years ago
ed27a04
More granular define selections within code to allow for smaller code sizes
by Paul Bakker
· 12 years ago
7e5e7ca
Added PSK ciphersuite tests to compat.sh
by Paul Bakker
· 12 years ago
73a899a
Changed error code message to also cover missing pre-shared key
by Paul Bakker
· 12 years ago
fbb1780
Added pre-shared key handling for the server side of SSL / TLS
by Paul Bakker
· 12 years ago
70df2fb
Split parts of ssl_parse_client_key_exchange() into separate functions
by Paul Bakker
· 12 years ago
d4a56ec
Added pre-shared key handling for the client side of SSL / TLS
by Paul Bakker
· 12 years ago
f7abd42
Removed extra spaces on end of lines
by Paul Bakker
· 12 years ago
29e1f12
split parts of ssl_parse_server_key_exchange() into separate functions
by Paul Bakker
· 12 years ago
8f4ddae
Ability to specify allowed ciphersuites based on the protocol version.
by Paul Bakker
· 12 years ago
eff2e6d
Fixed MPI assembly for ARM when -O2 is used
by Paul Bakker
· 12 years ago
0ecdb23
Cleanup of the GCM code
by Paul Bakker
· 12 years ago
286bf3c
Split up largest test suite data files into smaller chunks
by Paul Bakker
· 12 years ago
370e90c
Enable PBKDF2 by default
by Paul Bakker
· 12 years ago
abfdfbf
Removed duplicate value from compat.sh ciphersuite list
by Paul Bakker
· 12 years ago
a280d0f
Fixed compiler warning for possible uninitialized ret
by Paul Bakker
· 12 years ago
27714b1
Added Camellia ECDHE-based CBC ciphersuites
by Paul Bakker
· 12 years ago
bfe671f
Blowfish has default of 128-bit keysize in cipher layer
by Paul Bakker
· 12 years ago
d5c2b54
Indication of x509_get_numeric_string() deprecation
by Paul Bakker
· 12 years ago
c70b982
OID functionality moved to a separate module.
by Paul Bakker
· 12 years ago
37de6be
Const correctness added for asn1write functions
by Paul Bakker
· 12 years ago
c295b83
Minor checks to prevent NULL-pointer exceptions
by Paul Bakker
· 12 years ago
3b6a07b
Prevented compiler warning on uninitialized end
by Paul Bakker
· 12 years ago
d3edc86
Moved writing of client extensions to separate functions in ssl_cli.c
by Paul Bakker
· 12 years ago
a54e493
Added ECDHE-based SHA256 and SHA384 ciphersuites
by Paul Bakker
· 12 years ago
b7149bc
Corrected behaviour for CBC-based suites using the SHA384 MAC and PRF
by Paul Bakker
· 12 years ago
a023437
Made change to error.c for dummy error_strerror() permanent
by Paul Bakker
· 12 years ago
41c83d3
Added Ephemeral Elliptic Curve Diffie Hellman ciphersuites to SSL/TLS
by Paul Bakker
· 12 years ago
00c1f43
Merge branch 'ecc-devel-mpg' into development
by Paul Bakker
· 12 years ago
d589a0d
Modified Makefiles to include new files and and config.h to PolarSSL standard
by Paul Bakker
· 12 years ago
68884e3
Moved to advanced ciphersuite representation and more dynamic SSL code
by Paul Bakker
· 12 years ago
9b5798d
Modified ChangeLog to include explanations of last SSL module changes
by Paul Bakker
· 12 years ago
c9118b4
Renamed hash structures to ctx
by Paul Bakker
· 12 years ago
09d6725
Modified to work in-place
by Paul Bakker
· 12 years ago
92be97b
Align data with future location based on IV size
by Paul Bakker
· 12 years ago
07eb38b
Update ssl_hw_record_init() to receive keylen, ivlen and maclen as well
by Paul Bakker
· 12 years ago
c787811
Do not set done in case of a fall-through
by Paul Bakker
· 12 years ago
5bd4229
Reverted commit 186751d9dd28082d4b19e69a2c15fd432d366133 and made out_hdr and out_msg back-to-back again
by Paul Bakker
· 12 years ago
fae35f0
Functions in cipher_wrap.c marked static
by Paul Bakker
· 12 years ago
d1df02a
Functions inside md_wrap.c now marked static
by Paul Bakker
· 12 years ago
ac0fba5
Added missing header for MD2 and made code compile with missing header files
by Paul Bakker
· 12 years ago
1bd3ae8
Added md_process() to MD layer for generic internal access to hash
by Paul Bakker
· 12 years ago
90f042d
Prepared for PolarSSL 1.2.6 release
by Paul Bakker
· 12 years ago
polarssl-1.2.6
fb1cbd3
Fixed assembly code for ARM (Thumb and regular) for some compilers
by Paul Bakker
· 12 years ago
e81beda
The SSL session cache module (ssl_cache) now also retains peer_cert information (not the entire chain)
by Paul Bakker
· 12 years ago
a35aa54
Fixed whitespaces in ChangeLog
by Paul Bakker
· 12 years ago
78a8c71
Re-added support for parsing and handling SSLv2 Client Hello messages
by Paul Bakker
· 12 years ago
37286a5
Fixed net_bind() for specified IP addresses on little endian systems
by Paul Bakker
· 12 years ago
926c8e4
Fixed possible NULL pointer exception in ssl_get_ciphersuite()
by Paul Bakker
· 12 years ago
8804f69
Removed timing differences due to bad padding from RSA decrypt for
by Paul Bakker
· 12 years ago
a43231c
Added support for custom labels when using rsa_rsaes_oaep_encrypt() or rsa_rsaes_oaep_decrypt()
by Paul Bakker
· 12 years ago
b386913
Split up the RSA PKCS#1 encrypt, decrypt, sign and verify functions
by Paul Bakker
· 12 years ago
e3e4a59
Added bugfix line for previous fixes for MS Visual Studio
by Paul Bakker
· 12 years ago
8ea31ff
Added missing typedef for INT64
by Paul Bakker
· 12 years ago
9f2018e
Fixed typo in _MSC_VER (double underscore at the start)
by Paul Bakker
· 12 years ago
8ddb645
Added conversion to int for a t_uint value to prevent compiler warnings
by Paul Bakker
· 12 years ago
3d2dc0f
Corrected GCM counter incrementation to use only 32-bits instead of 128-bits
by Paul Bakker
· 12 years ago
e47b34b
Removed further timing differences during SSL message decryption in ssl_decrypt_buf()
by Paul Bakker
· 12 years ago
2ca8ad1
Made x509parse.c also work with missing hash header files
by Paul Bakker
· 12 years ago
6deb37e
Added comments to indicate dependency from PEM on AES, DES and MD5
by Paul Bakker
· 12 years ago
fbb5cf9
Fixed typo in base64.h
by Paul Bakker
· 12 years ago
86f04f4
Fixed comment
by Paul Bakker
· 12 years ago
c046350
Fixed memory leak in ssl_free() and ssl_reset() for active session
by Paul Bakker
· 12 years ago
f35b739
Add a few check for context validity.
by Manuel Pégourié-Gonnard
· 12 years ago
424fda5
Add ecdh_calc_secret()
by Manuel Pégourié-Gonnard
· 12 years ago
5cceb41
Add ecdh_{make,read}_public()
by Manuel Pégourié-Gonnard
· 12 years ago
854fbd7
Add ecdh_read_params().
by Manuel Pégourié-Gonnard
· 12 years ago
1372476
Add ecdh_make_server_params (untested yet)
by Manuel Pégourié-Gonnard
· 12 years ago
63533e4
Create ecdh_context structure
by Manuel Pégourié-Gonnard
· 12 years ago
98f5181
Fix ecp_tls_read_point's signature
by Manuel Pégourié-Gonnard
· 12 years ago
7c145c6
Fix ecp_tls_read_group's signature
by Manuel Pégourié-Gonnard
· 12 years ago
8c16f96
Add a few tests for ecp_tls_read_point
by Manuel Pégourié-Gonnard
· 12 years ago
46106a9
Add tests for (and fix bug in) ecp_tls_write_group
by Manuel Pégourié-Gonnard
· 12 years ago
420f1eb
Fix ecp_tls_write_point's signature
by Manuel Pégourié-Gonnard
· 12 years ago
b325887
Add ecp_tls_write_group()
by Manuel Pégourié-Gonnard
· 12 years ago
6282aca
Add basic tests for ecp_tls_*_point
by Manuel Pégourié-Gonnard
· 12 years ago
7e86025
Rename ecp_*_binary to ecp_point_*_binary
by Manuel Pégourié-Gonnard
· 12 years ago
d84895d
Supress 'format' argument to ecp_read_binary.
by Manuel Pégourié-Gonnard
· 12 years ago
0079405
Add functions for read/write ECPoint records
by Manuel Pégourié-Gonnard
· 12 years ago
1a96728
Add function parsing a TLS ECParameters record
by Manuel Pégourié-Gonnard
· 12 years ago
c7a2da4
Updated for PolarSSL 1.2.5
by Paul Bakker
· 12 years ago
polarssl-1.2.5
40865c8
Added sending of alert messages in case of decryption failures as per RFC
by Paul Bakker
· 12 years ago
d66f070
Disable debug messages that can introduce a timing side channel.
by Paul Bakker
· 12 years ago
4582999
Fixed timing difference resulting from badly formatted padding.
by Paul Bakker
· 12 years ago
8fe40dc
Allow enabling of dummy error_strerror() to support some use-cases
by Paul Bakker
· 12 years ago
cf4a70c
Adjust names of ECDSA tests.
by Manuel Pégourié-Gonnard
· 12 years ago
450a163
Fix valgrind warning in ECDSA test suite.
by Manuel Pégourié-Gonnard
· 12 years ago
007b717
ECDH : add test vectors from RFC 5903.
by Manuel Pégourié-Gonnard
· 12 years ago
Next »