Commit Graph

  • b5d87eaa67
    fix(mbedtls): update minimum cmake required to 3.10.2 mbedtls-3.6.4-idf Ashish Sharma 2025-05-22 13:39:40 +08:00
  • 32ae5590eb
    feat(component/mbedtls): Add support for RSASSA-PSS with RSA alt Ashish Sharma 2025-03-10 14:18:40 +08:00
  • f80458a160
    Flatten the submodule 'framework' nilesh.kale 2024-04-16 15:03:20 +05:30
  • 9f7b965b3b
    gcm: Support software fallback for non-AES ciphers in a gcm operation. harshal.patil 2023-12-19 13:28:05 +05:30
  • 3081b5f28b
    initial version of the sbom.yml file Frantisek Hrbata 2023-06-19 16:21:49 +02:00
  • b22b0188b9
    cmake: Removed CMake flags for controlling C standard - CMAKE_C_EXTENSIONS: Enable/disable compiler-specific extensions - CMAKE_C_STANDARD: Set C standard (C99, C11) - These variables (as set in mbedtls) set the C standard to C99 for ESP-IDF as well, resulting in build errors related to asm volatile Laukik Hase 2022-07-15 17:42:05 +05:30
  • 059ef604ce
    ecp: Add support for hardware implementation of ECP routines - ESP32C2 has a hardware ECC accelerator that supports NIST P-192 and NIST P-256 curves, which can increase the performance of the point multiplication and point verification operation. - Provision is also added to fallback to software implementation in case the curve is not from the supported curves Sachin Parekh 2022-01-05 15:23:44 +05:30
  • 937836545f
    bignum: add provision for combined software and hardware MPI approach Mahavir Jain 2021-11-18 15:39:30 +05:30
  • 267c0a4ea5
    mbedtls: Re-apply MBEDTLS_BIGNUM_ALT & related macros for custom bignum functions Angus Gratton 2017-09-06 15:06:57 +10:00
  • c765c831e5
    Merge pull request #1373 from Mbed-TLS/mbedtls-3.6.4rc0-pr mbedtls-3.6.4 minosgalanakis 2025-06-25 20:56:00 +01:00
  • 59e8b3a6b0 Added generated files Minos Galanakis 2025-06-25 14:17:02 +01:00
  • 5374262f3b Version bump 3.6.4 Minos Galanakis 2025-06-23 19:01:55 +01:00
  • c52f68fd21 Assemble ChangeLog Minos Galanakis 2025-06-23 18:56:34 +01:00
  • 4cbf802231 Properly initialize SSL endpoint objects Gilles Peskine 2025-06-24 17:26:35 +02:00
  • ae9a5e86f3 Fix accidentally skipped test assertion Gilles Peskine 2025-06-24 17:18:47 +02:00
  • f36277558a Merge remote-tracking branch 'restricted/mbedtls-3.6-restricted' into mbedtls-3.6.4rc0-pr Minos Galanakis 2025-06-23 18:52:17 +01:00
  • 3527ea9b78
    Merge pull request #10243 from ronald-cron-arm/mbedtls-3.6-release-sync Ronald Cron 2025-06-23 11:51:59 +02:00
  • bad1679623 Update framework pointer (release-sync) Ronald Cron 2025-06-23 09:32:12 +02:00
  • 54ceaf7a53
    Merge pull request #10200 from aslze/mbedtls-3.6 David Horstmann 2025-06-19 14:25:50 +00:00
  • 7df899211a fix: additional MSVC v142 build issue with tls1.3 configuration enabled. Ronald Cron 2025-06-18 10:02:01 +02:00
  • a84be59757
    Merge pull request #1366 from gilles-peskine-arm/base64-decode-clean-3.6 David Horstmann 2025-06-17 14:55:39 +01:00
  • d1f51696a6 Remove blank line Ronald Cron 2025-06-16 11:08:46 +02:00
  • 3c9ad42719
    Merge pull request #1367 from gilles-peskine-arm/aesni_has_support-volatile-3.6 Gilles Peskine 2025-06-13 23:20:28 +02:00
  • d593c54b3c
    Merge pull request #10215 from felixc-arm/gcc-15-warning-3.6 Manuel Pégourié-Gonnard 2025-06-13 12:34:55 +00:00
  • b8d14734fd Simplify changelog Felix Conway 2025-06-13 09:33:24 +01:00
  • 853cfbdced Add a note about processor memory reordering Gilles Peskine 2025-06-12 18:30:45 +02:00
  • 80ca13f07d Add changelog Felix Conway 2025-06-12 13:28:26 +01:00
  • 766be1f8f4 Replace __attribute__((nonstring)) with macro MBEDTLS_ATTRIBUTE_UNTERMINATED_STRING Felix Conway 2025-06-12 10:52:36 +01:00
  • 51dccfb2a6 Improve some explanations Gilles Peskine 2025-06-11 18:47:31 +02:00
  • 03303d88fb Don't mutate dst_size Gilles Peskine 2025-06-11 18:24:26 +02:00
  • 2e1399f1e1 Add __attribute__ ((nonstring)) to remove unterminated-string-initialization warning Felix Conway 2025-06-11 16:04:30 +01:00
  • f5db3e9436 Note that GCM is also impacted Gilles Peskine 2025-06-11 10:45:41 +02:00
  • a79525239f
    Merge pull request #1359 from Mbed-TLS/bugfix_1351_1352_1353_lms_drivers_3.6bp Gilles Peskine 2025-06-10 19:08:15 +02:00
  • 7ed3653c57
    Merge pull request #1363 from gilles-peskine-arm/3.6-restricted-merge-20250606 Manuel Pégourié-Gonnard 2025-06-10 11:01:11 +02:00
  • cae443405e
    Merge pull request #1347 from mpg/fix-asn1-store-named-data-null-deref-3.6 Manuel Pégourié-Gonnard 2025-06-10 09:50:34 +02:00
  • 4c26d7d54c
    Merge pull request #10179 from gilles-peskine-arm/union-initialization-gcc15-driver-checks-3.6 Manuel Pégourié-Gonnard 2025-06-10 07:43:10 +00:00
  • 55d211388a Adjust test case with invalid base64 Gilles Peskine 2025-06-10 09:42:03 +02:00
  • 8c67ac0f7f Fix race condition in mbedtls_aesni_has_support Gilles Peskine 2025-06-09 23:34:59 +02:00
  • 13cc0c2122 mbedtls_base64_decode: test dst=NULL with dlen>0 Gilles Peskine 2025-06-05 16:02:55 +02:00
  • e7ed8c4c2f Explain some aspects of the tests Gilles Peskine 2025-06-05 16:00:27 +02:00
  • 2b3d6a8f28 mbedtls_base64_decode: insist on correct padding Gilles Peskine 2025-06-04 11:22:25 +02:00
  • 255c492dab Added CVE's to ChangeLogs Minos Galanakis 2025-06-08 23:10:58 +01:00
  • df2f0aae81 lms.c: Updated documentation Minos Galanakis 2025-06-06 14:34:54 +01:00
  • 58a4479ace test_suite_lms.data: Updated comments Minos Galanakis 2025-06-06 10:58:20 +01:00
  • 7df273bb34 Merge remote-tracking branch 'mbedtls-3.6' into mbedtls-3.6-restricted Gilles Peskine 2025-06-06 10:45:37 +02:00
  • 84999d1a7b Fix mbedtls_base64_decode() accepting invalid inputs with 4n+1 digits Gilles Peskine 2025-06-04 10:33:31 +02:00
  • 683a46e6c1 mbedtls_base64_decode: assert sloppy behavior with bad number of = Gilles Peskine 2025-06-03 22:01:33 +02:00
  • 715bbf3e0c mbedtls_base64_decode: test the reported output length Gilles Peskine 2025-06-03 22:00:58 +02:00
  • c7beb847c9 test_suite_lms: Added negative test for corrupted Merkle path Minos Galanakis 2025-06-02 15:52:14 +01:00
  • b72573853a test_suite_lms: Added a test for importing invalid sized key Minos Galanakis 2025-06-02 15:00:47 +01:00
  • f84bc3f592 Added changelog for check return of merkle leaf Minos Galanakis 2025-06-02 14:38:55 +01:00
  • 3444757ac4 Added changelog for lms enum casting Minos Galanakis 2025-06-02 14:38:26 +01:00
  • 3b392af70d Added changelog for lms overread Minos Galanakis 2025-06-02 14:37:54 +01:00
  • 41422e1fc0 Fix change log entry Alvaro Segura 2025-06-04 23:37:19 +02:00
  • 673e1eb608 Fix build test programs in MSVC (due to a warning treated as error in winbase.h) Alvaro Segura 2025-06-04 23:31:35 +02:00
  • 9b3051fb10 Built-in lms driver: always zeroize output-buffer in create_merkle_leaf_value Minos Galanakis 2025-06-02 14:36:25 +01:00
  • ae449bfca5 Built-in lms driver:Check return values of Merkle node creation Minos Galanakis 2025-06-02 14:33:47 +01:00
  • caaffc1e7e Built-in lms/lmots driver: Harden public key import against enum truncation Minos Galanakis 2025-06-02 14:28:31 +01:00
  • 548e2dbf65 Built-in lms driver: Added input guard Minos Galanakis 2025-06-02 14:17:38 +01:00
  • 3f82706cb7
    Merge pull request #1349 from felixc-arm/pem-integer-underflow-3.6 David Horstmann 2025-06-04 14:36:35 +01:00
  • 42323eacc9 Add changelog Felix Conway 2025-05-27 16:01:07 +01:00
  • 6165e71589 Add fix for PEM underflow Felix Conway 2025-05-27 16:00:48 +01:00
  • 9325883d9f Add test using underflow-causing PEM keyfile Felix Conway 2025-05-27 14:54:07 +01:00
  • 1592639c1f
    Merge pull request #10182 from gilles-peskine-arm/f_rng-documentation-3.6 Gilles Peskine 2025-06-03 15:34:23 +00:00
  • 0050f5f394 Update framework with additional operation initialization checks Gilles Peskine 2025-02-05 20:04:40 +01:00
  • e51bde06da Fix possible UB in mbedtls_asn1_write_raw_buffer() Manuel Pégourié-Gonnard 2025-06-03 11:22:55 +02:00
  • 381900520f Fix psa_pake_operation_s member types Ronald Cron 2025-06-02 11:25:41 +02:00
  • d3324fd095 Move PAKE size calculation macros, cipher suite and operation structs Ronald Cron 2025-06-02 11:14:57 +02:00
  • 23a0d48d1c
    Merge pull request #10196 from ronald-cron-arm/move-crypto-struct-inclusion David Horstmann 2025-05-28 15:51:09 +00:00
  • d9c141749b
    Merge pull request #1345 from davidhorstmann-arm/pkcs7-side-channel-missing-credit-3.6 Manuel Pégourié-Gonnard 2025-05-28 11:49:35 +02:00
  • 4960825a94 Add change log Ronald Cron 2025-05-28 10:05:32 +02:00
  • 3ea3635d2f Move the inclusion of crypto_sizes.h and crypto_struct.h in crypto.h Ronald Cron 2025-05-28 10:02:12 +02:00
  • 04fe95d95b Add ChangeLog entry Manuel Pégourié-Gonnard 2025-05-26 12:38:52 +02:00
  • 12df5f3a16 Improve unit tests for mbedtls_asn1_store_named_data Manuel Pégourié-Gonnard 2025-05-26 10:55:59 +02:00
  • 2df7ab7c0c Fix bug in mbedtls_asn1_store_named_data() Manuel Pégourié-Gonnard 2025-05-26 10:42:14 +02:00
  • 98ae8db06b fix(mbedtls): set RSA padding only when DS peripheral is configured. mbedtls-3.6.3-idf Ashish Sharma 2025-05-21 13:24:07 +08:00
  • 13f86e689e Add tests for bug in mbedtls_x509_string_to_names() Manuel Pégourié-Gonnard 2025-05-21 14:35:42 +02:00
  • 077f8e6353 Restore standard initializers in _init tests Gilles Peskine 2025-02-05 19:13:51 +01:00
  • 93dd99571b Use short initializers for multipart operation structures Gilles Peskine 2025-02-05 19:00:04 +01:00
  • 4e2647c618 fix(mbedtls): update minimum cmake required to 3.10.2 Ashish Sharma 2025-05-22 13:39:40 +08:00
  • 1e9267c993
    Merge pull request #1340 from mpg/fix-string-to-names-uaf-3.6 Manuel Pégourié-Gonnard 2025-05-21 14:48:43 +02:00
  • 8ac3eb9833 Avoid a useless copy in cert_{req,write} Manuel Pégourié-Gonnard 2025-05-21 11:17:39 +02:00
  • 1173786544
    Merge pull request #10185 from rojer/tls_consts_3.6 Manuel Pégourié-Gonnard 2025-05-20 06:55:12 +00:00
  • fb5e2e5e46 Mark ssl_tls12_preset_suiteb_sig_algs const Deomid rojer Ryabkov 2024-03-20 00:43:34 +00:00
  • e3aaf82a77 Mark ssl_tls12_preset_default_sig_algs const Deomid rojer Ryabkov 2024-03-18 12:32:30 +00:00
  • dad206d25c
    Merge pull request #10168 from gilles-peskine-arm/union-initialization-gcc15-basic-fix-3.6 Manuel Pégourié-Gonnard 2025-05-19 10:31:47 +00:00
  • 8429619a92 Fix type in ChangeLog Manuel Pégourié-Gonnard 2025-05-19 12:29:11 +02:00
  • 8a6fc08607 Add comment on apparent type mismatch Manuel Pégourié-Gonnard 2025-05-19 12:28:42 +02:00
  • 35f2220e37 Remove redundant free loop Manuel Pégourié-Gonnard 2025-05-19 12:21:32 +02:00
  • addf8fc03e Fix ECDSA documentation: blinding is no longer optional Gilles Peskine 2025-05-16 15:00:09 +02:00
  • c0b357d8b4 ECDSA is a special flower Gilles Peskine 2025-05-16 14:59:42 +02:00
  • ed10e2ab87 Note functions that store the RNG callback in a context Gilles Peskine 2025-05-16 14:24:50 +02:00
  • 060c70e3ab Reference mbedtls_f_rng_t in public documentation Gilles Peskine 2025-05-16 14:19:38 +02:00
  • 1337d540ad Name and document the type of random generator callbacks Gilles Peskine 2025-05-16 14:12:15 +02:00
  • ddbf8d030a Add credit to the reporters of the PKCS7 issue David Horstmann 2025-05-14 15:45:00 +01:00
  • ff32e86429
    Merge pull request #10170 from yanesca/mbedtls-3.6.3.1-pr Gilles Peskine 2025-05-13 10:19:56 +00:00
  • 91b29a0bd9 Grammar in comments Gilles Peskine 2025-05-13 11:53:31 +02:00
  • c5848a5704 Merge branch 'mbedtls-3.6.3.1-rc' into mbedtls-3.6.3.1-pr Janos Follath 2025-05-09 13:03:56 +01:00
  • 6fb5120fde Remove .gitmodules Janos Follath 2025-05-08 16:06:32 +01:00
  • 65b548386f Changelog entry for the union initialization fixes Gilles Peskine 2025-02-05 20:33:15 +01:00