Commit Graph

  • fcc223b081 fix(mbedtls): remove logical dead code mbedtls-3.6.3-idf Ashish Sharma 2025-04-17 13:37:47 +08:00
  • 1d34215adb feat(component/mbedtls): Add support for RSASSA-PSS with RSA alt Ashish Sharma 2025-03-10 14:18:40 +08:00
  • 601990b1d8
    bignum: update API mbedtls_mpi_exp_mod_unsafe to support hardware implementation nilesh.kale 2024-09-24 15:49:15 +05:30
  • 80adbf17d6
    Remove dependency on submodule 'framework' nilesh.kale 2024-04-16 15:03:20 +05:30
  • 0cab5e38cd
    gcm: Support software fallback for non-AES ciphers in a gcm operation. harshal.patil 2023-12-19 13:28:05 +05:30
  • 0336591a3b
    initial version of the sbom.yml file Frantisek Hrbata 2023-06-19 16:21:49 +02:00
  • 45ee0a7463
    cmake: Removed CMake flags for controlling C standard - CMAKE_C_EXTENSIONS: Enable/disable compiler-specific extensions - CMAKE_C_STANDARD: Set C standard (C99, C11) - These variables (as set in mbedtls) set the C standard to C99 for ESP-IDF as well, resulting in build errors related to asm volatile Laukik Hase 2022-07-15 17:42:05 +05:30
  • b86b2b3d3e
    ecp: Add support for hardware implementation of ECP routines - ESP32C2 has a hardware ECC accelerator that supports NIST P-192 and NIST P-256 curves, which can increase the performance of the point multiplication and point verification operation. - Provision is also added to fallback to software implementation in case the curve is not from the supported curves Sachin Parekh 2022-01-05 15:23:44 +05:30
  • 06932ed614
    bignum: add provision for combined software and hardware MPI approach Mahavir Jain 2021-11-18 15:39:30 +05:30
  • 44b36292d8
    mbedtls: Re-apply MBEDTLS_BIGNUM_ALT & related macros for custom bignum functions Angus Gratton 2017-09-06 15:06:57 +10:00
  • 22098d41c6 Add auto-generated files mbedtls-3.6.3 Minos Galanakis 2025-03-20 09:33:09 +00:00
  • 2c824b4fe5 Added framework as a flattened directory Minos Galanakis 2025-03-20 09:28:45 +00:00
  • b41194ce7f Unlinked framework as a submodule. Minos Galanakis 2025-03-20 09:26:53 +00:00
  • 03d424bf94 Updated BRANCHES.md Minos Galanakis 2025-03-18 18:43:48 +00:00
  • b215873972 Finalise ChangeLog Minos Galanakis 2025-03-18 17:22:59 +00:00
  • e62ef05344 Version Bump for 3.6.3 Minos Galanakis 2025-03-18 17:11:54 +00:00
  • a3c020d2cf Assemble Changelog Minos Galanakis 2025-03-18 16:50:40 +00:00
  • 688494ae41 Changelog: Added CVE. Minos Galanakis 2025-03-18 16:44:06 +00:00
  • 7a95d16a31 Merge branch 'mbedtls-3.6-restricted' into mbedtls-3.6.3rc0-pr Minos Galanakis 2025-03-18 16:28:26 +00:00
  • f985bee481
    Merge pull request #10065 from minosgalanakis/task9887_extend_defragmentation_tests_36 Gilles Peskine 2025-03-18 12:46:29 +00:00
  • 6c129c36ff ssl-opt: Added 4 and 128 bytes tests to HS defragmentation for server initiated reneg Minos Galanakis 2025-03-18 10:31:37 +00:00
  • 5c6d3173fa ssl-opt: Fixed a minor typo. Minos Galanakis 2025-03-18 10:25:24 +00:00
  • b6ad19b2b8
    Merge pull request #9976 from mpg/defragment-ext-test-3.6 Manuel Pégourié-Gonnard 2025-03-17 11:44:28 +00:00
  • 739ad37249
    Merge pull request #1324 from Mbed-TLS/pre-3.6.3-upstream-merge Manuel Pégourié-Gonnard 2025-03-17 09:36:34 +01:00
  • dfc8e43614 Merge remote-tracking branch 'upstream/mbedtls-3.6' into pre-3.6.3-upstream-merge Minos Galanakis 2025-03-14 14:23:23 +00:00
  • d3ca688b4b
    Merge pull request #10064 from davidhorstmann-arm/update-3.0-migration-guide-3.6 Manuel Pégourié-Gonnard 2025-03-14 13:28:49 +00:00
  • 20220f09b4 Reword slightly to be more tentative David Horstmann 2025-03-14 10:50:20 +00:00
  • c03cd1124c
    Merge pull request #10025 from waleed-elmelegy-arm/mbedtls-3.6-fix-key-deriv-bad-state-error Gilles Peskine 2025-03-14 10:11:40 +00:00
  • 43a04e7640 Re-introduce log asserts on positive cases Manuel Pégourié-Gonnard 2025-03-11 12:12:51 +01:00
  • 8476c38b21 Improve a test assertion Manuel Pégourié-Gonnard 2025-03-11 10:27:49 +01:00
  • 29073e3a00 Fix a typo Manuel Pégourié-Gonnard 2025-03-11 10:26:36 +01:00
  • b59caea309 Add test cases for EOF in the middle of fragments Manuel Pégourié-Gonnard 2025-03-11 10:17:51 +01:00
  • 4712b3e6b8 Adjust logic around log pattern Manuel Pégourié-Gonnard 2025-03-11 10:12:30 +01:00
  • d2197afa37 Add test for length larger than 2^16 Manuel Pégourié-Gonnard 2025-03-07 12:53:43 +01:00
  • 8577510009 Adapt "large ClientHello" tests to incremental Manuel Pégourié-Gonnard 2025-03-07 12:36:08 +01:00
  • c6cf7e5b19 Cleanly reject non-HS in-between HS fragments Manuel Pégourié-Gonnard 2025-03-05 12:52:18 +01:00
  • 051b1e21d6 Reduce the level of logging used in tests Manuel Pégourié-Gonnard 2025-03-05 11:53:09 +01:00
  • adad47634e Move new tests to their own data file Manuel Pégourié-Gonnard 2025-03-04 10:18:30 +01:00
  • 996c4c00a6 Fix dependency issues Manuel Pégourié-Gonnard 2025-03-04 10:12:25 +01:00
  • 6b25c504e1 New test function for large ClientHello Manuel Pégourié-Gonnard 2025-02-26 13:01:10 +01:00
  • 89cc61a9fa Fix hash dependencies for TLS 1.2 tests Manuel Pégourié-Gonnard 2025-02-25 10:56:10 +01:00
  • 2b1ec8f63e Fix curve dependencies Manuel Pégourié-Gonnard 2025-02-25 10:50:29 +01:00
  • 428ce0aff9 Add missing dependency declaration Manuel Pégourié-Gonnard 2025-02-25 10:32:20 +01:00
  • 3a7f1d229b Fix dependency issues Manuel Pégourié-Gonnard 2025-02-24 09:53:26 +01:00
  • 31253cdafd Add test with non-HS record in-between HS fragments Manuel Pégourié-Gonnard 2025-02-17 11:22:29 +01:00
  • bde37cedde Add test to TLS 1.3 ClientHello fragmentation Manuel Pégourié-Gonnard 2025-02-17 10:08:50 +01:00
  • ba71610fa3 Add reference tests with 1.3 ClientHello Manuel Pégourié-Gonnard 2025-02-13 13:00:37 +01:00
  • f83bc798e1 Add supported_curves/groups extension Manuel Pégourié-Gonnard 2025-02-12 12:36:28 +01:00
  • 00ad6f6b03 New test function inject_client_content_on_the_wire() Manuel Pégourié-Gonnard 2025-02-11 13:19:45 +01:00
  • 0ed5cb8074
    Merge pull request #10004 from gilles-peskine-arm/doc-threading-needed-by-psa-3.6 Gilles Peskine 2025-03-14 03:51:52 +00:00
  • bde759b792 ssl-opt: Disabled the renegotiation delay for fragmented HS renegotiation. Minos Galanakis 2025-03-13 11:43:53 +00:00
  • 875cce945a ssl-opt: Updated documentation. Minos Galanakis 2025-03-13 11:42:05 +00:00
  • e61d0e9f7c ssl-opt: Added client-initiated server-rejected renegotation test. Minos Galanakis 2025-03-12 01:07:58 +00:00
  • 27988889e5 ssl-opt: Updated O_NEXT_CLI_RENEGOTIATE used by fragmented HS renegotiation with certificates. Minos Galanakis 2025-03-11 17:29:33 +00:00
  • 2a1eacc0b6 ssl-opt: Fragmented HS renegotiation, removed -legacy_renegotiation argument. Minos Galanakis 2025-03-11 17:24:04 +00:00
  • e5a3fd2f9d ssl-opt: Fragmented HS renegotiation, removed requires_certificate_authentication dependency. Minos Galanakis 2025-03-11 17:11:09 +00:00
  • 5b6ec1566d ssl-opt: Fragmented HS renegotiation, removed requires_openssl_3_x dependency. Minos Galanakis 2025-03-11 17:10:12 +00:00
  • 620e8c29a3 ssl-opt: Fragmented HS renegotiation, adjusted test names for consistency. Minos Galanakis 2025-03-11 17:08:01 +00:00
  • 135aed519e ssl-opt: Fragmented HS renegotiation, updated matching regex Minos Galanakis 2025-03-11 17:00:45 +00:00
  • 9d78547692 ssl-opt: Added coverage for client-initiated fragmented HS renegotiation tests. Minos Galanakis 2025-03-11 14:19:48 +00:00
  • 9d1aa0870e ssl-opt: Refactored fragmented HS renegotiation tests. Minos Galanakis 2025-03-11 14:17:25 +00:00
  • 44c1c5fc69 ssl-opt: Fragmented HS renegotiation, updated documentation. Minos Galanakis 2025-03-11 14:06:38 +00:00
  • 6d1491d6c4 ssl-opt: Removed mock-tests from HS renegotiation. Minos Galanakis 2025-03-11 14:03:38 +00:00
  • a23e697ef3 sll-opt: Added refence fix for the Mock HS Defrag test using renegotitiation delay Minos Galanakis 2025-03-07 09:58:10 +00:00
  • eec6eb9cd4 programs -> ssl_client2.c: Added option renego_delay to set record buffer depth. Minos Galanakis 2025-03-06 18:51:09 +00:00
  • 12cf388856 Added Mock Renegotiation negative test for testing. Minos Galanakis 2025-03-06 15:19:53 +00:00
  • a37a936beb ssl-opt: Added fragmented HS tests for server-initiated renegotiation. Minos Galanakis 2025-03-06 15:09:39 +00:00
  • c4595a4c6a ssl-opt: Added fragmented HS tests for client-initiated renegotiation. Minos Galanakis 2025-02-12 18:23:09 +00:00
  • 1e6438d8b9 ssl-opt: Added fragmented HS tests for SSL_VARIABLE_BUFFER_LENGTH. Minos Galanakis 2025-02-12 16:20:01 +00:00
  • 235dfc2b8c Add note about MBEDTLS_PRIVATE() in 3.6 David Horstmann 2025-03-13 16:49:08 +00:00
  • cd5053465a Fix typos in the 3.0 migration guide David Horstmann 2025-03-13 15:52:00 +00:00
  • ba4f16691c
    Merge pull request #10058 from gilles-peskine-arm/mbedtls_net_send-api-desc-tweak-3.6 Gilles Peskine 2025-03-13 16:29:57 +00:00
  • b22247b85b
    Merge pull request #10043 from Mbed-TLS/msvc-format-size-macros-3.6 Bence Szépkúti 2025-03-13 10:09:13 +00:00
  • b05b3b19d7 mbedtls_net_send API description typo fix Noah Pendleton 2024-05-03 11:02:22 -04:00
  • 3dbe333ab0
    Merge pull request #10051 from Vge0rge/key_id_range_backport Gilles Peskine 2025-03-13 09:27:12 +00:00
  • 5b114163e4
    Merge pull request #10056 from minosgalanakis/feature_merge_defragmentation_36 Manuel Pégourié-Gonnard 2025-03-13 08:36:11 +00:00
  • c64b7bc664 Use an array of strings instead of pointer smuggling Bence Szépkúti 2025-03-12 17:08:46 +01:00
  • 26f0044ad0
    Merge pull request #1319 from davidhorstmann-arm/calc-finished-check-return-3.6 David Horstmann 2025-03-12 17:35:40 +00:00
  • a029387d1b Use dummy typedef instead of macro Bence Szépkúti 2025-03-12 16:43:38 +01:00
  • f525505886 Clarify changelog Bence Szépkúti 2025-03-11 17:47:11 +01:00
  • 51668e5249 Updated framework pointer. Minos Galanakis 2025-03-12 15:22:27 +00:00
  • 104bd06826 Merge remote-tracking branch 'origin/features/tls-defragmentation/3.6' into feature_merge_defragmentation_36 Minos Galanakis 2025-03-12 14:56:36 +00:00
  • 26932b811b
    Merge pull request #10055 from gilles-peskine-arm/tls-defragment-doc-3.6 Manuel Pégourié-Gonnard 2025-03-12 13:00:23 +01:00
  • a7c020d6cb Update the location of defragmentation limitations Gilles Peskine 2025-03-12 10:08:14 +01:00
  • 858900656e State globally that the limitations don't apply to DTLS Gilles Peskine 2025-03-12 10:07:33 +01:00
  • bc0255592f Clarify DTLS Gilles Peskine 2025-03-11 13:47:49 +01:00
  • c3af2f48c4 ClientHello may be fragmented in renegotiation Gilles Peskine 2025-03-11 13:47:14 +01:00
  • 494e4943b5 Move the defragmentation documentation to mbedtls_ssl_handshake Gilles Peskine 2025-03-11 13:45:27 +01:00
  • 1933932e55 Refer to the API documentation for details Gilles Peskine 2025-03-05 17:44:20 +01:00
  • b5ccd32390 Document the limitations of TLS handshake message defragmentation Gilles Peskine 2025-03-05 17:41:59 +01:00
  • 43f636ff4d
    Merge pull request #1316 from gilles-peskine-arm/zeroize-psa-202503-3.6 Gilles Peskine 2025-03-11 17:38:28 +01:00
  • 0326decca7 Add changelog entry for TLS 1.2 Finished fix David Horstmann 2025-03-11 15:52:48 +00:00
  • d3b3c6740f More generally, what needs psa_crypto_init also needs threading Gilles Peskine 2025-03-11 14:45:54 +01:00
  • 579f91ad44
    Merge pull request #10046 from mpg/fix-defrag-interleave-3.6 Manuel Pégourié-Gonnard 2025-03-11 12:38:21 +01:00
  • d5e64f71db PSA core: Allow enabling one volatile/builtin key Georgios Vasilakis 2025-03-11 09:37:29 +01:00
  • 8a4ec49671 Cleanly reject non-HS in-between HS fragments Manuel Pégourié-Gonnard 2025-03-05 12:52:18 +01:00
  • 443908bc5d Replace zero by PSA_ALG_NONE in key derivation input functions Waleed Elmelegy 2025-03-10 14:19:01 +00:00
  • db475821f9 Fix comments Bence Szépkúti 2025-03-08 01:02:37 +01:00
  • 23e941a2e7 Update changelog to call out MinGW Bence Szépkúti 2025-03-08 00:40:47 +01:00
  • b5ef7da7cb TLS1.2: Check for failures in Finished calculation David Horstmann 2025-03-07 17:20:59 +00:00