Gilles Peskine
bb07ca0bfb
Fix Lucky13 attack protection when using HMAC-SHA-384
...
As a protection against the Lucky Thirteen attack, the TLS code for
CBC decryption in encrypt-then-MAC mode performs extra MAC
calculations to compensate for variations in message size due to
padding. The amount of extra MAC calculation to perform was based on
the assumption that the bulk of the time is spent in processing
64-byte blocks, which was correct for most supported hashes but not for
SHA-384. Adapt the formula to 128-byte blocks for SHA-384.
2018-06-06 17:23:31 +02:00
Simon Butcher
ad11e65448
Merge remote-tracking branch 'public/pr/1404' into mbedtls-2.7
2018-06-01 19:35:16 +01:00
Simon Butcher
e83b1ae201
Merge remote-tracking branch 'public/pr/1606' into mbedtls-2.7
2018-06-01 19:34:44 +01:00
Moran Peker
9259b3be03
Remove double declaration of mbedtls_ssl_list_ciphersuites
...
Raised by TrinityTonic. #1359
2018-05-23 18:22:29 +01:00
Jaeden Amero
6856c2ebb5
Merge remote-tracking branch 'upstream-public/pr/1586' into mbedtls-2.7-proposed
2018-05-04 11:09:42 +01:00
Jaeden Amero
11d5551d0a
Merge remote-tracking branch 'upstream-public/pr/1487' into mbedtls-2.7-proposed
2018-05-04 11:06:21 +01:00
Andres AG
b7b420b51c
Fix uninitialized var in check-generated-files.sh
2018-05-01 21:01:22 +01:00
Andres AG
108aa0b4bc
Remove VS project files from deleted example apps
2018-05-01 21:01:21 +01:00
Andres AG
430e68c4b7
Remove refs to VS6 from generate_visualc_files.pl
2018-05-01 21:01:20 +01:00
Andres Amaya Garcia
7dae108fe8
Check generated-visualc-files in check-generated-files
2018-05-01 21:01:18 +01:00
Andres Amaya Garcia
464b1491c2
genereate_visualc_files.pl deletes old files
...
Add a function that deletes all the old Visual Studio prokect files
before generating the new ones. This ensure that project files for
delete example applications are removed from the repository.
2018-05-01 21:01:16 +01:00
Jaeden Amero
f8887521ef
Merge remote-tracking branch 'upstream-restricted/pr/479' into mbedtls-2.7-restricted
2018-04-30 17:38:39 +01:00
Simon Butcher
88cc94168c
Fix the ChangeLog for clarity, english and credit
2018-04-30 17:23:00 +01:00
Jaeden Amero
e1450a54b1
Merge remote-tracking branch 'upstream-restricted/pr/476' into mbedtls-2.7-restricted
2018-04-30 10:17:50 +01:00
Jaeden Amero
1fc4d33f5f
Update version to 2.7.3
2018-04-27 13:15:45 +01:00
Jaeden Amero
07d1d5f270
Merge remote-tracking branch 'upstream-restricted/pr/473' into mbedtls-2.7-restricted-proposed
...
Remove trailing whitespace in ChangeLog.
2018-04-26 09:07:15 +01:00
Jaeden Amero
402256184a
Merge branch 'mbedtls-2.7-proposed' into mbedtls-2.7-restricted-proposed
...
Resolve conflicts in ChangeLog.
2018-04-26 09:03:51 +01:00
Jaeden Amero
6a9af8184c
Merge remote-tracking branch 'upstream-public/pr/1595' into mbedtls-2.7-proposed
2018-04-25 14:25:03 +01:00
Andrzej Kurek
ef30d96739
Changelog entry
2018-04-25 05:29:00 -04:00
Andrzej Kurek
6608096544
Change accepted ciphersuite versions when parsing server hello
...
Accept only ciphersuites for version chosen by the server
2018-04-25 05:28:08 -04:00
Andrzej Kurek
149f3a4d73
Change variable bytes_written to header_bytes in record decompression
...
The name is changed to better reflect the input, decompression case
2018-04-24 06:32:44 -04:00
Andrzej Kurek
c3a3e2df0e
ssl_tls: Fix invalid buffer sizes during compression / decompression
...
Adjust information passed to zlib to include already written data.
2018-04-23 08:39:13 -04:00
Mohammad Azim Khan
0acbd7df03
Same ciphersuite validation in server and client hello
2018-04-20 19:58:37 +01:00
Manuel Pégourié-Gonnard
8bce3685f5
Merge remote-tracking branch 'restricted/pr/468' into mbedtls-2.7-restricted-proposed
...
* restricted/pr/468:
Improve comments style
Remove a redundant test
Add buffer size check before cert_type_len read
Update change log
Add a missing buffer size check
Correct buffer size check
2018-04-18 12:21:36 +02:00
Manuel Pégourié-Gonnard
4a9236efce
Merge remote-tracking branch 'public/pr/1234' into mbedtls-2.7-proposed
...
* public/pr/1234:
Doxygen: don't traverse symbolic links
2018-04-18 12:04:51 +02:00
Azim Khan
26838608f8
Use correct version of snprintf on Windows
...
platform.h defines MBEDTLS_PLATFORM_STD_SNPRINTF based on _WIN32. But while defining macro mbedtls_snprintf it sets it to STD C snprintf that is deprecated on Windows.
2018-04-17 23:35:04 +01:00
Krzysztof Stachowiak
affb4f8e90
Improve comments style
2018-04-10 13:43:23 +02:00
Krzysztof Stachowiak
5ca4c5a15d
Remove a redundant test
2018-04-10 13:43:17 +02:00
Krzysztof Stachowiak
314f16136f
Add buffer size check before cert_type_len read
2018-04-10 13:43:10 +02:00
Krzysztof Stachowiak
7da5088289
Update change log
2018-04-04 13:47:40 +02:00
Krzysztof Stachowiak
071f9a3e47
Add a missing buffer size check
2018-04-04 13:44:04 +02:00
Krzysztof Stachowiak
3d8663b4f9
Correct buffer size check
...
Further in the code the next field from the binary buffer is read. The
check contained an off by one error.
2018-04-04 13:43:00 +02:00
Gilles Peskine
be97c9cc85
Merge remote-tracking branch 'upstream-public/pr/1552' into mbedtls-2.7-proposed
2018-04-04 10:31:42 +02:00
Gilles Peskine
1852d66a24
Align ChangeLog entry for PR #1401 with development
2018-04-04 10:19:24 +02:00
Jaeden Amero
33be84f679
Merge remote-tracking branch 'upstream-public/pr/1502' into mbedtls-2.7-proposed
2018-04-03 19:16:12 +01:00
Jaeden Amero
15cdc5ec7b
Merge remote-tracking branch 'upstream-public/pr/1458' into mbedtls-2.7-proposed
2018-04-03 18:28:46 +01:00
Jaeden Amero
d8e0cec63b
Merge remote-tracking branch 'upstream-public/pr/1464' into mbedtls-2.7-proposed
2018-04-03 18:27:54 +01:00
Azim Khan
03da121663
Enable SSL test scripts to dump logs on stdout
2018-04-03 17:58:35 +01:00
Jaeden Amero
b5f53b1039
Merge remote-tracking branch 'upstream-public/pr/1401' into mbedtls-2.7-proposed
2018-04-03 12:09:45 +01:00
Jaeden Amero
e7dc46240d
Merge remote-tracking branch 'upstream-public/pr/1543' into mbedtls-2.7-proposed
2018-04-03 12:03:30 +01:00
Andrzej Kurek
ffaee0952c
pk_sign: added stdlib include
2018-04-03 04:36:52 -04:00
Andrzej Kurek
350e4dc6df
pk_sign: adjust return values
2018-04-03 04:04:36 -04:00
mohammad1603
29ed80f79f
Fix compatibility problem in the printed message
...
Replace %zu with %lu and add cast for the printed value.
2018-04-02 07:34:26 -07:00
Gilles Peskine
595c84a7b1
Merge remote-tracking branch 'upstream-public/pr/1500' into mbedtls-2.7-proposed
2018-04-01 12:41:29 +02:00
Gilles Peskine
27d88212c9
Merge remote-tracking branch 'upstream-public/pr/1541' into mbedtls-2.7-proposed
2018-04-01 12:40:51 +02:00
Gilles Peskine
a0e03a81a7
Merge branch 'pr_1538' into mbedtls-2.7-proposed
2018-04-01 12:35:50 +02:00
Gilles Peskine
ab50464f42
Minor changelog improvement
2018-04-01 12:32:37 +02:00
Gilles Peskine
f3df741d8f
Add ChangeLog entry to credit independent contribution
...
Also: fixes #1437
2018-03-31 23:05:14 +02:00
Gilles Peskine
cc78ac46e7
Update error.c
2018-03-30 18:52:10 +02:00
Gilles Peskine
5114d3e4e1
Clarify the use of MBEDTLS_ERR_PK_SIG_LEN_MISMATCH
...
Clarify what MBEDTLS_ERR_ECP_SIG_LEN_MISMATCH and
MBEDTLS_ERR_PK_SIG_LEN_MISMATCH mean. Add comments to highlight that
this indicates that a valid signature is present, unlike other error
codes. See
https://github.com/ARMmbed/mbedtls/pull/1149#discussion_r178130705
2018-03-30 18:43:16 +02:00