Gilles Peskine 85485c7338 Always gather MBEDTLS_ENTROPY_BLOCK_SIZE bytes of entropy ... mbedtls_entropy_func returns up to MBEDTLS_ENTROPY_BLOCK_SIZE bytes. This is the output of a hash function and does not indicate how many bytes of entropy went into the hash computation. Enforce that mbedtls_entropy_func gathers a total of MBEDTLS_ENTROPY_BLOCK_SIZE bytes or more from strong sources. Weak sources don't count for this calculation. This is complementary to the per-source threshold mechanism. In particular, we define system sources with a threshold of 32. But when using SHA-512 for the entropy accumulator, MBEDTLS_ENTROPY_BLOCK_SIZE = 64, so users can expect 64 bytes' worth of entropy. Before, you only got 64 bytes of entropy if there were two sources. Now you get 64 bytes of entropy even with a single source with a threshold of 32.		2019-10-09 13:53:47 +02:00
..
.gitignore
aes.c
aesni.c
arc4.c
aria.c
asn1parse.c	mbedtls_asn1_get_bitstring_null: fix rejection of short inputs	2019-09-11 15:46:44 +02:00
asn1write.c	mbedtls_asn1_store_named_data: clarify val allocation behavior	2019-09-11 15:46:45 +02:00
base64.c
bignum.c	Merge remote-tracking branch 'origin/pr/2623' into development	2019-09-05 14:43:46 +01:00
blowfish.c
camellia.c
ccm.c
chacha20.c
chachapoly.c
cipher_wrap.c
cipher.c	Convert cipher and pk to PSA attribute-based key creation	2019-06-05 11:34:54 +02:00
cmac.c
CMakeLists.txt	Merge pull request #185 from gilles-peskine-arm/harvard-md	2019-09-10 18:38:39 +01:00
ctr_drbg.c
des.c	des: Reduce number of self-test iterations	2019-09-04 10:11:45 +01:00
dhm.c	Allow DHM self test to run without MBEDTLS_PEM_PARSE_C	2019-06-03 17:46:56 +01:00
ecdh.c	Fix code style	2019-08-19 13:37:46 +01:00
ecdsa.c	Correct deterministic ECDSA behavior	2019-09-05 11:18:58 +01:00
ecjpake.c	Fix handling of md failure	2019-07-08 14:32:38 +02:00
ecp_curves.c	Replace 0 by MBEDTLS_ECP_DP_NONE to avoid IAR compiler complains	2019-09-10 17:58:20 +03:00
ecp.c	3rdparty: Adjust use of Everest in ecp_supported_curves	2019-08-19 13:37:46 +01:00
entropy_poll.c
entropy.c	Always gather MBEDTLS_ENTROPY_BLOCK_SIZE bytes of entropy	2019-10-09 13:53:47 +02:00
error.c	Fix long-standing bug in error code description	2019-09-11 18:16:11 +02:00
gcm.c
havege.c	Fix minor type choice inconsistency	2019-06-24 15:45:09 +02:00
hkdf.c
hmac_drbg.c	HMAC DRBG: Split entropy-gathering requests to reduce request sizes	2019-08-30 11:16:24 +01:00
Makefile	Merge pull request #185 from gilles-peskine-arm/harvard-md	2019-09-10 18:38:39 +01:00
md2.c
md4.c
md5.c
md.c	Use smaller types in mbedtls_md_info_t	2019-07-22 11:35:19 +02:00
memory_buffer_alloc.c
nist_kw.c
oid.c
padlock.c
pem.c
pk_wrap.c	Convert cipher and pk to PSA attribute-based key creation	2019-06-05 11:34:54 +02:00
pk.c	Convert cipher and pk to PSA attribute-based key creation	2019-06-05 11:34:54 +02:00
pkcs5.c	Improve speed of PBKDF2 by caching the digest state of the passphrase	2019-09-23 19:15:54 -04:00
pkcs12.c
pkparse.c
pkwrite.c	Convert cipher and pk to PSA attribute-based key creation	2019-06-05 11:34:54 +02:00
platform_util.c	Check for zero length and NULL buffer pointer.	2019-09-04 11:31:35 +01:00
platform.c
poly1305.c
psa_crypto_core.h	Rename internal macro to pass check-names.sh	2019-08-08 10:58:09 +02:00
psa_crypto_invasive.h
psa_crypto_its.h	Add psa_trusted_storage_linux persistent storage support for v1.0.0 APIs	2019-07-23 17:30:37 +01:00
psa_crypto_se.c	Pass the key creation method to drivers	2019-08-09 14:59:31 +02:00
psa_crypto_se.h	Pass the key creation method to drivers	2019-08-09 14:59:31 +02:00
psa_crypto_service_integration.h
psa_crypto_slot_management.c	psa: Use application key ID where necessary	2019-08-28 17:24:27 +01:00
psa_crypto_slot_management.h	Rename psa_internal_allocate_key_slot to psa_get_empty_key_slot	2019-08-08 10:58:09 +02:00
psa_crypto_storage.c	Merge pull request #198 from gilles-peskine-arm/psa-api-1.0-beta-merge_development_20190801	2019-08-08 10:24:53 +02:00
psa_crypto_storage.h	Switch storage functions over to psa_core_key_attributes_t	2019-07-31 14:15:27 +02:00
psa_crypto.c	Key derivation: forbid output_key without input_key	2019-09-24 18:39:03 +02:00
psa_its_file.c	Add an input check in psa_its_set	2019-09-05 09:34:34 -04:00
ripemd160.c
rsa_internal.c
rsa.c
sha1.c
sha256.c
sha512.c	Re-roll main loop with SHA512_SMALLER	2019-07-17 13:16:54 +02:00
threading.c
timing.c	timing: Remove redundant include file	2019-06-20 10:51:21 +01:00
version_features.c	Merge pull request #178 from mpg/sha512-smaller	2019-09-04 10:19:28 +01:00
version.c
xtea.c