Janos Follath d65df1fa67 ECDSA: Fix side channel vulnerability ... The blinding applied to the scalar before modular inversion is inadequate. Bignum is not constant time/constant trace, side channel attacks can retrieve the blinded value, factor it (it is smaller than RSA keys and not guaranteed to have only large prime factors). Then the key can be recovered by brute force. Reducing the blinded value makes factoring useless because the adversary can only recover pk*t+z*N instead of pk*t.		2019-10-25 09:11:21 +01:00
..
.gitignore
aes.c	Add further missing brackets around macro parameters	2019-04-24 10:52:45 +02:00
aesni.c
arc4.c
aria.c	Implement parameter validation for ARIA module	2018-12-19 12:51:00 +00:00
asn1parse.c
asn1write.c	Fix ASN1 bitstring writing	2019-02-11 21:13:33 +00:00
base64.c
bignum.c	Merge remote-tracking branch 'origin/pr/2578' into mbedtls-2.16	2019-10-02 17:59:28 +01:00
blowfish.c	Implement parameter validation for Blowfish module	2018-12-19 12:52:59 +00:00
camellia.c	Minor improvements to Camellia module and documentation	2018-12-19 13:42:05 +00:00
ccm.c	Improve macro hygiene	2019-04-24 10:51:54 +02:00
certs.c	Update certificates to expire in 2029	2019-07-10 18:35:10 +03:00
chacha20.c	Improve macro hygiene	2019-04-24 10:51:54 +02:00
chachapoly.c	Fix wrong conditional in free() functions	2018-12-18 15:30:30 +00:00
cipher_wrap.c	Fix after PR comments	2018-07-23 18:18:32 +01:00
cipher.c	Remove unnecessary parameter validation from the Cipher module	2018-12-19 17:34:58 +01:00
cmac.c
CMakeLists.txt	Bump version to Mbed TLS 2.16.3	2019-09-06 13:27:00 +01:00
ctr_drbg.c	Streamline mbedtls_xxx_drbg_update_seed_file	2018-11-26 19:26:22 +01:00
debug.c	Merge remote-tracking branch 'origin/pr/1818' into mbedtls-2.16	2019-03-05 16:28:18 +00:00
des.c	Improve macro hygiene	2019-04-24 10:51:54 +02:00
dhm.c	Allow DHM self test to run without MBEDTLS_PEM_PARSE_C	2019-05-30 10:58:12 +01:00
ecdh.c	Fix mbedtls_ecdh_get_params with new ECDH context	2019-02-22 12:51:51 +01:00
ecdsa.c	ECDSA: Fix side channel vulnerability	2019-10-25 09:11:21 +01:00
ecjpake.c	Fix handling of md failure	2019-07-08 15:44:18 +02:00
ecp_curves.c	Improve macro hygiene	2019-04-24 10:51:54 +02:00
ecp.c	Improve macro hygiene	2019-04-24 10:51:54 +02:00
entropy_poll.c	Add missing bracket	2018-11-06 13:12:47 +00:00
entropy.c
error.c	Fix #2370, minor typos and spelling mistakes	2019-02-18 14:50:57 +00:00
gcm.c	Improve parameter validation in mbedtls_gcm_free()	2018-12-19 17:32:19 +01:00
havege.c	Prevent building the HAVEGE module on platforms where it doesn't work	2019-06-17 15:12:51 +02:00
hkdf.c	Fix issue if salt = NULL and salt_len !=0 in mbedtls_hkdf_extract()	2018-07-23 10:34:47 -07:00
hmac_drbg.c	HMAC DRBG: Split entropy-gathering requests to reduce request sizes	2019-08-30 12:16:06 +01:00
Makefile	Fix #2370, minor typos and spelling mistakes	2019-02-18 14:50:57 +00:00
md2.c
md4.c	Add more missing parentheses around macro parameters	2019-04-24 10:52:53 +02:00
md5.c	Add further missing brackets around macro parameters	2019-04-24 10:52:45 +02:00
md_wrap.c
md.c
memory_buffer_alloc.c
net_sockets.c	net_sockets: Fix typo in net_would_block()	2019-06-20 16:33:02 +01:00
nist_kw.c	Remove faulty cipher_finish calls from nist_kw	2018-12-20 12:15:40 +01:00
oid.c	Improve macro hygiene	2019-04-24 10:51:54 +02:00
padlock.c
pem.c
pk_wrap.c	Fix or improve some comments (and whitespace)	2018-10-15 15:27:49 +02:00
pk.c	Merge remote-tracking branch 'public/pr/1721' into development-restricted	2018-12-20 12:37:13 +00:00
pkcs5.c	Guard mbedtls_pkcs5_pbes2() by MBEDTLS_ASN1_PARSE_C	2018-10-16 13:39:40 +01:00
pkcs11.c
pkcs12.c	Make PBE-related parts of PKCS12 depend on MBEDTLS_ASN1_PARSE_C	2018-10-16 13:39:40 +01:00
pkparse.c	pk_parse*keyfile: explicitly validate path=NULL	2018-12-19 17:37:02 +01:00
pkwrite.c	Merge remote-tracking branch 'upstream-restricted/pr/503' into mbedtls-2.16-restricted	2019-08-14 16:39:24 +02:00
platform_util.c	Check for zero length and NULL buffer pointer	2019-09-04 11:19:38 +01:00
platform.c	Omit runtime configuration of calloc/free if macro config enabled	2018-10-11 11:04:20 +01:00
poly1305.c	Improve macro hygiene	2019-04-24 10:51:54 +02:00
ripemd160.c	Improve macro hygiene	2019-04-24 10:51:54 +02:00
rsa_internal.c	Bignum: Deprecate mbedtls_mpi_is_prime()	2018-10-09 16:36:53 +01:00
rsa.c	Merge remote-tracking branch 'public/pr/1721' into development-restricted	2018-12-20 12:37:13 +00:00
sha1.c	Add further missing brackets around macro parameters	2019-04-24 10:52:45 +02:00
sha256.c	Add further missing brackets around macro parameters	2019-04-24 10:52:45 +02:00
sha512.c	Add more missing parentheses around macro parameters	2019-04-24 10:52:53 +02:00
ssl_cache.c
ssl_ciphersuites.c	Reduce priority of 3DES ciphersuites	2019-03-01 10:29:13 +01:00
ssl_cli.c	SSL: Make use of the new ECDH interface	2018-12-06 12:22:46 +00:00
ssl_cookie.c
ssl_srv.c	Fix #2370, minor typos and spelling mistakes	2019-02-18 14:50:57 +00:00
ssl_ticket.c	Indentation fix	2018-10-25 16:07:16 +01:00
ssl_tls.c	Merge remote-tracking branch 'origin/pr/2714' into mbedtls-2.16	2019-06-21 16:00:52 +01:00
threading.c	Don't declare and define gmtime()-mutex on Windows platforms	2018-09-06 12:09:56 +01:00
timing.c	timing: Remove redundant include file	2019-06-20 16:33:02 +01:00
version_features.c	Move MBEDTLS_CTR_DRBG_USE_128_BIT_KEY to the correct section	2019-10-04 11:21:25 +02:00
version.c
x509_create.c	Break overly long line in library/x509_create.c	2018-11-02 10:52:38 +00:00
x509_crl.c	Always return a high-level error code from X.509 module	2019-06-04 14:01:10 +01:00
x509_crt.c	Fix uninitialized variable in x509_crt	2019-08-30 14:46:03 +03:00
x509_csr.c	Fix CSR parsing header call	2018-10-07 17:48:37 +01:00
x509.c	Merge remote-tracking branch 'origin/pr/2450' into mbedtls-2.16	2019-06-21 15:59:29 +01:00
x509write_crt.c	Change size of preallocated buffer for pk_sign() calls	2019-06-06 13:13:26 +02:00
x509write_csr.c	Change size of preallocated buffer for pk_sign() calls	2019-06-06 13:13:26 +02:00
xtea.c