Janos Follath 9dc5b7a27b Bignum: Fix prime validation vulnerability ... The input distribution to primality testing functions is completely different when used for generating primes and when for validating primes. The constants used in the library are geared towards the prime generation use case and are weak when used for validation. (Maliciously constructed composite numbers can pass the test with high probability) The mbedtls_mpi_is_prime() function is in the public API and although it is not documented, it is reasonable to assume that the primary use case is validating primes. The RSA module too uses it for validating key material.		2018-10-11 15:43:12 +01:00
..
.gitignore
aes.c
aesni.c	Fix build errors on x32 by using the generic 'add' instruction	2018-01-29 21:54:26 +01:00
arc4.c
asn1parse.c
asn1write.c	Fix multiple quality issues in the source	2018-06-22 11:22:44 +01:00
base64.c
bignum.c	Bignum: Fix prime validation vulnerability	2018-10-11 15:43:12 +01:00
blowfish.c
camellia.c
ccm.c
certs.c	Fix 2.1-specific remaining MD/PK depend issues	2018-03-13 11:53:48 +01:00
cipher_wrap.c
cipher.c	Move definition of MBEDTLS_CIPHER_MODE_STREAM	2018-06-28 08:49:25 +03:00
CMakeLists.txt	Update library version number to 2.1.15	2018-08-31 16:10:48 +01:00
ctr_drbg.c
debug.c	Fix compilation error with Mingw32	2018-01-22 19:06:57 +02:00
des.c
dhm.c	Merge remote-tracking branch 'upstream-restricted/pr/406' into mbedtls-2.1-restricted	2017-11-28 16:19:19 +01:00
ecdh.c
ecdsa.c	Clarify the use of MBEDTLS_ERR_PK_SIG_LEN_MISMATCH	2018-03-30 18:51:14 +02:00
ecp_curves.c
ecp.c	Fix memory leak in ecp_mul_comb() if ecp_precompute_comb() fails	2018-07-26 11:09:37 +03:00
entropy_poll.c	Fix MSan build without MBEDTLS_TIMING_C	2018-06-01 18:38:53 +02:00
entropy.c	Merge branch 'pr_1276' into mbedtls-2.1-proposed	2018-03-12 23:51:01 +01:00
error.c	Update error.c	2018-03-30 18:51:31 +02:00
gcm.c
havege.c
hmac_drbg.c
Makefile	Merge remote-tracking branch 'upstream-public/pr/1501' into mbedtls-2.1-proposed	2018-04-01 12:41:33 +02:00
md2.c
md4.c
md5.c	Fix Lucky 13 cache attack on MD/SHA padding	2018-07-12 10:20:33 +02:00
md_wrap.c
md.c
memory_buffer_alloc.c	Fix braces in mbedtls_memory_buffer_alloc_status()	2018-04-17 16:46:41 +02:00
net.c	Fix multiple quality issues in the source	2018-06-22 11:22:44 +01:00
oid.c	pkcs5v2: add support for additional hmacSHA algorithms	2018-02-14 11:12:58 +01:00
padlock.c
pem.c	Merge remote-tracking branch 'upstream-public/pr/1009' into mbedtls-2.1-proposed	2018-03-12 23:44:48 +01:00
pk_wrap.c	Clarify the use of MBEDTLS_ERR_PK_SIG_LEN_MISMATCH	2018-03-30 18:51:14 +02:00
pk.c
pkcs5.c	Treat warnings as errors for IAR	2018-06-14 08:48:49 +01:00
pkcs11.c
pkcs12.c
pkparse.c	Fix parsing of PKCS#8 encoded Elliptic Curve keys.	2018-03-22 18:03:30 -07:00
pkwrite.c
platform.c	Fix compilation error with Mingw32	2018-01-22 19:06:57 +02:00
ripemd160.c
rsa.c	Merge remote-tracking branch 'upstream-restricted/pr/360' into mbedtls-2.1-restricted-proposed	2018-03-13 17:26:49 +01:00
sha1.c	Fix Lucky 13 cache attack on MD/SHA padding	2018-07-12 10:20:33 +02:00
sha256.c	Fix Lucky 13 cache attack on MD/SHA padding	2018-07-12 10:20:33 +02:00
sha512.c	Fix Lucky 13 cache attack on MD/SHA padding	2018-07-12 10:20:33 +02:00
ssl_cache.c	Address PR review comments	2017-10-30 18:11:38 +02:00
ssl_ciphersuites.c
ssl_cli.c	Merge remote-tracking branch 'public/pr/1889' into mbedtls-2.1	2018-08-28 12:26:33 +01:00
ssl_cookie.c
ssl_srv.c	Merge remote-tracking branch 'upstream-public/pr/1815' into mbedtls-2.1	2018-08-10 11:00:40 +01:00
ssl_ticket.c	Fix bug in SSL ticket implementation removing keys of age < 1s	2018-08-22 15:05:07 +01:00
ssl_tls.c	Merge remote-tracking branch 'restricted/pr/438' into mbedtls-2.1-restricted	2018-08-28 15:35:41 +01:00
threading.c	Do not define and initialize global mutexes on configurations that do not use them.	2018-03-21 15:32:47 +00:00
timing.c	Fix alarm(0) failure on mingw32	2018-01-29 13:23:40 +01:00
version_features.c	Adapt version_features.c	2018-02-22 16:18:07 +01:00
version.c
x509_create.c
x509_crl.c	x509: CRL: reject unsupported critical extensions	2018-03-14 09:28:24 +01:00
x509_crt.c	Merge remote-tracking branch 'restricted/pr/497' into mbedtls-2.1-restricted	2018-08-28 15:31:41 +01:00
x509_csr.c	Merge remote-tracking branch 'public/pr/1771' into mbedtls-2.1	2018-06-28 11:38:18 +01:00
x509.c	x509.c: Remove unused includes	2018-07-02 12:17:44 +01:00
x509write_crt.c
x509write_csr.c
xtea.c