mbedtls/library
Ronald Cron f1ed5951e3 ssl_srv.c: Mark ETM as disabled if cipher is not CBC
Encrypt-Then-Mac (ETM) is supported in Mbed TLS
server for TLS version geater than SSLv3 and only
for the CBC cipher mode thus make it
clear in the SSL context.

The previous code was ok as long as the check of
the ETM status was done only in the case of the CBC
cipher mode but fragile as #5573 revealed.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-28 12:16:13 +02:00
..
.gitignore
aes.c Merge pull request #4845 from mstarzyk-mobica/ecb-alt-ret-2.2x 2021-10-14 12:11:04 +02:00
aesni.c
arc4.c
aria.c Replace 3 byte shift with appropriate macro 2021-08-03 14:02:41 +01:00
asn1parse.c
asn1write.c Replace MBEDTLS_CHAR_x with MBEDTLS_BYTE_x 2021-08-03 14:08:06 +01:00
base64.c Delete base64_invasive.h due to functions are moved to the constant-time module 2021-12-08 16:20:27 +01:00
bignum.c Merge pull request #5167 from tom-cosgrove-arm/fix-builds-with-only-mbedtls_bignum_c-defined 2021-12-07 12:38:04 +01:00
blowfish.c Implement byte reading macros to remaining files 2021-08-03 16:42:42 +01:00
camellia.c Add Character byte reading macros 2021-08-03 14:01:51 +01:00
ccm.c Improve documentation and add more uses of MBEDTLS_PUT 2021-08-03 14:09:21 +01:00
certs.c
chacha20.c Replace instances of byte reading macros with PUT 2021-08-03 14:08:41 +01:00
chachapoly.c Replace instances of byte reading macros with PUT 2021-08-03 14:08:41 +01:00
check_crypto_config.h psa: config: Add CAMELLIA to the list of possible CMAC ciphers 2021-03-25 14:25:46 +01:00
cipher_wrap.c
cipher.c Merge pull request #5255 from AndrzejKurek/chacha-iv-len-16-fixes-2.x 2022-02-03 11:31:34 +01:00
cmac.c Allow skipping 3DES in CMAC self-test when ALT implemented 2021-04-30 10:09:52 +02:00
CMakeLists.txt Bump version to 2.28.0 2021-12-15 11:55:31 +00:00
common.h Remove macro that does not belong in 2.x 2021-08-18 11:59:16 +01:00
constant_time_internal.h Add documentation for the functions 2021-12-08 16:24:22 +01:00
constant_time_invasive.h Add documentation for the functions 2021-12-08 16:24:22 +01:00
constant_time.c Cap the workaround for mbedtls_mpi_safe_cond_assign on MSVC/ARM64 to MSVC versions prior to 17.1. 2022-01-31 13:37:47 -08:00
ctr_drbg.c Tidy up grouped MBEDTLS_BYTE_x macros 2021-08-23 11:35:25 +01:00
debug.c Add missing parentheses 2021-06-07 21:42:15 +02:00
des.c Merge pull request #4845 from mstarzyk-mobica/ecb-alt-ret-2.2x 2021-10-14 12:11:04 +02:00
dhm.c Use byte reading macros in places not using a byte mask 2021-08-03 14:08:33 +01:00
ecdh.c
ecdsa.c avoid "maybe-uninitialized" and "free-nonheap-object" errors/warnings with gcc11 2021-05-12 09:37:00 -04:00
ecjpake.c Tidy up grouped MBEDTLS_BYTE_x macros 2021-08-23 11:35:25 +01:00
ecp_curves.c Add prefix to BYTES_TO_T_UINT_* 2021-06-25 14:59:15 +01:00
ecp_invasive.h Move mbedtls_mpi_random to the bignum module 2021-06-02 21:31:24 +02:00
ecp.c Improve documentation and add more uses of MBEDTLS_PUT 2021-08-03 14:09:21 +01:00
entropy_poll.c Merge pull request #4110 from gilles-peskine-arm/psa-external-random-in-mbedtls 2021-02-22 14:47:29 +00:00
entropy.c Merge pull request #3616 from militant-daos/bug_3175 2021-03-30 17:33:08 +02:00
error.c Revert "Remove deprecated things from hashing modules" 2021-04-15 12:28:15 +02:00
gcm.c An initialization vector IV can have any number of bits between 1 and 2021-11-05 00:13:43 +08:00
havege.c
hkdf.c
hmac_drbg.c Document mutex invariant for HMAC_DRBG 2021-02-22 19:24:03 +01:00
Makefile Bump version to 2.28.0 2021-12-15 11:55:31 +00:00
md2.c Revert "Remove deprecated things from hashing modules" 2021-04-15 12:28:15 +02:00
md4.c Implement byte reading macros to remaining files 2021-08-03 16:42:42 +01:00
md5.c GET macros use a target variable 2021-08-03 13:39:57 +01:00
md.c Revert "Remove deprecated things from hashing modules" 2021-04-15 12:28:15 +02:00
memory_buffer_alloc.c
mps_common.h Capitalise MPS trace macros 2021-04-07 12:45:35 +01:00
mps_error.h Fix Doxygen headers for MPS files 2021-03-29 14:20:18 +01:00
mps_reader.c Capitalise MPS trace macros 2021-04-07 12:45:35 +01:00
mps_reader.h Fix Doxygen headers for MPS files 2021-03-29 14:20:18 +01:00
mps_trace.c Capitalise MPS trace macros 2021-04-07 12:45:35 +01:00
mps_trace.h Capitalise MPS trace macros 2021-04-07 12:45:35 +01:00
net_sockets.c Add a missing guard for time.h in net_sockets.c 2022-03-04 15:25:42 -05:00
nist_kw.c Rename constant-time functions to have mbedtls_ct prefix 2021-11-11 11:32:01 +01:00
oid.c
padlock.c
pem.c Apply MBEDTLS_ERROR_ADD to library 2021-04-15 11:19:47 +01:00
pk_wrap.c
pk.c pk.c: Ensure hash_len equals hash in pk_hashlen_helper 2021-06-29 09:31:06 -04:00
pkcs5.c Apply MBEDTLS_ERROR_ADD to library 2021-04-15 11:19:47 +01:00
pkcs11.c
pkcs12.c Remove incorrect hashing 2021-12-13 11:14:45 +00:00
pkparse.c Backport 2.x: Remove compiler warning if only MBEDTLS_PK_PARSE_C is defined 2021-09-01 11:18:30 +02:00
pkwrite.c
platform_util.c
platform.c
poly1305.c Replace instances of byte reading macros with PUT 2021-08-03 14:09:05 +01:00
psa_crypto_aead.c Merge pull request #5189 from gilles-peskine-arm/struct_reordering_2.x 2021-12-09 12:54:13 +01:00
psa_crypto_aead.h psa: aead: Move AEAD driver entry points to psa_crypto_aead.c 2021-04-07 16:03:31 +02:00
psa_crypto_cipher.c Merge remote-tracking branch 'restricted/development_2.x-restricted' into mbedtls-2.28.0rc0-pr 2021-12-14 12:52:51 +00:00
psa_crypto_cipher.h Merge remote-tracking branch 'restricted/development_2.x-restricted' into mbedtls-2.28.0rc0-pr 2021-12-14 12:52:51 +00:00
psa_crypto_client.c Move the inclusion of crypto_spe.h to psa/crypto_platform.h 2021-06-23 14:45:17 +02:00
psa_crypto_core.h Merge pull request #4357 from gabor-mezei-arm/3267_Implement_psa_sign_message_and_verify 2021-05-17 10:14:46 +02:00
psa_crypto_driver_wrappers.c Merge remote-tracking branch 'restricted/development_2.x-restricted' into mbedtls-2.28.0rc0-pr 2021-12-14 12:52:51 +00:00
psa_crypto_driver_wrappers.h Merge remote-tracking branch 'restricted/development_2.x-restricted' into mbedtls-2.28.0rc0-pr 2021-12-14 12:52:51 +00:00
psa_crypto_ecp.c psa: Remove test code in the library 2021-11-30 14:49:19 +01:00
psa_crypto_ecp.h psa: test driver: Move driver test entry points prototypes 2021-11-30 14:49:19 +01:00
psa_crypto_hash.c psa: Fix and improve comments 2021-11-30 14:49:19 +01:00
psa_crypto_hash.h psa: test driver: Move driver test entry points prototypes 2021-11-30 14:49:19 +01:00
psa_crypto_invasive.h Rework MAC algorithm / key type validation 2021-03-03 19:58:02 +01:00
psa_crypto_its.h
psa_crypto_mac.c psa: Fix and improve comments 2021-11-30 14:49:19 +01:00
psa_crypto_mac.h psa: test driver: Move driver test entry points prototypes 2021-11-30 14:49:19 +01:00
psa_crypto_random_impl.h Work around MSVC bug with duplicate static declarations 2021-02-16 18:55:05 +01:00
psa_crypto_rsa.c psa: Remove test code in the library 2021-11-30 14:49:19 +01:00
psa_crypto_rsa.h psa: test driver: Move driver test entry points prototypes 2021-11-30 14:49:19 +01:00
psa_crypto_se.c
psa_crypto_se.h
psa_crypto_slot_management.c Remove dependency of builtin keys on storage 2021-09-11 22:31:06 +05:30
psa_crypto_slot_management.h psa: Fix error code when creating/registering a key with invalid id 2021-04-01 14:05:41 +02:00
psa_crypto_storage.c Erase secrets in allocated memory before freeing said memory 2022-03-04 10:35:19 +01:00
psa_crypto_storage.h
psa_crypto.c Merge remote-tracking branch 'restricted/development_2.x-restricted' into mbedtls-2.28.0rc0-pr 2021-12-14 12:52:51 +00:00
psa_its_file.c Update library/psa_its_file.c 2022-02-16 15:49:29 +01:00
ripemd160.c GET macros use a target variable 2021-08-03 13:39:57 +01:00
rsa_internal.c
rsa.c PKCS#1v1.5 signature: better cleanup of temporary values 2021-12-13 13:55:17 +01:00
sha1.c GET macros use a target variable 2021-08-03 13:39:57 +01:00
sha256.c GET macros use a target variable 2021-08-03 13:39:57 +01:00
sha512.c Add UINT64 GET and PUT macros 2021-08-03 14:08:26 +01:00
ssl_cache.c Don't check ciphersuite and compression in SSL session cache lookup 2021-05-19 05:09:56 +01:00
ssl_ciphersuites.c Fix dependencies on SHA384 cipher suites 2021-05-19 16:58:08 +02:00
ssl_cli.c Add missing key destruction calls in ssl_write_client_key_exchange 2022-02-25 04:42:03 -05:00
ssl_cookie.c mbedtls_ssl_cookie_check: zeroize expected cookie on cookie mismatch 2021-12-13 13:49:14 +01:00
ssl_msg.c Catch failures of md_hmac operations 2021-12-11 15:02:06 +01:00
ssl_srv.c ssl_srv.c: Mark ETM as disabled if cipher is not CBC 2022-03-28 12:16:13 +02:00
ssl_ticket.c Replace instances of byte reading macros with PUT 2021-08-03 14:09:05 +01:00
ssl_tls13_keys.c Replace MBEDTLS_CHAR_x with MBEDTLS_BYTE_x 2021-08-03 14:08:06 +01:00
ssl_tls13_keys.h
ssl_tls.c Add mbedtls_ssl_check_curve_tls_id() (internal) 2022-02-14 13:00:32 +01:00
threading.c Explain the usage of is_valid in pthread mutexes 2021-02-22 19:24:03 +01:00
timing.c Provide a dummy implementation of timing.c 2022-03-04 15:25:42 -05:00
version_features.c Update files generated from config.h 2021-09-30 19:24:36 +02:00
version.c
x509_create.c
x509_crl.c Do not include time.h without MBEDTLS_HAVE_TIME 2022-03-04 15:25:42 -05:00
x509_crt.c Do not include time.h without MBEDTLS_HAVE_TIME 2022-03-04 15:25:42 -05:00
x509_csr.c Apply MBEDTLS_ERROR_ADD to library 2021-04-15 11:19:47 +01:00
x509.c Apply MBEDTLS_ERROR_ADD to library 2021-04-15 11:19:47 +01:00
x509write_crt.c Replace instances of byte reading macros with PUT 2021-08-03 14:09:05 +01:00
x509write_csr.c avoid "maybe-uninitialized" and "free-nonheap-object" errors/warnings with gcc11 2021-05-12 09:37:00 -04:00
xtea.c Implement byte reading macros to remaining files 2021-08-03 16:42:42 +01:00