coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-07-30 16:26:33 +08:00
Code Issues Packages Projects Releases Wiki Activity
32,727 Commits 183 Branches 286 Tags Multiple Licenses 215 MiB
Commit Graph

32727 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Minos Galanakis
e96de33867 psa_core: Added a retval in psa_aead_final_checks() 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-03-11 10:30:57 +00:00
Minos Galanakis
0004fe7e96 test_suite_ccm: Updated input arguments 
Key and iv are now test function internal arguments.

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-03-11 10:30:56 +00:00
Gilles Peskine
d8ce52df19 Fix Doxygen comment start 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-03-11 10:48:58 +01:00
Gilles Peskine
409427eac4 Fix grammar 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-03-11 10:31:59 +01:00
Gilles Peskine
7cf7a85008 Add missing parenthetical remark 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-03-11 10:31:58 +01:00
Minos Galanakis
32caf3bad0 ccm: Fail when calling finish without ccm_starts 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-03-10 22:04:27 +00:00
Minos Galanakis
27069c6be6 test_suite_ccm.function: Fixed typo in docs 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-03-10 22:04:27 +00:00
Minos Galanakis
f447b0264a test_suite_psa_crypto: Extended aead_multipart_state_test(2) 
This patch adds psa_aead_decrypt_setup() & psa_aead_finish()
path to the multipart_state_testing.

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-03-10 22:04:27 +00:00
Ronald Cron
0be90b44e2 Add change log 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-03-10 19:26:14 +01:00
Ronald Cron
668e677faf tls13_hrr_then_tls12_second_client_hello: Improve client and server state checks 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-03-10 19:26:14 +01:00
Ronald Cron
7b3af46c40 tls13_hrr_then_tls12_second_client_hello: Improve some comments 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-03-10 19:26:08 +01:00
Ronald Cron
a76e7c65bc tls13_hrr_then_tls12_second_client_hello: Various improvements 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-03-10 17:08:22 +01:00
Ronald Cron
828e3817ac
Merge pull request #10623 from ronald-cron-arm/dtls-client-hello-defragmentation-3.6 
Backport 3.6: Add support for (D)TLS 1.2 client hello defragmentation
 2026-03-10 14:46:41 +00:00
Manuel Pégourié-Gonnard
199d4d9380 FFDH: fix wrong word in comment 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-03-10 11:40:14 +01:00
Ronald Cron
7476e4067d Restore seq number check of post-handshake ClientHello msg 
The check was wrongly removed by the commit
"ssl_tls12_server.c: Move ClientHello message_seq adjustment".

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-03-10 10:15:42 +01:00
David Horstmann
97c4e3f69b Add missing full stop in ChangeLog entry 
Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2026-03-10 09:09:56 +00:00
David Horstmann
89f132d3fa Add buffer-too-small case for FFDH-8192 
Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2026-03-10 09:07:20 +00:00
David Horstmann
14b37ec1c4 Add small buffer case for P521 import/export 
Specifically for the simple import/export case and also the
import/export-public case.

Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2026-03-10 09:05:37 +00:00
David Horstmann
cc4e191d4f Add missing buffer-too-small tests 
Add tests for key import-export and key import followed by public-key
export when the output buffer is too small. Add these tests for the
following curves:
* p256 as an example of a Weierstrass curve
* Curve25519
* Curve448

Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2026-03-10 09:05:37 +00:00
David Horstmann
23e688b3ab Add credit to the ChangeLog entry 
Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2026-03-10 09:05:37 +00:00
David Horstmann
1ecd0c1ea6 Simplify ChangeLog entry 
Improve readability of the ChangeLog by including only the strictly
necessary information.

Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2026-03-10 09:05:37 +00:00
David Horstmann
a749c3a5f8 Add ChangeLog entry for FFDH buffer overflow fix 
Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2026-03-10 09:05:37 +00:00
David Horstmann
01bcc1f754 Add missing FFDH public key buffer length check 
When exporting an FFDH public key we were not properly checking the
length of the output buffer and would write the full length of the key
in all cases. Fix this by checking the size of the output buffer before
we write to it.

Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2026-03-10 09:05:37 +00:00
David Horstmann
443300e700 Add testcase for FFDH buffer overflow 
This testcase calls psa_export_public_key() on an FFDH key with an
output buffer that is too small. Since the size is calculated based on
the required key size but not checked against the available buffer size,
we overflow the buffer.

Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2026-03-10 09:05:37 +00:00
Ronald Cron
d6977afbd8 ssl_tls12_server.c: Move back the digest update 
Move back the digest update just after
the call to mbedtls_ssl_read_record().
It fits well here as we explain in the
comment associated to the call to
mbedtls_ssl_read_record() that we
update it manually.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-03-10 09:47:29 +01:00
Ronald Cron
1222d8cbf4 Improve comments 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-03-10 09:47:28 +01:00
Gilles Peskine
fc38b65561 Add advice to reseed the RNG if the application is cloned 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-03-09 18:06:38 +01:00
Gilles Peskine
855e10c108
Merge pull request #10068 from gilles-peskine-arm/pk-0e-prototype-3.6 
Minor documentation fixes in pk.h
 2026-03-09 13:57:34 +00:00
Gilles Peskine
0306be2cb5
Merge pull request #10465 from bensze01/abicheck-port-3.6 
[Backport 3.6] Move abi_check.py to the framework
 2026-03-09 13:57:08 +00:00
Manuel Pégourié-Gonnard
4704b6b4bd
Merge pull request #1488 from davidhorstmann-arm/fix-null-pointer-dereference-3.6 
[Backport 3.6] Fix null pointer dereference in `mbedtls_x509_string_to_names()`
 2026-03-09 12:42:56 +01:00
Manuel Pégourié-Gonnard
6a5d54b73d
Merge pull request #1503 from gilles-peskine-arm/merge-3.6-restricted-20260309 
Merge 3.6 public into restricted (ready for fork fix)
 2026-03-09 10:11:32 +01:00
Gilles Peskine
02b2b50fb0 Update framework with unix detection improvements 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-03-08 20:31:59 +01:00
Gilles Peskine
8f8b70aff1 Merge remote-tracking branch 'mbedtls-3.6' into merge-3.6-restricted-20260309 2026-03-08 20:26:08 +01:00
Gilles Peskine
4b571add25
Merge pull request #10621 from gilles-peskine-arm/unix-detection-202601-3.6 
Backport 3.6: Simplify platform requirements
 2026-03-06 18:06:04 +00:00
David Horstmann
f858b47709
Merge pull request #1500 from gilles-peskine-arm/inet_pton-changelog-attribution-3.6 
Update attribution to conform to contributor's request
 2026-03-05 15:00:22 +00:00
Minos Galanakis
e54d769fe8 Updated Changelog 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-03-05 14:20:15 +00:00
Minos Galanakis
a397bb13a3 test_suite_psa_crypto: Extended aead_multipart_state_test for PSA_ALG_CCM 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-03-05 14:20:15 +00:00
Bence Szépkúti
5dcfb01b52 Add abi_check.py bridge script 
The bulk of the script that was moved to the framework is now a pure
python module - bridge scripts like this one will remain in each
individual branch, and continue to be the way to invoke the ABI checks.

This way we can use the bridge scripts to encode branch-specific
information in a more convenient way.

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2026-03-05 14:55:00 +01:00
Bence Szépkúti
34bbc72190 Move abi_check.py into the framework 
Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2026-03-05 14:52:38 +01:00
Manuel Pégourié-Gonnard
174c323479 FFDH: fix some typos in test case titles 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-03-05 14:26:06 +01:00
Manuel Pégourié-Gonnard
e1d64c5ce2 Fix misplaced blank line in test data file 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-03-05 13:10:35 +01:00
Manuel Pégourié-Gonnard
35aec41600 Add Changelog entry for FFDH missing peerkey check 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-03-05 13:07:23 +01:00
Manuel Pégourié-Gonnard
f22ed632b4 FFDH: also test peer key 1 byte too long 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-03-05 13:04:50 +01:00
Manuel Pégourié-Gonnard
20a84bd287 FFDH: also test peer key = p, p+1, ff...ff 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-03-05 12:57:20 +01:00
Manuel Pégourié-Gonnard
7453b664af tests: use derive_setup when applicable 
There was a single case for key_agreement_setup that was failing when
setting up the derivation operation. Move this test case to use
derive_setup() instead. Add a corresponding positive test with
derive_setup() to make it more obvious that KEY_AGREEEMENT(ECDH, KDF)
works and the problem really is that the KDF is unknown.

Not the expected_status_setup argument of key_agreement_setup is no
longer needed and can be removed.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-03-05 12:57:05 +01:00
Manuel Pégourié-Gonnard
8eb4fba6fb FFDH: expand comment on peerkey check 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-03-05 12:56:53 +01:00
Manuel Pégourié-Gonnard
c173dfb035 FFDH: improve sanity checks 
- avoid grouping checks, for a better debugging experience (breakpoints)
- use a more logical order, checking the key type first

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-03-05 12:56:45 +01:00
Manuel Pégourié-Gonnard
5cce3c8a75 Add comment in raw key agreement test function 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-03-05 12:56:35 +01:00
Manuel Pégourié-Gonnard
7a4e2c67b4 FFDH: reorder checks to satisfy picky test 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-03-05 12:56:22 +01:00
Manuel Pégourié-Gonnard
fb70b7f849 FFDH: test with key derivation and bad peer key 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-03-05 12:53:19 +01:00