coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-11-09 14:50:17 +08:00
Code Issues Packages Projects Releases Wiki Activity
33,063 Commits 183 Branches 286 Tags 220 MiB
Commit Graph

33063 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ronald Cron
4303dc6136 tls13_record_boundary_alignement: Append empty hs msg 
Append an empty handshake message to expand
the record instead of just a zero byte.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 16:16:08 +02:00
Ronald Cron
13ab16f1ef Various improvements of tls13_(drop_early_data|record_boundary_alignment)() 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 16:16:08 +02:00
Ronald Cron
8f1e330f20 tls13: Rework mbedtls_ssl_tls13_fetch_handshake_msg() 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 16:16:07 +02:00
Ronald Cron
835ffb3a7c tls13: Improve argument name 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 16:16:07 +02:00
Ronald Cron
1d0ff13c89 test_suite_ssl: Add initialization to all zeroes of test endpoint structs 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 16:16:07 +02:00
Ronald Cron
c277ffddc9 Fix typos 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 16:16:07 +02:00
Ronald Cron
9d6da5abcd Add change log 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 16:16:07 +02:00
Ronald Cron
70918ab425 test_suite_ssl: Test EndOfEarlyData on record boundary enforcement 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 16:16:07 +02:00
Ronald Cron
a441e4666b test_suite_ssl: Test client Finished on record boundary enforcement 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 16:16:07 +02:00
Ronald Cron
d157fa7ae2 test_suite_ssl: Test server Finished on record boundary enforcement 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 16:16:07 +02:00
Ronald Cron
ee2cb8abce test_suite_ssl: Test ServerHello on record boundary enforcement 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 16:16:07 +02:00
Ronald Cron
3f55bb6998 test_suite_ssl: Test ClientHello on record boundary check 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 16:16:07 +02:00
Ronald Cron
27c489be62 tls13: Add record boundary checks 
RFC 8446 (TLS 1.3 specification), Section 5.1, states:

Handshake messages MAY be coalesced into a single TLSPlaintext record
or fragmented across several records, provided that:
    ...
    -Handshake messages MUST NOT span key changes. Implementations
    MUST verify that all messages immediately preceding a key change
    align with a record boundary; if not, then they MUST terminate the
    connection with an "unexpected_message" alert. Because the
    ClientHello, EndOfEarlyData, ServerHello, Finished, and KeyUpdate
    messages can immediately precede a key change, implementations
    MUST send these messages in alignment with a record boundary.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 16:16:07 +02:00
Ronald Cron
399a28c76a test_suite_ssl: Add early data drop tests 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 16:16:06 +02:00
Ronald Cron
46069c6127
Merge pull request #1658 from bjwtaylor/ssl-ignores-failure-restricted-3.6 
Backport 3.6: Fix issues in ssl where it ignores the failure return
 2026-06-24 15:03:43 +02:00
Ben Taylor
27065ceb64 Fix code style 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
8e756e3ee3 remove md_psa.h 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
ea00a9ee70 replace mbedtls_md_error_from_psa with PSA_TO_MBEDTLS_ERR 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
7c007f49f7 Correct error handling in mbedtls_ssl_reset_checksum 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>

Backport note: adapted from upstream commit 35da56b4c749cb066bddfd328731fb1c493228dc; not a direct cherry-pick.
 2026-06-24 10:48:59 +01:00
Ben Taylor
6cb957324e Fix error codes for tls_transcript_error_propagation 
Co-authored-by: Ronald Cron <ronald.cron@arm.com>
Signed-off-by: Ben Taylor <32939606+bjwtaylor@users.noreply.github.com>
 2026-06-24 10:48:59 +01:00
Ben Taylor
e100cbcc2d Improve tls_transcript_error_propagation testing to check for error codes 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
34338f9aa9 Update regression test 
Co-authored-by: Ronald Cron <ronald.cron@arm.com>
Signed-off-by: Ben Taylor <32939606+bjwtaylor@users.noreply.github.com>
 2026-06-24 10:48:59 +01:00
Ben Taylor
e4e52d233e restore missing ext_len set 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
76c60fe603 remove trailing whitespace 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
9b1549a0cb Update ChangeLog with CVE number 
Co-authored-by: Ronald Cron <ronald.cron@arm.com>
Signed-off-by: Ben Taylor <32939606+bjwtaylor@users.noreply.github.com>
 2026-06-24 10:48:59 +01:00
Ben Taylor
a893b52bad Update ChangeLog to add CVE 
Co-authored-by: Gilles Peskine <gilles.peskine@arm.com>
Signed-off-by: Ben Taylor <32939606+bjwtaylor@users.noreply.github.com>
 2026-06-24 10:48:59 +01:00
Ben Taylor
814732a600 Update dependencies for skipped test 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
54d7ac4d3a fix code style 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
17160e402e Improve ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
491243442a Update error handling of return from ssl_write_ecjpake_kkpp_ext 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
d550895075 Improve testing 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
f1bac693c6 Update ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
b8ed7d81c7 Fix reporters in ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
7d0e7f889e Remove check for NULL pointer 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
84e9ec5339 Tidy up ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
eb01ebddab Add Reported by to ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
b4981f3e9c Fix code style issues 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
61087eb79d Add fix for missing return from ssl_write_ecjpake_kkpp_ext 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>

Backport note: adapted from upstream commit dc45235ca3faa5b1fe1df2b8967b019ccef2839d; not a direct cherry-pick.
 2026-06-24 10:48:59 +01:00
Ben Taylor
0ef63355f1 Add additional fix for return with error 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
2c4d8ad682 Add client tests for RMS computation error 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
355eae4d9c Add unsupported trigger check 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
1aeb46adb9 Add further documentation to tls_abort_transcript_context 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
bc250f0bba Fix issues with hanging seed length 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
3d6379aa61 Fixed code style 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
f0f708eade refactor initialisation in tls_transcript_error_propagation, so that the variables are initialised straight after they are declared 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
9c3cd1a5d4 Add additional guard for sha256 in tests 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
167a754c0d Improve layout of the code for debugging with breakpoints 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
8d083042a4 Add security impact 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
ca8eab3d69 Update ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00
Ben Taylor
84de9770cf Add ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-24 10:48:59 +01:00