Gilles Peskine
64540d9577
Merge remote-tracking branch 'upstream-restricted/pr/458' into mbedtls-2.7-restricted-proposed
2018-03-13 17:24:46 +01:00
Gilles Peskine
955d70459d
Merge remote-tracking branch 'upstream-restricted/pr/460' into mbedtls-2.7-restricted-proposed
2018-03-13 17:24:33 +01:00
Gilles Peskine
427ff4836c
Merge remote-tracking branch 'upstream-public/pr/1219' into mbedtls-2.7-proposed
2018-03-12 23:52:24 +01:00
Gilles Peskine
c5671bdcf4
Merge remote-tracking branch 'upstream-public/pr/778' into mbedtls-2.7-proposed
2018-03-12 23:44:56 +01:00
Gilles Peskine
4668d8359c
Merge remote-tracking branch 'upstream-public/pr/1241' into mbedtls-2.7-proposed
2018-03-12 23:42:46 +01:00
Gilles Peskine
b21a085bae
Show build modes in code font
...
This clarifies that it's the string to type and not just some
description of it.
2018-03-12 13:12:34 +01:00
Gilles Peskine
8eda5ec8b4
Merge branch 'pr_1408' into mbedtls-2.7-proposed
2018-03-11 00:48:18 +01:00
Gilles Peskine
4848b97bc7
Merge remote-tracking branch 'upstream-public/pr/1249' into mbedtls-2.7-proposed
2018-03-11 00:48:17 +01:00
Gilles Peskine
dd7f5b9a37
Merge remote-tracking branch 'upstream-public/pr/1079' into mbedtls-2.7-proposed
2018-03-11 00:48:17 +01:00
Gilles Peskine
7b7c64424f
Merge remote-tracking branch 'upstream-public/pr/1012' into mbedtls-2.7-proposed
2018-03-11 00:48:17 +01:00
Gilles Peskine
158fc33368
Merge remote-tracking branch 'upstream-public/pr/1296' into HEAD
2018-03-11 00:47:54 +01:00
Gilles Peskine
3f1b89d251
This fixes #664
2018-03-11 00:35:39 +01:00
Gilles Peskine
0ee482c82c
Fix grammar in ChangeLog entry
2018-03-11 00:18:50 +01:00
Gilles Peskine
c0826f1625
Merge remote-tracking branch 'upstream-public/pr/936' into mbedtls-2.7-proposed
2018-03-10 23:48:10 +01:00
Gilles Peskine
9c4f4038dd
Add changelog entry
2018-03-10 23:36:30 +01:00
Hanno Becker
930ec7dfe5
Minor fixes
2018-03-09 10:48:12 +00:00
Hanno Becker
26f1f6061d
Improve documentation on the use of blinding in RSA
2018-03-09 10:47:30 +00:00
Hanno Becker
e856e84de3
Don't enable RSA_NO_CRT in config.pl full
2018-03-09 10:47:01 +00:00
Hanno Becker
70e66395b5
Adapt ChangeLog
2018-03-09 10:46:43 +00:00
Hanno Becker
69d45cce5d
Add a run with RSA_NO_CRT to all.sh
2018-03-09 10:46:23 +00:00
Hanno Becker
a5fa07958e
Verify the result of RSA private key operations
...
If RSA-CRT is used for signing, and if an attacker can cause a glitch
in one of the two computations modulo P or Q, the difference between
the faulty and the correct signature (which is not secret) will be
divisible by P or Q, but not by both, allowing to recover the private
key by taking the GCD with the public RSA modulus N. This is known as
the Bellcore Glitch Attack. Verifying the RSA signature before handing
it out is a countermeasure against it.
2018-03-09 10:42:23 +00:00
Gilles Peskine
c1a493d79b
Refer to X.690 by number
...
It's easier to identify and find by number than by its very wordy
title, especially as there was a typo in the title.
2018-03-08 18:18:34 +01:00
Andres Amaya Garcia
5e85c612fc
Define ASN1 bitmask macros in more direct way
2018-03-06 19:26:26 +00:00
Andres Amaya Garcia
19f33a800b
Add regression test for parsing subjectAltNames
2018-03-06 19:26:20 +00:00
Andres Amaya Garcia
32ec6d4e78
Add ChangeLog entry
2018-03-06 19:26:02 +00:00
Andres Amaya Garcia
6451909160
Fix x509_get_subject_alt_name to drop invalid tag
...
Fix the x509_get_subject_alt_name() function to not accept invalid
tags. The problem was that the ASN.1 class for tags consists of two
bits. Simply doing bit-wise and of the CONTEXT_SPECIFIC macro with the
input tag has the potential of accepting tag values 0x10 (private)
which would indicate that the certificate has an incorrect format.
2018-03-06 19:24:19 +00:00
Andres Amaya Garcia
d5101aa27a
Add macros to ASN.1 module to parse ASN.1 tags
...
The macros simply extract the component bits of an ASN.1 tag value
2018-03-06 19:24:15 +00:00
itayzafrir
33d8e3335f
Test suite test_suite_pk test pk_rsa_overflow passes valid parameters for hash and sig.
...
Test suite test_suite_pk test pk_rsa_overflow passes valid parameters for hash and sig.
2018-03-05 09:46:21 +02:00
Gilles Peskine
f936cb1c1b
Add attribution for #1351 report
2018-02-27 10:21:45 +01:00
Jaeden Amero
6a4e22c26c
Update version to 2.7.1
2018-02-26 10:53:47 +00:00
Gilles Peskine
3f9cff20d7
Merge branch 'prr_424' into mbedtls-2.7-proposed
2018-02-22 16:07:32 +01:00
Hanno Becker
e80cd463ef
Adapt version_features.c
2018-02-22 15:02:47 +00:00
Gilles Peskine
30c3433183
Merge remote-tracking branch 'upstream-public/pr/1393' into mbedtls-2.7-proposed
2018-02-22 15:44:24 +01:00
Gilles Peskine
e2bada976e
Merge remote-tracking branch 'upstream-public/pr/1392' into mbedtls-2.7-proposed
2018-02-22 15:44:14 +01:00
Gilles Peskine
04f9bd028f
Note incompatibility of truncated HMAC extension in ChangeLog
...
The change in the truncated HMAC extension aligns Mbed TLS with the
standard, but breaks interoperability with previous versions. Indicate
this in the ChangeLog, as well as how to restore the old behavior.
2018-02-22 15:41:26 +01:00
Jaeden Amero
3a11404fcb
Add LinkLibraryDependencies to VS2010 app template
...
Add mbedTLS.vcxproj to the VS2010 application template so that the next
time we auto-generate the application project files, the
LinkLibraryDependencies for mbedTLS.vcxproj are maintained.
Fixes #1347
2018-02-22 12:22:21 +00:00
Gilles Peskine
4945192099
Add ChangeLog entry for PR #1382
2018-02-22 10:23:13 +00:00
Jaeden Amero
a0d60a4dbc
Add ChangeLog entry for PR #1384
2018-02-22 08:28:10 +00:00
Krzysztof Stachowiak
31f0a3b827
Have Visual Studio handle linking to mbedTLS.lib internally
...
Fixes #1347
2018-02-22 08:28:10 +00:00
Jaeden Amero
a53ff8d088
MD: Make deprecated functions not inline
...
In 2.7.0, we replaced a number of MD functions with deprecated inline
versions. This causes ABI compatibility issues, as the functions are no
longer guaranteed to be callable when built into a shared library.
Instead, deprecate the functions without also inlining them, to help
maintain ABI backwards compatibility.
2018-02-22 08:20:42 +00:00
Gilles Peskine
420386d61d
Merge branch 'pr_1352' into mbedtls-2.7-proposed
2018-02-20 16:40:50 +01:00
Gilles Peskine
200b24fdf8
Mention in ChangeLog that this fixes #1351
2018-02-20 16:40:11 +01:00
Gilles Peskine
1e3fd69777
Merge remote-tracking branch 'upstream-public/pr/1333' into development-proposed
2018-02-14 15:12:49 +01:00
Gilles Peskine
49ac5d06ed
Merge branch 'pr_1365' into development-proposed
2018-02-14 14:36:44 +01:00
Gilles Peskine
27b0754501
Add ChangeLog entries for PR #1168 and #1362
2018-02-14 14:36:33 +01:00
Gilles Peskine
5daa76537a
Add ChangeLog entry for PR #1165
2018-02-14 14:10:24 +01:00
Paul Sokolovsky
8d6d8c84b1
ctr_drbg: Typo fix in the file description comment.
...
Signed-off-by: Paul Sokolovsky <paul.sokolovsky@linaro.org>
2018-02-10 11:11:41 +02:00
Jaeden Amero
6d6c7982ce
Merge remote-tracking branch 'upstream-public/pr/1362' into development
2018-02-08 17:02:31 +00:00
Jaeden Amero
69f3072553
Merge remote-tracking branch 'upstream-public/pr/1168' into development
2018-02-08 15:18:52 +00:00
Jaeden Amero
129f50838b
dhm: Fix typo in RFC 5114 constants
...
We accidentally named the constant MBEDTLS_DHM_RFC5114_MODP_P instead of
MBEDTLS_DHM_RFC5114_MODP_2048_P.
Fixes #1358
2018-02-08 14:29:14 +00:00
