coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-11-09 14:50:17 +08:00
Code Issues Packages Projects Releases Wiki Activity
32,893 Commits 183 Branches 286 Tags 220 MiB
Commit Graph

32893 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ben Taylor
dfa25b3577 Update ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
(cherry picked from commit 4e797c14e0ae62c31f7ae5996dd27888642d11a3)
 2026-06-18 13:12:25 +01:00
Ben Taylor
b6793c584d Fix style issues 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
(cherry picked from commit 62162e6e4d08ddcc6805975cc39e59f69e0c9775)
 2026-06-18 13:12:25 +01:00
Ben Taylor
934bee94c1 Remove redundant function from pkcs7_parse_reuse 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
(cherry picked from commit f60f5ba85cda59545442af29b59fdee9ed6af83d)
 2026-06-18 13:12:25 +01:00
Ben Taylor
34f0016cbc Add ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
(cherry picked from commit e9ec4ce3caf7e21f877d4dd6d733b858bc56df75)
 2026-06-18 13:12:25 +01:00
Ben Taylor
699d4030c2 Add fix for stale pointer after mbedtls_pkcs7_free 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
(cherry picked from commit 67e696b430716f95ed714f2c1404681697251438)

Backport note: resolved the PKCS7 test-suite conflict by keeping the 3.6 pkcs7_verify dependency expression while adding the reuse regression test.
 2026-06-18 13:12:14 +01:00
Ronald Cron
cc1181a65e
Merge pull request #1662 from minosgalanakis/public-sync/mbedtls-3.6-14062026 
[Sync] Merge mbedtls-3.6 into Merge mbedtls-3.6-restricted
 2026-06-16 23:07:37 +02:00
Gilles Peskine
364f07a926
Merge pull request #1654 from bjwtaylor/ECDHE-PSK-integer-overflow-restricted-3.6 
Backport for Ecdhe psk integer overflow fix to 3.6
 2026-06-16 11:50:01 +02:00
Ronald Cron
1d44a35519
Merge pull request #1647 from bjwtaylor/oob-key-exchange-restricted-3.6 
Add fix for OOB key exchange error 3.6
 2026-06-15 22:42:22 +02:00
Ben Taylor
b961ac2cf2
Update ChangeLog to include CVE number 
Co-authored-by: Gilles Peskine <gilles.peskine@arm.com>
Signed-off-by: Ben Taylor <32939606+bjwtaylor@users.noreply.github.com>
 2026-06-15 09:21:28 +01:00
Ben Taylor
e1351f7881 Fix style issue 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-15 09:14:29 +01:00
Ben Taylor
0421e88ce1 Correct ChangeLog style 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-15 09:14:29 +01:00
Ben Taylor
9befdba49e Add CVE to ChangeLog 
Co-authored-by: Ronald Cron <ronald.cron@arm.com>
Signed-off-by: Ben Taylor <32939606+bjwtaylor@users.noreply.github.com>
 2026-06-15 09:14:29 +01:00
Ben Taylor
b461821223 Improve the wording of the ChangeLog 
Co-authored-by: Ronald Cron <ronald.cron@arm.com>
Signed-off-by: Ben Taylor <32939606+bjwtaylor@users.noreply.github.com>
 2026-06-15 09:14:29 +01:00
Minos Galanakis
154516a789 Merge remote-tracking branch 'public/mbedtls-3.6' into public-sync/mbedtls-3.6-14062026 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-06-14 19:35:34 +01:00
Ben Taylor
f1c9f7fb25 Add reported by and CVE placeholder 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
(cherry picked from commit ab2a7d5a3472f39190344f754e6cee5039fcba50)
 2026-06-10 14:35:58 +01:00
Ben Taylor
38a111dd98 Correct style of ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
(cherry picked from commit 0501e447cc19ed06b69daea5e17585e1294030cd)
 2026-06-10 14:35:58 +01:00
Ben Taylor
dafd83e310 Improve ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
(cherry picked from commit c058818451833a748da112e3b8129fd299480ceb)
 2026-06-10 14:35:58 +01:00
Ben Taylor
7f945f96e8 Add ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
(cherry picked from commit e71e49e634ba49b2b630f268bc8f0dd392751ec3)
 2026-06-10 14:35:58 +01:00
Ben Taylor
ec1641e6a0 Add in tests for ECDHE-PSK integer overflow 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
(cherry picked from commit c567299ee6bade9547a97d3ad1dcd5f3bd98ea6f)
 2026-06-10 14:35:58 +01:00
Ben Taylor
f9835c081f Added fix for Integer overflow using a large ECDHE Identity 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
(cherry picked from commit baf449db7e31f031ed5def0fecf417122f72d3ee)
 2026-06-10 14:34:37 +01:00
Ronald Cron
02edd2b8c2
Merge pull request #1609 from minosgalanakis/security/mlfbyt4c_tls13_policy_bypass_3.6 
Backport 3.6: TLS1.3 client HRR policy bypass[ARM-MLFBYT4C]
 2026-06-10 13:03:45 +02:00
Minos Galanakis
8c458b8cca test_suite_ssl: Updated reject_hrr_selecting_unoffered_group dependencies 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-06-08 15:54:41 +01:00
Ronald Cron
b513676bed
Merge pull request #10772 from mpg/security-link-3.6 
[3.6] Update broken link
 2026-06-05 16:47:25 +00:00
Minos Galanakis
c3f90ec54d test_suite_ssl: use 3.6 endpoint helper signatures in HRR test 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-06-05 15:16:19 +01:00
Manuel Pégourié-Gonnard
70d619741b Update broken link 
I believe the existing link was to the TF wiki which has been retired
for some time now.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-06-05 12:28:55 +02:00
Ben Taylor
723cbadb53 Add ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-05 10:20:36 +01:00
Ben Taylor
e3be807e5c Add fix for OOB key exchange error 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-05 10:18:42 +01:00
minosgalanakis
915442dbed
Merge pull request #1614 from yiwu0b11/mbedtls_pk_ecc_set_pubkey-overread-3.6 
Backport 3.6: Fix 1-byte overread in ECC key parsing
 2026-06-02 10:05:35 +01:00
Ronald Cron
4c70413087
Merge pull request #1555 from gilles-peskine-arm/ssl_tls13_prepare_new_session_ticket-psa_get_random-3.6 
Backport 3.6: Fix ssl_tls13_prepare_new_session_ticket returning 1 on an RNG failure
 2026-05-29 16:19:37 +02:00
Ronald Cron
14ff18114f
Merge pull request #1635 from valeriosetti/issue1569-backport-3.6 
[backport 3.6] TLS 1.3 certificate chain signature algorithm policy gap
 2026-05-29 13:34:52 +02:00
Manuel Pégourié-Gonnard
e3aaf2e614
Merge pull request #1625 from mpg/restricted-check-small-factors-3.6 
[3.6] Fix timing leak in RSA prime generation
 2026-05-28 23:52:59 +02:00
Manuel Pégourié-Gonnard
a03dafab12
Merge pull request #1633 from mpg/restricted-everest-small-order-3.6 
[3.6] Everest small order
 2026-05-28 23:44:35 +02:00
Gilles Peskine
8b7af9d421 Improve changelog wording 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-05-28 16:32:09 +02:00
Yi Wu
3208173d3d tests: update compressed EC outcome filters 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-05-28 15:10:45 +01:00
Yi Wu
94883a3a85 tests: add EC public key parser coverage 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-05-28 15:10:31 +01:00
Yi Wu
0e2d7037db Backport EC public key 1 byte overread 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-05-28 15:10:14 +01:00
Valerio Setti
b9c8c9c427 changelog: fix typos 
Signed-off-by: Valerio Setti <vsetti@baylibre.com>
 2026-05-28 13:19:14 +02:00
Valerio Setti
b66d56bc5f changelog: add note about issue 1569 resolution 
Signed-off-by: Valerio Setti <vsetti@baylibre.com>
 2026-05-28 13:19:14 +02:00
Valerio Setti
4620095cdd ssl: improve documentation of mbedtls_ssl_conf_sig_algs() 
Clarify that the 'sig_algs' set through this function are only enforced
during the key exchange and that 'mbedtls_ssl_conf_cert_profile()' should
instead be used to enforce the same algorithms when verifying certificates.

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
 2026-05-28 13:19:14 +02:00
Manuel Pégourié-Gonnard
6cfab6ce95 ecdh: fix off-by-1 in test comments/names 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-05-28 12:24:29 +02:00
Manuel Pégourié-Gonnard
ba5e4c156e Add test for x448 invalid inputs 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-05-28 12:24:29 +02:00
Manuel Pégourié-Gonnard
db94fb0686 Add tests for x25519 non-standard/invalid inputs 
We want to reject small order points for two reasons:
- Those give rise to side channels attacks where the underlying field
  arithmetic is not constant time (which our bignum isn't so far),
  see the "May the Fourth" paper mentioned in ecp.
- Those force the shared secret to be all-bytes zero, which is bad for
  protocols that might require contributory behaviour.

Honest peers will never send low-order points anyway.

While at it, test that we are clipping the input to 255 bits (ie, that
we are unsetting bit 256) as required by the RFC.

Again, honest peers will never send strings with bit 256 set. But the
RFC says to accept such strings anyway, so that's what we do.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-05-28 12:24:29 +02:00
Minos Galanakis
c8187a51d0 ssl_write_supported_groups_ext: Updated documentation 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-05-26 10:31:34 +01:00
Manuel Pégourié-Gonnard
c6a1f9c838 bignum: fix a typo in a comment 
The exact value doesn't matter anyway, but since we mention it, it might
as well be correct.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-05-26 10:06:50 +02:00
Manuel Pégourié-Gonnard
075e76b65b bignum: compact primality check for small values 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-05-22 00:49:08 +02:00
Manuel Pégourié-Gonnard
1a3cfa5fe7 bignum: make small primes product static 
Avoid a heap allocation every time it is used.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-05-22 00:38:10 +02:00
Manuel Pégourié-Gonnard
7a29052238 Fix side-channel in prime checking/generation 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-05-22 00:35:55 +02:00
Manuel Pégourié-Gonnard
72991252c8
Merge pull request #1621 from mpg/resricted-ecp-modp-polish-3.6 
[3.6] Improve ECC optimized modp
 2026-05-22 00:01:04 +02:00
Manuel Pégourié-Gonnard
05ce3e90eb ecp: fix a typo in a comment 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-05-21 12:08:44 +02:00
Manuel Pégourié-Gonnard
51f6079c1b ecp: update doc for Koblitz raw quasi-reductions 
Those no longer allocate, so they can no longer return that error. This
was missed in the commit that removed heap allocations.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-05-21 12:07:32 +02:00