coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-09-13 14:22:19 +08:00
Code Issues Packages Projects Releases Wiki Activity
34,765 Commits 183 Branches 286 Tags Multiple Licenses 259 MiB
Commit Graph

1838 Commits

Author SHA1 Message Date
Waleed Elmelegy
96a5c010d4 Add changelog entry for interuptible psa key agreement APIs 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2024-11-06 16:03:49 +00:00
Gilles Peskine
ff60a0bf4e Changelog entry for removal of the RSA-PSK key exchange 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-11-05 15:49:12 +01:00
Gilles Peskine
18e8389452 Add changelog entry 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-11-04 14:07:20 +01:00
Gilles Peskine
8ed4d94166
Merge pull request #9614 from gilles-peskine-arm/use_psa_crypto-always_on 
Always enable MBEDTLS_USE_PSA_CRYPTO in all.sh
 2024-10-29 14:58:55 +00:00
Gilles Peskine
202b69c2b6
Merge pull request #9302 from valeriosetti/psa-use-static-slots 
PSA: use static key slots to store keys
 2024-10-24 07:27:48 +00:00
Gilles Peskine
99c34238e2 Changelog entry for MBEDTLS_USE_PSA_CRYPTO always enabled 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-10-22 22:10:42 +02:00
David Horstmann
f0abbb4f1a
Merge pull request #9711 from ThePassionate/mbedtls-1021 
net/mbedtls_net_connect: Preventing double close problem
 2024-10-22 16:49:25 +00:00
Valerio Setti
12bccc7be8 changelog: fix typo 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-10-22 17:56:36 +02:00
Valerio Setti
bed5d1b1ea changelog: updated description 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-10-22 17:56:36 +02:00
Valerio Setti
2b52e769c6 changelog: updated description 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-10-22 17:56:36 +02:00
Valerio Setti
d47d98777e changelog: describe support for static key slot buffers 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-10-22 17:56:36 +02:00
David Horstmann
a40e95fda0 Add newline to ChangeLog entry 
Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2024-10-22 12:22:47 +01:00
makejian
9606d560a7 net/mbedtls_net_connect: Preventing double close problem 
In the test examples and real usage scenarios, 'mbedtls_net_free' is called after 'mbedtls_net_connect' fails, which will cause the problem of double close the same fd. It is possible to close this closed fd which has been applied by other link.

Signed-off-by: makejian <makejian@xiaomi.com>
 2024-10-22 14:06:41 +08:00
Gilles Peskine
4e4647a4e7
Merge pull request #9690 from valeriosetti/fix-pk-write-buffer-overrun 
pkwrite: fix buffer overrun
 2024-10-16 12:00:52 +00:00
Gilles Peskine
604e4d99dd Fix completion mistake in changelog entry 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-10-16 10:31:28 +02:00
Gilles Peskine
e298eeb739 Changelog entry for security fix 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-10-16 10:30:30 +02:00
Gergely Korcsák
a3c2a8f2a2 Fix driver schema json default type requirements 
Signed-off-by: Gergely Korcsák <gergely.korcsak@arm.com>
 2024-10-10 13:16:32 +02:00
Gilles Peskine
e589f5fcf1 Changelog entry for ECDSA conversion functions called with bits=0 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-10-07 11:28:09 +02:00
David Horstmann
b268d270ed
Merge pull request #9413 from sezrab/split_numeric_string_conversions_oid-development 
Split numeric string conversions out of the OID module
 2024-09-26 12:50:37 +00:00
Gilles Peskine
6f03eb8ae1 Changelog entry: fix #9551 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-09-24 18:59:31 +02:00
Harry Ramsey
e5b261f1e8 Fix ChangeLog format error 
Signed-off-by: Harry Ramsey <harry.ramsey@arm.com>
 2024-09-18 21:23:17 +01:00
Harry Ramsey
5125a1bf21 Add ChangeLog for moving OID string conversion functions 
Signed-off-by: Harry Ramsey <harry.ramsey@arm.com>
 2024-09-18 21:23:17 +01:00
Janos Follath
b6769598c6 Fix Changelog formatting 
Signed-off-by: Janos Follath <janos.follath@arm.com>
 2024-09-05 10:46:55 +02:00
Janos Follath
6154765c1b Improve ChangeLog 
Co-authored-by: Gilles Peskine <gilles.peskine@arm.com>
Signed-off-by: Janos Follath <janos.follath@arm.com>
 2024-09-05 10:46:54 +02:00
Janos Follath
e1d1854a32 Add changelog 
Signed-off-by: Janos Follath <janos.follath@arm.com>
 2024-09-05 10:46:52 +02:00
Manuel Pégourié-Gonnard
b721cccd82 Add a ChangeLog entry 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2024-09-02 12:46:03 +02:00
Manuel Pégourié-Gonnard
0b0f090b6e Merge remote-tracking branch 'restricted/development-restricted' into dev-mergeback 
* restricted/development-restricted: (30 commits)
  Tiny fix in ChangeLog pt 2
  Tiny fix in ChangeLog
  Changelog entry for the RSA memory leak
  Edit ChangeLog entry
  Update ChangeLog
  Add test cases for extKeyUsage
  Rationalize extKeyUsage tests
  Use P_CLI when O_CLI's status is not reliable
  Rationalize keyUsage testing, round 2
  Always print detailed cert errors in test programs
  Fix 1.3 failure to update flags for (ext)KeyUsage
  Rationalize ssl-opt tests for keyUsage
  Test cert alert KEY_USAGE -> UNSUPPORTED_CERT
  Free allocated memory where methods were returning without freeing
  Force MBEDTLS_PSA_HMAC_DRBG_MD_TYPE based on CTR_DRBG
  Document that MBEDTLS_PSA_HMAC_DRBG_MD_TYPE does not force HMAC
  Clean up constant-flow memsan testing
  Improve description of who is affected
  More diversified sizes in tests
  Fix stack buffer overflow in ECDSA signature format conversions
  ...
 2024-09-02 09:18:34 +02:00
Gilles Peskine
99b57bd35a
Merge pull request #1272 from eleuzi01/forward-1263 
Fix 1.3 cli-auth optional reporting of (ext)KeyUsage issues
 2024-08-28 19:38:36 +02:00
Gilles Peskine
ab0af45d11
Merge pull request #9464 from gilles-peskine-arm/psa-keystore-dynamic-development 
dynamically sized key store
 2024-08-26 10:47:00 +00:00
Gilles Peskine
0a2b6e2945 Merge remote-tracking branch 'development' into development-restricted 2024-08-23 11:14:11 +02:00
Gilles Peskine
805ac15e2d
Merge pull request #9244 from waleed-elmelegy-arm/fix-tls13_parse_client_hello-issue 
Fix issue in handling legacy_compression_methods in ssl_tls13_parse_client_hello()
 2024-08-22 18:56:27 +00:00
Waleed Elmelegy
344f79bde6 Reduce the wording in changelog entry 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2024-08-22 16:33:17 +00:00
Waleed Elmelegy
65e73c88bd Improve the changelog entry for fixing legacy compression issue 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2024-08-22 16:27:27 +00:00
Waleed Elmelegy
b5df9d8b65 Add chanelog entry for fixing legacy comprssion methods issue 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2024-08-22 16:10:10 +00:00
Elena Uziunaite
da27eba669 Tiny fix in ChangeLog pt 2 
Signed-off-by: Elena Uziunaite <elena.uziunaite@arm.com>
 2024-08-22 09:23:48 +01:00
Elena Uziunaite
e0c6f80403 Tiny fix in ChangeLog 
Signed-off-by: Elena Uziunaite <elena.uziunaite@arm.com>
 2024-08-22 09:00:57 +01:00
Gilles Peskine
98dd0c1f1c Changelog entry for the RSA memory leak 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-08-21 22:03:16 +02:00
Elena Uziunaite
f72a510590 Edit ChangeLog entry 
Signed-off-by: Elena Uziunaite <elena.uziunaite@arm.com>
 2024-08-21 11:12:34 +01:00
Elena Uziunaite
16f0e18e41 Update ChangeLog 
Signed-off-by: Elena Uziunaite <elena.uziunaite@arm.com>
 2024-08-19 12:12:34 +01:00
Waleed Elmelegy
cb0ed88df1 Add change log entry for adding psa_key_agreement() API 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2024-08-16 14:37:46 +01:00
Manuel Pégourié-Gonnard
8067879c1f
Merge pull request #9313 from sezrab/psa_util_in_builds_without_psa-development 
psa_util.c included in builds without PSA, which can break the build
 2024-08-14 07:16:21 +00:00
Sam Berry
26769f190b Changelog entry 
Signed-off-by: Sam Berry <sam.berry@arm.com>
 2024-08-13 14:40:22 +01:00
Gilles Peskine
0858fdca38
Merge pull request #9189 from misch7/fix-v3.6-issues-9186-and-9188 
Fix build of v3.6 (issues #9186 and #9188)
 2024-08-12 09:34:17 +00:00
Bence Szépkúti
88f3dd9f78
Merge pull request #9402 from tom-daubney-arm/remove_function_level_alt_interface 
Remove function level alt interface
 2024-08-09 17:59:51 +00:00
Gilles Peskine
75fd2401e5 Changelog entry for MBEDTLS_PSA_KEY_STORE_DYNAMIC 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-08-09 15:41:11 +02:00
Michael Schuster
7e39028628 Fix build of v3.6 with unset MBEDTLS_DHM_C but MBEDTLS_USE_PSA_CRYPTO set (fixes #9188) 
Avoid compiler warning about size comparison (like in commit 7910cdd):

Clang builds fail, warning about comparing uint8_t to a size that may be >255.

Signed-off-by: Michael Schuster <michael@schuster.ms>
 2024-08-09 10:27:44 +01:00
Michael Schuster
4394067071 Fix server mode only build of v3.6 with MBEDTLS_SSL_CLI_C unset (fixes #9186) 
Signed-off-by: Michael Schuster <michael@schuster.ms>
 2024-08-09 10:27:44 +01:00
Minos Galanakis
123a625386 Resolved merge conflicts caused by file moved in #8226 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2024-08-08 14:11:53 +01:00
Gilles Peskine
1e65e64565 Fix overlap between volatile keys and built-in keys 
Fix interference between PSA volatile keys and built-in keys
when MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS is enabled and
MBEDTLS_PSA_KEY_SLOT_COUNT is more than 4096. This overlap used to make it
possible that a volatile key would receive the identifier of a built-in key,
and is now caught by a static assertion.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-08-07 12:39:05 +02:00
Gilles Peskine
b0b1b32914 Prevent mbedtls_psa_register_se_key with volatile keys 
mbedtls_psa_register_se_key() is not usable with volatile keys, since there
is no way to return the implementation-chosen key identifier which would be
needed to use the key. Document this limitation. Reject an attempt to create
such an unusable key. Fixes #9253.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-08-07 12:39:05 +02:00
Thomas Daubney
2f1bebd551 Add newline to ChangeLog entry 
Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>
 2024-08-06 15:20:07 +01:00
Thomas Daubney
5db9027d3f Add ChangeLog entry 
Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>
 2024-08-06 15:20:06 +01:00
Gilles Peskine
3077f2f9c6 Remove experimental, superseded function psa_generate_key_ext 
Remove the experimental functions psa_generate_key_ext() and
psa_key_derivation_output_key_ext(), which require a flexible array member
and therefore break C++ code that includes Mbed TLS headers. They have been
replaced by psa_generate_key_custom() and
psa_key_derivation_output_key_custom().

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-08-05 15:52:37 +02:00
Gilles Peskine
b0cc2ad6bd Changelog entry for the move from key_ext to key_custom functions 
Document psa_generate_key_ext() and psa_key_derivation_output_key_ext() as
deprecated in favor of psa_generate_key_custom() and
psa_key_derivation_output_key_custom(), and no longer declared in C++ builds.

Resolves #9020.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-08-05 15:49:22 +02:00
Gilles Peskine
726e57f6f0
Merge pull request #1249 from gilles-peskine-arm/psa-drbg-no-hmac-document 
Document that MBEDTLS_PSA_HMAC_DRBG_MD_TYPE does not force HMAC
 2024-07-31 16:47:27 +02:00
Manuel Pégourié-Gonnard
b59bf585ac
Merge pull request #1247 from gilles-peskine-arm/ecdsa-conversion-overflow 
Fix stack buffer overflow in ECDSA signature format conversions
 2024-07-31 12:39:32 +02:00
Gilles Peskine
c971d80faa
Merge pull request #9315 from gilles-peskine-arm/psa_cipher_decrypt-ccm_star-iv_length_enforcement 
psa_cipher_decrypt CCM*: fix rejection of messages shorter than 3 bytes
 2024-07-04 14:39:25 +00:00
Gilles Peskine
868d2524b8 Document that MBEDTLS_PSA_HMAC_DRBG_MD_TYPE does not force HMAC 
MBEDTLS_PSA_HMAC_DRBG_MD_TYPE was documented and announced as causing the
PSA DRBG to be HMAC_DRBG. However, that was never actually implemented:
CTR_DRBG is prioritized if enabled.

Since there is a simple workaround of disabling MBEDTLS_CTR_DRBG_C if you
want to use HMAC_DRBG, we have decided to accept the actual behavior and fix
the documentation.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-07-02 16:31:28 +02:00
Gilles Peskine
a9e7ac9811 Improve description of who is affected 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-06-27 10:59:55 +02:00
Gilles Peskine
6bba0a8355 Fix stack buffer overflow in ECDSA signature format conversions 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-06-27 08:55:56 +02:00
Gilles Peskine
7b6ddfcd25 psa_cipher_decrypt CCM*: fix rejection of messages shorter than 3 bytes 
Credit to Cryptofuzz. Fixes #9314.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-06-26 13:16:33 +02:00
Ronald Cron
f0481f562a
Merge pull request #9258 from tom-daubney-arm/drop_padlock_support 
Drop support for VIA Padlock
 2024-06-26 07:36:04 +00:00
Thomas Daubney
e92adafd2d Remove mention of driver from ChangeLog 
Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>
 2024-06-25 16:48:04 +01:00
Thomas Daubney
197536d13a Improve ChangeLog wording 
Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>
 2024-06-25 15:19:40 +01:00
Paul Elliott
d9392f0fdd
Merge pull request #9250 from eleuzi01/bug-9029 
Fix compiler warnings in test_suite_pk.function
 2024-06-24 10:41:55 +00:00
Manuel Pégourié-Gonnard
82658eb90c
Merge pull request #9138 from valeriosetti/issue9126 
Do not perform adjustments on legacy crypto from PSA, when MBEDTLS_PSA_CRYPTO_CLIENT && !MBEDTLS_PSA_CRYPTO_C
 2024-06-24 07:30:32 +00:00
Valerio Setti
19efa3d016 changelog: add changelog 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-06-20 11:06:25 +02:00
Elena Uziunaite
4cfee21779 Changelog Fix 
Signed-off-by: Elena Uziunaite <elena.uziunaite@arm.com>
 2024-06-18 10:25:11 +01:00
Elena Uziunaite
4d9fb8bbdf Add ChangeLog 
Signed-off-by: Elena Uziunaite <elena.uziunaite@arm.com>
 2024-06-17 17:13:51 +01:00
Thomas Daubney
24f81cba97 Improve ChangeLog entry 
Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>
 2024-06-17 11:51:52 +01:00
Thomas Daubney
bc935157a7 Fix ChangeLog formatting 
Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>
 2024-06-14 13:02:17 +01:00
Thomas Daubney
a8efd81294 Add ChangeLog entry 
Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>
 2024-06-14 11:00:51 +01:00
Tom Cosgrove
98ffc8e7c3
Merge pull request #9178 from valeriosetti/fix-psa-cmac 
adjust_legacy_crypto: enable CIPHER_C when PSA CMAC is builtin
 2024-06-03 15:35:32 +00:00
Valerio Setti
7e2ce99400 changelog: add changelog for PSA CMAC fix 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-05-31 14:52:54 +02:00
Gilles Peskine
d2f191adb0 Document that there is now an error for dangerous inclusions 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-05-29 09:44:20 +02:00
Gilles Peskine
fef877f51f Belated changelog entry for not including check_config.h 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-05-29 09:44:20 +02:00
Gilles Peskine
bdce65700e
Merge pull request #9067 from gilles-peskine-arm/ssl-opt-server2-detection 
Fix skipped tests in configurations without RSA
 2024-05-15 12:06:31 +00:00
Gilles Peskine
ca73fc6627
Merge pull request #9026 from nileshkale123/fix/redefination_warning_for_gnu_source 
Fixed redefination warning messages for _GNU_SOURCE
 2024-05-06 12:40:49 +00:00
Gilles Peskine
9791ee9296
Merge pull request #8538 from Ryan-Everett-arm/8537-fix-error-handling-for-secure-element-keys-in-psa_start_key_creation 
Fix error handling for secure element keys in `psa_start_key_creation`
 2024-05-02 16:06:07 +00:00
Gilles Peskine
fa8fc2705a
Merge pull request #9069 from Ryan-Everett-arm/fix-get-and-lock-key-slot-threading-bug 
Wipe the returned slot pointer upon failure in `psa_get_and_lock_key_slot`
 2024-05-02 15:48:21 +00:00
Ryan Everett
c51e948370 Add changelog 
Signed-off-by: Ryan Everett <ryan.everett@arm.com>
 2024-04-30 14:04:17 +01:00
Janos Follath
93f20f45d1 Fix Changelog formatting 
Add EOL and remove trailing whitespaces.

Signed-off-by: Janos Follath <janos.follath@arm.com>
 2024-04-30 10:32:17 +01:00
nilesh.kale
d338d0156f Fixed issue of redefinition warning messages for _GNU_SOURCE 
Signed-off-by: nilesh.kale <nilesh.kale@espressif.com>
 2024-04-30 08:24:47 +05:30
Gilles Peskine
dde67bbb5a Fix a compilation warning in pk.c when PSA is enabled and RSA is disabled 
It isn't detected on the CI because we only test this with an ancient Clang
that doesn't warn. Old GCC, modern GCC and modern Clang do
warn (-Wunused-but-set-variable).

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-04-29 12:38:16 +02:00
Paul Elliott
0f37a157a2 Add Changelog entry 
Signed-off-by: Paul Elliott <paul.elliott@arm.com>
 2024-04-26 18:56:00 +01:00
Valerio Setti
ec3b90f348 changelog: fix text 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-04-19 11:09:56 +02:00
Valerio Setti
ce86865258 add changelog 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-04-19 09:38:23 +02:00
Gilles Peskine
bee96566da
Merge pull request #8999 from tom-cosgrove-arm/fix-compilation-when-memcpy-is-function-like-macro 
Fix compilation when memcpy() is a function-like macro
 2024-04-09 11:34:46 +00:00
Manuel Pégourié-Gonnard
a4b773d3bb
Merge pull request #6955 from inorick/nofa_no_session_tickets 
Guard ticket specific TLS 1.3 function with macro
 2024-04-08 08:56:17 +00:00
Ronald Cron
527a2eb8c4 Add change log 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-04-05 08:45:09 +02:00
Tom Cosgrove
a2c45dc713 Fix compilation of ssl_tls13_generic.c when memcpy() is a function-like macro 
Fixes #8994

Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
 2024-04-02 14:51:47 +01:00
Minos Galanakis
2c1daef183 Assemble Changelog 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2024-03-22 11:46:25 +00:00
Minos Galanakis
d9d6435bc5 Merge branch 'development-restricted' into mbedtls-3.6.0rc0-pr 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2024-03-21 15:44:11 +00:00
Valerio Setti
ea01efa589 add changelog 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-03-20 17:19:08 +01:00
Minos Galanakis
b70f0fd9a9 Merge branch 'development' into 'development-restricted' 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2024-03-19 22:24:40 +00:00
Ronald Cron
a5c5c58107 tls13: srv: Fix potential stack buffer overread 
Fix potential stack buffer overread when
checking PSK binders.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-03-19 14:46:21 +01:00
Gilles Peskine
b2b9068264
Merge pull request #8942 from valeriosetti/fix-null-dereference 
[Bugfix] Fix null dereference in `mbedtls_pk_verify_ext()`
 2024-03-19 10:47:29 +00:00
Manuel Pégourié-Gonnard
af14b89824
Merge pull request #8932 from ronald-cron-arm/enable-tls13-by-default 
Enable TLS 1.3 by default
 2024-03-19 09:51:49 +00:00
Valerio Setti
8ad5be0e5d add changelog 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-03-18 17:22:52 +01:00
Paul Elliott
f5f48549e2 Add issues fixed to changelog entry 
Signed-off-by: Paul Elliott <paul.elliott@arm.com>
 2024-03-18 13:52:25 +00:00
Ronald Cron
27eb68d295 Enable TLS 1.3 by default 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-03-18 13:06:59 +01:00
Manuel Pégourié-Gonnard
47f8d0e840
Merge pull request #8934 from paul-elliott-arm/add_threading_changelog 
Add changelog entry for threading MVP
 2024-03-18 10:25:14 +00:00
Paul Elliott
7d8fd3fafe Add changelog entry for threading MVP 
Signed-off-by: Paul Elliott <paul.elliott@arm.com>
 2024-03-17 16:18:23 +00:00
Manuel Pégourié-Gonnard
c9db499299
Merge pull request #8930 from ronald-cron-arm/tls13-doc-update 
TLS 1.3: Documentation update for 3.6 release
 2024-03-15 16:41:52 +00:00
Ronald Cron
a457633034
Merge pull request #8911 from waleed-elmelegy-arm/check-alpn-when-receiving-early-data 
Check ALPN when receiving early data
 2024-03-15 15:29:28 +00:00
Ronald Cron
582865fbfb Improve the change log 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-03-15 15:49:05 +01:00
Bence Szépkúti
567591eec7
Merge pull request #8923 from bensze01/drop-old-compilers 
Drop Support for MSVC 2013, 2015 and Arm Compiler 5
 2024-03-15 12:56:21 +00:00
Waleed Elmelegy
131b2ffd89 Fix bug in ALPN negotiating 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2024-03-15 12:12:15 +00:00
Bence Szépkúti
a32546c96e Update changelog 
Expand MSVC to Visual Studio and announce the moving of the solution
files.

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2024-03-15 12:14:39 +01:00
Ronald Cron
e40e42cf21 Add change log for early data feature 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-03-15 10:41:52 +01:00
David Horstmann
abbf2c4835
Merge pull request #1191 from davidhorstmann-arm/psa-shared-memory-changelog 
Add ChangeLog for PSA buffer sharing fix
 2024-03-14 16:18:23 +00:00
Gilles Peskine
91f7e07c63
Merge pull request #1196 from davidhorstmann-arm/buffer-sharing-merge 
Update development-restricted after buffer-sharing work
 2024-03-14 13:28:35 +01:00
BensonLiou
7b8b696790 Add change log 
Signed-off-by: BensonLiou <momo1208@gmail.com>
 2024-03-14 18:11:09 +08:00
Janos Follath
9edd7fd002 Add CVE IDs to Changelog 
Signed-off-by: Janos Follath <janos.follath@arm.com>
 2024-03-14 09:38:03 +00:00
David Horstmann
0634168296 Reference issue #3266 
This is the issue that tracks incomplete support for buffer overlap, so
we should refer to it when we discuss partial support whenever
MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS is set.

Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2024-03-13 14:12:10 +00:00
David Horstmann
eff3d1ebb5 Use the exact phrase 'shared memory' 
This allows people searching for this phrase to find this ChangeLog
entry.

Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2024-03-13 14:12:10 +00:00
David Horstmann
4407aba552 Mention the CVE number that is fixed 
Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2024-03-13 13:34:31 +00:00
David Horstmann
7fc35a5ea1 Reword ChangeLog entry. Specifically: 
* Fix a grammatical typo
* Mention shared memory
* Mention overlap support in the security section
* Improve wording

Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2024-03-13 13:30:55 +00:00
Bence Szépkúti
ae0d97ab8b Update compilers list in docs and changelog 
Drop support for MSVC 2013, 2015 and Arm Compiler 5

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2024-03-13 11:23:16 +01:00
Dave Rodgman
60c2f47f98
Merge pull request #8888 from minosgalanakis/features/add_ssl_session_accessor_8529 
[MBEDTLS_PRIVATE] Add accessor for session and ciphersuite_id
 2024-03-13 10:02:15 +00:00
David Horstmann
7102d0f747 Add bugfix section about buffer sharing 
Mention that arbitrary overlap is now supported, except whenever
MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS is set.

Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2024-03-12 16:56:49 +00:00
David Horstmann
1d3276da65 Reword ChangeLog entry for shared memory work 
Specifically:
* Clarify that passing shared buffers is now secure by default (not
  newly supported)
* Remove spurious hyphen
* Clarify that we do not guarantee copying, but rather guarantee
  protection, allowing us to implement this differently in future if
  required.
* Mention both protection of inputs from modification and outputs from
  exposure of intermediate results.
* Invert the config option, from an enable-option to a disable-option.

Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2024-03-12 16:47:46 +00:00
David Horstmann
93fa4e1b87 Merge branch 'development' into buffer-sharing-merge 2024-03-12 15:05:06 +00:00
Gilles Peskine
bf69f2e682 New function mbedtls_pk_copy_public_from_psa 
Document and implement mbedtls_pk_copy_public_from_psa() to export the
public key of a PSA key into PK.

Unit-test it alongside mbedtls_pk_copy_from_psa().

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-03-12 15:06:45 +01:00
Manuel Pégourié-Gonnard
d7e7f48323
Merge pull request #8774 from valeriosetti/issue8709 
Implement mbedtls_pk_copy_from_psa
 2024-03-12 13:45:27 +00:00
Valerio Setti
d286491ed7 changelog: fix text 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-03-12 05:11:09 +01:00
Gilles Peskine
88c2755a30 mbedtls_pk_decrypt/encrypt actually check the padding mode 
The sign/verify functions happily use the wrong algorithm, but the
encrypt/decrypt functions error out if the padding mode specifies V21.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-03-11 18:49:54 +01:00
David Horstmann
5fb5cce066 Add ChangeLog for PSA buffer sharing fix 
Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2024-03-11 17:28:09 +00:00
Dave Rodgman
9cc01ccbf8
Merge pull request #8831 from yanesca/switch_to_new_exp 
Use mpi_core_exp_mod in bignum
 2024-03-11 13:40:46 +00:00
Ronald Cron
44193fa573 Fix and improve the change log 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-03-11 13:40:24 +01:00
Valerio Setti
64d5fc0070 changelog: fix text and typos 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-03-11 11:34:58 +01:00
Valerio Setti
4f1650d4af changelog: enhance description 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-03-11 11:34:58 +01:00
Valerio Setti
2f08f4cdb8 add changelog 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-03-11 11:34:58 +01:00
Minos Galanakis
f9a6893b55 Changelog: Added entry for ssl_session accessors. 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2024-03-11 10:09:44 +00:00
Manuel Pégourié-Gonnard
af3e574f5f
Merge pull request #8862 from valeriosetti/issue8825 
Improve support of mbedtls_psa_get_random in client-only builds
 2024-03-10 20:06:27 +00:00
Ronald Cron
53dff7b0af Do not forget about TLS 1.2 disabled at runtime aspect 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-03-07 16:01:51 +01:00
Ronald Cron
e301813da4 Improve change log 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-03-07 09:10:22 +01:00
Ronald Cron
130bfe7799 Add change log 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-03-07 06:59:01 +01:00
Gilles Peskine
71cc260563
Merge pull request #8728 from minosgalanakis/features/add_mbedtls_x509_crt_get_ca_istrue_accesor_6151 
[MBEDTLS_PRIVATE] Add mbedtls_x509_crt_get_ca_istrue() accesor
 2024-03-05 18:04:06 +00:00
Dave Rodgman
3c4166aef3
Merge pull request #8863 from minosgalanakis/feature/add_ecdh_context_5016 
[MBEDTLS_PRIVATE] Add a getter for the ECDH context->grp.id member.
 2024-03-05 16:58:13 +00:00
Minos Galanakis
87b4f6d86c x509: Reworded documentation bits. 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2024-03-05 11:05:51 +00:00
Gilles Peskine
d06244b813
Merge pull request #8821 from davidhorstmann-arm/fix-config-bitflag 
Update `SSL_SERIALIZED_SESSION_CONFIG_BITFLAG` with new flags
 2024-03-05 09:59:42 +00:00
Gilles Peskine
fad79fcdd9 Merge remote-tracking branch 'development' into ecp-write-ext-3.6 
Conflicts:
* library/pk.c: mbedtls_pk_wrap_as_opaque() changed in the feature branch
  and was removed in the target branch.
 2024-03-04 08:52:08 +01:00
Minos Galanakis
79ee110446 Added changelog 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2024-03-04 02:22:01 +00:00
Minos Galanakis
3cfdd73dfa Changelog: Added changelog for mbedtls_ecdh_get_grp_id. 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2024-03-02 09:14:13 +00:00
Valerio Setti
ada2ec3482 psa_crypto_stubs/changelog: fix typos 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-03-01 18:04:14 +01:00
Manuel Pégourié-Gonnard
e33b349c90
Merge pull request #8864 from valeriosetti/issue8848 
Deprecate or remove mbedtls_pk_wrap_as_opaque
 2024-03-01 15:54:32 +00:00
David Horstmann
7335082ef6 Add ChangeLog entry for ssl serialization bitflags 
Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2024-03-01 11:31:03 +00:00
Valerio Setti
d32dd08934 changelog: fix description 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-29 16:28:03 +01:00
Valerio Setti
1a58e9a232 psa_util: change guard for mbedtls_psa_get_random() to CRYPTO_CLIENT 
This commit also:
- updates changelog
- add a stub function to be used in component_test_psa_crypto_client()
  test

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-29 16:14:29 +01:00
Valerio Setti
a50190e2df add changelog 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-29 15:23:00 +01:00
Valerio Setti
4ee6f81195 add changelog 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-29 15:01:21 +01:00
Gilles Peskine
c0f7a8680f mbedtls_ecp_write_key(): deprecate the old function 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-02-28 13:19:42 +01:00
Gilles Peskine
e3fb4ccabf mbedtls_ecp_write_key_ext(): new function 
Same as mbedtls_ecp_write_key(), but doesn't require the caller to figure out
the length of the output and possibly distinguish between Weierstrass and
Montgomery curves.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-02-28 13:19:42 +01:00
Gilles Peskine
ae5eb64705 Remove domain parameters from the public API 
Only leave deprecated, minimal non-linkable functions.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-02-26 08:50:53 +01:00
Gilles Peskine
0f63028809
Merge pull request #8815 from gilles-peskine-arm/psa_generate_key_ext-prototype 
Introduce psa_generate_key_ext
 2024-02-26 07:16:49 +00:00
Tom Cosgrove
817772a6ca
Merge pull request #8716 from mschulz-at-hilscher/feature/gcm_largetable 
Use large GCM tables
 2024-02-23 16:25:38 +00:00
Gilles Peskine
f6eb0b8ab0 Changelog entry for benchmark improvement 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-02-22 18:40:10 +01:00
Janos Follath
bd0a683e78 Improve changelog 
Signed-off-by: Janos Follath <janos.follath@arm.com>
 2024-02-22 15:48:01 +00:00
Gilles Peskine
0aab69d2eb
Merge pull request #8807 from gilles-peskine-arm/pk_import_into_psa-implement_import 
Implement mbedtls_pk_import_into_psa
 2024-02-21 15:45:17 +00:00
Gilles Peskine
dd49c739f0 Merge remote-tracking branch 'development' into pk_import_into_psa-implement_import 
Conflicts:
* tests/suites/test_suite_pk.function: consecutive changes to the
  depends_on line of pk_sign_verify and its argument list.
 2024-02-21 12:10:40 +01:00
Manuel Pégourié-Gonnard
0ecb5fd6f5
Merge pull request #8574 from ronald-cron-arm/ssl-tickets 
Fix and align ticket age check in ssl_ticket.c for TLS 1.2 and TLS 1.3
 2024-02-21 09:38:46 +00:00
Manuel Pégourié-Gonnard
fc3f980f0f
Merge pull request #8826 from valeriosetti/issue8824 
RSA keys set to PSS/OAEP padding perform PKCS1v1.5 when MBEDTLS_USE_PSA_CRYPTO is enabled
 2024-02-20 14:08:41 +00:00
Manuel Pégourié-Gonnard
a7f651cf16
Merge pull request #8804 from valeriosetti/issue8799 
mbedtls_rsa_parse_key and mbedtls_rsa_parse_pubkey accept trailing garbage
 2024-02-20 11:58:52 +00:00
Valerio Setti
3e6ac1b5d1 fix changelog 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-20 11:33:32 +01:00
Valerio Setti
56457b9eac add changelog 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-20 11:05:54 +01:00
Valerio Setti
4cc6522a85 pem: do not parse ASN1 data after decryption (removes ASN1 dependency) 
Now that we have padding verification after decryption and since
this can be used to validate the password as well there is no
need to parse ASN1 content any more, so we can simplify/remove
that dependency.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-16 15:26:12 +01:00
Janos Follath
0315123cfb
Merge pull request #8691 from billatarm/add-pc-files 
pkg-config: add initial pkg-config files
 2024-02-15 11:21:14 +00:00
Gilles Peskine
7a18f9645c psa_generate_key_ext: RSA: support custom public exponent 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-02-15 11:57:46 +01:00
Janos Follath
f0543becf9 Add Changelog 
Signed-off-by: Janos Follath <janos.follath@arm.com>
 2024-02-15 10:47:56 +00:00
Gilles Peskine
0020080f44
Merge pull request #8810 from PiotrBzdrega/development 
move entropy init prior arguments number recognition
 2024-02-14 13:43:36 +00:00
Valerio Setti
d8840ec6e5 add changelog 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-14 06:44:31 +01:00
PiotrBzdrega
dc6606b5e3 newline at end of changelog file 
Signed-off-by: PiotrBzdrega <piotrbzdrega@yandex.com>
 2024-02-13 22:17:08 +01:00
PiotrBzdrega
e0a6f7d320 fill out missing dot in changelog 
Signed-off-by: PiotrBzdrega <piotrbzdrega@yandex.com>
 2024-02-13 17:08:40 +01:00
Dave Rodgman
fff51ceccd
Update ChangeLog.d/pkg-config-files-addition.txt 
Fix syntax errors in Changelog (and tidy up punctuation)

Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-02-13 15:32:29 +00:00
Piotr Bzdręga
7238efd136 changelog for bugfix 
Signed-off-by: Piotr Bzdręga <piotrbz@mikronika.com.pl>
 2024-02-12 21:06:54 +01:00
Gilles Peskine
59d09486dc Cosmetic fix 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-02-12 16:58:39 +01:00
Gilles Peskine
92fb604139 Fix mbedtls_pk_get_bitlen() for RSA with non-byte-aligned sizes 
Add non-regression tests. Update some test functions to not assume that
byte_length == bit_length / 8.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-02-12 11:24:08 +01:00
Gilles Peskine
19f1adfc69 New function mbedtls_rsa_get_bitlen() 
Document, implement and test mbedtls_rsa_get_bitlen().

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-02-12 11:23:05 +01:00
Gilles Peskine
05ee3fbdc0 mbedtls_pk_import_into_psa: documentation 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-02-09 19:31:04 +01:00
Matthias Schulz
cdf9894e60
Ajdusted change log. 
Co-authored-by: Dave Rodgman <dave.rodgman@arm.com>
Signed-off-by: Matthias Schulz <140500342+mschulz-at-hilscher@users.noreply.github.com>
 2024-02-09 11:11:38 +01:00
Ronald Cron
7b0ac0b980 Add change log for mbedtls_ssl_session_get_ticket_creation_time() 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-02-09 09:50:18 +01:00
Ronald Cron
c522255e33 Add change log 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-02-09 08:26:58 +01:00
Matthias Schulz
0e690d3c0b Add changelog. 
Signed-off-by: Matthias Schulz <mschulz@hilscher.com>
 2024-02-08 18:37:20 +01:00
Ryan Everett
791fc2e24c Merge remote-tracking branch 'upstream/development' into pkcs5_aes_new 
Signed-off-by: Ryan Everett <ryan.everett@arm.com>
 2024-02-08 14:26:29 +00:00
Manuel Pégourié-Gonnard
b7307630bb
Merge pull request #8703 from valeriosetti/issue7765-guards-in-asn1 
Conversion function between raw and DER ECDSA signatures (guards in ASN1)
 2024-02-08 08:45:30 +00:00
Manuel Pégourié-Gonnard
7bf1e98f44
Merge pull request #8740 from valeriosetti/issue8647 
Move RSA basic key parsing/writing to rsa.c
 2024-02-08 08:35:42 +00:00
Manuel Pégourié-Gonnard
1d7bc1ecdf
Merge pull request #8717 from valeriosetti/issue8030 
PSA FFDH: feature macros for parameters
 2024-02-07 10:06:03 +00:00
Gilles Peskine
f45589b492
Merge pull request #8198 from silabs-Kusumit/kdf_incorrect_initial_capacity 
KDF incorrect initial capacity
 2024-02-06 17:29:43 +00:00
Valerio Setti
1810fd9ac8 add changelog 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-06 17:03:32 +01:00
Valerio Setti
eae7fce829 add changelog 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-06 14:40:59 +01:00
Bill Roberts
a4d17b34f3
pkg-config: add initial pkg-config files 
Add three package config files for mbedtls, mbedcrypto and mbedx509.
Also update various project variables so the generated PC files have the
required data needed without hardcoding it everywhere.

This will help distros package the project following existing
conventsions between a normal and -devel package that includes the
headers and .pc files for pkg-config aware consumers.

Fixes: #228
Signed-off-by: Bill Roberts <bill.roberts@arm.com>
 2024-02-05 09:40:47 -06:00
Valerio Setti
fc590dd361 changelog: fix typo 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-02 13:46:02 +01:00
Valerio Setti
9e520f7ea9 changelog: improve descriptions 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-01 15:50:44 +01:00
Gilles Peskine
cbb9caead4 Changelog for building SHA-256 and 512 with old libc 
Linux/Aarch64: support SHA acceleration detection with older libc

On Linux on aarch64 (64-bit ARMv8) processors, we use getauxval() to detect
whether the runtime environment supports SHA-256 or SHA-512 acceleration.
Some libc do not define the necessary HWCAP_xxx constants to analyze the
result of getauxval(), either because they don't bother or because they're
too old to recognize the values we need (for example, HWCAP_SHA2 appeared in
Glibc 2.24 and HWCAP_SHA512 appeared in Glibc 2.27). In such cases, assume
that the values are the same as in the kernel ABI and define the constants
manually.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-01-30 15:25:37 +00:00
Dave Rodgman
fc587a337f Remove already-assmebled Changelog entry 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-01-26 12:48:33 +00:00
Dave Rodgman
047c724c22 Merge remote-tracking branch 'restricted/development-restricted' into update-development-r 
Conflicts:
	programs/Makefile
	tests/scripts/check-generated-files.sh
 2024-01-26 12:42:51 +00:00
Dave Rodgman
f5e231ca84
Merge pull request #8719 from daverodgman/iar-codegen 
Improve codegen of unaligned access for IAR and gcc
 2024-01-25 08:31:45 +00:00
Valerio Setti
ea98647282 changelog: document RSA parse/write improvements 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-01-24 16:42:32 +01:00
Janos Follath
aa3fa98bc4
Merge pull request #8726 from v1gnesh/patch-1 
Update entropy_poll.c to allow build in z/OS
 2024-01-23 12:43:18 +00:00
v1gnesh
468c02cf61
Update ChangeLog.d/8726.txt 
Co-authored-by: Janos Follath <janos.follath@arm.com>
Signed-off-by: v1gnesh <v1gnesh@users.noreply.github.com>
 2024-01-23 15:29:40 +05:30
v1gnesh
d0b55edea3
Create 8726.txt changelog entry 
Signed-off-by: v1gnesh <v1gnesh@users.noreply.github.com>
 2024-01-22 17:13:56 +05:30
Manuel Pégourié-Gonnard
34c6e8a770
Merge pull request #8700 from valeriosetti/issue8461 
psa_asymmetric_encrypt() doesn't work with opaque driver
 2024-01-22 08:43:08 +00:00
Dave Rodgman
7470557855 Add changelog entry 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-01-19 16:14:55 +00:00
Gilles Peskine
4d4891e18a
Merge pull request #8666 from valeriosetti/issue8340 
Export the mbedtls_md_psa_alg_from_type function
 2024-01-18 13:58:55 +00:00
Gilles Peskine
b1f96c0354
Merge pull request #7815 from gilles-peskine-arm/ecp-export-partial 
ECP keypair utility functions
 2024-01-18 10:29:05 +00:00
Gilles Peskine
c9077cccd3
Merge pull request #8664 from valeriosetti/issue7764 
Conversion function from ecp group to PSA curve
 2024-01-18 10:28:55 +00:00
Valerio Setti
43ff242a8b changelog: fix typo 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-01-18 08:42:38 +01:00
Valerio Setti
584dc80d96 add changelog 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-01-17 08:06:32 +01:00
Dave Rodgman
9f97566c04 Add Changelog 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-01-16 13:24:45 +00:00
Tom Cosgrove
bc5d9165ae
Merge pull request #8554 from yanrayw/issue/8221/fix-tls-suiteB-profile 
TLS: remove RSA signature algorithms in `suite B` profile
 2024-01-12 14:34:28 +00:00
Tom Cosgrove
f1ba1933cf
Merge pull request #8526 from yanrayw/issue/7011/send_record_size_limit_ext 
TLS1.3: SRV/CLI: add support for sending Record Size Limit extension
 2024-01-12 13:39:15 +00:00
Waleed Elmelegy
f0ccf46713 Add minor cosmetic changes to record size limit changelog and comments 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2024-01-12 10:52:45 +00:00
Ryan Everett
86d5347930 Mention PK parse in changelog 
Signed-off-by: Ryan Everett <ryan.everett@arm.com>
 2024-01-12 10:31:31 +00:00
Janos Follath
0b39d1ed7d Update Marvin fix Changelog entry 
Upon further consideration we think that a remote attacker close to the
victim might be able to have precise enough timing information to
exploit the side channel as well. Update the Changelog to reflect this.

Signed-off-by: Janos Follath <janos.follath@arm.com>
 2024-01-11 14:24:02 +00:00
Ronald Cron
7c14afcaaa
Merge pull request #8595 from yanrayw/issue/8593/srv-CH-fix-version-check 
TLS1.3: SRV: check `min_tls_version` when parsing ClientHello
 2024-01-11 13:34:09 +00:00
Waleed Elmelegy
85ddd43656 Improve record size limit changelog wording 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2024-01-11 11:07:57 +00:00
Kusumit Ghoderao
d3f70d321a fix unused variable warning and other fixes 
Signed-off-by: Kusumit Ghoderao <Kusumit.Ghoderao@silabs.com>
 2024-01-10 21:49:09 +05:30
Kusumit Ghoderao
911eafda31 add bugfix changelog entry 
Signed-off-by: Kusumit Ghoderao <Kusumit.Ghoderao@silabs.com>
 2024-01-10 21:49:09 +05:30
Waleed Elmelegy
2a2462e8f9 Add Changlog entry for record size extension 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2024-01-10 16:17:28 +00:00
Janos Follath
890c74447d
Merge pull request #1123 from yanesca/fix-marvin-attack 
Fix for the Marvin attack
 2024-01-10 12:16:57 +00:00
Manuel Pégourié-Gonnard
0f45a1aec5 Fix typos / improve syntax 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2024-01-10 09:43:30 +01:00
Valerio Setti
3afdd02e37 changelog: improve wording 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-01-09 13:41:53 +01:00
Valerio Setti
2622b1dab3 changelog: improve wording 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-01-09 13:41:53 +01:00
Valerio Setti
fc8a48a9e3 changelog: fix working 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-01-09 13:41:52 +01:00
Valerio Setti
8bd330dff5 changelog: add missing newline 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-01-09 13:41:52 +01:00
Valerio Setti
90e764c1bf changelog: added documentation for the 2 new public functions 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-01-09 13:41:52 +01:00
Manuel Pégourié-Gonnard
a57278151b Update ChangeLog for CCM/GCM improvements 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2024-01-08 11:35:01 +01:00
Manuel Pégourié-Gonnard
729cf89704 Consolidate ChangeLog entries about CIPHER_C 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2024-01-08 11:35:01 +01:00
Valerio Setti
3742f7c4b4 changelog: improve wording 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-01-05 10:37:58 +01:00
Valerio Setti
04cccef256 changelog: improve wording 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-01-04 13:33:12 +01:00
Valerio Setti
2a185c30af changelog: rename changelog file to reflect the number of the related issue 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-01-04 13:31:36 +01:00
Manuel Pégourié-Gonnard
5bad043c06
Merge pull request #8641 from valeriosetti/issue8358 
G3-G4 wrap-up
 2024-01-04 10:48:00 +00:00
Valerio Setti
a835d6da08 changelog: document MD's conversion functions 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-01-02 16:20:39 +01:00
Valerio Setti
81338483e6 changelog: enhance description 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-12-29 15:46:17 +01:00
Valerio Setti
b3413bf0b4 changelog: update description 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-12-28 12:15:45 +01:00
Janos Follath
8c4cabf6aa Fix typo 
Signed-off-by: Janos Follath <janos.follath@arm.com>
 2023-12-27 10:47:21 +00:00
Gilles Peskine
28e9d86cbc Changelog entry for the new ECP functions 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2023-12-24 19:51:57 +01:00
Valerio Setti
d834896c8b changelog: enhancing descriptions 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-12-20 16:00:44 +01:00
Tomi Fontanilles
e6a664ed65 changelog: fix missing newline at end of file 
Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
 2023-12-20 13:05:55 +02:00
Tomi Fontanilles
5297e43eec non-psa-pk-implementation: rephrase the changelog entry 
And remove the comment on the uniformity in the PK module
with regards to PSA_CRYPTO_C not being referenced anymore;
end users are probably not interested in that.

Signed-off-by: Tomi Fontanilles <129057597+tomi-font@users.noreply.github.com>
 2023-12-20 12:59:57 +02:00
Tomi Fontanilles
8174662b64 pk: implement non-PSA mbedtls_pk_sign_ext() 
This makes the function always available with its
its implementation depending on MBEDTLS_USE_PSA_CRYPTO.

Related dependencies and tests are updated as well.

Fixes #7583.

Signed-off-by: Tomi Fontanilles <129057597+tomi-font@users.noreply.github.com>
 2023-12-20 12:59:57 +02:00
Valerio Setti
70f05bedd6 changelog: add changelog for accelerated ciphers and AEADs 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-12-19 08:05:37 +01:00
Manuel Pégourié-Gonnard
cddab78612
Merge pull request #8630 from joerchan/mbedtls-tfm-compat 
Mbedtls tfm compat
 2023-12-15 09:31:27 +00:00
Joakim Andersson
9ede76cd1d changelog: add changelog for move of mbedtls_ecc psa helper functions 
add changelog for move of mbedtls_ecc psa helper functions.

Signed-off-by: Joakim Andersson <joakim.andersson@nordicsemi.no>
 2023-12-14 16:33:18 +01:00
Janos Follath
aa5cc7b930 Add Changelog for the Marvin attack fix 
Signed-off-by: Janos Follath <janos.follath@arm.com>
 2023-12-08 08:41:08 +00:00
Yanray Wang
e9be2a259e fix-tls13-server-min-version-check.txt: rephrase ChangeLog 
Signed-off-by: Yanray Wang <yanray.wang@arm.com>
 2023-12-08 11:00:41 +08:00
Valerio Setti
69402fd6a2 changelog: fix typos and working 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-12-06 11:32:10 +01:00
Yanray Wang
631e6bd221 ChangeLog: add fix-tls13-server-min-version-check.txt 
Signed-off-by: Yanray Wang <yanray.wang@arm.com>
 2023-12-05 15:43:35 +08:00
Valerio Setti
10149c9516 changelog: add changelog for AEAD support without CIPHER_C 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-12-04 15:24:23 +01:00
Manuel Pégourié-Gonnard
294f5d7ea9
Merge pull request #8540 from valeriosetti/issue8060 
[G2] Make CCM and GCM work with the new block_cipher module
 2023-11-28 08:18:45 +00:00
Dave Rodgman
9fbac381e6
Merge pull request #8326 from daverodgman/aesce-thumb2 
Support hw-accelerated AES on Thumb and Arm
 2023-11-27 09:58:58 +00:00
Yanray Wang
690ee81533 Merge remote-tracking branch 'origin/development' into support_cipher_encrypt_only 2023-11-23 10:31:26 +08:00
Yanray Wang
d8c899cb17 TLS Suite B fix: add ChangeLog entry 
Signed-off-by: Yanray Wang <yanray.wang@arm.com>
 2023-11-22 18:37:52 +08:00
Jerry Yu
713ce1f889 various improvement 
- improve change log entry
- improve comments
- remove unnecessary statement
- change type of client_age

Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2023-11-21 09:59:25 +08:00
Jerry Yu
fe38e948b8 Add changelog entry for anti_replay_fail 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2023-11-21 09:58:18 +08:00
Valerio Setti
dd426da7b8 added changelog 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-11-17 08:33:31 +01:00
Ryan Everett
460f457ecb Rewrite changelog 
Signed-off-by: Ryan Everett <ryan.everett@arm.com>
 2023-11-16 15:21:08 +00:00
Ryan Everett
ca159a1102 Add changelog 
Signed-off-by: Ryan Everett <ryan.everett@arm.com>
 2023-11-15 16:36:54 +00:00
Valerio Setti
4809057ddf changelog: use better wording and modify changelog section 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-11-15 09:18:14 +01:00
Valerio Setti
951faf6e7b ChangeLog: add change log for CCM/CCM* coupling removal 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-11-15 09:18:14 +01:00
Tom Cosgrove
08ea9bfa1f
Merge pull request #8487 from yanrayw/issue/6909/rename_tls13_conf_early_data 
TLS 1.3: Rename early_data and max_early_data_size configuration function
 2023-11-10 19:35:46 +00:00
Yanray Wang
9938554577 BLOCK_CIPHER_NO_DECRYPT: rephrase ChangeLog 
Signed-off-by: Yanray Wang <yanray.wang@arm.com>
 2023-11-09 17:18:30 +08:00
Yanray Wang
6cdfe9d51f tls1.3: early data: rephrase ChangeLog 
Signed-off-by: Yanray Wang <yanray.wang@arm.com>
 2023-11-09 16:00:39 +08:00
Gilles Peskine
4dec9ebdc2
Merge pull request #8378 from mschulz-at-hilscher/fixes/issue-8377 
Fixes "CSR parsing with critical fields fails"
 2023-11-08 18:07:04 +00:00
Dave Rodgman
39b2a38076 Restore 3.5.1 ChangeLog 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2023-11-08 11:40:04 +00:00
Yanray Wang
65f7653bdd tls1.3: early data: rephrase ChangeLog 
Signed-off-by: Yanray Wang <yanray.wang@arm.com>
 2023-11-08 18:48:33 +08:00
Yanray Wang
eb61868878 tls1.3: early data: add ChangeLog entry 
Signed-off-by: Yanray Wang <yanray.wang@arm.com>
 2023-11-08 13:46:28 +08:00
Yanray Wang
53479573a0 ChangeLog: rewrite ChangeLog for block-cipher-no-decrypt 
Signed-off-by: Yanray Wang <yanray.wang@arm.com>
 2023-11-06 10:02:10 +08:00
Dave Rodgman
658bcff97c Add Changelog for license 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2023-11-02 19:52:34 +00:00
Yanray Wang
b67b47425e Rename MBEDTLS_CIPHER_ENCRYPT_ONLY as MBEDTLS_BLOCK_CIPHER_NO_DECRYPT 
Signed-off-by: Yanray Wang <yanray.wang@arm.com>
 2023-10-31 17:22:06 +08:00
Tom Cosgrove
3857bad9a2
Merge pull request #8427 from tom-cosgrove-arm/fix-linux-builds-in-conda-forge 
Fix builds in conda-forge, which doesn't have CLOCK_BOOTTIME
 2023-10-30 15:29:26 +00:00
Bence Szépkúti
51328162e6
Merge pull request #8374 from sergio-nsk/sergio-nsk/8372/2 
Fix compiling AESNI in Mbed-TLS with clang on Windows
 2023-10-26 21:21:01 +00:00
Tom Cosgrove
257f6dd57d Fix builds in conda-forge, which doesn't have CLOCK_BOOTTIME 
Fixes #8422

Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
 2023-10-26 14:04:34 +01:00
Dave Rodgman
c61990634c Clarify changelog 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2023-10-25 09:06:24 +01:00
Dave Rodgman
2fe5b85637 Update Changelog to specify Armv8-A 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2023-10-25 09:06:24 +01:00
Dave Rodgman
f82e0c4701 Changelog 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2023-10-25 09:06:24 +01:00
Dave Rodgman
d69d3cda34
Merge pull request #8298 from daverodgman/sha-armce-thumb2 
Support SHA256 acceleration on Armv8 thumb2 and arm
 2023-10-24 21:23:15 +00:00
Dave Rodgman
514590210b Merge remote-tracking branch 'origin/development' into sha-armce-thumb2 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2023-10-23 15:35:07 +01:00
Tom Cosgrove
235e361b6c
Merge pull request #8339 from lpy4105/issue/support-cpuid-for-win32 
Support cpuid for win32
 2023-10-23 10:43:39 +00:00
Matthias Schulz
83d0dbf087 Added changelog. 
Signed-off-by: Matthias Schulz <mschulz@hilscher.com>
 2023-10-19 16:25:53 +02:00
Pengyu Lv
d2d3d6374e Reword the changelog entry 
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
 2023-10-19 16:50:45 +08:00
Pengyu Lv
74f2c15ea3 Add a changelog entry 
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
 2023-10-19 11:39:45 +08:00
Sergey Markelov
3898f10fed Fix #8372 - Error compiling AESNI in Mbed-TLS with clang on Windows 
It can successfully compile w/ the clang options -maes -mpclmul.

Signed-off-by: Sergey Markelov <sergey@solidstatenetworks.com>
 2023-10-18 20:24:39 -07:00
Gilles Peskine
62418dd20b
Merge pull request #8350 from waleed-elmelegy-arm/fix-null-dereference-in-x509-cert-write 
Fix possible NULL dereference issue in X509 cert_write program
 2023-10-18 10:03:36 +00:00
Paul Elliott
d44ee9e6d1
Merge pull request #8351 from waleed-elmelegy-arm/fix-null-dereference-in-x509-cert-req 
Fix possible NULL dereference issue in X509 cert_req program
 2023-10-18 09:01:31 +00:00
Yanray Wang
aa01ee303a Merge remote-tracking branch 'origin/development' into support_cipher_encrypt_only 2023-10-16 17:38:32 +08:00
Gilles Peskine
28b56335bb
Merge pull request #7942 from tom-daubney-arm/psa_crypto_example_hash 
Add example program for PSA hash
 2023-10-13 15:22:58 +00:00
Bence Szépkúti
195411bb17
Merge pull request #8062 from yanrayw/save_stack_usage_pkwrite 
pkwrite: use heap to save stack usage for writing keys in PEM string
 2023-10-13 14:27:13 +00:00
Waleed Elmelegy
0badeb4560 Fix changelog code style issue 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2023-10-13 10:27:13 +01:00
Waleed Elmelegy
107c60c765 Fix changelog style issue 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2023-10-13 10:25:58 +01:00
Waleed Elmelegy
737cfe184b Add changelog entry for x509 cert_req null dereference fix 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2023-10-12 15:51:13 +01:00
Waleed Elmelegy
1444c0eb20 Add changelog entry for x509 cert_write null dereference fix 
Also fix a typo in cert_write.c

Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2023-10-12 14:31:06 +01:00
Ryan Everett
cd80f09aa3 Fix Changelog formatting 
Signed-off-by: Ryan Everett <ryan.everett@arm.com>
 2023-10-12 12:00:01 +01:00
Ryan Everett
632699b925 Add Changelog 
Signed-off-by: Ryan Everett <ryan.everett@arm.com>
 2023-10-12 12:00:01 +01:00
Dave Rodgman
0d3fe733cc
Clarify changelog 
Co-authored-by: Tom Cosgrove <tom.cosgrove@arm.com>
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2023-10-12 11:00:49 +01:00
Dave Rodgman
b0d9830373
Merge branch 'development' into sha-armce-thumb2 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2023-10-11 13:53:41 +01:00
Dave Rodgman
830dc3dc71 Improve Changelog 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2023-10-11 11:20:16 +01:00
Dave Rodgman
d680d4fbf9 SHA256 renaming - fix some missed things 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2023-10-11 11:05:22 +01:00
Dave Rodgman
f097bef6ea Refer to Armv8-A (not Armv8) in docs 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2023-10-10 15:14:30 +01:00