mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-11-13 09:54:49 +08:00
Merge a development version of Mbed TLS 2.16.0 that doesn't have parameter validation into development. The following conflicts were resolved: - Update ChangeLog to include release notes merged from development so far, with a version of "2.14.0+01b34fb316a5" and release date of "xxxx-xx-xx" to show this is not a released version, but instead a snapshot of the development branch equivalent to version of the 2.14.0 with additional commits from the mbedtls/development branch up through 01b34fb316a5 included. Entries added for unreleased versions of Mbed Crypto remain at the top of the file for Mbed TLS 2.xx.x. - Replace the Mbed Crypto version of mbedtls_rsa_rsaes_pkcs1_v15_decrypt() with the version from Mbed TLS which fixes timing variations and memory access variations that could lead to a Bleichenbacher-style padding oracle attack. This will prevent using psa_asymmetric_decrypt() with zero-length output buffers until a follow up commit is made to restore this capability. - In ssl_srv.c, include changes for both the new ECDH interface and opaque PSK as already added to development previously. |
||
|---|---|---|
| .. | ||
| all.sh | ||
| basic-build-test.sh | ||
| check-doxy-blocks.pl | ||
| check-files.py | ||
| check-generated-files.sh | ||
| check-names.sh | ||
| check-python-files.sh | ||
| curves.pl | ||
| depends-hashes.pl | ||
| depends-pkalgs.pl | ||
| doxygen.sh | ||
| gen_ctr_drbg.pl | ||
| gen_gcm_decrypt.pl | ||
| gen_gcm_encrypt.pl | ||
| gen_pkcs1_v21_sign_verify.pl | ||
| generate_test_code.py | ||
| generate-afl-tests.sh | ||
| key-exchanges.pl | ||
| list-enum-consts.pl | ||
| list-identifiers.sh | ||
| list-macros.sh | ||
| list-symbols.sh | ||
| mbedtls_test.py | ||
| recursion.pl | ||
| run-test-suites.pl | ||
| tcp_client.pl | ||
| test_generate_test_code.py | ||
| test_zeroize.gdb | ||
| test-ref-configs.pl | ||
| travis-log-failure.sh | ||