coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-07-30 16:26:33 +08:00
Code Issues Packages Projects Releases Wiki Activity
mbedtls/library
History
Valerio Setti c25e7654ea pkcs7: fail verification if MD alg or sig_alg are not secure 
Add a check on mbedtls_pkcs7_data_or_hash_verify() so that the verification
fails if the MD alg specified in PKCS7 structure or the signature
algorithm specified in the X.509 certificate are not in the list of
secure algorithms (i.e. mbedtls_x509_crt_profile_default).

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
2026-06-22 11:39:49 +02:00
..
.gitignore Register generate_config_files.py outputs as generated files 2025-09-19 13:36:24 +02:00
CMakeLists.txt Merge pull request #10631 from yiwu0b11/destdir_install_env_support 2026-04-29 14:37:29 +00:00
debug_internal.h test_suite_debug: test the printf used by debug.c 2026-02-26 20:56:03 +01:00
debug.c Temporarily force standard *printf functions on MingW 2026-02-26 21:34:32 +01:00
Makefile Bump version 2026-03-26 22:34:28 +00:00
mbedtls_check_config.h Merge pull request #10650 from valeriosetti/fix-tls13-guard 2026-04-24 14:32:36 +00:00
mbedtls_common.h Make sure we declare TF-PSA-Crypto platform requirements before including system headers 2026-03-04 11:54:35 +01:00
mbedtls_config.c include mbedtls_platform_requirements.h in mbedtls_config.c 2026-04-29 16:57:55 +02:00
mbedtls_platform_requirements.h Tell MSVC to allow non-s functions where needed 2026-03-04 11:32:18 +01:00
mbedtls_utils.h library: ssl: adjust return type of mbedtls_psa_alg_from_pk_sigalg() 2025-12-09 16:15:48 +01:00
mps_common.h Fix some non-standard headers 2023-11-03 12:24:58 +00:00
mps_error.h Fix some non-standard headers 2023-11-03 12:24:58 +00:00
mps_reader.c Include ssl_misc.h for additional SSL helper files 2024-10-11 12:21:30 +01:00
mps_reader.h Fix some non-standard headers 2023-11-03 12:24:58 +00:00
mps_trace.c Include ssl_misc.h for additional SSL helper files 2024-10-11 12:21:30 +01:00
mps_trace.h Include ssl_misc.h for additional SSL helper files 2024-10-11 12:21:30 +01:00
net_sockets.c Start from a clean baseline for C11 ext1 and POSIX features 2026-03-04 11:32:18 +01:00
pkcs7.c pkcs7: fail verification if MD alg or sig_alg are not secure 2026-06-22 11:39:49 +02:00
ssl_cache.c Update includes for each library file 2024-10-09 11:18:50 +01:00
ssl_ciphersuites_internal.h ssl: rm useless private includes in internal headers 2025-12-01 10:24:41 +01:00
ssl_ciphersuites.c Change the return type of mbedtls_ssl_get_ciphersuite_sig_pk_alg to mbedtls_pk_sigalg_t 2025-10-28 07:58:37 +00:00
ssl_client.c ssl_write_supported_groups_ext: Updated documentation 2026-05-26 10:17:11 +01:00
ssl_client.h Update includes for each library file 2024-10-09 11:18:50 +01:00
ssl_cookie.c remove RNG parameters from SSL API's 2025-03-10 13:24:31 +00:00
ssl_debug_helpers.h ssl_tls.c: Rename and expand ssl_tls13_get_hs_msg_name 2026-02-18 14:21:48 +01:00
ssl_misc.h ssl: narrow TLS 1.2 RSA-PSS handling and add interop coverage 2026-04-16 04:36:48 +03:00
ssl_msg.c dtls: Fix adaptation to first ClientHello 2026-03-25 08:45:24 +01:00
ssl_ticket.c removed psa_crypto_init from library as this is supposed to be called by the application 2025-03-10 13:46:14 +00:00
ssl_tls12_client.c Merge pull request #1586 from bjwtaylor/ECDHE-PSK-integer-overflow 2026-06-16 11:49:54 +02:00
ssl_tls12_server.c Merge remote-tracking branch 'restricted/development-restricted' into mbedtls-4.1.0.rc3 2026-03-26 22:18:31 +00:00
ssl_tls13_client.c Merge pull request #1563 from minosgalanakis/security/mlfbyt4c_tls13_policy_bypass 2026-06-10 13:04:24 +02:00
ssl_tls13_generic.c library: ssl: replace mbedtls_pk_can_do() with mbedtls_pk_can_do_psa() 2025-12-04 16:28:44 +01:00
ssl_tls13_invasive.h Update includes for each library file 2024-10-09 11:18:50 +01:00
ssl_tls13_keys.c Replace __attribute__((nonstring)) with macro MBEDTLS_ATTRIBUTE_UNTERMINATED_STRING 2025-06-20 11:48:16 +01:00
ssl_tls13_keys.h Replace __attribute__((nonstring)) with macro MBEDTLS_ATTRIBUTE_UNTERMINATED_STRING 2025-06-20 11:48:16 +01:00
ssl_tls13_server.c Fix ssl_tls13_prepare_new_session_ticket returning 1 on an RNG failure 2026-05-04 18:44:05 +02:00
ssl_tls.c Merge pull request #10442 from davidhorstmann-arm/verify-result-default-failure 2026-03-17 10:36:38 +00:00
timing.c Fix a build error with MSVC 2026-02-19 16:53:52 +01:00
version.c Simplify runtime version info string methods 2025-08-18 11:39:45 +02:00
x509_create.c Fix null pointer dereference in string to names 2026-02-26 13:34:01 +00:00
x509_crl.c Unfortunately, we had two files named oid.h - one in the main repo, and one in the tf-psa-crypto repo, and these files included the mbedtls one, so I restored the header include 2025-08-29 07:05:40 +02:00
x509_crt.c x509: make profile checking functions internally available 2026-06-22 11:39:49 +02:00
x509_csr.c Remove unreachable CSR extensionRequest check 2026-06-05 11:35:41 +02:00
x509_internal.h x509: make profile checking functions internally available 2026-06-22 11:39:49 +02:00
x509_oid.c library: bulk replace MBEDTLS_RSA_C with PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC 2026-03-16 13:52:01 +01:00
x509_oid.h x509: rm useless private includes in internal headers 2025-12-01 10:24:50 +01:00
x509.c Add improvements to code comments and docs 2026-01-12 08:19:07 +00:00
x509write_crt.c x509: replace usage of mbedtls_pk_can_do() with mbedtls_pk_get_key_type() 2025-12-04 16:28:44 +01:00
x509write_csr.c x509: replace usage of mbedtls_pk_can_do() with mbedtls_pk_get_key_type() 2025-12-04 16:28:44 +01:00
x509write.c Remove two more useless internal includes 2025-12-02 12:06:39 +01:00