coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-07-30 16:26:33 +08:00
Code Issues Packages Projects Releases Wiki Activity
mbedtls/library
History
Ronald Cron 3861588b47 tls13: Add record boundary checks 
RFC 8446 (TLS 1.3 specification), Section 5.1, states:

Handshake messages MAY be coalesced into a single TLSPlaintext record
or fragmented across several records, provided that:
    ...
    -Handshake messages MUST NOT span key changes. Implementations
    MUST verify that all messages immediately preceding a key change
    align with a record boundary; if not, then they MUST terminate the
    connection with an "unexpected_message" alert. Because the
    ClientHello, EndOfEarlyData, ServerHello, Finished, and KeyUpdate
    messages can immediately precede a key change, implementations
    MUST send these messages in alignment with a record boundary.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2026-06-24 15:51:33 +02:00
..
.gitignore Register generate_config_files.py outputs as generated files 2025-09-19 13:36:24 +02:00
CMakeLists.txt Merge pull request #10631 from yiwu0b11/destdir_install_env_support 2026-04-29 14:37:29 +00:00
debug_internal.h test_suite_debug: test the printf used by debug.c 2026-02-26 20:56:03 +01:00
debug.c Temporarily force standard *printf functions on MingW 2026-02-26 21:34:32 +01:00
Makefile Bump version 2026-03-26 22:34:28 +00:00
mbedtls_check_config.h Merge pull request #10650 from valeriosetti/fix-tls13-guard 2026-04-24 14:32:36 +00:00
mbedtls_common.h Make sure we declare TF-PSA-Crypto platform requirements before including system headers 2026-03-04 11:54:35 +01:00
mbedtls_config.c include mbedtls_platform_requirements.h in mbedtls_config.c 2026-04-29 16:57:55 +02:00
mbedtls_platform_requirements.h Tell MSVC to allow non-s functions where needed 2026-03-04 11:32:18 +01:00
mbedtls_utils.h library: ssl: adjust return type of mbedtls_psa_alg_from_pk_sigalg() 2025-12-09 16:15:48 +01:00
mps_common.h Fix some non-standard headers 2023-11-03 12:24:58 +00:00
mps_error.h Fix some non-standard headers 2023-11-03 12:24:58 +00:00
mps_reader.c Include ssl_misc.h for additional SSL helper files 2024-10-11 12:21:30 +01:00
mps_reader.h Fix some non-standard headers 2023-11-03 12:24:58 +00:00
mps_trace.c Include ssl_misc.h for additional SSL helper files 2024-10-11 12:21:30 +01:00
mps_trace.h Include ssl_misc.h for additional SSL helper files 2024-10-11 12:21:30 +01:00
net_sockets.c Start from a clean baseline for C11 ext1 and POSIX features 2026-03-04 11:32:18 +01:00
pkcs7.c Merge pull request #1638 from valeriosetti/issue1598 2026-06-23 16:40:47 +02:00
ssl_cache.c Update includes for each library file 2024-10-09 11:18:50 +01:00
ssl_ciphersuites_internal.h ssl: rm useless private includes in internal headers 2025-12-01 10:24:41 +01:00
ssl_ciphersuites.c Change the return type of mbedtls_ssl_get_ciphersuite_sig_pk_alg to mbedtls_pk_sigalg_t 2025-10-28 07:58:37 +00:00
ssl_client.c ssl_write_supported_groups_ext: Updated documentation 2026-05-26 10:17:11 +01:00
ssl_client.h Update includes for each library file 2024-10-09 11:18:50 +01:00
ssl_cookie.c remove RNG parameters from SSL API's 2025-03-10 13:24:31 +00:00
ssl_debug_helpers.h ssl_tls.c: Rename and expand ssl_tls13_get_hs_msg_name 2026-02-18 14:21:48 +01:00
ssl_misc.h tls13: Add record boundary checks 2026-06-24 15:51:33 +02:00
ssl_msg.c dtls: Fix adaptation to first ClientHello 2026-03-25 08:45:24 +01:00
ssl_ticket.c removed psa_crypto_init from library as this is supposed to be called by the application 2025-03-10 13:46:14 +00:00
ssl_tls12_client.c Merge pull request #1586 from bjwtaylor/ECDHE-PSK-integer-overflow 2026-06-16 11:49:54 +02:00
ssl_tls12_server.c restore missing ext_len set 2026-06-24 09:33:33 +01:00
ssl_tls13_client.c tls13: Add record boundary checks 2026-06-24 15:51:33 +02:00
ssl_tls13_generic.c tls13: Add record boundary checks 2026-06-24 15:51:33 +02:00
ssl_tls13_invasive.h Update includes for each library file 2024-10-09 11:18:50 +01:00
ssl_tls13_keys.c Replace __attribute__((nonstring)) with macro MBEDTLS_ATTRIBUTE_UNTERMINATED_STRING 2025-06-20 11:48:16 +01:00
ssl_tls13_keys.h Replace __attribute__((nonstring)) with macro MBEDTLS_ATTRIBUTE_UNTERMINATED_STRING 2025-06-20 11:48:16 +01:00
ssl_tls13_server.c tls13: Add record boundary checks 2026-06-24 15:51:33 +02:00
ssl_tls.c Correct error handling in mbedtls_ssl_reset_checksum 2026-06-24 09:33:33 +01:00
timing.c Fix a build error with MSVC 2026-02-19 16:53:52 +01:00
version.c Simplify runtime version info string methods 2025-08-18 11:39:45 +02:00
x509_create.c Fix null pointer dereference in string to names 2026-02-26 13:34:01 +00:00
x509_crl.c Unfortunately, we had two files named oid.h - one in the main repo, and one in the tf-psa-crypto repo, and these files included the mbedtls one, so I restored the header include 2025-08-29 07:05:40 +02:00
x509_crt.c x509: make profile checking functions internally available 2026-06-22 11:39:49 +02:00
x509_csr.c Remove unreachable CSR extensionRequest check 2026-06-05 11:35:41 +02:00
x509_internal.h x509: make profile checking functions internally available 2026-06-22 11:39:49 +02:00
x509_oid.c library: bulk replace MBEDTLS_RSA_C with PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC 2026-03-16 13:52:01 +01:00
x509_oid.h x509: rm useless private includes in internal headers 2025-12-01 10:24:50 +01:00
x509.c Add improvements to code comments and docs 2026-01-12 08:19:07 +00:00
x509write_crt.c x509: replace usage of mbedtls_pk_can_do() with mbedtls_pk_get_key_type() 2025-12-04 16:28:44 +01:00
x509write_csr.c x509: replace usage of mbedtls_pk_can_do() with mbedtls_pk_get_key_type() 2025-12-04 16:28:44 +01:00
x509write.c Remove two more useless internal includes 2025-12-02 12:06:39 +01:00