Hanno Becker 679d8ceb13 Use PSA-based ciphers for SSL ticket protection ...

This commit modifies the default SSL ticket implementation
from `library/ssl_ticket.c` to use PSA-based cipher context
for ticket creation and parsing.

As in mbedtls_ssl_derive_keys() adapted in an earlier commit,
we allow fallback to the ordinary mbedtls_cipher_setup()
if the provided cipher is not known. We do this even though
we always call mbedtls_ssl_ticket_setup() with AES-GCM
in our own code since this function is public and might
be used with other ciphers by users.

2018-11-22 14:05:54 +00:00

..

.gitignore

Split libs with make + general make cleanups

2015-06-25 10:59:56 +02:00

aes.c

Merge remote-tracking branch 'public/pr/2054' into development-proposed

2018-11-09 19:57:53 +00:00

aesni.c

Warn if using a memory sanitizer on AESNI

2018-04-05 15:37:38 +02:00

arc4.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

aria.c

Use mbedtls_printf instead of printf

2018-08-13 13:49:52 +03:00

asn1parse.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

asn1write.c

Merge branch 'iotssl-1770' into development_thomas_dee

2018-11-02 10:52:49 +00:00

base64.c

Add comment to integer overflow fix in base64.c

2017-02-15 23:31:07 +02:00

bignum.c

Fix bias in random number generation in Miller-Rabin test

2018-10-09 16:36:53 +01:00

blowfish.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

camellia.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

ccm.c

enforce input and output of ccm selftest on stack

2018-07-30 11:29:26 +03:00

certs.c

Update hardcoded certificates in library/certs.c

2018-11-02 10:52:38 +00:00

chacha20.c

Fix usage of inline with for some compilers

2018-06-07 11:54:17 +02:00

chachapoly.c

Fix a few typos

2018-06-18 10:30:30 +02:00

cipher_wrap.c

Fix style in NUM_CIPHERS definition in cipher_wrap.c

2018-11-22 14:03:39 +00:00

cipher.c

Return 'Feature unavailable' error for ciphers unsupported by PSA

2018-11-22 14:03:39 +00:00

cmac.c

Merge remote-tracking branch 'public/pr/1390' into development

2018-06-27 10:51:47 +01:00

CMakeLists.txt

crypto: Add mbedtls-psa as a submodule

2018-11-21 12:54:57 +00:00

ctr_drbg.c

ctr_drbg: add comments relating the code with the NIST specification

2018-08-21 17:55:46 +03:00

debug.c

Fix compilation error with Mingw32

2017-09-06 17:51:14 +03:00

des.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

dhm.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

ecdh.c

Change to positive flow for all cases

2018-11-05 18:08:46 +02:00

ecdsa.c

Avoid using restartable and alternative ECP imp.

2018-11-05 14:04:26 +02:00

ecjpake.c

Fix minor code style issues

2018-05-15 09:21:57 +01:00

ecp_curves.c

Merge branch 'pr_348' into development-proposed

2018-04-04 09:18:27 +02:00

ecp.c

Detect unsigned integer overflow in mbedtls_ecp_check_budget()

2018-10-26 15:09:35 +01:00

entropy_poll.c

Merge remote-tracking branch 'public/pr/1198' into development

2018-07-24 17:20:17 +01:00

entropy.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

error.c

Add common feature unavailable error

2018-11-09 13:57:37 +00:00

gcm.c

Deprecate hardware acceleration errors

2018-11-09 15:01:07 +00:00

havege.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

hkdf.c

Fix issue if salt = NULL and salt_len !=0 in mbedtls_hkdf_extract()

2018-07-23 10:34:47 -07:00

hmac_drbg.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

Makefile

crypto: Add mbedtls-psa as a submodule

2018-11-21 12:54:57 +00:00

md2.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

md4.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

md5.c

Fix Lucky 13 cache attack on MD/SHA padding

2018-07-05 10:47:00 +02:00

md_wrap.c

New MD API: rename functions from _ext to _ret

2018-01-22 11:54:42 +01:00

md.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

memory_buffer_alloc.c

Fix braces in mbedtls_memory_buffer_alloc_status()

2018-06-12 16:56:04 +01:00

net_sockets.c

Merge remote-tracking branch 'public/pr/1198' into development

2018-07-24 17:20:17 +01:00

nist_kw.c

Add selftests

2018-07-24 16:43:20 +01:00

oid.c

pkcs5v2: add support for additional hmacSHA algorithms

2018-02-08 17:18:15 +08:00

padlock.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

pem.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

pk_wrap.c

Fix or improve some comments (and whitespace)

2018-10-15 15:27:49 +02:00

pk.c

Fix function name to fit conventions

2018-10-16 10:41:31 +02:00

pkcs5.c

Treat warnings as errors for IAR

2018-05-25 14:54:14 +01:00

pkcs11.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

pkcs12.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

pkparse.c

Reinitialize PK ctx in mbedtls_pk_parse_key before reuse are free

2018-10-11 11:31:15 +01:00

pkwrite.c

Adapt PK test suite to use new interface

2017-08-23 16:17:27 +01:00

platform_util.c

Don't declare and define gmtime()-mutex on Windows platforms

2018-09-06 12:09:56 +01:00

platform.c

Omit runtime configuration of calloc/free if macro config enabled

2018-10-11 11:04:20 +01:00

poly1305.c

Fix usage of inline with for some compilers

2018-06-07 11:54:17 +02:00

ripemd160.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

rsa_internal.c

Bignum: Deprecate mbedtls_mpi_is_prime()

2018-10-09 16:36:53 +01:00

rsa.c

Merge remote-tracking branch 'restricted/pr/510' into development-restricted-proposed

2018-11-12 14:29:14 +00:00

sha1.c

Fix Lucky 13 cache attack on MD/SHA padding

2018-07-05 10:47:00 +02:00

sha256.c

Fix Lucky 13 cache attack on MD/SHA padding

2018-07-05 10:47:00 +02:00

sha512.c

Fix Lucky 13 cache attack on MD/SHA padding

2018-07-05 10:47:00 +02:00

ssl_cache.c

Address PR review comments

2017-10-29 17:53:52 +02:00

ssl_ciphersuites.c

Merge remote-tracking branch 'upstream-public/pr/1378' into development

2018-08-10 10:59:53 +01:00

ssl_cli.c

Merge remote-tracking branch 'restricted/pr/520' into development-restricted-proposed

2018-11-12 14:30:16 +00:00

ssl_cookie.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

ssl_srv.c

Style: Add numerous comments indicating condition guarded by #endif

2018-08-28 10:13:29 +01:00

ssl_ticket.c

Use PSA-based ciphers for SSL ticket protection

2018-11-22 14:05:54 +00:00

ssl_tls.c

Setup PSA-based cipher context in mbedtls_ssl_derive_keys()

2018-11-22 14:05:54 +00:00

threading.c

Don't declare and define gmtime()-mutex on Windows platforms

2018-09-06 12:09:56 +01:00

timing.c

Merge remote-tracking branch 'public/pr/1777' into development-proposed

2018-11-04 18:51:36 +00:00

version_features.c

Add config option for X.509/TLS to use PSA

2018-11-21 21:03:14 +00:00

version.c

Fix missing void argument declarations #678

2016-11-04 23:05:56 +01:00

x509_create.c

Break overly long line in library/x509_create.c

2018-11-02 10:52:38 +00:00

x509_crl.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

x509_crt.c

Merge remote-tracking branch 'public/pr/2052' into development-restricted-proposed

2018-11-07 12:59:14 +00:00

x509_csr.c

Merge remote-tracking branch 'public/pr/1621' into development

2018-06-28 12:09:15 +01:00

x509.c

Rename mbedtls_platform_gmtime() to mbedtls_platform_gmtime_r()

2018-09-05 15:06:19 +01:00

x509write_crt.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

x509write_csr.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00

xtea.c

Rename mbedtls_zeroize to mbedtls_platform_zeroize

2018-04-17 10:00:21 -05:00