Andres Amaya Garcia 
							
						 
					 
					
						
						
							
						
						1f6301b3c8 
					 
					
						
						
							
							Rename mbedtls_zeroize to mbedtls_platform_zeroize  
						
						
						
						
					 
					
						2018-04-17 10:00:21 -05:00 
						 
				 
			
				
					
						
							
							
								Andres Amaya Garcia 
							
						 
					 
					
						
						
							
						
						e32df087fb 
					 
					
						
						
							
							Remove individual copies of mbedtls_zeroize()  
						
						... 
						
						
						
						This commit removes all the static occurrencies of the function
mbedtls_zeroize() in each of the individual .c modules. Instead the
function has been moved to utils.h that is included in each of the
modules. 
						
						
					 
					
						2018-04-17 09:19:05 -05:00 
						 
				 
			
				
					
						
							
							
								Jaeden Amero 
							
						 
					 
					
						
						
							
						
						784de59ccd 
					 
					
						
						
							
							Merge remote-tracking branch 'upstream-restricted/pr/410' into development-restricted  
						
						... 
						
						
						
						- Resolve ChangeLog conflicts
- Update Doxygen warning block in dhm.h to render correctly
- Prefix the exported identifier deprecated_constant_t with mbedtls_ 
						
						
					 
					
						2018-01-26 18:43:04 +00:00 
						 
				 
			
				
					
						
							
							
								Gilles Peskine 
							
						 
					 
					
						
						
							
						
						aaaa98cd60 
					 
					
						
						
							
							Merge branch 'development-proposed' into development-restricted  
						
						
						
						
					 
					
						2018-01-23 00:59:17 +01:00 
						 
				 
			
				
					
						
							
							
								nirekh01 
							
						 
					 
					
						
						
							
						
						08ba530bff 
					 
					
						
						
							
							Remove some extra lines  
						
						... 
						
						
						
						Remove some extra lines as was requested in code review 
						
						
					 
					
						2017-12-28 16:21:38 +00:00 
						 
				 
			
				
					
						
							
							
								nirekh01 
							
						 
					 
					
						
						
							
						
						49762fa21f 
					 
					
						
						
							
							Add 'MBEDTLS_DHM_ALT' #DEFINE to library/config.h  
						
						... 
						
						
						
						Add 'MBEDTLS_DHM_ALT' #DEFINE to library/config.h to support alternate DHM 
						
						
					 
					
						2017-12-25 06:46:48 +00:00 
						 
				 
			
				
					
						
							
							
								Reuven Levin 
							
						 
					 
					
						
						
							
						
						1f35ca9471 
					 
					
						
						
							
							Added alternated Diffie-Hellman module.  
						
						... 
						
						
						
						1. Add modified files dhm.c and dhm.h 
						
						
					 
					
						2017-12-25 06:42:59 +00:00 
						 
				 
			
				
					
						
							
							
								Gilles Peskine 
							
						 
					 
					
						
						
							
						
						9c8ac0ce2c 
					 
					
						
						
							
							Merge remote-tracking branch 'upstream-restricted/pr/404' into development-restricted  
						
						
						
						
					 
					
						2017-11-28 15:50:02 +01:00 
						 
				 
			
				
					
						
							
							
								Gilles Peskine 
							
						 
					 
					
						
						
							
						
						c753f5daf4 
					 
					
						
						
							
							Merge remote-tracking branch 'upstream-restricted/pr/369' into development-restricted  
						
						
						
						
					 
					
						2017-11-28 14:16:47 +01:00 
						 
				 
			
				
					
						
							
							
								Hanno Becker 
							
						 
					 
					
						
						
							
						
						8880e75dcb 
					 
					
						
						
							
							Add new function mbedtls_dhm_set_group to DHM Group  
						
						
						
						
					 
					
						2017-10-04 13:17:52 +01:00 
						 
				 
			
				
					
						
							
							
								Hanno Becker 
							
						 
					 
					
						
						
							
						
						e2fcfa84ea 
					 
					
						
						
							
							Stick to the use of constant-macros  
						
						... 
						
						
						
						This commit returns to using constant macros instead of global variables for the DHM group constants. Further, macros
providing the binary encoding of the primes from RFC 3526 and RFC 7919 are added. The hex-string macros are deprecated. 
						
						
					 
					
						2017-10-04 13:12:15 +01:00 
						 
				 
			
				
					
						
							
							
								Hanno Becker 
							
						 
					 
					
						
						
							
						
						de6c1644cc 
					 
					
						
						
							
							Add brackets around arguments of internal macro DHM_MPI_EXPORT  
						
						
						
						
					 
					
						2017-10-02 15:03:15 +01:00 
						 
				 
			
				
					
						
							
							
								Hanno Becker 
							
						 
					 
					
						
						
							
						
						e71ad12cd5 
					 
					
						
						
							
							Minor code-improvements in dhm.c  
						
						
						
						
					 
					
						2017-09-28 11:06:31 +01:00 
						 
				 
			
				
					
						
							
							
								Hanno Becker 
							
						 
					 
					
						
						
							
						
						4c72b000cb 
					 
					
						
						
							
							Add const-qualifiers to prime constants  
						
						
						
						
					 
					
						2017-09-27 16:06:37 +01:00 
						 
				 
			
				
					
						
							
							
								Hanno Becker 
							
						 
					 
					
						
						
							
						
						b2bad800e4 
					 
					
						
						
							
							Introduce Diffie-Hellman parameters from RFC 7919  
						
						
						
						
					 
					
						2017-09-27 12:43:55 +01:00 
						 
				 
			
				
					
						
							
							
								Hanno Becker 
							
						 
					 
					
						
						
							
						
						0e6dc84f3e 
					 
					
						
						
							
							Deprecate Diffie-Hellman groups from RFC 5114  
						
						... 
						
						
						
						Also, change the way the standardized Diffie-Hellman groups are provided from
macro-based string-literals to global variables. 
						
						
					 
					
						2017-09-27 11:48:02 +01:00 
						 
				 
			
				
					
						
							
							
								Janos Follath 
							
						 
					 
					
						
						
							
						
						1ad1c6d4e1 
					 
					
						
						
							
							Fix typo  
						
						
						
						
					 
					
						2017-09-21 12:05:30 +01:00 
						 
				 
			
				
					
						
							
							
								Janos Follath 
							
						 
					 
					
						
						
							
						
						aa325d7b7f 
					 
					
						
						
							
							DHM: Fix dhm_check_range() always returning 0  
						
						... 
						
						
						
						Although the variable ret was initialised to an error, the
MBEDTLS_MPI_CHK macro was overwriting it. Therefore it ended up being
0 whenewer the bignum computation was successfull and stayed 0
independently of the actual check. 
						
						
					 
					
						2017-09-21 12:04:41 +01:00 
						 
				 
			
				
					
						
							
							
								Ron Eldor 
							
						 
					 
					
						
						
							
						
						7269fee0b6 
					 
					
						
						
							
							Check return code of mbedtls_mpi_fill_random  
						
						... 
						
						
						
						Add MBEDTLS_MPI_CHK to check for error value of mbedtls_mpi_fill_random.
Reported and fix suggested by guidovranken in #740  
						
						
					 
					
						2017-07-27 21:44:33 +01:00 
						 
				 
			
				
					
						
							
							
								Andres Amaya Garcia 
							
						 
					 
					
						
						
							
						
						bdbca7b383 
					 
					
						
						
							
							Zeroize tmp buf on fail in load_file() dhm.c  
						
						
						
						
					 
					
						2017-06-23 16:23:21 +01:00 
						 
				 
			
				
					
						
							
							
								Simon Butcher 
							
						 
					 
					
						
						
							
						
						bdae02ce90 
					 
					
						
						
							
							Corrected references for RSA and DHM  
						
						... 
						
						
						
						The links in the references in rsa.c and dhm.c were no longer valid and needed
updating. 
						
						
					 
					
						2016-01-20 00:44:42 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						37ff14062e 
					 
					
						
						
							
							Change main license to Apache 2.0  
						
						
						
						
					 
					
						2015-09-04 14:21:07 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						6fb8187279 
					 
					
						
						
							
							Update date in copyright line  
						
						
						
						
					 
					
						2015-07-28 17:11:58 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						53585eeb17 
					 
					
						
						
							
							Remove test DHM params from certs.c  
						
						... 
						
						
						
						certs.c belongs to the X.509 library, while DHM belongs to the crypto lib. 
						
						
					 
					
						2015-06-25 10:59:57 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						3335205a21 
					 
					
						
						
							
							Avoid in-out length in dhm_calc_secret()  
						
						
						
						
					 
					
						2015-06-02 16:17:08 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						6a8ca33fa5 
					 
					
						
						
							
							Rename ERR_xxx_MALLOC_FAILED to ..._ALLOC_FAILED  
						
						
						
						
					 
					
						2015-05-28 16:25:05 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						7551cb9ee9 
					 
					
						
						
							
							Replace malloc with calloc  
						
						... 
						
						
						
						- platform layer currently broken (not adapted yet)
- memmory_buffer_alloc too 
						
						
					 
					
						2015-05-26 16:04:06 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						0ece0f94f2 
					 
					
						
						
							
							Fix checks for nul-termination  
						
						
						
						
					 
					
						2015-05-12 12:43:54 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						43b37cbc92 
					 
					
						
						
							
							Fix use of pem_read_buffer() in PK, DHM and X509  
						
						
						
						
					 
					
						2015-05-12 11:26:43 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						de9b363fbd 
					 
					
						
						
							
							Merge branch mbedtls-1.3 into development  
						
						... 
						
						
						
						* commit '95f0089':
  Update Changelog for DH params
  Add test case for dh params with privateValueLength
  accept PKCS#3 DH parameters with privateValueLength included
Conflicts:
	library/dhm.c 
						
						
					 
					
						2015-04-17 20:07:22 +02:00 
						 
				 
			
				
					
						
							
							
								Daniel Kahn Gillmor 
							
						 
					 
					
						
						
							
						
						2ed81733a6 
					 
					
						
						
							
							accept PKCS#3 DH parameters with privateValueLength included  
						
						... 
						
						
						
						library/dhm.c: accept (and ignore) optional privateValueLength for
PKCS#3 DH parameters.
PKCS#3 defines the ASN.1 encoding of a DH parameter set like this:
----------------
DHParameter ::= SEQUENCE {
  prime INTEGER, -- p
  base INTEGER, -- g
  privateValueLength INTEGER OPTIONAL }
The fields of type DHParameter have the following meanings:
     o    prime is the prime p.
     o    base is the base g.
     o    privateValueLength is the optional private-value
          length l.
----------------
See: ftp://ftp.rsasecurity.com/pub/pkcs/ascii/pkcs-3.asc
This optional parameter was added in PKCS#3 version 1.4, released
November 1, 1993.
dhm.c currently doesn't cope well with PKCS#3 files that have this
optional final parameter included. i see errors like:
------------
dhm_parse_dhmfile returned -0x33E6
Last error was: -0x33E6 - DHM - The ASN.1 data is not formatted correctly : ASN1 - Actual length differs from expected lengt
------------
You can generate PKCS#3 files with this final parameter with recent
versions of certtool from GnuTLS:
 certtool --generate-dh-params > dh.pem 
						
						
					 
					
						2015-04-15 13:27:13 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						2cf5a7c98e 
					 
					
						
						
							
							The Great Renaming  
						
						... 
						
						
						
						A simple execution of tmp/invoke-rename.pl 
						
						
					 
					
						2015-04-08 13:25:31 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						998930ae0d 
					 
					
						
						
							
							Replace non-ascii characters in source files  
						
						
						
						
					 
					
						2015-04-03 13:48:06 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						7f8099773e 
					 
					
						
						
							
							Rename include directory to mbedtls  
						
						
						
						
					 
					
						2015-03-10 11:23:56 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						fe44643b0e 
					 
					
						
						
							
							Rename website and repository  
						
						
						
						
					 
					
						2015-03-06 13:17:10 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						981732bb8e 
					 
					
						
						
							
							Fix missing/misplaced #include's  
						
						
						
						
					 
					
						2015-02-17 15:47:31 +00:00 
						 
				 
			
				
					
						
							
							
								Mansour Moufid 
							
						 
					 
					
						
						
							
						
						c531b4af3c 
					 
					
						
						
							
							Apply the semantic patch rm-malloc-cast.cocci.  
						
						... 
						
						
						
						for dir in library programs; do
        spatch --sp-file scripts/rm-malloc-cast.cocci --dir $dir \
        --in-place;
    done 
						
						
					 
					
						2015-02-16 10:43:52 +00:00 
						 
				 
			
				
					
						
							
							
								Rich Evans 
							
						 
					 
					
						
						
							
						
						00ab47026b 
					 
					
						
						
							
							cleanup library and some basic tests. Includes, add guards to includes  
						
						
						
						
					 
					
						2015-02-10 11:28:46 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						860b51642d 
					 
					
						
						
							
							Fix url again  
						
						
						
						
					 
					
						2015-01-28 17:12:07 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						085ab040aa 
					 
					
						
						
							
							Fix website url to use https.  
						
						
						
						
					 
					
						2015-01-23 11:06:27 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						9698f5852c 
					 
					
						
						
							
							Remove maintainer line.  
						
						
						
						
					 
					
						2015-01-23 10:59:00 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						19f6b5dfaa 
					 
					
						
						
							
							Remove redundant "all rights reserved"  
						
						
						
						
					 
					
						2015-01-23 10:54:00 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						a658a4051b 
					 
					
						
						
							
							Update copyright  
						
						
						
						
					 
					
						2015-01-23 09:55:24 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						967a2a5f8c 
					 
					
						
						
							
							Change name to mbed TLS in the copyright notice  
						
						
						
						
					 
					
						2015-01-22 14:28:16 +00:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						b196fc23b1 
					 
					
						
						
							
							Fix dhm_selftest() return value  
						
						
						
						
					 
					
						2014-07-09 16:53:29 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						8f870b047c 
					 
					
						
						
							
							Add dhm_init()  
						
						
						
						
					 
					
						2014-07-09 10:19:23 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						66d5d076f7 
					 
					
						
						
							
							Fix formatting in various code to match spacing from coding style  
						
						
						
						
					 
					
						2014-06-17 17:06:47 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						3461772559 
					 
					
						
						
							
							Introduce polarssl_zeroize() instead of memset() for zeroization  
						
						
						
						
					 
					
						2014-06-14 16:46:03 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						b9e4e2c97a 
					 
					
						
						
							
							Fix formatting: fix some 'easy' > 80 length lines  
						
						
						
						
					 
					
						2014-05-01 14:18:25 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						9af723cee7 
					 
					
						
						
							
							Fix formatting: remove trailing spaces, #endif with comments (> 10 lines)  
						
						
						
						
					 
					
						2014-05-01 13:03:14 +02:00