yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2025-01-31 02:51:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
10663 commits 88 branches 205 tags 69 MiB
Commit graph

5156 commits

Author SHA1 Message Date
Shelly Liberman f63b2283f2
Merge pull request #4053 from TeroJaasko/baremetal_aes_masking_speedup 
Baremetal aes masking speedup
 2021-01-24 11:22:23 +02:00
Andrzej Kurek 8fde918b4e Improved fi protection to ssl_parse_certificate 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2021-01-22 05:29:47 -05:00
Tero Jääskö ada61f05b3 AES: masked config: remove 176 bytes of zeroing on each AES finalize round 
On MBEDTLS_AES_128_BIT_MASKED+FI_COUNTERMEASURES config the rk_mask array
was unconditionally zeroed on each dummy finalization round even though
it will be zeroed after the loop too. Remove the repeated zeroing to increase
overall transfer speed on DTLS session by 17..20% on a Cortex-M4.

Signed-off-by: Tero Jääskö <tero.jaasko@arm.com>
 2021-01-19 18:43:02 +02:00
Tero Jääskö 0241f81cbc AES: masked config: increase total transfer speed by 5% by removing zeroing 
On MBEDTLS_AES_128_BIT_MASKED config the overall DTLS transfer speed can be
increased by 3..5% or so on a Cortex-M4 by removing 472 bytes worth of
buffer zeroing done on each block {en|de}cryption. The buffer zeroings
were done before overwriting them on in masking code.

Signed-off-by: Tero Jääskö <tero.jaasko@arm.com>
 2021-01-19 18:41:30 +02:00
Andrzej Kurek d7073d9290
Merge pull request #3979 from AndrzejKurek/coverity-seg-fault-context 
Fix the usage of ssl context after its nullified
 2021-01-05 12:47:41 +01:00
Andrzej Kurek 42ed2d3c59 Fix the usage of ssl context after its nullified 
Previously, it was possible to access a null pointer
even though the given configuration should work.
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2021-01-04 09:36:53 -05:00
Andrzej Kurek 17c3531b4b Add missing volatile identifiers before fi-related variables 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-12-31 09:56:42 -05:00
Andrzej Kurek 165564de07
Merge pull request #3946 from AndrzejKurek/optimized-key-exchange 
Key exchange optimizations
 2020-12-23 20:03:17 +01:00
Andrzej Kurek 5d3d2327ce Introduce additional fault injection protection to ssl_cli.c 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-12-23 03:45:53 -05:00
Andrzej Kurek 25997053a8 Introduce FI protection to ssl client handshake step handling 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-12-23 03:34:24 -05:00
Andrzej Kurek ad3c4ffb56 Add an "SSL" infix to MBEDTLS_DELAYED_SERVER_CERT_VERIFICATION 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-12-21 08:11:36 -05:00
Andrzej Kurek 6b5c9a3744 Add an "SSL" infix to MBEDTLS_EARLY_KEY_COMPUTATION 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-12-21 08:02:59 -05:00
Andrzej Kurek 4f5549f595 Add an "SSL" infix to MBEDTLS_IMMEDIATE_TRANSMISSION 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-12-21 07:56:57 -05:00
Andrzej Kurek 0719b3c129 Add output flushing after each message transmission 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-12-19 17:15:52 -05:00
Andrzej Kurek e6c3aa7e7b Fix minor issues and clean up the code 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-12-18 15:06:42 -05:00
Andrzej Kurek e2134ed4b1 Fix certificate management when freeing handshake 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-12-18 11:23:19 -05:00
Andrzej Kurek 38c7f2d32f Refactor the immediate transmission feature 
The original way or handling it did not cover
message fragmentation or retransmission.
Now, the messages are always appended
to the flight and sent immediately, using 
the same function as normal flight 
transmission.
Moreover, epoch handling is different for this feature,
with a possibility to perform the usual retransmission
using previous methods. 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-12-15 18:17:31 -05:00
Andrzej Kurek d886d9f93c Fix freeing uninitialized fields from the ssl context 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-12-15 15:43:12 -05:00
Andrzej Kurek c3dde3f2f9 Fix unreachable code error 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-12-15 15:43:12 -05:00
Andrzej Kurek 52e08cbcb2 Fix unused parameters and ifdefs 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-12-15 15:43:12 -05:00
Andrzej Kurek 777d4217f1 Fix define and function names to conform to Mbed TLS rules 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-12-15 15:43:12 -05:00
Andrzej Kurek b22e64045b Update generated files 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-12-15 15:43:12 -05:00
Andrzej Kurek 131512440e Move the new config optimization defines to be optional 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-12-15 15:43:12 -05:00
Hannes Tschofenig 32846c62ac Moving the ecdhe_computed variable into the handshake structure 2020-12-15 12:50:37 +01:00
Hannes Tschofenig 34630562cd Making sure that the ECDHE pre-computation is only done once. 2020-12-15 12:33:45 +01:00
Shelly Liberman 699aebecb9 fix flow control check 
Signed-off-by: Shelly Liberman <shelly.liberman@arm.com>
 2020-12-14 18:57:52 +02:00
Shelly Liberman 51701bb4af aes masking bug fix 
Signed-off-by: Shelly Liberman <shelly.liberman@arm.com>
 2020-12-13 18:32:09 +02:00
Hannes Tschofenig c162895030 Add call to mbedtls_x509_crt_free() 2020-12-07 11:04:09 +01:00
Hannes Tschofenig e151a3528a Adding early ECDHE key generation to ssl_cli.c 2020-12-03 17:37:49 +01:00
Hannes Tschofenig 2279ffd2a0 Adding immediate message transmission 2020-12-03 15:52:35 +01:00
Hannes Tschofenig cb6410c67d Wrapper function for calling parse_certificate_verify 2020-12-03 15:48:55 +01:00
Hannes Tschofenig 635f86874f Adding delayed server cert verification to client state machine 2020-12-03 15:48:32 +01:00
Shelly Liberman 7326c62efb Add flow control to platform rnd buf 
Signed-off-by: Shelly Liberman <shelly.liberman@arm.com>
 2020-12-01 14:04:51 +02:00
Shelly Liberman 26bea33674
Merge pull request #3899 from shelib01/masked-aes 
Masked AES 128 bit, encrypt only (boolean mask technique)
 2020-11-27 17:17:23 +02:00
Shelly Liberman 11c64885a6 After review fixes 
1. Formating
2. Check config added
3. Dependency description fixed

Signed-off-by: Shelly Liberman <shelly.liberman@arm.com>
 2020-11-26 23:58:41 +02:00
Andrzej Kurek 7d0a6864d3 Make CCM shuffling and masking optional 
Add a define for CCM shuffling and masking operations.
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-11-26 06:35:04 -05:00
Shelly Liberman 44b4229352 masked-aes CI problems fixes 
Signed-off-by: Shelly Liberman <shelly.liberman@arm.com>
 2020-11-26 10:54:19 +02:00
Andrzej Kurek ab3de1daff Add flow control protection to ccm 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-11-26 03:24:14 -05:00
Shelly Liberman c907c81a3b aes boolean masking 
Signed-off-by: Shelly Liberman <shelly.liberman@arm.com>
 2020-11-25 20:58:25 +02:00
Andrzej Kurek 8265f5cc4f
Merge pull request #3880 from AndrzejKurek/fi-random-delays 
Add random delays to sha256 to protect against fault injection
 2020-11-25 13:38:52 -05:00
Shelly Liberman 88da3c245b
Merge branch 'baremetal' into masked-aes 2020-11-25 18:32:19 +02:00
Shelly Liberman cdebcfe1a3 aes boolean masking 
Signed-off-by: Shelly Liberman <shelly.liberman@arm.com>
 2020-11-25 18:14:59 +02:00
Andrzej Kurek 9b92865bcd
Merge pull request #3850 from AndrzejKurek/ccm-clean-temp-data 
ccm - clean temp data
 2020-11-25 11:14:05 -05:00
Andrzej Kurek 549a35690c
Merge pull request #3890 from AndrzejKurek/fi-memcpy-memset-fail 
Add a callback for platform faults in platform_util.c
 2020-11-25 11:13:32 -05:00
Andrzej Kurek 1c448168b2
Merge pull request #3913 from jarvte/memfix_variablebuffer 
Fix possible memory leak when MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH defined
 2020-11-25 09:45:53 -05:00
Andrzej Kurek 7f81c86a0d Add a callback for platform faults in platform_util.c 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-11-25 06:53:59 -05:00
Andrzej Kurek 9bc6119bb9 Add random delays to sha256 to protect against fault injection 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-11-25 06:38:05 -05:00
Andrzej Kurek 142f09fb96 ccm: zeroize buffers before and after usage 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2020-11-25 06:20:43 -05:00
Andrzej Kurek 5eba1d82a2
Merge pull request #3841 from AndrzejKurek/baremetal-rnd-in-range-fix 
Move size checks outside of mbedtls_platform_random_in_range
 2020-11-25 11:41:40 +01:00
Andrzej Kurek 21f64d3633
Merge pull request #3840 from AndrzejKurek/baremetal-aes-shuffling-2 
CCM countermeasures - shuffling and masking
 2020-11-25 11:33:53 +01:00