Hanno Becker
92c98931f2
Fix mpi_bigendian_to_host() on bigendian systems
...
The previous implementation of mpi_bigendian_to_host() did
a byte-swapping regardless of the endianness of the system.
Fixes #2622 .
2019-05-15 13:12:29 +01:00
Jaeden Amero
c7aa05eb34
Merge remote-tracking branch 'origin/pr/2637' into mbedtls-2.16
...
* origin/pr/2637:
Only use submodule if present
2019-05-14 16:20:53 +01:00
Jaeden Amero
122cf66a54
Merge remote-tracking branch 'origin/pr/2493' into mbedtls-2.16
...
* origin/pr/2493:
Ignore more generated files: seedfile, apidoc
Improve .gitignore grouping and documentation
Generate tags for Vi, for Emacs and with Global
2019-05-14 16:20:07 +01:00
Manuel Pégourié-Gonnard
84ef8bde68
Remove 'session' input from populate_tranform()
...
When using this function to deserialize, it's not a problem to have a session
structure as input as we'll have one around anyway (most probably freshly
deserialised).
However for tests it's convenient to be able to build a transform without
having a session structure around.
Also, removing this structure from parameters makes the function signature
more uniform, the only exception left being the ssl param at the end that's
hard to avoid for now.
2019-05-10 10:50:04 +02:00
Manuel Pégourié-Gonnard
cf31216ace
Fix typo in comment
2019-05-10 10:25:00 +02:00
Simon Butcher
724a695534
Merge remote-tracking branch 'origin/pr/562' into baremetal
2019-05-09 17:11:38 +01:00
Simon Butcher
e372d5fb8f
Merge remote-tracking branch 'origin/pr/558' into baremetal
2019-05-09 17:03:18 +01:00
Simon Butcher
999ac174cc
Merge remote-tracking branch 'origin/pr/566' into baremetal
2019-05-09 16:59:02 +01:00
Simon Butcher
ec998c6426
Merge remote-tracking branch 'origin/pr/564' into baremetal
2019-05-09 16:56:42 +01:00
Darryl Green
fbf3c8ac23
Only use submodule if present
...
Enabling the USE_CRYPTO_SUBMODULE option causes problems if the
crypto submodule isn't present. For example, when building
mbed-crypto as a submodule, it should use error.c from the parent
project if USE_CRYPTO_SUBMODULE is set. However if the parent
project isn't present, then the build will fail. Only enable it
if the submodule actually exists.
2019-05-09 13:25:26 +01:00
Manuel Pégourié-Gonnard
00c99d776a
Clarify origin and licensing of TinyCrypt files
2019-05-09 11:38:19 +02:00
Manuel Pégourié-Gonnard
afdc1b5cbd
Consistently use the name tinycrypt over uecc
...
We called in tinycrypt in the file names, but uecc in config.h, all.sh and
other places, which could be confusing. Just use tinycrypt everywhere because
that's the name of the project and repo where we took the files.
The changes were made using the following commands (with GNU sed and zsh):
sed -i 's/uecc/tinycrypt/g' **/*.[ch] tests/scripts/all.sh
sed -i 's/MBEDTLS_USE_UECC/MBEDTLS_USE_TINYCRYPT/g' **/*.[ch] tests/scripts/all.sh scripts/config.pl
2019-05-09 11:24:11 +02:00
Manuel Pégourié-Gonnard
86e48c213c
Enforce promise to not use whole ssl context
...
Configs with no DEBUG_C are use for example in test-ref-configs.pl, which also
runs parts of compat.sh or ssl-opt.sh on them, so the added 'ssl = NULL'
statements will be exercised in those tests at least.
2019-05-07 10:32:19 +02:00
Manuel Pégourié-Gonnard
1d10a98f56
Partially rm 'ssl' input from populate_transform()
2019-05-07 10:31:53 +02:00
Manuel Pégourié-Gonnard
0bcfbc3e04
Remove "handshake" input from populate_transform()
2019-05-07 09:59:41 +02:00
Manuel Pégourié-Gonnard
12a3f445b6
Start refining parameters of populate_transform()
...
Parameters 'handshake' and 'ssl' will be replaced with more fine-grained
inputs in follow-up commits.
2019-05-07 09:59:41 +02:00
Manuel Pégourié-Gonnard
a1abb26094
Move compress_buf allocation to derive_keys
2019-05-07 09:59:41 +02:00
Manuel Pégourié-Gonnard
707728dfca
Move handling of randbytes to derive_keys()
2019-05-07 09:59:41 +02:00
Manuel Pégourié-Gonnard
bcf258e077
Remove duplicated branch in ssl_compute_master()
2019-05-07 09:59:40 +02:00
Manuel Pégourié-Gonnard
a575975280
Make calc_verify() return the length as well
...
Simplifies ssl_compute_hash(), but unfortunately not so much the other uses.
2019-05-07 09:59:32 +02:00
Manuel Pégourié-Gonnard
ed3b7a9492
Constify ssl_context param of calc_verify()
2019-05-03 10:00:45 +02:00
Manuel Pégourié-Gonnard
c28c8895e5
Improve signature of ssl_compute_master()
...
Make it more explicit what's used. Unfortunately, we still need ssl as a
parameter for debugging, and because calc_verify wants it as a parameter (for
all TLS versions except SSL3 it would actually only need handshake, but SSL3
also accesses session_negotiate).
It's also because of calc_verify that we can't make it const yet, but see next
commit.
2019-05-03 10:00:45 +02:00
Manuel Pégourié-Gonnard
dafe5227d4
Reduce indentation in ssl_compute_master()
...
Exit earlier when there's noting to do.
For a small diff, review with 'git show -w'.
2019-05-03 10:00:44 +02:00
Manuel Pégourié-Gonnard
7edd5876ce
Start extracting ssl_compute_master()
...
For now just moving code around, not changing indentation. Calling convention
and signature are going to be adjusted in upcoming commits.
2019-05-03 10:00:44 +02:00
Manuel Pégourié-Gonnard
aa3c701193
Fix signature of ssl_set_transform_prfs()
2019-05-03 10:00:44 +02:00
Jarno Lamsa
8751e35751
Remove baremetal from build component names
2019-05-02 13:04:08 +03:00
Jarno Lamsa
4498de57b8
Address review comments about all.sh
2019-05-02 11:45:57 +03:00
Jarno Lamsa
0668b8f59e
Description of MBEDTLS_USE_UECC
2019-05-02 09:39:09 +03:00
Ron Eldor
ff8d8d72aa
Remove a redundant function call
...
Remove a call to `mbedtls_mpi_bitlen()` since the returned value is
overwritten in the line after. This is redundant since da31fa137aFixes #2377 .
2019-05-01 17:13:48 +03:00
Jaeden Amero
9fb12bd1a2
Merge remote-tracking branch 'origin/pr/2564' into mbedtls-2.16
...
* origin/pr/2564:
Fix CMake build error on Cygwin and minGW platforms
2019-05-01 09:57:28 +01:00
Jarno Lamsa
d91f7fa26b
Add native build targets for uecc baremetal config
2019-04-30 14:29:23 +03:00
Jarno Lamsa
65ea285759
Fix typo
2019-04-30 13:00:41 +03:00
Manuel Pégourié-Gonnard
52aa520c96
Start extraction ssl_set_handshake_prfs()
...
For now just moving code around, will improve signature in the next commit.
2019-04-30 11:54:22 +02:00
Manuel Pégourié-Gonnard
5ed5e90ec4
Start splitting populate_transform() out of derive_keys()
...
This is currently a dummy, just introducing the new name.
2019-04-30 11:41:40 +02:00
Jarno Lamsa
f6371ff923
Add armcc5 build for uecc and baremetal config
2019-04-30 10:10:03 +03:00
Jarno Lamsa
46132207f8
Make compiler happy when MBEDTLS_USE_UECC disabled
2019-04-29 14:29:52 +03:00
k-stachowiak
b5f9a198da
Update change log
2019-04-29 13:00:05 +02:00
Manuel Pégourié-Gonnard
6e6ae9b2e8
Use 'config.pl baremetal' in all.sh
2019-04-29 12:48:21 +02:00
Hanno Becker
08885813c3
Fix uninitialized variable access in debug output of record enc/dec
2019-04-29 12:21:31 +02:00
Hanno Becker
a131766743
Ensure non-NULL key buffer when building SSL test transforms
2019-04-29 12:19:38 +02:00
Hanno Becker
1acadb77cb
Catch errors while building SSL test transforms
2019-04-29 12:19:38 +02:00
Hanno Becker
afc528ad56
Use mbedtls_{calloc|free}() in SSL unit test suite
2019-04-29 12:19:24 +02:00
Hanno Becker
f832343c1d
Improve documentation of mbedtls_record
2019-04-29 12:19:07 +02:00
Hanno Becker
c5aee96855
Adapt record length value after encryption
2019-04-29 12:19:07 +02:00
Hanno Becker
b17a1a2068
Alternative between send/recv transform in SSL record test suite
2019-04-29 12:19:07 +02:00
Hanno Becker
5c1176e53f
Fix memory leak on failure in test_suite_ssl
2019-04-29 12:18:50 +02:00
Hanno Becker
30d02cdeb0
Rename ssl_decrypt_buf() to mbedtls_ssl_decrypt_buf() in comment
2019-04-29 12:18:38 +02:00
Hanno Becker
3693c72b82
Add record encryption/decryption tests for ARIA to SSL test suite
2019-04-29 12:18:27 +02:00
Hanno Becker
a198bb7359
Improve documentation of mbedtls_ssl_transform
2019-04-29 12:18:11 +02:00
Hanno Becker
93012fe8e8
Double check that record expansion is as expected during decryption
2019-04-29 12:17:58 +02:00
