mbedtls/library
Paul Bakker 0a971b5dc8 Removed further timing differences during SSL message decryption in ssl_decrypt_buf()
New padding checking is unbiased on correct or incorrect padding and
has no branch prediction timing differences.

The additional MAC checks further straighten out the timing differences.
(cherry picked from commit e47b34bdc8)

Conflicts:
	ChangeLog
	library/ssl_tls.c
2013-03-11 16:08:06 +01:00
..
.gitignore Added proper gitignores for linux compilation 2013-01-14 17:36:39 +01:00
aes.c - Removed deprecated casts to int for now unsigned values 2011-06-09 13:55:13 +00:00
arc4.c - Major type rewrite of int to size_t for most variables and arguments used for buffer lengths and loops 2011-04-24 08:57:21 +00:00
asn1parse.c - Merged trunk into 1.1 branch 2011-12-11 16:35:09 +00:00
base64.c - Major type rewrite of int to size_t for most variables and arguments used for buffer lengths and loops 2011-04-24 08:57:21 +00:00
bignum.c Fixed comments / typos 2013-01-16 13:16:09 +01:00
camellia.c - Cleaned up define 2011-11-18 12:58:25 +00:00
certs.c - Re-added removed dhm test values 2011-03-08 13:58:16 +00:00
cipher.c - Updated polarssl-1.1 branch with merged trunk patches 2012-04-26 19:30:20 +00:00
cipher_wrap.c - Fixed typos in copied text (Fixed ticket #39) 2011-11-11 10:34:04 +00:00
CMakeLists.txt Bumped version numbers to 1.1.5 2013-01-16 14:06:28 +01:00
ctr_drbg.c - Merged changes from trunk to PolarSSL 1.1 branch 2012-01-23 09:56:51 +00:00
debug.c - Improved compile-time compatibility with mingw32 64-bit versions 2011-04-24 16:08:12 +00:00
des.c - Made des_key_check_weak() conform to other functions in return values. 2011-07-06 14:37:33 +00:00
dhm.c - Updated polarssl-1.1 branch with merged trunk patches 2012-04-26 19:30:20 +00:00
entropy.c - Merged Trunk changes for 1.1 into branch 2011-12-22 10:06:27 +00:00
entropy_poll.c Fixes for MSVC6 2013-01-16 13:38:20 +01:00
error.c Allow enabling of dummy error_strerror() to support some use-cases 2013-03-11 15:50:35 +01:00
havege.c - Changed the used random function pointer to more flexible format. Renamed havege_rand() to havege_random() to prevent mistakes. Lots of changes as a consequence in library code and programs 2011-11-27 21:07:34 +00:00
Makefile - Added a generic entropy accumulator that provides support for adding custom entropy sources and added some generic and platform dependent entropy sources 2011-12-03 21:45:14 +00:00
md.c - Updated polarssl-1.1 branch with merged trunk patches 2012-04-26 19:30:20 +00:00
md2.c - Merged trunk into 1.1 branch 2011-12-11 16:35:09 +00:00
md4.c - Merged trunk into 1.1 branch 2011-12-11 16:35:09 +00:00
md5.c Removed further timing differences during SSL message decryption in ssl_decrypt_buf() 2013-03-11 16:08:06 +01:00
md_wrap.c - Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO 2011-04-25 15:28:35 +00:00
net.c - Merged Trunk changes for 1.1 into branch 2011-12-22 10:06:27 +00:00
padlock.c - Major type rewrite of int to size_t for most variables and arguments used for buffer lengths and loops 2011-04-24 08:57:21 +00:00
pem.c - Added permissive certificate parsing to x509parse_crt() and x509parse_crtfile(). With permissive parsing the parsing does not stop on encountering a parse-error 2011-12-04 12:24:18 +00:00
pkcs11.c - Major type rewrite of int to size_t for most variables and arguments used for buffer lengths and loops 2011-04-24 08:57:21 +00:00
rsa.c Handle encryption with private key and decryption with public key as per RFC 2313 2013-01-16 13:26:56 +01:00
sha1.c Removed further timing differences during SSL message decryption in ssl_decrypt_buf() 2013-03-11 16:08:06 +01:00
sha2.c Removed further timing differences during SSL message decryption in ssl_decrypt_buf() 2013-03-11 16:08:06 +01:00
sha4.c - Merged trunk into 1.1 branch 2011-12-11 16:35:09 +00:00
ssl_cli.c - Merged changes from trunk to PolarSSL 1.1 branch 2012-01-23 09:56:51 +00:00
ssl_srv.c - Added better handling of missing session struct 2011-12-04 22:30:17 +00:00
ssl_tls.c Removed further timing differences during SSL message decryption in ssl_decrypt_buf() 2013-03-11 16:08:06 +01:00
timing.c - Expanded clobber list on i386 RDTSC call 2011-10-19 14:27:36 +00:00
version.c - Fixed copyright message 2010-07-18 20:36:00 +00:00
x509parse.c Made x509parse.c also work with missing hash header files 2013-03-11 16:05:32 +01:00
xtea.c - Major type rewrite of int to size_t for most variables and arguments used for buffer lengths and loops 2011-04-24 08:57:21 +00:00