mbedtls/library
Chris Jones ad59a2a4a7 Fix potential DoS by limiting number sizes in exponentiation
Check that the exponent and modulus is below `MBEDTLS_MPI_MAX_BITS` before
performing a time expensive operation (modular exponentiation). This prevents
a potential DoS from Diffie-Hellman computations with extremely
large key sizes.

Signed-off-by: Chris Jones <christopher.jones@arm.com>
2020-12-03 16:02:20 +00:00
..
.gitignore Split libs with make + general make cleanups 2015-06-25 10:59:56 +02:00
aes.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
aesni.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
arc4.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
aria.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
asn1parse.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
asn1write.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
base64.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
bignum.c Fix potential DoS by limiting number sizes in exponentiation 2020-12-03 16:02:20 +00:00
blowfish.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
camellia.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
ccm.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
certs.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
chacha20.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
chachapoly.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
cipher.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
cipher_wrap.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
cmac.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
CMakeLists.txt Bump version to Mbed TLS 2.16.7 2020-06-26 12:35:53 +01:00
ctr_drbg.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
debug.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
des.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
dhm.c Merge branch 'mbedtls-2.16' into mbedtls-2.16-restricted 2020-08-25 10:58:15 +02:00
ecdh.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
ecdsa.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
ecjpake.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
ecp.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
ecp_curves.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
entropy.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
entropy_poll.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
error.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
gcm.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
havege.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
hkdf.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
hmac_drbg.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
Makefile Fix #2370, minor typos and spelling mistakes 2019-02-18 14:50:57 +00:00
md.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
md2.c Zeroize internal buffers and variables in MD hashes 2020-09-09 15:17:11 +02:00
md4.c Put local variables and buffers in a struct 2020-09-09 15:18:05 +02:00
md5.c Put local variables and buffers in a struct 2020-09-09 15:18:05 +02:00
md_wrap.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
memory_buffer_alloc.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
net_sockets.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
nist_kw.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
oid.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
padlock.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
pem.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
pk.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
pk_wrap.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
pkcs5.c Force cleanup before return 2020-09-09 15:17:11 +02:00
pkcs11.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
pkcs12.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
pkparse.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
pkwrite.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
platform.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
platform_util.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
poly1305.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
ripemd160.c Put local variables and buffers in a struct 2020-09-09 15:18:05 +02:00
rsa.c Merge branch 'mbedtls-2.16' into mbedtls-2.16-restricted 2020-08-25 10:58:15 +02:00
rsa_internal.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
sha1.c Put local variables and buffers in a struct 2020-09-09 15:18:05 +02:00
sha256.c Put local variables and buffers in a struct 2020-09-09 15:18:05 +02:00
sha512.c Put local variables and buffers in a struct 2020-09-09 15:18:05 +02:00
ssl_cache.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
ssl_ciphersuites.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
ssl_cli.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
ssl_cookie.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
ssl_srv.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
ssl_ticket.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
ssl_tls.c Fix a typo in a comment 2020-08-25 11:43:10 +02:00
threading.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
timing.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
version.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
version_features.c Add an option to test constant-flow with valgrind 2020-08-25 11:26:37 +02:00
x509.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
x509_create.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
x509_crl.c Merge branch 'mbedtls-2.16' into mbedtls-2.16-restricted 2020-08-25 10:58:15 +02:00
x509_crt.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
x509_csr.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
x509write_crt.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
x509write_csr.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00
xtea.c Update copyright notices to use Linux Foundation guidance 2020-08-19 16:37:36 +02:00