mbedtls/programs/ssl
Gilles Peskine aaedbdcfd6 Refuse reproducible mode with MBEDTLS_USE_PSA_CRYPTO
With MBEDTLS_USE_PSA_CRYPTO, some of the randomness for the TLS
connection is generated inside the PSA crypto subsystem, which has no
reproducible mode. Whether there is a nonzero amount of randomness
coming from inside the PSA subsystem rather than from the random
generator set by mbedtls_ssl_conf_rng() depends on the choice of
cipher suite and other connection parameters as well as the level of
support for MBEDTLS_USE_PSA_CRYPTO. Rather than give unreliable
results, conservatively abort with a clear error message.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2021-02-03 13:55:22 +01:00
..
CMakeLists.txt Merge pull request #3897 from d3zd3z/fix-cmake28 2021-01-26 13:35:56 +01:00
dtls_client.c Update copyright notices to use Linux Foundation guidance 2020-08-19 10:35:41 +02:00
dtls_server.c Update copyright notices to use Linux Foundation guidance 2020-08-19 10:35:41 +02:00
mini_client.c Update copyright notices to use Linux Foundation guidance 2020-08-19 10:35:41 +02:00
ssl_client1.c Update copyright notices to use Linux Foundation guidance 2020-08-19 10:35:41 +02:00
ssl_client2.c Fix exit status if the RNG seeding failed 2021-02-03 13:54:41 +01:00
ssl_context_info.c ssl_context_info: fix config requirements 2020-11-09 15:17:07 +01:00
ssl_fork_server.c Update copyright notices to use Linux Foundation guidance 2020-08-19 10:35:41 +02:00
ssl_mail_client.c Update copyright notices to use Linux Foundation guidance 2020-08-19 10:35:41 +02:00
ssl_pthread_server.c Update copyright notices to use Linux Foundation guidance 2020-08-19 10:35:41 +02:00
ssl_server.c Update copyright notices to use Linux Foundation guidance 2020-08-19 10:35:41 +02:00
ssl_server2.c Fix exit status if the RNG seeding failed 2021-02-03 13:54:41 +01:00
ssl_test_common_source.c ssl_test_lib: move common functions and variables 2021-01-06 10:25:35 +01:00
ssl_test_lib.c Refuse reproducible mode with MBEDTLS_USE_PSA_CRYPTO 2021-02-03 13:55:22 +01:00
ssl_test_lib.h Update copypasta 2021-01-25 13:42:42 +01:00