- 1b6c09a Switch to the new code style by Gilles Peskine · 2 years, 7 months ago
- 36f19b9 Include platform.h unconditionally: automatic part by Gilles Peskine · 2 years, 10 months ago
- 0e7791f Redo of PR#5345. Fixed spelling and typographical errors found by CodeSpell. by Shaun Case · 3 years, 7 months ago
- 8c99a76 PKCS#1v1.5 signature: better cleanup of temporary values by Gilles Peskine · 3 years, 8 months ago
- c0ae1cf Rename internal header constant_time.h to constant_time_internal.h by Gabor Mezei · 3 years, 9 months ago
- 18a4494 Rename constant-time functions to have mbedtls_ct prefix by Gabor Mezei · 3 years, 9 months ago
- e24dea8 Move mbedtls_cf_memcmp to a new public header by Gabor Mezei · 3 years, 9 months ago
- 91deea7 Rename and reorder function parameters by Gabor Mezei · 3 years, 9 months ago
- 378e7eb Unify memcmp functions by gabor-mezei-arm · 4 years ago
- f52941e Move mbedtls_cf_rsaes_pkcs1_v15_unpadding function to the constant-time module by gabor-mezei-arm · 3 years, 10 months ago
- c2aee6f Move the constant-time part of mbedtls_rsa_rsaes_pkcs1_v15_decrypt to a function by gabor-mezei-arm · 3 years, 10 months ago
- 7b23c0b Move mbedtls_cf_mem_move_to_left function to the constant-time module by gabor-mezei-arm · 3 years, 10 months ago
- 7533253 Move mbedtls_cf_uint_if function to the constant-time module by gabor-mezei-arm · 3 years, 10 months ago
- 9d7bf09 Move mbedtls_cf_size_gt function to the constant-time module by gabor-mezei-arm · 3 years, 10 months ago
- c11cac9 Move mbedtls_cf_uint_mask function to the constant-time module by gabor-mezei-arm · 3 years, 10 months ago
- 944c107 Move contatnt-time memcmp functions to the contant-time module by gabor-mezei-arm · 3 years, 10 months ago
- e41e3e8 Rename function to have suitable name by gabor-mezei-arm · 3 years, 10 months ago
- b7d02e0 Fix misc issues with unused parameters and check-names.sh by Chris Jones · 4 years, 4 months ago
- 7439209 Rewrite error addition interface by Chris Jones · 4 years, 4 months ago
- 713e4e7 Expand use of MBEDTLS_ERR_ADD to the rest of rsa.c by Chris Jones · 4 years, 7 months ago
- 96ae73b Add macro for error code addition by Chris Jones · 4 years, 7 months ago
- 7bc6a37 Merge pull request #3183 from meuter/development by Gilles Peskine · 4 years, 4 months ago
- 5e40a7c Fix mutex leak in RSA by Gilles Peskine · 4 years, 6 months ago
- eb94059 Fix mutex double-free in RSA by Gilles Peskine · 4 years, 6 months ago
- 46bad33 Added more negative test cases for pkcs1_rsassa_pss_sign by Cédric Meuter · 4 years, 7 months ago
- ae3741e Fix an incorrect error code if RSA private operation glitched by Gilles Peskine · 4 years, 8 months ago
- 2ee0850 Restored check on salt length to the original by Cédric Meuter · 4 years, 7 months ago
- 668a78d Added sppecific test cases for mbedtls_rsa_rsassa_pss_sign_ext() by Cédric Meuter · 5 years ago
- a05cbec Added tests for mbedtls_rsa_rsassa_pss_sign_ext() by Cédric Meuter · 5 years ago
- f3fab33 Removed the mode argument from mbedtls_rsa_rsassa_pss_sign_ext() by Cédric Meuter · 5 years ago
- 010ddc2 Integrated feedback of first code review by Cédric Meuter · 5 years ago
- 8aa4d75 Introduced mbedtls_rsa_rsassa_pss_sign_ext(..., saltlen, ...) by Cedric Meuter · 5 years ago
- ca8b8e7 Restore retry in rsa_prepare_blinding() by Peter Kolbus · 4 years, 10 months ago
- abccfc1 Merge development into development-restricted by Dan Handley · 5 years ago
- 1e14827 Update copyright notices to use Linux Foundation guidance by Bence Szépkúti · 5 years ago
- c4af324 Merge branch 'development' into development-restricted by Manuel Pégourié-Gonnard · 5 years ago
- c2620da Use arc4random_buf instead of rand on NetBSD by gufe44 · 5 years ago
- 1718265 Merge pull request #709 from mpg/protect-base-blinding-dev-restricted by Gilles Peskine · 5 years ago
- 7868396 Clarify some comments by Manuel Pégourié-Gonnard · 5 years ago
- e288ec0 Fix memory leak on error path by Manuel Pégourié-Gonnard · 5 years ago
- db09ef6 Include common.h instead of config.h in library source files by Gilles Peskine · 5 years ago
- 750d3c7 RSA: blind call to mpi_inv_mod() on secret value by Manuel Pégourié-Gonnard · 5 years ago
- b3e3d79 RSA: remove redundant GCD call in prepare_blinding() by Manuel Pégourié-Gonnard · 5 years ago
- 2e9eef4 Final review comments by Jack Lloyd · 5 years ago
- 8c2631b Address review comments by Jack Lloyd · 6 years ago
- 80cc811 Parse RSA parameters DP, DQ and QP from PKCS1 private keys by Jack Lloyd · 6 years ago
- 24eed8d Initialise return values to an error by Janos Follath · 6 years ago
- 6f7703d rsa: Enable use of zero-length null output by Jaeden Amero · 6 years ago
- 004f87b RSA encryption: accept input=NULL if ilen=0 by Gilles Peskine · 7 years ago
- fb23673 Revert "Forbid passing NULL input buffers to RSA encryption routines" by Jaeden Amero · 6 years ago
- c470b6b Merge development commit 8e76332 into development-psa by Andrzej Kurek · 6 years ago
- cdd1a6c Merge remote-tracking branch 'restricted/pr/510' into development-restricted-proposed by Simon Butcher · 7 years ago
- b8fc1b0 RSA: Use MBEDTLS_MPI_GEN_PRIME_FLAG_LOW_ERR by Janos Follath · 7 years ago
- 3725bb2 rsa: pss: Enable use of big hashes with small keys by Jaeden Amero · 7 years ago
- ff21572 rsa: pss: Use size_t when computing signatures by Jaeden Amero · 7 years ago
- a331e0f Merge remote-tracking branch 'upstream-restricted/pr/421' into development-proposed by Jaeden Amero · 7 years ago
- 1f6301b Rename mbedtls_zeroize to mbedtls_platform_zeroize by Andres Amaya Garcia · 7 years ago
- e32df08 Remove individual copies of mbedtls_zeroize() by Andres Amaya Garcia · 8 years ago
- c645bfe Generate RSA keys according to FIPS 186-4 by Jethro Beekman · 7 years ago
- 97f95c9 Avoid small private exponents during RSA key generation by Jethro Beekman · 7 years ago
- 15ad579 Merge tag 'mbedtls-2.8.0' into iotssl-1381-x509-verify-refactor-restricted by Gilles Peskine · 7 years ago
- 1ba8a3f Yet another dependency issue (PKCS1_V15) by Manuel Pégourié-Gonnard · 7 years ago
- a3389eb Merge branch 'development-restricted' into iotssl-1306-rsa-is-vulnerable-to-bellcore-glitch-attack by Hanno Becker · 7 years ago
- 66954e1 Merge branch 'development' into development-restricted by Jaeden Amero · 8 years ago
- 9e4f77c New MD API: rename functions from _ext to _ret by Gilles Peskine · 8 years ago
- d91f2a2 Merge branch 'development' into iotssl-1251-2.7 by Gilles Peskine · 8 years ago
- d40c22b Merge branch 'development' into development-restricted by Gilles Peskine · 8 years ago
- 87ae197 Add explicit uint truncation casts by Hanno Becker · 8 years ago
- 71b0060 Merge branch 'development' into iotssl-247 by Hanno Becker · 8 years ago
- 31f3f0b Merge branch 'development' into development-restricted by Jaeden Amero · 8 years ago
- d4d6057 Address issues found by coverity by Hanno Becker · 8 years ago
- f342cb7 Merge branch 'development' into development-restricted by Jaeden Amero · 8 years ago
- 3a760a1 Add size check for RSA modulus to `mbedtls_rsa_complete` by Hanno Becker · 8 years ago
- 63073aa Don't require P,Q in rsa_private in case of non-blinded non-CRT by Hanno Becker · 8 years ago
- 91048a3 RSA PSS: remove redundant check; changelog by Gilles Peskine · 8 years ago
- b00b0da RSA PSS: fix first byte check for keys of size 8N+1 by Gilles Peskine · 8 years ago
- 139108a RSA PSS: fix minimum length check for keys of size 8N+1 by Gilles Peskine · 8 years ago
- 6a54b02 RSA: Fix another buffer overflow in PSS signature verification by Gilles Peskine · 8 years ago
- 28a0c72 RSA: Fix buffer overflow in PSS signature verification by Gilles Peskine · 8 years ago
- f8c028a Minor corrections by Hanno Becker · 8 years ago
- c36aab6 Swap D,E parameters in mbedtls_rsa_deduce_primes by Hanno Becker · 8 years ago
- ebd2c02 Don't require P,Q in `rsa_private` if neither CRT nor blinding used by Hanno Becker · 8 years ago
- b82a5b5 Fix typos and mixup related to RSA_NO_CRT by Hanno Becker · 8 years ago
- a565f54 Introduce new files rsa_internal.[ch] for RSA helper functions by Hanno Becker · 8 years ago
- 705fc68 Unify sanity checks for RSA private and public keys by Hanno Becker · 8 years ago
- e867489 Remove outdated comments from `mbedtls_rsa_complete` by Hanno Becker · 8 years ago
- 7f25f85 Adapt uses of `mbedtls_rsa_complete` to removed PRNG argument by Hanno Becker · 8 years ago
- f9e184b Remove PRNG argument from `mbedtls_rsa_complete` by Hanno Becker · 8 years ago
- 68b4d58 Remove PRNG argument from `mbedtls_rsa_deduce_moduli` by Hanno Becker · 8 years ago
- 0f65e0c Rename `rsa_deduce_moduli` to `rsa_deduce_primes` by Hanno Becker · 8 years ago
- 8ba6ce4 Rename `rsa_deduce_private` to `rsa_deduce_private_exponent` by Hanno Becker · 8 years ago
- 45a0ef3 Correct memory leak in `mbedtls_rsa_validate_crt` by Hanno Becker · 8 years ago
- e58d38c Minor improvements by Hanno Becker · 8 years ago
- 2b2f898 Streamline code-path in rsa_rsassa_pkcs1_v15_encode by Hanno Becker · 8 years ago
- 64a8c0a Verify PKCS1 v1.5 signature without parsing by Hanno Becker · 8 years ago
- fdf3803 Outsource code for generating PKCS1 v1.5 encoding by Hanno Becker · 8 years ago
- 171a8f1 Move constant time memcmp for signature verification by Hanno Becker · 8 years ago
- 2dec5e8 Correct outdated comment by Hanno Becker · 8 years ago
- 4e1be39 Remove FORCE_VERIFICATION and FORCE_BLINDING by Hanno Becker · 8 years ago
- b5beaa8 Check that 1 < D, E < N in `mbedtls_rsa_validate_params` by Hanno Becker · 8 years ago