Commit Graph

  • 5ee161822c feat(tf-psa-crypto): Expose persistent key storage blob-size helper mbedtls-4.1.0-idf harshal.patil 2026-05-14 14:43:02 +05:30
  • 06505cc5be feat(drivers): Introduce MD5 operation context harshal.patil 2026-05-23 00:31:38 +05:30
  • 6cc42afad3 feat(drivers): Support persistent ESP-RSA DS driver harshal.patil 2026-04-13 11:07:07 +05:30
  • c3768eab76 Pacify uncrustify mbedtls-3.6.6-idf Viktor Sokolovskiy 2026-04-18 01:57:20 +03:00
  • 922c0d0d48 ssl: narrow TLS 1.2 RSA-PSS handling and add interop coverage Viktor Sokolovskiy 2026-04-17 18:52:34 +03:00
  • 87899b33d0 ssl: accept TLS 1.2 rsa_pss_rsae signature schemes Viktor Sokolovskiy 2026-04-04 03:57:04 +03:00
  • 8bfdb42530 Pacify uncrustify Viktor Sokolovskiy 2026-04-18 02:02:15 +03:00
  • 08a217c560 ssl: accept TLS 1.2 rsa_pss_rsae in client SKE Viktor Sokolovskiy 2026-04-16 05:33:45 +03:00
  • 5ec9b573a3 fix(mbedtls): skip memset operation with dynamic buffer Ashish Sharma 2026-04-27 16:56:41 +08:00
  • fe20166e5c fix(mbedtls): skip memset operation with dynamic buffer mbedtls-4.0.0-idf Ashish Sharma 2026-04-27 16:56:41 +08:00
  • 73bf56ebdf fix(drivers): Support internal driver key source-specific storage layout harshal.patil 2026-04-13 10:55:45 +05:30
  • ae71b9e470 fix(drivers): Support internal driver key source-specific storage layout harshal.patil 2026-04-13 10:55:45 +05:30
  • 2a177ebfc6 feat(mbedtls): adds sbom.yml file for tf-psa-crypto Ashish Sharma 2026-04-16 15:16:30 +08:00
  • 53bb66126f feat(psa): Add generic secure element PSA driver dispatch Aditya Patwardhan 2026-04-08 19:49:31 +05:30
  • 3428fc6165 feat(mbedtls): Add ATECC ECDSA PSA driver Aditya Patwardhan 2026-02-09 22:35:41 +05:30
  • fb5e4658a3 change(mbedtls): adds CVE-2025-66442 to exclude list. Ashish Sharma 2026-04-09 17:16:42 +08:00
  • b5a5df7d5f feat(mbedtls): adds sbom.yml file for tf-psa-crypto Ashish Sharma 2026-04-16 15:16:30 +08:00
  • 9345b5878c fix(mbedtls): remove -Wdocumentation from build Ashish Sharma 2026-04-08 10:27:04 +08:00
  • 0e4c264731 feat(psa): Add generic secure element PSA driver dispatch Aditya Patwardhan 2026-04-08 19:49:31 +05:30
  • 6097a0e6d3 feat(mbedtls): Add ATECC ECDSA PSA driver Aditya Patwardhan 2026-02-09 22:35:41 +05:30
  • 9d669eadb1 change(mbedtls): adds CVE-2025-66442 to exclude list. Ashish Sharma 2026-04-09 17:16:42 +08:00
  • e6be698a7a change(mbedtls): adds CVE-2025-66442 to exclude list. Ashish Sharma 2026-04-09 17:16:42 +08:00
  • 74126a083e fix(mbedtls): remove -Wdocumentation from build Ashish Sharma 2026-04-08 10:27:04 +08:00
  • cd0a45dc68 feat(mbedtls): adds mbedtls pre built files Ashish Sharma 2026-04-02 15:29:53 +08:00
  • 1d43b9cd99 fix: update min cmake version to 3.10.2 Mahavir Jain 2025-12-21 14:12:48 +05:30
  • bcaa74bae6 feat(mbedtls): minimal CMake changes for build setup Ashish Sharma 2026-04-02 15:14:57 +08:00
  • 67a6a4091d feat(mbedtls): update to tf-psa-crypto 1.1 Ashish Sharma 2026-04-02 14:28:28 +08:00
  • 521d2eb1fe Merge pull request #10669 from gilles-peskine-arm/security-md-mention-compiler-4.1 David Horstmann 2026-04-01 15:46:13 +00:00
  • b43bdd7365 Be more specific about what compiler options we consider legitimate Gilles Peskine 2026-02-26 11:44:02 +01:00
  • 77a32fab9b Mention the new advice about compiler options in the changelog Gilles Peskine 2025-11-20 15:49:02 +01:00
  • 582d23e04c Add a section about compiler-introduced timing side channels Gilles Peskine 2025-11-20 15:46:58 +01:00
  • 5631e99abc feat(mbedtls): skip memset ssl buffers with dynamic buffer enabled. Ashish Sharma 2025-07-28 14:07:05 +08:00
  • a2a131b62b change: update the SBOM manifest file with keywords and excluded CVEs. Frantisek Hrbata 2025-07-19 18:26:07 +02:00
  • b1d0a24b7c fix(mbedtls): update minimum cmake required to 3.10.2 Ashish Sharma 2025-05-22 13:39:40 +08:00
  • 3f4dc53673 feat(component/mbedtls): Add support for RSASSA-PSS with RSA alt Ashish Sharma 2025-03-10 14:18:40 +08:00
  • 08d8b15416 Flatten the submodule 'framework' Mahavir Jain 2026-04-01 11:39:13 +05:30
  • 28945989d5 gcm: Support software fallback for non-AES ciphers in a gcm operation. harshal.patil 2023-12-19 13:28:05 +05:30
  • 6fc014f77f initial version of the sbom.yml file Frantisek Hrbata 2023-06-19 16:21:49 +02:00
  • 9bad53e92a cmake: Removed CMake flags for controlling C standard - CMAKE_C_EXTENSIONS: Enable/disable compiler-specific extensions - CMAKE_C_STANDARD: Set C standard (C99, C11) - These variables (as set in mbedtls) set the C standard to C99 for ESP-IDF as well, resulting in build errors related to asm volatile Laukik Hase 2022-07-15 17:42:05 +05:30
  • 30ff5b3c21 ecp: Add support for hardware implementation of ECP routines - ESP32C2 has a hardware ECC accelerator that supports NIST P-192 and NIST P-256 curves, which can increase the performance of the point multiplication and point verification operation. - Provision is also added to fallback to software implementation in case the curve is not from the supported curves Sachin Parekh 2022-01-05 15:23:44 +05:30
  • f8c1944d11 bignum: add provision for combined software and hardware MPI approach Mahavir Jain 2021-11-18 15:39:30 +05:30
  • e8f1d22d65 mbedtls: Re-apply MBEDTLS_BIGNUM_ALT & related macros for custom bignum functions Angus Gratton 2017-09-06 15:06:57 +10:00
  • 0fe989b6b5 Update BRANCHES.md mbedtls-4.1.0 Minos Galanakis 2026-03-18 16:37:06 +00:00
  • 641fa2695c Assemble ChangeLog Minos Galanakis 2026-03-26 22:23:55 +00:00
  • e89565f92a Bump version Minos Galanakis 2026-03-26 22:20:52 +00:00
  • 83d1ebc114 Updated tf psa-crypto submodule Minos Galanakis 2026-03-26 22:20:06 +00:00
  • 43b89543ec Updated framework submodule Minos Galanakis 2026-03-26 22:20:01 +00:00
  • 308e7fb232 Merge remote-tracking branch 'restricted/development-restricted' into mbedtls-4.1.0.rc3 Minos Galanakis 2026-03-26 22:18:31 +00:00
  • 0bebf8b8c7 Added generated files mbedtls-3.6.6 Minos Galanakis 2026-03-26 21:52:50 +00:00
  • 1baa5bba69 Update BRANCHES.md Minos Galanakis 2026-03-18 16:04:38 +00:00
  • 69454b4bfe Assemble ChangeLog Minos Galanakis 2026-03-26 21:50:06 +00:00
  • 3cfe12bf11 Bump version Minos Galanakis 2026-03-26 21:48:57 +00:00
  • 6cb4a1e9d2 Updated framework submodule Minos Galanakis 2026-03-26 21:47:46 +00:00
  • 809410026f Merge remote-tracking branch 'restricted/mbedtls-3.6-restricted' into mbedtls-3.6.6.rc3 Minos Galanakis 2026-03-26 21:47:09 +00:00
  • 77b1a22bc3 Merge pull request #1536 from ronald-cron-arm/3.6-context_load_and_session_load_documentation Gilles Peskine 2026-03-26 21:32:09 +01:00
  • fc317141fe Merge pull request #1534 from Mbed-TLS/release/changelog_fixes_4.1.0 minosgalanakis 2026-03-26 17:38:50 +00:00
  • 39acf7d2c8 Merge pull request #1535 from Mbed-TLS/release/changelog_fixes_3.6.6 minosgalanakis 2026-03-26 17:38:26 +00:00
  • 86b6812003 Update change log. Ronald Cron 2026-03-26 13:56:01 +01:00
  • 860cde63e6 MOufa Minos Galanakis 2026-03-26 16:43:03 +00:00
  • e4c6f6819e Added attribution for ffdh-peerkey-check Minos Galanakis 2026-03-26 16:36:25 +00:00
  • feb0dd04ba Extended attributions & CVE Minos Galanakis 2026-03-26 14:51:04 +00:00
  • 441beaeeac Extended attributions & CVE Minos Galanakis 2026-03-26 14:51:36 +00:00
  • f45d735826 Improve change log Ronald Cron 2026-03-17 11:06:04 +01:00
  • e7076b1639 Add change log Ronald Cron 2026-03-16 11:05:21 +01:00
  • e7c9b1dfb3 Reduce duplication between save/load documentations Ronald Cron 2026-02-25 18:56:12 +01:00
  • dd20b0644a Add warning in mbedtls_ssl_session_load/save documentation Ronald Cron 2026-02-25 09:04:08 +01:00
  • 6712bd07b3 Add warning in mbedtls_ssl_context_save/load documentation Ronald Cron 2026-02-25 08:40:28 +01:00
  • f3f27070a6 Added attributions & CVE Minos Galanakis 2026-03-26 11:07:16 +00:00
  • 0205ff782b Added attributions & CVE Minos Galanakis 2026-03-26 11:05:44 +00:00
  • 3746d7bbe0 Merge pull request #1531 from minosgalanakis/bugfix/ccm_finish_boundary_check_3.6_accr Manuel Pégourié-Gonnard 2026-03-26 09:36:56 +01:00
  • 5baf6883c6 Merge pull request #1529 from ronald-cron-arm/dtls minosgalanakis 2026-03-25 22:31:24 +00:00
  • e944c99027 Merge pull request #1519 from ronald-cron-arm/dtls-3.6 minosgalanakis 2026-03-25 22:31:18 +00:00
  • 6522a260b2 Merge pull request #1530 from mpg/ffdh-changelog-fix minosgalanakis 2026-03-25 19:38:16 +00:00
  • 17c19f9782 Added attribution to fix-ccm-finish changelog entry Minos Galanakis 2026-03-25 16:05:46 +00:00
  • 0c718e863a dtls: Log mapping of UNEXPECTED_RECORD to UNEXPECTED_MESSAGE Ronald Cron 2026-03-25 15:05:53 +01:00
  • eb1cdf45cd dtls: Fix adaptation to first ClientHello Ronald Cron 2026-03-24 16:49:34 +01:00
  • 953c584eec Remove debug leftover Ronald Cron 2026-03-24 15:49:25 +01:00
  • 3a3d1d3dcd Improve comments Ronald Cron 2026-03-24 15:47:55 +01:00
  • 9be94ba6ae Restrict mapping of UNEXPECTED_RECORD to UNEXPECTED_MESSAGE Ronald Cron 2026-03-24 15:42:42 +01:00
  • 42dec1f97c ssl-opt.sh: Fix log checks in some "DTLS reassembly" tests Ronald Cron 2026-03-24 12:25:34 +01:00
  • ed156d0699 Disable "DTLS proxy: 3d, (openssl|gnutls) client, fragmentation" tests Ronald Cron 2026-03-24 10:03:21 +01:00
  • db25da0f32 dtls: Fix log level Ronald Cron 2026-03-23 16:25:33 +01:00
  • 243a28c7fd dtls: parse_client_hello: Adapt mbedtls_ssl_read_record() error code Ronald Cron 2026-03-24 00:48:28 +01:00
  • 4decf92956 dtls: Keep invalid/unexpected record header error code Ronald Cron 2026-03-23 18:23:03 +01:00
  • 82be755414 dtls: Improve comment Ronald Cron 2026-03-23 15:40:02 +01:00
  • 7a50711061 Update buffering when adapting to ClientHello message_seq Ronald Cron 2026-03-18 12:15:52 +01:00
  • 38fe3d463e Remove attribution that wasn't agreed on Manuel Pégourié-Gonnard 2026-03-25 13:36:01 +01:00
  • 1330606ca1 dtls: Fix adaptation to first ClientHello Ronald Cron 2026-03-24 16:49:34 +01:00
  • 7a8fbc2100 Remove debug leftover Ronald Cron 2026-03-24 15:49:25 +01:00
  • 1141cd0fb6 Improve comments Ronald Cron 2026-03-24 15:47:55 +01:00
  • f2f44a9c9f Restrict mapping of UNEXPECTED_RECORD to UNEXPECTED_MESSAGE Ronald Cron 2026-03-24 15:42:42 +01:00
  • fbe388dc28 ssl-opt.sh: Fix log checks in some "DTLS reassembly" tests Ronald Cron 2026-03-24 12:25:34 +01:00
  • f285018fa3 Disable "DTLS proxy: 3d, (openssl|gnutls) client, fragmentation" tests Ronald Cron 2026-03-24 10:03:21 +01:00
  • c9264ad227 dtls: Fix log level Ronald Cron 2026-03-23 16:25:33 +01:00
  • 140ebea442 dtls: parse_client_hello: Adapt mbedtls_ssl_read_record() error code Ronald Cron 2026-03-24 00:48:28 +01:00
  • f9b7441542 dtls: Keep invalid/unexpected record header error code Ronald Cron 2026-03-23 18:23:03 +01:00
  • 0c301a686a dtls: Improve comment Ronald Cron 2026-03-23 15:40:02 +01:00
  • 912ef74195 Update buffering when adapting to ClientHello message_seq Ronald Cron 2026-03-18 12:15:52 +01:00
  • 16c5dd99b3 Introduce ssl_buffering_shift_slots Ronald Cron 2026-03-18 12:06:59 +01:00
  • 676d74e4c7 dtls: Error out on invalid/unexpected record header Ronald Cron 2026-03-20 17:19:10 +01:00