Gilles Peskine afaee1cacf Catch AES failure in mbedtls_ctr_drbg_random ...

The functions mbedtls_ctr_drbg_random() and
mbedtls_ctr_drbg_random_with_add() could return 0 if an AES function
failed. This could only happen with alternative AES
implementations (the built-in implementation of the AES functions
involved never fail), typically due to a failure in a hardware
accelerator.

Bug reported and fix proposed by Johan Uppman Bruce and Christoffer
Lauri, Sectra.

2019-11-28 10:03:08 +01:00

..

.gitignore

…

aes.c

Zeroize local AES variables before exiting the function

2019-11-12 03:05:51 -05:00

aesni.c

…

arc4.c

…

aria.c

…

asn1parse.c

mbedtls_asn1_get_int: fix int overflow

2019-10-10 19:29:27 +02:00

asn1write.c

mbedtls_asn1_store_named_data: clarify val allocation behavior

2019-09-11 15:46:45 +02:00

base64.c

…

bignum.c

mpi_lt_mpi_ct: fix condition handling

2019-11-05 15:13:00 +00:00

blowfish.c

…

camellia.c

…

ccm.c

…

chacha20.c

…

chachapoly.c

…

cipher_wrap.c

…

cipher.c

Convert cipher and pk to PSA attribute-based key creation

2019-06-05 11:34:54 +02:00

cmac.c

…

CMakeLists.txt

Merge pull request #185 from gilles-peskine-arm/harvard-md

2019-09-10 18:38:39 +01:00

ctr_drbg.c

Catch AES failure in mbedtls_ctr_drbg_random

2019-11-28 10:03:08 +01:00

des.c

des: Reduce number of self-test iterations

2019-09-04 10:11:45 +01:00

dhm.c

Allow DHM self test to run without MBEDTLS_PEM_PARSE_C

2019-06-03 17:46:56 +01:00

ecdh.c

Fix code style

2019-08-19 13:37:46 +01:00

ecdsa.c

ECDSA: Fix side channel vulnerability

2019-10-17 10:18:51 +01:00

ecjpake.c

Fix handling of md failure

2019-07-08 14:32:38 +02:00

ecp_curves.c

Replace 0 by MBEDTLS_ECP_DP_NONE to avoid IAR compiler complains

2019-09-10 17:58:20 +03:00

ecp.c

Change mbedtls_mpi_cmp_mpi_ct to check less than

2019-11-04 10:39:20 +00:00

entropy_poll.c

…

entropy.c

…

error.c

Fix long-standing bug in error code description

2019-09-11 18:16:11 +02:00

gcm.c

Secure array index in its bounds

2019-10-22 13:25:06 +02:00

havege.c

Fix minor type choice inconsistency

2019-06-24 15:45:09 +02:00

hkdf.c

…

hmac_drbg.c

HMAC_DRBG: support set_entropy_len() before seed()

2019-10-11 18:04:12 +02:00

Makefile

Merge pull request #185 from gilles-peskine-arm/harvard-md

2019-09-10 18:38:39 +01:00

md2.c

…

md4.c

…

md5.c

…

md.c

Use smaller types in mbedtls_md_info_t

2019-07-22 11:35:19 +02:00

memory_buffer_alloc.c

…

nist_kw.c

…

oid.c

…

padlock.c

…

pem.c

…

pk_wrap.c

Convert cipher and pk to PSA attribute-based key creation

2019-06-05 11:34:54 +02:00

pk.c

Convert cipher and pk to PSA attribute-based key creation

2019-06-05 11:34:54 +02:00

pkcs5.c

Improve speed of PBKDF2 by caching the digest state of the passphrase

2019-09-23 19:15:54 -04:00

pkcs12.c

…

pkparse.c

…

pkwrite.c

Convert cipher and pk to PSA attribute-based key creation

2019-06-05 11:34:54 +02:00

platform_util.c

Check for zero length and NULL buffer pointer.

2019-09-04 11:31:35 +01:00

platform.c

…

poly1305.c

…

psa_crypto_core.h

Rename internal macro to pass check-names.sh

2019-08-08 10:58:09 +02:00

psa_crypto_invasive.h

…

psa_crypto_its.h

Add psa_trusted_storage_linux persistent storage support for v1.0.0 APIs

2019-07-23 17:30:37 +01:00

psa_crypto_se.c

SE driver: Fix loading of persistent data

2019-10-01 16:55:29 +02:00

psa_crypto_se.h

SE driver: call the p_init method during psa_crypto_init()

2019-10-01 15:22:29 +02:00

psa_crypto_service_integration.h

…

psa_crypto_slot_management.c

Make psa_close_key(0) and psa_destroy_key(0) succeed

2019-10-08 15:57:27 +02:00

psa_crypto_slot_management.h

Rename psa_internal_allocate_key_slot to psa_get_empty_key_slot

2019-08-08 10:58:09 +02:00

psa_crypto_storage.c

Merge pull request #198 from gilles-peskine-arm/psa-api-1.0-beta-merge_development_20190801

2019-08-08 10:24:53 +02:00

psa_crypto_storage.h

Switch storage functions over to psa_core_key_attributes_t

2019-07-31 14:15:27 +02:00

psa_crypto.c

Merge pull request #292 from gilles-peskine-arm/psa-destroy_0

2019-10-14 11:21:54 +02:00

psa_its_file.c

Add an input check in psa_its_set

2019-09-05 09:34:34 -04:00

ripemd160.c

…

rsa_internal.c

…

rsa.c

…

sha1.c

…

sha256.c

…

sha512.c

Re-roll main loop with SHA512_SMALLER

2019-07-17 13:16:54 +02:00

threading.c

…

timing.c

timing: Remove redundant include file

2019-06-20 10:51:21 +01:00

version_features.c

Move MBEDTLS_CTR_DRBG_USE_128_BIT_KEY to the correct section

2019-10-04 11:16:24 +02:00

version.c

…

xtea.c

…