| /mbedtls-3.6.0/include/mbedtls/ |
| D | ssl_cache.h | 4 * \brief SSL session cache implementation
35 #define MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES 50 /*!< Maximum entries in cache */
48 * \brief This structure is used for storing cache entries
65 * \brief Cache context
69 int MBEDTLS_PRIVATE(timeout); /*!< cache entry timeout */
77 * \brief Initialize an SSL cache context
79 * \param cache SSL cache context
81 void mbedtls_ssl_cache_init(mbedtls_ssl_cache_context *cache);
84 * \brief Cache get callback implementation
87 * \param data The SSL cache context to use.
[all …]
|
| D | ssl.h | 99 /** Cache entry not found */
848 * \brief Callback type: server-side session cache getter
850 * The session cache is logically a key value store, with
856 * \param data The address of the session cache structure to query.
875 * \brief Callback type: server-side session cache setter
877 * The session cache is logically a key value store, with
883 * \param data The address of the session cache structure to modify.
887 * session cache.
1416 /** Callback to retrieve a session from the cache */
1418 /** Callback to store a session into the cache */
[all …]
|
| /mbedtls-3.6.0/library/ |
| D | ssl_cache.c | 2 * SSL session cache implementation
24 void mbedtls_ssl_cache_init(mbedtls_ssl_cache_context *cache) in mbedtls_ssl_cache_init() argument
26 memset(cache, 0, sizeof(mbedtls_ssl_cache_context)); in mbedtls_ssl_cache_init()
28 cache->timeout = MBEDTLS_SSL_CACHE_DEFAULT_TIMEOUT; in mbedtls_ssl_cache_init()
29 cache->max_entries = MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES; in mbedtls_ssl_cache_init()
32 mbedtls_mutex_init(&cache->mutex); in mbedtls_ssl_cache_init()
37 static int ssl_cache_find_entry(mbedtls_ssl_cache_context *cache, in ssl_cache_find_entry() argument
48 for (cur = cache->chain; cur != NULL; cur = cur->next) { in ssl_cache_find_entry()
50 if (cache->timeout != 0 && in ssl_cache_find_entry()
51 (int) (t - cur->timestamp) > cache->timeout) { in ssl_cache_find_entry()
[all …]
|
| D | cipher.c | 638 * If there is not enough data for a full block, cache it. in mbedtls_cipher_update()
680 * Cache final, incomplete block in mbedtls_cipher_update()
683 /* Encryption: only cache partial blocks in mbedtls_cipher_update()
685 * Decryption w/o padding: only cache partial blocks in mbedtls_cipher_update()
|
| D | rsa.c | 19 * [3] Malware Guard Extension: Using SGX to Conceal Cache Attacks
93 * to a shared memory cache), and branches (especially visible to in mbedtls_ct_rsaes_pkcs1_v15_unpadding()
94 * an adversary who has access to a shared code cache or to a shared in mbedtls_ct_rsaes_pkcs1_v15_unpadding()
161 * through memory or cache access patterns. */ in mbedtls_ct_rsaes_pkcs1_v15_unpadding()
|
| D | aesce.c | 98 /* To avoid many calls to getauxval, cache the result. This is in mbedtls_aesce_has_support_impl()
|
| /mbedtls-3.6.0/programs/x509/ |
| D | load_roots.c | 36 " iterations=%%d Iteration count (not including cache priming); default: 1\n" \
37 " prime=%%d Prime the disk read cache? Default: 1 (yes)\n" \
47 int prime_cache; /* Prime the disk read cache? */
|
| /mbedtls-3.6.0/programs/ssl/ |
| D | ssl_server.c | 80 mbedtls_ssl_cache_context cache; in main() local
88 mbedtls_ssl_cache_init(&cache); in main()
190 mbedtls_ssl_conf_session_cache(&conf, &cache, in main()
349 mbedtls_ssl_cache_free(&cache); in main()
|
| D | dtls_server.c | 94 mbedtls_ssl_cache_context cache; in main() local
103 mbedtls_ssl_cache_init(&cache); in main()
210 mbedtls_ssl_conf_session_cache(&conf, &cache, in main()
390 mbedtls_ssl_cache_free(&cache); in main()
|
| D | ssl_pthread_server.c | 294 mbedtls_ssl_cache_context cache; in main() local
302 mbedtls_ssl_cache_init(&cache); in main()
405 mbedtls_ssl_conf_session_cache(&conf, &cache, in main()
469 mbedtls_ssl_cache_free(&cache); in main()
|
| D | ssl_server2.c | 314 " cache_max=%%d default: cache default (50)\n" \
318 " cache_timeout=%%d default: cache default (1d)\n"
660 int cache_max; /* max number of session cache entries */
662 int cache_timeout; /* expiration delay of session cache entries*/
664 int cache_remove; /* enable / disable cache entry removal */
1508 mbedtls_ssl_cache_context cache; in main() local
1602 mbedtls_ssl_cache_init(&cache); in main()
2863 mbedtls_ssl_cache_set_max_entries(&cache, opt.cache_max); in main()
2868 mbedtls_ssl_cache_set_timeout(&cache, opt.cache_timeout); in main()
2872 mbedtls_ssl_conf_session_cache(&conf, &cache, in main()
[all …]
|
| /mbedtls-3.6.0/ |
| D | .travis.yml | 8 cache: ccache
|
| D | CMakeLists.txt | 120 …CACHE STRING "Choose the type of build: None Debug Release Coverage ASan ASanDbg MemSan MemSanDbg …
125 set(MBEDTLS_CONFIG_FILE "" CACHE FILEPATH "Mbed TLS config file (overrides default).")
126 set(MBEDTLS_USER_CONFIG_FILE "" CACHE FILEPATH "Mbed TLS user config file (appended to default).")
|
| D | SECURITY.md | 54 to. Typical attack vectors include cache timings, memory bus contention and
|
| D | ChangeLog | 291 some cases involving a missing entry or a full cache.
392 * Add new API mbedtls_ssl_cache_remove for cache entry removal by
419 * Zeroize SSL cache entries when they are freed.
646 Wenjian HE, Sharad Sinha, and Wei ZHANG. See "Cache Side-channel Attacks
1266 * The getter and setter API of the SSL session cache (used for
1989 fixes a local Lucky 13 cache attack found and reported by Tuba Yavuz,
2992 plaintext of messages under some conditions by using a cache attack
3003 previous entry) by using a cache attack targeting the SSL input record
3668 against side-channel attacks like the cache attack described in
4289 * Add countermeasure against "Lucky 13 strikes back" cache-based attack,
[all …]
|
| D | README.md | 176 CMake cache. This can be done with the following command using GNU find:
|
| /mbedtls-3.6.0/tests/ |
| D | Descriptions.txt | 21 covered by compat.sh: session resumption (using session cache or tickets),
|
| D | ssl-opt.sh | 14 # (session resumption from cache or ticket, renego, etc).
3725 -S "session successfully restored from cache" \
3739 -S "session successfully restored from cache" \
3744 run_test "Session resume using tickets: cache disabled" \
3753 -S "session successfully restored from cache" \
3767 -S "session successfully restored from cache" \
3781 -S "session successfully restored from cache" \
3805 -S "session successfully restored from cache" \
3818 -S "session successfully restored from cache" \
3832 -S "session successfully restored from cache" \
[all …]
|
| /mbedtls-3.6.0/tests/scripts/ |
| D | docker_env.sh | 64 --cache-from=${DOCKER_IMAGE_TAG} \
|
| /mbedtls-3.6.0/tests/src/test_helpers/ |
| D | ssl_helpers.c | 81 opts->cache = NULL; in mbedtls_test_init_handshake_options()
82 TEST_CALLOC(opts->cache, 1); in mbedtls_test_init_handshake_options()
83 mbedtls_ssl_cache_init(opts->cache); in mbedtls_test_init_handshake_options()
85 TEST_EQUAL(mbedtls_ssl_cache_get_timeout(opts->cache), in mbedtls_test_init_handshake_options()
97 mbedtls_ssl_cache_free(opts->cache); in mbedtls_test_free_handshake_options()
98 mbedtls_free(opts->cache); in mbedtls_test_free_handshake_options()
828 if (endpoint_type == MBEDTLS_SSL_IS_SERVER && options->cache != NULL) { in mbedtls_test_ssl_endpoint_init()
829 mbedtls_ssl_conf_session_cache(&(ep->conf), options->cache, in mbedtls_test_ssl_endpoint_init()
|
| /mbedtls-3.6.0/docs/ |
| D | 3.0-migration-guide.md | 897 ### Session Cache API Change
900 to configure a custom session cache implementation different
903 Those users will need to modify the API of their session cache
919 onwards, portable session cache implementations must not access fields of
921 find themselves unable to migrate their session cache functionality without
|
| /mbedtls-3.6.0/scripts/mbedtls_dev/ |
| D | psa_storage.py | 36 """Cache of known values of expressions."""
|
| /mbedtls-3.6.0/tests/include/test/ |
| D | psa_crypto_helpers.h | 61 /** Purge the in-memory cache of persistent keys recorded with
|
| D | ssl_helpers.h | 116 mbedtls_ssl_cache_context *cache; member
|
| /mbedtls-3.6.0/3rdparty/p256-m/p256-m/ |
| D | README.md | 105 such as the cache or branch predictor with arbitrary precision.
|
