| /mbedtls-latest/include/mbedtls/ |
| D | ssl_cache.h | 4 * \brief SSL session cache implementation
35 #define MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES 50 /*!< Maximum entries in cache */
48 * \brief This structure is used for storing cache entries
65 * \brief Cache context
69 int MBEDTLS_PRIVATE(timeout); /*!< cache entry timeout */
77 * \brief Initialize an SSL cache context
79 * \param cache SSL cache context
81 void mbedtls_ssl_cache_init(mbedtls_ssl_cache_context *cache);
84 * \brief Cache get callback implementation
87 * \param data The SSL cache context to use.
[all …]
|
| D | ssl.h | 106 /** Cache entry not found */
892 * \brief Callback type: server-side session cache getter
894 * The session cache is logically a key value store, with
900 * \param data The address of the session cache structure to query.
919 * \brief Callback type: server-side session cache setter
921 * The session cache is logically a key value store, with
927 * \param data The address of the session cache structure to modify.
931 * session cache.
1501 /** Callback to retrieve a session from the cache */
1503 /** Callback to store a session into the cache */
[all …]
|
| /mbedtls-latest/library/ |
| D | ssl_cache.c | 2 * SSL session cache implementation
24 void mbedtls_ssl_cache_init(mbedtls_ssl_cache_context *cache) in mbedtls_ssl_cache_init() argument
26 memset(cache, 0, sizeof(mbedtls_ssl_cache_context)); in mbedtls_ssl_cache_init()
28 cache->timeout = MBEDTLS_SSL_CACHE_DEFAULT_TIMEOUT; in mbedtls_ssl_cache_init()
29 cache->max_entries = MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES; in mbedtls_ssl_cache_init()
32 mbedtls_mutex_init(&cache->mutex); in mbedtls_ssl_cache_init()
37 static int ssl_cache_find_entry(mbedtls_ssl_cache_context *cache, in ssl_cache_find_entry() argument
48 for (cur = cache->chain; cur != NULL; cur = cur->next) { in ssl_cache_find_entry()
50 if (cache->timeout != 0 && in ssl_cache_find_entry()
51 (int) (t - cur->timestamp) > cache->timeout) { in ssl_cache_find_entry()
[all …]
|
| D | psa_crypto_slot_management.c | 74 * One slice is dedicated to the cache of persistent and built-in keys.
75 * For simplicity, they are separated from volatile keys. This cache
80 /* Size of the last slice containing the cache of persistent and built-in keys. */
233 /** Get a pointer to an entry in the persistent key cache.
238 * persistent key cache entry.
560 /* This is a cache entry. We don't maintain a free list, so in psa_free_key_slot()
613 /* With a dynamic key store, allocate an entry in the cache slice, in psa_reserve_free_key_slot()
|
| D | cipher.c | 654 * If there is not enough data for a full block, cache it. in mbedtls_cipher_update()
696 * Cache final, incomplete block in mbedtls_cipher_update()
699 /* Encryption: only cache partial blocks in mbedtls_cipher_update()
701 * Decryption w/o padding: only cache partial blocks in mbedtls_cipher_update()
|
| D | psa_crypto_slot_management.h | 140 * \param[out] volatile_key_id - If null, reserve a cache slot for
|
| D | rsa.c | 19 * [3] Malware Guard Extension: Using SGX to Conceal Cache Attacks
459 * to a shared memory cache), and branches (especially visible to in mbedtls_ct_rsaes_pkcs1_v15_unpadding()
460 * an adversary who has access to a shared code cache or to a shared in mbedtls_ct_rsaes_pkcs1_v15_unpadding()
527 * through memory or cache access patterns. */ in mbedtls_ct_rsaes_pkcs1_v15_unpadding()
|
| /mbedtls-latest/docs/architecture/ |
| D | psa-keystore-design.md | 106 …for a persistent key that can be purged (see [“Persistent key cache”](#persistent-key-cache)), and…
133 …ed keys: that key slice is thus the cache slice. See [“Persistent key cache”](persistent-key-cache…
144 * for a persistent key identifier or built-in key identifier, [the slot is in the sole cache slice]…
185 ### Persistent key cache
194 To avoid frequent storage access, we cache persistent keys in memory. This cache also applies to bu…
196 …tatic-key-store), a non-empty slot can contain either a volatile key or a cache entry for a persis…
198 …cache is a fixed-size array of `MBEDTLS_PSA_KEY_SLOT_COUNT` slots. In the static key store, this a…
202 …cache to see if a key with the given identifier is already loaded. If not, it loads the key. This …
204 #### Cache eviction
206 A key slot must be allocated in the cache slice:
[all …]
|
| /mbedtls-latest/programs/x509/ |
| D | load_roots.c | 36 " iterations=%%d Iteration count (not including cache priming); default: 1\n" \
37 " prime=%%d Prime the disk read cache? Default: 1 (yes)\n" \
47 int prime_cache; /* Prime the disk read cache? */
|
| /mbedtls-latest/programs/ssl/ |
| D | ssl_server.c | 80 mbedtls_ssl_cache_context cache; in main() local
88 mbedtls_ssl_cache_init(&cache); in main()
190 mbedtls_ssl_conf_session_cache(&conf, &cache, in main()
349 mbedtls_ssl_cache_free(&cache); in main()
|
| D | dtls_server.c | 94 mbedtls_ssl_cache_context cache; in main() local
103 mbedtls_ssl_cache_init(&cache); in main()
210 mbedtls_ssl_conf_session_cache(&conf, &cache, in main()
390 mbedtls_ssl_cache_free(&cache); in main()
|
| D | ssl_pthread_server.c | 294 mbedtls_ssl_cache_context cache; in main() local
302 mbedtls_ssl_cache_init(&cache); in main()
405 mbedtls_ssl_conf_session_cache(&conf, &cache, in main()
469 mbedtls_ssl_cache_free(&cache); in main()
|
| D | ssl_server2.c | 317 " cache_max=%%d default: cache default (50)\n" \
321 " cache_timeout=%%d default: cache default (1d)\n"
665 int cache_max; /* max number of session cache entries */
667 int cache_timeout; /* expiration delay of session cache entries*/
669 int cache_remove; /* enable / disable cache entry removal */
1560 mbedtls_ssl_cache_context cache; in main() local
1651 mbedtls_ssl_cache_init(&cache); in main()
2948 mbedtls_ssl_cache_set_max_entries(&cache, opt.cache_max); in main()
2953 mbedtls_ssl_cache_set_timeout(&cache, opt.cache_timeout); in main()
2957 mbedtls_ssl_conf_session_cache(&conf, &cache, in main()
[all …]
|
| /mbedtls-latest/tests/ |
| D | ssl-opt.sh | 14 # (session resumption from cache or ticket, renego, etc).
3799 -S "session successfully restored from cache" \
3814 -S "session successfully restored from cache" \
3820 run_test "Session resume using tickets: cache disabled" \
3829 -S "session successfully restored from cache" \
3844 -S "session successfully restored from cache" \
3859 -S "session successfully restored from cache" \
3885 -S "session successfully restored from cache" \
3900 -S "session successfully restored from cache" \
3916 -S "session successfully restored from cache" \
[all …]
|
| D | Descriptions.txt | 21 covered by compat.sh: session resumption (using session cache or tickets),
|
| /mbedtls-latest/ |
| D | CMakeLists.txt | 141 …CACHE STRING "Choose the type of build: None Debug Release Coverage ASan ASanDbg MemSan MemSanDbg …
146 set(MBEDTLS_CONFIG_FILE "" CACHE FILEPATH "Mbed TLS config file (overrides default).")
147 set(MBEDTLS_USER_CONFIG_FILE "" CACHE FILEPATH "Mbed TLS user config file (appended to default).")
|
| D | .travis.yml | 8 cache: ccache
|
| D | .gitignore | 72 /.cache/clangd/index/
|
| D | SECURITY.md | 54 to. Typical attack vectors include cache timings, memory bus contention and
|
| D | ChangeLog | 746 some cases involving a missing entry or a full cache.
847 * Add new API mbedtls_ssl_cache_remove for cache entry removal by
874 * Zeroize SSL cache entries when they are freed.
1101 Wenjian HE, Sharad Sinha, and Wei ZHANG. See "Cache Side-channel Attacks
1721 * The getter and setter API of the SSL session cache (used for
2444 fixes a local Lucky 13 cache attack found and reported by Tuba Yavuz,
3447 plaintext of messages under some conditions by using a cache attack
3458 previous entry) by using a cache attack targeting the SSL input record
4123 against side-channel attacks like the cache attack described in
4744 * Add countermeasure against "Lucky 13 strikes back" cache-based attack,
[all …]
|
| /mbedtls-latest/docs/ |
| D | 3.0-migration-guide.md | 897 ### Session Cache API Change
900 to configure a custom session cache implementation different
903 Those users will need to modify the API of their session cache
919 onwards, portable session cache implementations must not access fields of
921 find themselves unable to migrate their session cache functionality without
|
| /mbedtls-latest/tests/scripts/ |
| D | docker_env.sh | 64 --cache-from=${DOCKER_IMAGE_TAG} \
|
| D | all.sh | 28 # After running this script, the CMake cache will be lost and CMake
323 # Remove built files as well as the cmake cache/config.
|
| /mbedtls-latest/tests/src/test_helpers/ |
| D | ssl_helpers.c | 72 TEST_CALLOC(opts->cache, 1); in mbedtls_test_init_handshake_options()
73 mbedtls_ssl_cache_init(opts->cache); in mbedtls_test_init_handshake_options()
75 TEST_EQUAL(mbedtls_ssl_cache_get_timeout(opts->cache), in mbedtls_test_init_handshake_options()
87 mbedtls_ssl_cache_free(opts->cache); in mbedtls_test_free_handshake_options()
88 mbedtls_free(opts->cache); in mbedtls_test_free_handshake_options()
848 if (endpoint_type == MBEDTLS_SSL_IS_SERVER && options->cache != NULL) { in mbedtls_test_ssl_endpoint_init()
849 mbedtls_ssl_conf_session_cache(&(ep->conf), options->cache, in mbedtls_test_ssl_endpoint_init()
|
| /mbedtls-latest/tests/include/test/ |
| D | psa_crypto_helpers.h | 59 /** Purge the in-memory cache of persistent keys recorded with
|
