| /mbedtls-latest/.github/ |
| D | pull_request_template.md | 12 - [ ] **3.6 backport** done, or not required
13 - [ ] **2.28 backport** done, or not required
|
| /mbedtls-latest/library/ |
| D | bignum_core.c | 136 mbedtls_ct_condition_t ret = MBEDTLS_CT_FALSE, cond = MBEDTLS_CT_FALSE, done = MBEDTLS_CT_FALSE; in mbedtls_mpi_core_lt_ct() local
147 done = mbedtls_ct_bool_or(done, cond); in mbedtls_mpi_core_lt_ct()
156 ret = mbedtls_ct_bool_or(ret, mbedtls_ct_bool_and(cond, mbedtls_ct_bool_not(done))); in mbedtls_mpi_core_lt_ct()
157 done = mbedtls_ct_bool_or(done, cond); in mbedtls_mpi_core_lt_ct()
|
| D | aesni.c | 51 static int done = 0; in mbedtls_aesni_has_support() local
54 if (!done) { in mbedtls_aesni_has_support()
70 done = 1; in mbedtls_aesni_has_support()
|
| D | cipher.c | 978 mbedtls_ct_condition_t done = MBEDTLS_CT_FALSE, prev_done; in get_zeros_padding() local
986 prev_done = done; in get_zeros_padding()
987 done = mbedtls_ct_bool_or(done, mbedtls_ct_uint_ne(input[i-1], 0)); in get_zeros_padding()
988 *data_len = mbedtls_ct_size_if(mbedtls_ct_bool_ne(done, prev_done), i, *data_len); in get_zeros_padding()
|
| D | sha256.c | 608 static int done = 0; in mbedtls_a64_crypto_sha256_has_support() local
611 if (!done) { in mbedtls_a64_crypto_sha256_has_support()
613 done = 1; in mbedtls_a64_crypto_sha256_has_support()
|
| D | sha512.c | 724 static int done = 0; in mbedtls_a64_crypto_sha512_has_support() local
727 if (!done) { in mbedtls_a64_crypto_sha512_has_support()
729 done = 1; in mbedtls_a64_crypto_sha512_has_support()
|
| D | pk_wrap.c | 716 goto done; in ecdsa_sign_psa()
728 done: in ecdsa_sign_psa()
|
| D | ssl_msg.c | 2939 int ret, done = 0; in mbedtls_ssl_write_record() local
2945 if (!done) { in mbedtls_ssl_write_record()
3962 int ret, done = 0; in ssl_prepare_record_content() local
3976 done = 1; in ssl_prepare_record_content()
3981 if (!done && ssl->transform_in != NULL) { in ssl_prepare_record_content()
|
| /mbedtls-latest/docs/architecture/psa-migration/ |
| D | strategy.md | 66 At the time of writing (early 2022) it is unclear what could be done about the
143 - Downside: tricky to implement if the PSA implementation is currently done on
153 implementation is currently done on top of that layer.
165 - For every operation that's done through this layer in TLS or X.509, just
167 - Upside: conceptually simple, and if the PSA implementation is currently done
171 - Downside: TLS/X.509 code has to be done for each operation.
181 to be done via PSA.
253 `MBEDTLS_USE_PSA_CRYPTO`.) This needs to be done in the library and tests.
257 this needs to be done in the library (for crypto operations and data) and
287 - Step 3 is done for hashes and top-level ECC modules (ECDSA, ECDH, ECJPAKE).
[all …]
|
| D | psa-limitations.md | 7 operations done in TLS and X.509 code, but of course it's still possible that
66 done any time.)
69 would still be available in TLS 1.3, just not in 1.2.) (Can only be done in
75 done in 4.0 or another major version.)
82 migration by implementing RFC 7919. (Implementing RFC 7919 could be done any
83 time; making it mandatory can only be done in 4.0 or another major version.)
171 The verification is done using `mbedtls_pk_verify_ext()`.
|
| D | md-cipher-dispatch.md | 54 …acy interfaces (less code size, less maintenance). However, this can't be done without breaking [b…
80 … the goal is to make more code call PSA drivers where available. How dispatch is done is secondary.
255 …ed then `psa_verify_hash` must reject `PSA_WANT_ALG_SHA_256`. This can be done at the level of PSA…
354 …API from `aes.h`. In all cases, access to the "block cipher primitive" is done by using "ECB mode"…
510 * Otherwise dispatch to the legacy module based on the type as currently done. (Skip this is `MBEDT…
564 …an overview of the task breakdown, which should be fleshed up after we've done the first [migratio…
|
| /mbedtls-latest/docs/architecture/testing/ |
| D | driver-interface-test-strategy.md | 45 …er and check that the expected driver is called. This does not need to be done for all operations …
86 * This must be done for each key creation method and for key destruction.
87 * This must be done for each possible flow, including error cases (e.g. a key creation that fails m…
90 … (this can be done by e.g. using a key that is supposed to be present) and does not have any unexp…
|
| D | psa-storage-format-testing.md | 39 …n't deliberately decide to stop supporting old keys (which should only be done by retiring a versi…
|
| D | invasive-testing.md | 14 …nts”](#requirements) explores the reasons why invasive testing is needed and how it should be done.
215 | Effacement | ++ No impact on the product when built normally or on the documentation, if done rig…
|
| /mbedtls-latest/docs/architecture/ |
| D | tls13-support.md | 352 result in too many checks of whether something needs to be done or not in a
394 stage is optional. Any processing that must be done before the parsing of the
395 message or that can be done to simplify the parsing code. Some simple and
409 * state change: the state change is done in the main state handler to ease the
420 Any processing that must be done before the writing of the message or that can
421 be done to simplify the writing code.
434 * state change: the state change is done in the main state handler to ease
|
| D | psa-storage-resilience.md | 111 …only access one file identifier. Therefore transaction recovery cannot be done by traversing files…
143 …* Committing means finishing the update of the core's persistent state, as would have been done if…
146 …* Committing means finishing the update of the core's persistent state, as would have been done if…
149 …* Committing means finishing the update of the core's persistent state, as would have been done if…
322 * If the file `id` does not exist, then nothing needs to be done for recovery, other than removing …
386 * If the file `id` does not exist, then nothing needs to be done for recovery, other than removing …
415 3. Create the key file _A_ in the internal storage. Note that this is done at a different time from…
|
| /mbedtls-latest/docs/ |
| D | psa-driver-example-and-guide.md | 50 …is process. Steps 1, 2, 3, and 7 only need to be done once *per driver*. Steps 4, 5, and 6 must be…
123 …g PSA macros, such as determining the key type or number of bits, must be done in the driver wrapp…
126 …t, the chosen driver macro (`DRIVER_PREFIX_ENABLED`) must be defined. This can be done in two ways:
127 …of-the-box without significantly modifying the configuration. This can be done by passing the opti…
141 …ource tree under `3rdparty/p256-m`. In this section, we will look at how this integration was done.
|
| /mbedtls-latest/tests/suites/ |
| D | test_suite_test_helpers.function | 18 * That negative testing is done in programs/test/metatest.c. */
|
| D | test_suite_block_cipher.function | 102 /* Intentionally no PSA init here! (Will be done later.) */
|
| D | test_suite_bignum.function | 505 /* mbedtls_mpi_safe_cond_assign(), assignment done */
512 /* mbedtls_mpi_safe_cond_assign(), assignment not done */
565 /* mbedtls_mpi_safe_cond_swap(), swap done */
576 /* mbedtls_mpi_safe_cond_swap(), swap not done */
|
| D | test_suite_pkparse.function | 214 * not because this is already done by the internal "pk_get_ecpubkey()"
|
| D | test_suite_x509parse.function | 177 goto done;
184 goto done;
189 done:
|
| D | test_suite_md.function | 432 /* Intentionally no PSA init here! (Will be done later.) */
|
| /mbedtls-latest/docs/architecture/psa-thread-safety/ |
| D | psa-thread-safety.md | 171 …bels. The `PSA_SLOT_PENDING_DELETION -> PSA_SLOT_EMPTY` transition can be done by any function whi…
178 Changing a slot's state to `PSA_SLOT_EMPTY` is done via `psa_wipe_key_slot`, this function wipes th…
207 …if a slot has been found then the slot id is set. This second step is not done under the mutex, at…
208 …done under the mutex), the thread calls `psa_finish_key_creation`. This function takes the mutex, …
213 …ot` and load the key back into the reserved slot. This entire sequence is done during a single mut…
283 …hat run in parallel, deriving the key and copying it key into the slot is not done under any mutex.
325 …d` can wipe the key slot will need to be removed, slot wiping is now only done by the destroying/w…
|
| /mbedtls-latest/3rdparty/p256-m/p256-m/ |
| D | README.md | 286 done separately by the user for static ECDH (there are attacks [when users
344 All modular operations are done in the Montgomery domain, that is x is
|
