| /mbedtls-3.5.0/library/ |
| D | ssl_cache.c | 2 * SSL session cache implementation
35 void mbedtls_ssl_cache_init(mbedtls_ssl_cache_context *cache) in mbedtls_ssl_cache_init() argument
37 memset(cache, 0, sizeof(mbedtls_ssl_cache_context)); in mbedtls_ssl_cache_init()
39 cache->timeout = MBEDTLS_SSL_CACHE_DEFAULT_TIMEOUT; in mbedtls_ssl_cache_init()
40 cache->max_entries = MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES; in mbedtls_ssl_cache_init()
43 mbedtls_mutex_init(&cache->mutex); in mbedtls_ssl_cache_init()
48 static int ssl_cache_find_entry(mbedtls_ssl_cache_context *cache, in ssl_cache_find_entry() argument
59 for (cur = cache->chain; cur != NULL; cur = cur->next) { in ssl_cache_find_entry()
61 if (cache->timeout != 0 && in ssl_cache_find_entry()
62 (int) (t - cur->timestamp) > cache->timeout) { in ssl_cache_find_entry()
[all …]
|
| D | cipher.c | 593 * If there is not enough data for a full block, cache it. in mbedtls_cipher_update()
632 * Cache final, incomplete block in mbedtls_cipher_update()
635 /* Encryption: only cache partial blocks in mbedtls_cipher_update()
637 * Decryption w/o padding: only cache partial blocks in mbedtls_cipher_update()
|
| D | constant_time.c | 931 * to a shared memory cache), and branches (especially visible to in mbedtls_ct_rsaes_pkcs1_v15_unpadding()
932 * an adversary who has access to a shared code cache or to a shared in mbedtls_ct_rsaes_pkcs1_v15_unpadding()
998 * through memory or cache access patterns. */ in mbedtls_ct_rsaes_pkcs1_v15_unpadding()
|
| /mbedtls-3.5.0/include/mbedtls/ |
| D | ssl_cache.h | 4 * \brief SSL session cache implementation
47 #define MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES 50 /*!< Maximum entries in cache */
60 * \brief This structure is used for storing cache entries
77 * \brief Cache context
81 int MBEDTLS_PRIVATE(timeout); /*!< cache entry timeout */
89 * \brief Initialize an SSL cache context
91 * \param cache SSL cache context
93 void mbedtls_ssl_cache_init(mbedtls_ssl_cache_context *cache);
96 * \brief Cache get callback implementation
99 * \param data The SSL cache context to use.
[all …]
|
| D | ssl.h | 845 * \brief Callback type: server-side session cache getter
847 * The session cache is logically a key value store, with
853 * \param data The address of the session cache structure to query.
872 * \brief Callback type: server-side session cache setter
874 * The session cache is logically a key value store, with
880 * \param data The address of the session cache structure to modify.
884 * session cache.
1413 /** Callback to retrieve a session from the cache */
1415 /** Callback to store a session into the cache */
1417 void *MBEDTLS_PRIVATE(p_cache); /*!< context for cache callbacks */
[all …]
|
| D | mbedtls_config.h | 3219 * Enable simple SSL cache implementation.
3718 /* SSL Cache options */
3720 //#define MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES 50 /**< Maximum entries in cache */
|
| /mbedtls-3.5.0/programs/x509/ |
| D | load_roots.c | 75 " iterations=%%d Iteration count (not including cache priming); default: 1\n" \
76 " prime=%%d Prime the disk read cache? Default: 1 (yes)\n" \
86 int prime_cache; /* Prime the disk read cache? */
|
| /mbedtls-3.5.0/programs/ssl/ |
| D | ssl_server.c | 92 mbedtls_ssl_cache_context cache; in main() local
100 mbedtls_ssl_cache_init(&cache); in main()
192 mbedtls_ssl_conf_session_cache(&conf, &cache, in main()
352 mbedtls_ssl_cache_free(&cache); in main()
|
| D | dtls_server.c | 106 mbedtls_ssl_cache_context cache; in main() local
115 mbedtls_ssl_cache_init(&cache); in main()
212 mbedtls_ssl_conf_session_cache(&conf, &cache, in main()
393 mbedtls_ssl_cache_free(&cache); in main()
|
| D | ssl_pthread_server.c | 306 mbedtls_ssl_cache_context cache; in main() local
314 mbedtls_ssl_cache_init(&cache); in main()
407 mbedtls_ssl_conf_session_cache(&conf, &cache, in main()
471 mbedtls_ssl_cache_free(&cache); in main()
|
| D | ssl_server2.c | 325 " cache_max=%%d default: cache default (50)\n" \
329 " cache_timeout=%%d default: cache default (1d)\n"
670 int cache_max; /* max number of session cache entries */
672 int cache_timeout; /* expiration delay of session cache entries*/
674 int cache_remove; /* enable / disable cache removement */
1518 mbedtls_ssl_cache_context cache; in main() local
1615 mbedtls_ssl_cache_init(&cache); in main()
2918 mbedtls_ssl_cache_set_max_entries(&cache, opt.cache_max); in main()
2923 mbedtls_ssl_cache_set_timeout(&cache, opt.cache_timeout); in main()
2927 mbedtls_ssl_conf_session_cache(&conf, &cache, in main()
[all …]
|
| /mbedtls-3.5.0/tests/ |
| D | Descriptions.txt | 21 covered by compat.sh: session resumption (using session cache or tickets),
|
| D | ssl-opt.sh | 26 # (session resumption from cache or ticket, renego, etc).
3686 -S "session successfully restored from cache" \
3701 -S "session successfully restored from cache" \
3707 run_test "Session resume using tickets: cache disabled" \
3716 -S "session successfully restored from cache" \
3731 -S "session successfully restored from cache" \
3746 -S "session successfully restored from cache" \
3770 -S "session successfully restored from cache" \
3784 -S "session successfully restored from cache" \
3799 -S "session successfully restored from cache" \
[all …]
|
| /mbedtls-3.5.0/tests/scripts/ |
| D | docker_env.sh | 76 --cache-from=${DOCKER_IMAGE_TAG} \
|
| /mbedtls-3.5.0/docs/ |
| D | 3.0-migration-guide.md | 897 ### Session Cache API Change
900 to configure a custom session cache implementation different
903 Those users will need to modify the API of their session cache
919 onwards, portable session cache implementations must not access fields of
921 find themselves unable to migrate their session cache functionality without
|
| /mbedtls-3.5.0/tests/src/test_helpers/ |
| D | ssl_helpers.c | 92 opts->cache = NULL; in mbedtls_test_init_handshake_options()
93 ASSERT_ALLOC(opts->cache, 1); in mbedtls_test_init_handshake_options()
94 mbedtls_ssl_cache_init(opts->cache); in mbedtls_test_init_handshake_options()
104 mbedtls_ssl_cache_free(opts->cache); in mbedtls_test_free_handshake_options()
105 mbedtls_free(opts->cache); in mbedtls_test_free_handshake_options()
814 if (endpoint_type == MBEDTLS_SSL_IS_SERVER && options->cache != NULL) { in mbedtls_test_ssl_endpoint_init()
815 mbedtls_ssl_conf_session_cache(&(ep->conf), options->cache, in mbedtls_test_ssl_endpoint_init()
|
| /mbedtls-3.5.0/ |
| D | SECURITY.md | 54 to. Typical attack vectors include cache timings, memory bus contention and
|
| D | .travis.yml | 6 cache: ccache
|
| D | CMakeLists.txt | 117 …CACHE STRING "Choose the type of build: None Debug Release Coverage ASan ASanDbg MemSan MemSanDbg …
|
| D | ChangeLog | 71 * Add new API mbedtls_ssl_cache_remove for cache entry removal by
98 * Zeroize SSL cache entries when they are freed.
325 Wenjian HE, Sharad Sinha, and Wei ZHANG. See "Cache Side-channel Attacks
945 * The getter and setter API of the SSL session cache (used for
1668 fixes a local Lucky 13 cache attack found and reported by Tuba Yavuz,
2671 plaintext of messages under some conditions by using a cache attack
2682 previous entry) by using a cache attack targeting the SSL input record
3347 against side-channel attacks like the cache attack described in
3968 * Add countermeasure against "Lucky 13 strikes back" cache-based attack,
4567 * Add countermeasure against "Lucky 13 strikes back" cache-based attack,
[all …]
|
| D | README.md | 176 CMake cache. This can be done with the following command using GNU find:
|
| /mbedtls-3.5.0/scripts/mbedtls_dev/ |
| D | psa_storage.py | 46 """Cache of known values of expressions."""
|
| /mbedtls-3.5.0/tests/include/test/ |
| D | psa_crypto_helpers.h | 73 /** Purge the in-memory cache of persistent keys recorded with
|
| D | ssl_helpers.h | 100 mbedtls_ssl_cache_context *cache; member
|
| /mbedtls-3.5.0/tests/suites/ |
| D | test_suite_ssl.function | 3050 srv_pattern.pattern = cli_pattern.pattern = "cache did not store session";
3095 /* Make sure that the cache did not store the session */
|
