/mbedtls-latest/library/ |
D | ssl_cache.c | 24 void mbedtls_ssl_cache_init(mbedtls_ssl_cache_context *cache) in mbedtls_ssl_cache_init() argument 26 memset(cache, 0, sizeof(mbedtls_ssl_cache_context)); in mbedtls_ssl_cache_init() 28 cache->timeout = MBEDTLS_SSL_CACHE_DEFAULT_TIMEOUT; in mbedtls_ssl_cache_init() 29 cache->max_entries = MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES; in mbedtls_ssl_cache_init() 32 mbedtls_mutex_init(&cache->mutex); in mbedtls_ssl_cache_init() 37 static int ssl_cache_find_entry(mbedtls_ssl_cache_context *cache, in ssl_cache_find_entry() argument 48 for (cur = cache->chain; cur != NULL; cur = cur->next) { in ssl_cache_find_entry() 50 if (cache->timeout != 0 && in ssl_cache_find_entry() 51 (int) (t - cur->timestamp) > cache->timeout) { in ssl_cache_find_entry() 80 mbedtls_ssl_cache_context *cache = (mbedtls_ssl_cache_context *) data; in mbedtls_ssl_cache_get() local [all …]
|
/mbedtls-latest/include/mbedtls/ |
D | ssl_cache.h | 81 void mbedtls_ssl_cache_init(mbedtls_ssl_cache_context *cache); 150 void mbedtls_ssl_cache_set_timeout(mbedtls_ssl_cache_context *cache, int timeout); 161 static inline int mbedtls_ssl_cache_get_timeout(mbedtls_ssl_cache_context *cache) in mbedtls_ssl_cache_get_timeout() argument 163 return cache->MBEDTLS_PRIVATE(timeout); in mbedtls_ssl_cache_get_timeout() 174 void mbedtls_ssl_cache_set_max_entries(mbedtls_ssl_cache_context *cache, int max); 181 void mbedtls_ssl_cache_free(mbedtls_ssl_cache_context *cache);
|
/mbedtls-latest/docs/architecture/ |
D | psa-keystore-design.md | 106 …for a persistent key that can be purged (see [“Persistent key cache”](#persistent-key-cache)), and… 133 …ed keys: that key slice is thus the cache slice. See [“Persistent key cache”](persistent-key-cache… 144 * for a persistent key identifier or built-in key identifier, [the slot is in the sole cache slice]… 185 ### Persistent key cache 194 To avoid frequent storage access, we cache persistent keys in memory. This cache also applies to bu… 196 …tatic-key-store), a non-empty slot can contain either a volatile key or a cache entry for a persis… 198 …cache is a fixed-size array of `MBEDTLS_PSA_KEY_SLOT_COUNT` slots. In the static key store, this a… 202 …cache to see if a key with the given identifier is already loaded. If not, it loads the key. This … 206 A key slot must be allocated in the cache slice: 212 If the cache slice is full, the code will try to evict an entry. Only slots that do not have reader…
|
/mbedtls-latest/programs/ssl/ |
D | ssl_server.c | 80 mbedtls_ssl_cache_context cache; in main() local 88 mbedtls_ssl_cache_init(&cache); in main() 190 mbedtls_ssl_conf_session_cache(&conf, &cache, in main() 349 mbedtls_ssl_cache_free(&cache); in main()
|
D | dtls_server.c | 94 mbedtls_ssl_cache_context cache; in main() local 103 mbedtls_ssl_cache_init(&cache); in main() 210 mbedtls_ssl_conf_session_cache(&conf, &cache, in main() 390 mbedtls_ssl_cache_free(&cache); in main()
|
D | ssl_pthread_server.c | 294 mbedtls_ssl_cache_context cache; in main() local 302 mbedtls_ssl_cache_init(&cache); in main() 405 mbedtls_ssl_conf_session_cache(&conf, &cache, in main() 469 mbedtls_ssl_cache_free(&cache); in main()
|
D | ssl_server2.c | 1560 mbedtls_ssl_cache_context cache; in main() local 1651 mbedtls_ssl_cache_init(&cache); in main() 2948 mbedtls_ssl_cache_set_max_entries(&cache, opt.cache_max); in main() 2953 mbedtls_ssl_cache_set_timeout(&cache, opt.cache_timeout); in main() 2957 mbedtls_ssl_conf_session_cache(&conf, &cache, in main() 4186 mbedtls_ssl_cache_remove(&cache, ssl.session->id, ssl.session->id_len); in main() 4216 mbedtls_ssl_cache_free(&cache); in main()
|
/mbedtls-latest/tests/scripts/ |
D | docker_env.sh | 64 --cache-from=${DOCKER_IMAGE_TAG} \
|
/mbedtls-latest/tests/src/test_helpers/ |
D | ssl_helpers.c | 72 TEST_CALLOC(opts->cache, 1); in mbedtls_test_init_handshake_options() 73 mbedtls_ssl_cache_init(opts->cache); in mbedtls_test_init_handshake_options() 75 TEST_EQUAL(mbedtls_ssl_cache_get_timeout(opts->cache), in mbedtls_test_init_handshake_options() 87 mbedtls_ssl_cache_free(opts->cache); in mbedtls_test_free_handshake_options() 88 mbedtls_free(opts->cache); in mbedtls_test_free_handshake_options() 848 if (endpoint_type == MBEDTLS_SSL_IS_SERVER && options->cache != NULL) { in mbedtls_test_ssl_endpoint_init() 849 mbedtls_ssl_conf_session_cache(&(ep->conf), options->cache, in mbedtls_test_ssl_endpoint_init()
|
/mbedtls-latest/tests/ |
D | Descriptions.txt | 21 covered by compat.sh: session resumption (using session cache or tickets),
|
/mbedtls-latest/ |
D | .gitignore | 72 /.cache/clangd/index/
|
D | SECURITY.md | 54 to. Typical attack vectors include cache timings, memory bus contention and
|
D | README.md | 180 CMake cache. This can be done with the following command using GNU find:
|
D | ChangeLog | 746 some cases involving a missing entry or a full cache. 847 * Add new API mbedtls_ssl_cache_remove for cache entry removal by 874 * Zeroize SSL cache entries when they are freed. 1721 * The getter and setter API of the SSL session cache (used for 2444 fixes a local Lucky 13 cache attack found and reported by Tuba Yavuz, 3447 plaintext of messages under some conditions by using a cache attack 3458 previous entry) by using a cache attack targeting the SSL input record 4123 against side-channel attacks like the cache attack described in 4744 * Add countermeasure against "Lucky 13 strikes back" cache-based attack, 5343 * Add countermeasure against "Lucky 13 strikes back" cache-based attack, [all …]
|
/mbedtls-latest/tests/include/test/ |
D | ssl_helpers.h | 123 mbedtls_ssl_cache_context *cache; member
|
/mbedtls-latest/docs/ |
D | 3.0-migration-guide.md | 900 to configure a custom session cache implementation different 903 Those users will need to modify the API of their session cache 919 onwards, portable session cache implementations must not access fields of 921 find themselves unable to migrate their session cache functionality without
|
/mbedtls-latest/3rdparty/p256-m/p256-m/ |
D | README.md | 105 such as the cache or branch predictor with arbitrary precision.
|
/mbedtls-latest/tests/suites/ |
D | test_suite_ssl.function | 3111 srv_pattern.pattern = cli_pattern.pattern = "cache did not store session"; 3156 /* Make sure that the cache did not store the session */
|
/mbedtls-latest/docs/proposed/ |
D | psa-driver-interface.md | 1241 …d an operation on the key. The core may keep information about the key in cache, and successive ca…
|