summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Move session ticket key to its own buffertmp-draft-ietf-tls-tls13-21-ajuaristi-2Ander Juaristi2018-01-023-90/+59
* PSK: Abort handshake if binder does not validate or is not presentAnder Juaristi2017-12-161-7/+8
* TLS 1.3 PSK: Do not use certificates for authentication if PSK is in useAnder Juaristi2017-12-161-12/+24
* Mark selected PSK with flag HSK_PSK_SELECTEDAnder Juaristi2017-12-163-8/+10
* secrets: Introduce _tls13_init_secret2()Ander Juaristi2017-12-163-12/+25
* Merge from upstreamAnder Juaristi2017-12-164-12/+8
* Properly clean buffersAnder Juaristi2017-12-132-1/+3
* TLS 1.3: Add support for pre-shared keysAnder Juaristi2017-12-137-1/+728
* PSK: Set default KDF function to PSKs.Ander Juaristi2017-12-132-0/+8
* TLS 1.3: Extract HKDF-Expand, Derive-Secret and finished functionsAnder Juaristi2017-12-134-48/+113
* psk: Save full ClientHello buffer + derive from PSKs if availableAnder Juaristi2017-12-135-6/+101
* certificate request: corrected parsing of signature algorithmsNikos Mavrogiannopoulos2017-12-131-0/+10
* tlsfuzzer: updated to latest masterNikos Mavrogiannopoulos2017-12-133-1/+1
* doc: documented hsk_flags "lifetime" and its resettmp-nmav-draft-ietf-tls-tls13-21-compact-stateNikos Mavrogiannopoulos2017-12-091-0/+2
* session state: TLS1.2 and TLS1.3 state is stored as unionNikos Mavrogiannopoulos2017-12-0910-119/+136
* session state: organized key exchange keys into structuresNikos Mavrogiannopoulos2017-12-0914-244/+257
* record state: avoid memory allocations for stored keysNikos Mavrogiannopoulos2017-12-094-123/+128
* handshake: ffdhe flags merged with handshake flagsNikos Mavrogiannopoulos2017-12-096-16/+12
* handshake: false start flag merged with hsk_flagsNikos Mavrogiannopoulos2017-12-093-6/+3
* handshake: use hsk_flags in TLS1.2 and TLS1.3Nikos Mavrogiannopoulos2017-12-098-19/+13
* doc: added text on TLS1.3 rekey and reauthenticationNikos Mavrogiannopoulos2017-12-051-6/+33
* updated auto-generated filesNikos Mavrogiannopoulos2017-12-043-0/+4
* tests: re-enabled post-handshake auth testsNikos Mavrogiannopoulos2017-12-042-14/+56
* handshake: added support for post-handshake authenticationNikos Mavrogiannopoulos2017-12-0414-51/+448
* gnutls_record_set_state: use const for seq_numbertmp-nmav-draft-ietf-tls-tls13-21-key-limitsNikos Mavrogiannopoulos2017-12-042-2/+2
* tests: added test suite on key limitsNikos Mavrogiannopoulos2017-12-042-0/+342
* gnutls_record_get_state: doc updateNikos Mavrogiannopoulos2017-12-041-2/+3
* Introduce key usage limits under TLS1.3Nikos Mavrogiannopoulos2017-12-044-1/+18
* updated auto-generated filestmp-draft-ietf-tls-tls13-21-nmav-backports7Nikos Mavrogiannopoulos2017-12-033-0/+4
* tests: removed unused variables and introduced temporal vars in macrosNikos Mavrogiannopoulos2017-12-038-42/+34
* tests: check gnutls_rehandshake() and gnutls_handshake() under TLS1.3Nikos Mavrogiannopoulos2017-12-033-4/+209
* gnutls_*handshake: wrap gnutls_session_key_update under TLS 1.3Nikos Mavrogiannopoulos2017-12-031-41/+68
* tests: added unit tests with TLS1.3 key updateNikos Mavrogiannopoulos2017-12-033-0/+250
* handshake: introduced gnutls_session_key_update()Nikos Mavrogiannopoulos2017-12-039-147/+229
* handshake: added TLS1.3 passive key updateNikos Mavrogiannopoulos2017-12-0310-57/+412
* .gitlab-ci.yml: move destructive tests after trust store testsNikos Mavrogiannopoulos2017-12-031-1/+2
* keylogfile: write TLS 1.3 secretstmp-draft-ietf-tls-tls13-21-dueno-sslkeylogfileDaiki Ueno2017-11-303-18/+71
* _gnutls_nss_keylog_write: define new internal APIDaiki Ueno2017-11-304-20/+42
* tls-fuzzer: enabled the large hello checksNikos Mavrogiannopoulos2017-11-293-3/+1
* hkdf: refer to nettle's hkdf.h when availableNikos Mavrogiannopoulos2017-11-291-0/+8
* doc updateNikos Mavrogiannopoulos2017-11-291-1/+1
* gnutls_prf_rfc5705: apply the context limits only under TLS1.2 or earlierNikos Mavrogiannopoulos2017-11-271-5/+5
* gnutls_prf_raw: fail under TLS1.3Nikos Mavrogiannopoulos2017-11-271-4/+9
* tests: included behavioral test of gnutls_prf under TLS1.3tmp-draft-ietf-tls-tls13-21-prf-backwards-compatNikos Mavrogiannopoulos2017-11-271-0/+30
* gnutls_prf: prevent usage under TLS1.3Nikos Mavrogiannopoulos2017-11-271-5/+12
* gnutls_prf_rfc5705: calculate exporter using HKDF if TLS 1.3Daiki Ueno2017-11-273-19/+387
* handshake-tls13: derive and store exporter_master_secretDaiki Ueno2017-11-273-2/+11
* _tls13_derive_secret: define secret argumentDaiki Ueno2017-11-275-25/+18
* tests: client-fastopen: introduce child signal handler and delay prior to sta...Nikos Mavrogiannopoulos2017-11-241-5/+8
* session state: use the right type for send_cert_req variabletmp-draft-ietf-tls-tls13-21-nmav-backports5Nikos Mavrogiannopoulos2017-11-191-1/+1