ChangeLog - OpenGrok cross reference for /optee_os/lib/libmbedtls/mbedtls/ChangeLog

469      gaps made by making its fields private: mbedtls_ecp_set_public_key(),
500    * Add new accessor to expose the private group id member of
514    * Add new accessors to expose the private session-id,
622    * Use heap memory to allocate DER encoded public/private key.
623      This reduces stack usage significantly for writing a public/private
654    * Fix a timing side channel in private key RSA operations. This side channel
746      public and private keys in RFC 8410 format using the existing PK APIs.
949    * Use heap memory to allocate DER encoded RSA private key.
1238    * Add support for opaque keys as the private keys associated to certificates
1243      (LMS_SHA256_M32_H10), meaning that each private key can be used to sign
1291      a secure enclave) could recover an RSA private key after observing the
1292      victim performing a single private-key operation if the window size used
1308    * Use double quotes to include private header file psa_crypto_cipher.h.
1445    * Add function mbedtls_timing_get_final_delay() to access the private
1496      Opaque keys can now be used everywhere a private key is expected in the
1809       mbedtls_ssl_config.respect_cli_pref as private. This was an
1835      most of the interface of this module is private and may change at any
1919      decryption functions now always use the private key and verification and
1992      "Most structure fields are now private".
2031      provides a more flexible private key management.
2066    * The RSA module no longer supports private-key operations with the public
2144      private keys and of blinding values for DHM and elliptic curves (ECP)
2149      signature, allowing the recovery of the private key after observing a
2154      a secure enclave) could recover an RSA private key after observing the
2155      victim performing a single private-key operation. Found and reported by
2160      observing the victim performing the corresponding private-key operation.
2188    * Fix an incorrect error code when parsing a PKCS#8 private key.
2374      value the function might fail to write a private RSA keys of the largest
2387    * Fix an incorrect error code if an RSA private operation glitched.
2602    * The new function mbedtls_ecp_write_key() exports private ECC keys back to
2640    * Fix side channel in RSA private key operations and static (finite-field)
2644      potentially fully recover the private key.
2730      reveal an RSA private key used in a secure enclave. Noticed by Sangho Lee,
2736      private key that didn't include the uncompressed public key), as well as
2740      attacking a secure enclave) could fully recover the ECC private key.
2840      an ECDSA private key. Found and reported by Alejandro Cabrera Aldaya,
2884    * To avoid a side channel vulnerability when parsing an RSA private key,
2912      RSA keys that would later be rejected by functions expecting private
2949      recover the private key. Reported by Jeremy Dubeuf.
3029    * When writing a private EC key, use a constant size for the private
3037      countermeasure and leaked information about the private key through side
3187    * Fix private key DER output in the key_app_writer example. File contents
3260      latter case, this could expose at most 5 bits of the private key.
3730    * In TLS servers, support offloading private key operations to an external
3917    * Verify results of RSA private key operations to defend
3928      algorithms family when encrypting private keys using PKCS#5 v2.0.
3967    * Fix a 1-byte heap buffer overflow (read-only) during private key parsing.
4011    * Set PEM buffer to zero before freeing it, to avoid decoded private keys
4014      leaking 1 bit of the private key. Reported by prashantkspatil.
4019    * Wipe stack buffer temporarily holding EC private exponent
4059      needs of the implementation automatically. This allows to setup private RSA
4105      accepted. Generating these signatures required the private key.
4129    * Add a check for invalid private parameters in mbedtls_ecdsa_sign().
4312    * Wipe stack buffers in RSA private key operations
4315    * Add exponent blinding to RSA private operations as a countermeasure
4874 Semi-API changes (technically public, morally private)
4984    * Fix bug in pk_parse_key() that caused some valid private EC keys to be
5046    * Add function pk_check_pair() to test if public and private keys match.
5087    * Blind RSA private operations even when POLARSSL_RSA_NO_CRT is defined.
5584    * Blind RSA private operations even when POLARSSL_RSA_NO_CRT is defined.
5711    * Parsing of PKCS#8 encrypted private key files
5720      PKCS#8 private key formats
5879    * Generalized external private key implementation handling (like PKCS#11)
5892    * Handle encryption with private key and decryption with public key as per
5964    * Handle encryption with private key and decryption with public key as per
6019      encryption and private key for decryption. (Closes ticket #34)
6133    * Parsing PEM private keys encrypted with DES and AES