libmbedtls/mbedtls/SECURITY.md

9 Our security process is detailed in our
13 Its primary goal is to ensure fixes are ready to be deployed when the issue
35 protection is limited to providing security guarantees offered by the protocol
52 The attacker is able to observe the timing of instructions executed by Mbed TLS
59 the measurements and the noise present. Therefore the protection in Mbed TLS is
63 As attacks keep improving, so does Mbed TLS's protection. Mbed TLS is moving
78 picking up information on the physical state of the hardware while Mbed TLS is
80 platform that is located unfortunately enough to pick up the CPU noise.
98 about the hardware Mbed TLS is running on and/or can alter the physical state
115 model. Neither does it mean that the failure of such a countermeasure is
129 - Turn on hardware acceleration for AES. This is supported only on selected
145 The Everest variant is only used when `MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED`
146 configuration option is defined. This option is off by default.
152 relevant standards. In the case of signed certificates, the signing party is
153 assumed to have performed this validation (and the certificate is trusted to
154 be correctly formatted as long as the signature is correct).
158 validation is performed separately to ensure that they are compliant to the
164 certificate causes undefined behavior when it is parsed by Mbed TLS, that
165 is considered a security vulnerability.