Gilles Peskine

Results 196 issues of Gilles Peskine

In [`ssl-opt.sh`](https://github.com/Mbed-TLS/mbedtls/blob/mbedtls-3.6.0/tests/ssl-opt.sh#L1215) (3.6, 4.x), we set up `psk_list` with unintended values: the argument to `psk_list=` should be a comma-separated list of byte strings in hexadecimal, so `Client_identity` is wrong (I...

enhancement
component-tls
size-s

enhancement
needs-review
needs-reviewer
priority-medium
size-xs

Working with Git submodules can be awkward: they aren't always supported separately. We should share scripts to facilitate that.

enhancement

This is a collection of updates to `mbedtls-prepare-build` to add more presets and support some changes in mbedtls from the last couple of years. Has changes needed for 3.4, for...

enhancement
needs-review
needs-reviewer
size-m
priority-medium

Update the [porting guide](https://mbed-tls.readthedocs.io/en/latest/kb/how-to/how-do-i-port-mbed-tls-to-a-new-environment-OS/) for modern versions of Mbed TLS. In particular, discuss PSA: [storage](https://github.com/Mbed-TLS/mbedtls/issues/7403), drivers...

enhancement
size-s

The test programs `ssl_client2` and `ssl_server2` have an option `reproducible=…` which allows running them in a reproducible mode, where successive runs with the same options (and using the same or...

enhancement
good first issue
size-s

We're currently serving several PSA crypto-related specifications at https://armmbed.github.io/mbed-crypto/psa/index.html, from https://github.com/ARMmbed/mbed-crypto/tree/master . There is now an official PSA specification site at https://arm-software.github.io/psa-api/crypto/ . Going forward, we should refer people to...

size-m

Archive the evolution of generated files over a range of revisions.

enhancement
needs-review
needs-reviewer
priority-low

Backport of https://github.com/Mbed-TLS/mbedtls/pull/9172 and its framework companion https://github.com/Mbed-TLS/mbedtls-framework/pull/28. I followed the same commit structure for the common content, but several things are different in 2.28. * Minor fixes from the...

needs-review
size-s
component-test
priority-high

Definition of done: * We can run `make test` on a PSA client-only build in the `full` configuration minus threads, with a PSA crypto server connected through psasim, and everything...

enhancement
size-m
component-test