Commit Graph - ipxe - codex.r10x.net

sysadmin/ipxe

Fork 0

mirror of https://github.com/ipxe/ipxe synced 2026-10-07 15:05:42 +03:00

Commit Graph

Select branches

Hide Pull Requests

acstest

aeshw

alitest

aqc1xx

awstest

cc

efivars

enadma

gcetest

hackesp

initrd

libatomic

lineflush

master

mtureset

nosyslinux

peercache

sbsign

snpdup

synctest

tls13

tlsfmt

utf8

vbox

x25519

#1

#1

#10

#10

#100

#101

#1011

#102

#1024

#1024

#1028

#103

#1036

#104

#1047

#105

#1052

#106

#107

#107

#1073

#108

#1082

#109

#11

#11

#110

#1106

#111

#111

#1113

#1117

#112

#1128

#113

#1130

#1130

#1134

#1136

#114

#114

#1145

#1146

#1149

#115

#1152

#1158

#116

#1160

#1162

#1163

#1165

#1165

#1168

#117

#1171

#1174

#1177

#118

#1180

#1184

#119

#1193

#1193

#1194

#12

#12

#120

#1206

#121

#1223

#124

#1243

#1245

#1265

#1271

#1276

#128

#129

#1294

#1297

#1298

#13

#13

#1304

#1304

#1307

#1330

#134

#1341

#1351

#1354

#136

#137

#1386

#139

#14

#14

#140

#1403

#141

#141

#1411

#1413

#1417

#1417

#1418

#143

#1437

#1439

#1444

#1445

#1446

#1455

#1456

#1457

#1458

#146

#1464

#1471

#1473

#1476

#148

#1484

#1489

#1491

#1492

#15

#1500

#1501

#1502

#1505

#1507

#1508

#1509

#1511

#1521

#1535

#154

#1563

#1565

#1566

#1571

#1573

#1578

#158

#1581

#1582

#1584

#1587

#1588

#16

#1601

#1602

#1608

#1610

#1610

#1613

#1613

#1614

#1617

#1617

#1619

#1624

#1629

#1630

#1631

#1632

#1633

#1634

#1635

#1636

#1637

#1640

#1641

#1644

#1644

#1646

#1648

#1648

#1652

#1657

#1659

#1661

#1665

#1673

#1675

#1682

#1689

#1689

#1693

#1694

#1697

#1697

#1698

#1699

#17

#170

#1700

#1702

#1702

#1705

#171

#1712

#1712

#1713

#1718

#1718

#1722

#1725

#1727

#1735

#1739

#1740

#1743

#1745

#1752

#1753

#1755

#1758

#1762

#1763

#1764

#1765

#1766

#1767

#1768

#1769

#1770

#1772

#1773

#1774

#1775

#1777

#1778

#1779

#1780

#1781

#1782

#1783

#1784

#1785

#1786

#1787

#1788

#1789

#179

#1790

#1791

#1792

#1793

#1795

#1796

#1797

#1798

#1799

#18

#18

#1800

#1801

#1802

#1803

#1804

#1805

#1806

#1807

#1808

#1809

#181

#1810

#1811

#1812

#1813

#1815

#1815

#1817

#1818

#1819

#1819

#182

#1820

#1821

#1822

#1826

#1827

#1828

#1829

#1830

#1831

#1832

#1833

#1833

#1834

#1835

#1835

#1836

#1837

#1838

#1839

#1845

#1845

#1846

#1846

#1851

#1852

#1853

#186

#19

#19

#2

#20

#20

#204

#205

#21

#21

#211

#218

#22

#22

#224

#225

#226

#227

#228

#23

#23

#232

#232

#234

#24

#24

#242

#243

#244

#245

#25

#25

#252

#259

#26

#26

#265

#266

#267

#268

#27

#27

#279

#28

#28

#29

#29

#3

#30

#300

#300

#31

#31

#310

#311

#312

#313

#32

#328

#329

#33

#33

#331

#336

#34

#34

#343

#35

#35

#350

#350

#36

#36

#37

#37

#370

#373

#376

#378

#38

#38

#388

#39

#393

#393

#394

#397

#4

#40

#40

#406

#41

#41

#413

#415

#42

#43

#43

#44

#448

#45

#45

#455

#455

#46

#46

#463

#463

#467

#47

#47

#48

#49

#49

#5

#5

#50

#504

#504

#505

#51

#51

#516

#518

#52

#522

#53

#53

#530

#531

#534

#538

#539

#54

#54

#545

#546

#55

#55

#551

#555

#56

#57

#57

#571

#574

#575

#576

#58

#58

#580

#583

#583

#585

#586

#589

#59

#590

#591

#594

#594

#596

#596

#597

#598

#599

#6

#6

#60

#60

#61

#61

#612

#62

#62

#626

#63

#63

#631

#639

#639

#64

#647

#65

#65

#654

#66

#67

#67

#68

#68

#69

#69

#697

#698

#698

#7

#7

#70

#70

#71

#71

#72

#72

#723

#73

#73

#732

#74

#74

#75

#75

#755

#76

#77

#770

#78

#781

#785

#79

#794

#798

#8

#8

#80

#801

#81

#82

#820

#83

#838

#84

#844

#85

#852

#857

#858

#859

#86

#863

#87

#871

#872

#874

#875

#875

#878

#879

#88

#882

#888

#89

#892

#895

#897

#898

#899

#9

#9

#90

#905

#907

#91

#911

#914

#92

#924

#93

#930

#94

#94

#95

#96

#963

#964

#968

#969

#97

#970

#971

#976

#98

#98

#982

#986

#989

#99

#990

#992

#992

#993

secboot-ioactive-20200603

secboot-ioactive-20200925

secboot-ioactive-20221109

v0.9.3

v0.9.4

v0.9.5

v0.9.6

v0.9.7

v0.9.8

v0.9.9

v1.0.0

v1.0.0-rc1

v1.20.1

v1.21.1

v2.0.0

8865571f70 [http] Include a zero request content length when applicable master Michael Brown 2026-10-04 16:56:51 +01:00
d93bd307f2 [cloud] Tag imported AWS images with commit ID awstest Michael Brown 2026-10-01 16:36:49 +01:00
6262f1081f [build] Add FreeBSD syslinux mbr.bin search path David Yeske 2026-09-30 17:49:15 -04:00
0e98032adb [efi] Place debug directory within .rodata section Michael Brown 2026-09-29 14:49:10 +01:00
4b2d0cd3e7 HACK - install bypass SMMU descriptor (works) enadma Michael Brown 2026-09-29 12:20:30 +01:00
00587597f5 HACKS Michael Brown 2026-09-29 10:55:04 +01:00
a87b1c3f4f WIP - ENA update to use DMA API Michael Brown 2026-09-28 13:22:59 +01:00
629e28b56c [peerdist] Allow for retrieving blocks from a local filesystem cache peercache Michael Brown 2026-09-27 16:52:23 +01:00
744cdb451e [tls] Add support for TLS version 1.3 HelloRetryRequest tlsfmt Michael Brown 2026-09-22 16:17:41 +01:00
f35f5977c6 [tls] Refuse to change selected protocol version or cipher suite Michael Brown 2026-09-22 16:11:45 +01:00
b49d049249 [tls] Record verification length separately from cipher suite Michael Brown 2026-09-22 18:37:40 +01:00
23d6038c7a [tls] Generalise mechanism for duplicating a TLS cursor Michael Brown 2026-09-22 14:39:04 +01:00
d2a9fbe7b9 [tls] Always use zfree() rather than free() Michael Brown 2026-09-22 13:01:17 +01:00
4aabb077ef [crypto] Add support for the TLS "message_hash" synthetic record Michael Brown 2026-09-22 15:57:38 +01:00
21d972d741 [crypto] Check length before decrypting data Michael Brown 2026-09-22 12:03:31 +01:00
0367d09926 [test] Ensure that all TLS structure descriptor mappings are valid Michael Brown 2026-09-22 10:18:51 +01:00
2b6bd7660b [tls] Remove redundant null pointer check Michael Brown 2026-09-22 10:03:45 +01:00
1037cf358f [tls] Allow session to be saved multiple times Michael Brown 2026-09-21 23:02:04 +01:00
194306d457 [crypto] Ignore any data digested before TLS key schedule is started Michael Brown 2026-09-21 18:09:05 +01:00
ed4a9b2e67 [tls] Clear any saved state when saving a new session Michael Brown 2026-09-21 12:53:18 +01:00
b36e8472d4 [tls] Use standalone TLS data structure builder Michael Brown 2026-09-20 10:03:52 +01:00
2e549711c2 [tls] Use server certificate's own public key algorithm for verification Michael Brown 2026-09-20 20:18:50 +01:00
69c5cbea77 [tls] Use client certificate's own public key algorithm for signing Michael Brown 2026-09-20 15:11:50 +01:00
76f7b88f93 [crypto] Allow for signable MD5 or SHA-1 digests with TLS version 1.1 Michael Brown 2026-09-20 13:54:45 +01:00
cbdb57278d [crypto] Use certificate's own public key algorithm for key matching Michael Brown 2026-09-20 14:24:32 +01:00
cff60d28d6 [build] Allow for non-RSA private keys Michael Brown 2026-09-20 14:09:28 +01:00
b4d9949db1 [tls] Propagate sizing errors to containing data structures Michael Brown 2026-09-20 09:54:00 +01:00
65450656e5 [tls] Add a standalone TLS data structure builder Michael Brown 2026-09-19 11:53:36 +01:00
05fa853241 [tls] Allow for an empty list of extensions of interest Michael Brown 2026-09-18 21:55:17 +01:00
42826fa9d9 [build] Allow MD5+SHA1 algorithm to be discarded at link time Michael Brown 2026-09-18 17:05:11 +01:00
f095adbed2 [tls] Use SHA-1 for TLS version 1.1 ECDSA signatures Michael Brown 2026-09-18 16:19:02 +01:00
6deb51d66c [tls] Avoid dragging in MD5+SHA1 algorithm unconditionally Michael Brown 2026-09-18 16:04:14 +01:00
8402079a17 [tls] Use standalone TLS data structure parser Michael Brown 2026-09-18 14:18:58 +01:00
89cfb681a4 [tls] Add a standalone TLS data structure parser Michael Brown 2026-09-18 13:51:49 +01:00
1135b79660 [tls] Fix building with TLS_VERSION_MAX set to TLS version 1.1 Michael Brown 2026-09-18 14:49:45 +01:00
01081fd911 [libc] Set return type for byte-swapping macros regardless of endianness Michael Brown 2026-09-18 12:43:21 +01:00
7cd92e01d6 [tls] Handle TLS version 1.3 client Finished tls13 Michael Brown 2026-09-14 22:47:45 +01:00
267445294a [tls] Do not schedule sending of unused records in TLS version 1.3 Michael Brown 2026-09-14 22:37:42 +01:00
ba64f5d2fb [tls] Ignore TLS version 1.3 NewSessionTicket Michael Brown 2026-09-14 22:34:44 +01:00
78851666b3 [tls] Handle TLS version 1.3 server Finished Michael Brown 2026-09-14 22:29:41 +01:00
8087d6ac22 [tls] Transition to handshake traffic keys after receiving ServerHello Michael Brown 2026-09-14 22:26:03 +01:00
9077d45852 [tls] Allow for scheduled traffic phase changes Michael Brown 2026-09-14 22:12:00 +01:00
7655629db0 [tls] Allow for variable-length verification data Michael Brown 2026-09-14 19:00:13 +01:00
c2e9bd951a [tls] Add support for binding via a CertificateVerify record Michael Brown 2026-09-14 16:55:11 +01:00
14c23c5bb8 [tls] Add support for parsing TLS version 1.3 Certificate record Michael Brown 2026-09-14 15:49:47 +01:00
d646c92574 [tls] Handle inner plaintext for TLS version 1.3 Michael Brown 2026-09-14 15:31:31 +01:00
47b934676a [tls] Allow support for newer TLS versions to be optimised out Michael Brown 2026-09-14 14:28:32 +01:00
6872d143d6 [tls] Discard received Change Cipher records under TLS version 1.3 Michael Brown 2026-09-14 13:01:14 +01:00
4ac73a5cbb [tls] Exclude sequence number from authentication for TLS version 1.3 Michael Brown 2026-09-14 12:46:31 +01:00
35a1abdbf8 [tls] Allow for sequential cipher initialisation vectors Michael Brown 2026-09-14 12:33:57 +01:00
84af36a21b [tls] Limit to TLS version 1.2 in transmitted record headers Michael Brown 2026-09-14 12:29:12 +01:00
6f1646d7bd [tls] Remove the concept of a pending cipher specification Michael Brown 2026-09-14 00:03:51 +01:00
76e53bc23f [tls] Add support for the key share extension Michael Brown 2026-09-13 00:21:40 +01:00
aaccac9436 [tls] Add ClientHello to transcript before selecting named group Michael Brown 2026-09-13 13:17:56 +01:00
d703617cc4 [tls] Handle TLS version 1.3 session ID echoing Michael Brown 2026-09-13 13:45:00 +01:00
744d9e8b56 [tls] Use HKDF-based key schedule for TLS version 1.3 or later Michael Brown 2026-09-13 14:18:43 +01:00
30f0db898a [crypto] Refuse to allow zero-length ServerKeyExchange parameters Michael Brown 2026-09-13 14:59:50 +01:00
7a3b423f69 [crypto] Ensure TLS signable digests cover a shared secret Michael Brown 2026-09-13 15:35:42 +01:00
356bb14f33 [tls] Detect version downgrade attacks Michael Brown 2026-09-13 11:02:16 +01:00
f26cb52f16 [tls] Add support for the supported versions extension Michael Brown 2026-09-12 23:36:07 +01:00
79df48adae [tls] Add definitions for TLS version 1.3 cipher suites Michael Brown 2026-09-12 23:05:01 +01:00
dbdbaa871c [tls] Record named group rather than key exchange algorithm Michael Brown 2026-09-13 00:13:37 +01:00
ff6e52063e [crypto] Add AES acceleration using the Arm Cryptographic Extensions aeshw Michael Brown 2026-09-07 14:25:33 +01:00
0214e4391a [crypto] Add support for AES-NI hardware acceleration Michael Brown 2026-09-06 10:05:41 +01:00
7ada3e0f04 [crypto] Align AES round keys within the AES context Michael Brown 2026-09-05 17:01:40 +01:00
c4023b98e3 [crypto] Allow for AES hardware acceleration Michael Brown 2026-09-05 20:29:11 +01:00
d916dfcfae [librm] Enable the use of SSE instructions if supported by the CPU Michael Brown 2026-09-06 14:39:12 +01:00
f5828201ea [librm] Preserve CR0 across virt_call() Michael Brown 2026-09-06 14:30:52 +01:00
a69ad34217 [librm] Preserve CR4 across virt_call() if FXSR is supported Michael Brown 2026-09-06 14:06:32 +01:00
8f334fd55d [librm] Skip runtime check for FXSR support in 64-bit builds Michael Brown 2026-09-06 14:18:40 +01:00
af9604576d [librm] Remove conditionalisation of the Tivoli VMM workaround Michael Brown 2026-09-06 12:53:20 +01:00
aef505b823 [librm] Clarify layout of saved GDTR/IDTR Michael Brown 2026-09-06 13:49:57 +01:00
b57bc764a5 [librm] Always disable paging when switching to protected mode Michael Brown 2026-09-06 14:47:56 +01:00
787ed9397e [crypto] Treat high tag numbers as invalid Michael Brown 2026-09-04 22:42:40 +01:00
d89765d5f0 [test] Add Project Wycheproof RSA-PSS signature verification tests Michael Brown 2026-09-04 21:48:06 +01:00
20613766c9 [test] Add a build target for slow self-tests Michael Brown 2026-09-04 17:35:05 +01:00
6935ca31e0 [test] Add Project Wycheproof ECDSA signature verification tests Michael Brown 2026-09-04 16:55:41 +01:00
1901e32240 [crypto] Reject non-canonical ECDSA signature encodings Michael Brown 2026-09-04 16:41:05 +01:00
3a62e9ded4 [crypto] Reject indefinite and unrepresentable length encodings Michael Brown 2026-09-04 15:45:50 +01:00
de04e79ae5 [crypto] Reject ASN.1 unsigned integers holding negative values Michael Brown 2026-09-04 13:57:43 +01:00
511dfd2c4d [crypto] Reject non-canonical ECDSA signature data structures Michael Brown 2026-09-03 16:35:11 +01:00
0a1d5fae46 [test] Simplify class hierarchy for Project Wycheproof import tool Michael Brown 2026-09-03 13:50:23 +01:00
2d2dd525bd [test] Derive comment labels from Project Wycheproof input files Michael Brown 2026-09-03 13:15:44 +01:00
ffa20bcb7e [test] Derive algorithm names from Project Wycheproof input files Michael Brown 2026-09-03 12:17:42 +01:00
d6032f05e8 [test] Use a single shared class for Project Wycheproof test flags Michael Brown 2026-09-03 10:58:11 +01:00
b684d09fd9 [test] Add Project Wycheproof RSA PKCS#1 signature verification tests Michael Brown 2026-09-02 23:01:20 +01:00
d7226b9a99 [test] Add Project Wycheproof RSA PKCS#1 signature generation tests Michael Brown 2026-09-02 17:41:49 +01:00
7b46fa94a5 [test] Allow for invocation of individual Project Wycheproof tests Michael Brown 2026-09-02 23:00:42 +01:00
6e73f2aade [crypto] Reject non-canonical RSA inputs Michael Brown 2026-09-02 22:50:06 +01:00
c6bda17e58 [crypto] Add OID-identified algorithms for RSA with SHA512/224 and SHA512/256 Michael Brown 2026-09-02 22:44:38 +01:00
22727c6ce3 [test] Add Project Wycheproof RSA PKCS#1 decryption tests Michael Brown 2026-09-02 15:29:19 +01:00
2b1eaff499 [crypto] Add missing padding length check in RSA decryption Michael Brown 2026-09-02 15:27:57 +01:00
a2f979a300 [test] Allow for public-key algorithm tests with incomplete key pairs Michael Brown 2026-09-02 13:50:25 +01:00
ef58461294 [test] Allow for per-group definition code in Project Wycheproof tests Michael Brown 2026-09-02 15:00:11 +01:00
d9df5d9bdd [test] Add schema and count validators in Project Wycheproof tests Michael Brown 2026-09-02 14:58:16 +01:00
35bd9a8fd3 [test] Add Project Wycheproof AES-GCM tests Michael Brown 2026-09-01 12:55:43 +01:00
e49e1db1c2 [crypto] Reject zero-length IVs for GCM ciphers Michael Brown 2026-09-01 12:57:16 +01:00
474abc95d9 [test] Add ability to test for cipher key and IV failures Michael Brown 2026-09-01 12:56:33 +01:00
5fe9965198 [test] Add Project Wycheproof HKDF tests Michael Brown 2026-08-31 20:44:58 +01:00
6981f2372f [test] Allow for HKDF tests without an expected PRK Michael Brown 2026-08-31 20:38:33 +01:00

1 2 3 4 5 ...