* Parse DHM parameters */

* Generate public key: simple wrapper around mbedtls_ecp_gen_keypair */

* Get parameters from a keypair */

* Setup and export the client public value */

* Parse and import the client's public value */

* Set context from an mbedtls_ecp_keypair */

* Compute ECDSA signature of a hashed message (SEC1 4.1.3) * Obviously, compared to SEC1 4.1.3, we skip step 4 (hash message) */

* Compute and write signature */

* Check that an mbedtls_mpi is valid as a private key */

* Get the curve info from the TLS identifier */

* List of supported curves, group ID only */

* Initialize (the components of) a key pair */

* R = m * P with shortcuts for m == 1 and m == -1 * NOT constant-time - ONLY for short Weierstrass! */

* Set point to zero */

* Set a group from an ECParameters record (RFC 4492) */

* Write the ECParameters record corresponding to a group (RFC 4492) */

* HMAC_DRBG initialisation (10.1.2.3 + 9.1) */

* output = MD2( input buffer ) */

* output = MD4( input buffer ) */

* output = MD5( input buffer ) */

* Prime number generation */

* Resize down as much as possible, * while keeping at least the specified number of limbs */

* PadLock detection routine */

* Access the PK type name */

* Initialise a mbedtls_pk_context */

* output = RIPEMD-160( input buffer ) */

* Initialize an RSA context */

* Do an RSA operation, then remove the message padding */

* Add the message padding, then do an RSA operation */

* Do an RSA operation to sign the message digest */

* Do an RSA operation and check the message digest */

* Implementation of the PKCS#1 v2.1 RSASSA-PSS-VERIFY function */

constant-time buffer comparison */

* Check if a curve proposed by the peer is in our list. * Return 0 if we're willing to use it, -1 otherwise. */

* Free mbedtls_ssl_config */

* Return 0 if sequence number is acceptable, -1 otherwise */

* Update replay window on new validated record */

* Free an SSL context */

* Receive application data decrypted from the SSL layer */

Allow exactly one hash algorithm for each signature. */

* Write application data (public-facing wrapper) */

No certificate support -> dummy functions */

* Set delays to watch */

* Parse one CRLs in DER format and append it to the chained list */

* Verify the certificate validity, with profile */

* Parse a CSR in DER format */

* X.509 Extensions (No parsing of extensions, pointer should * be either manually updated or extensions should be parsed!) */

* CertificateSerialNumber ::= INTEGER */

* Helper for writing "RSA key size", "EC key size", etc */

* Store the serial in printable form into buf; no more * than size characters will be written */

The first byte of the value in the mbedtls_asn1_named_data structure is reserved * to store the critical boolean for us */

* Extension ::= SEQUENCE { * extnID OBJECT IDENTIFIER, * critical BOOLEAN DEFAULT FALSE, * extnValue OCTET STRING *

Implementation that should never be optimized out by the compiler */

Implementation that should never be optimized out by the compiler */

Implementation that should never be optimized out by the compiler */

Implementation that should never be optimized out by the compiler */

Implementation that should never be optimized out by the compiler */

Implementation that should never be optimized out by the compiler */

* Montgomery reduction: A = A * R^-1 mod N */

* Prepare for using the sockets interface */