* EC public key is an EC point * * The caller is responsible for clearing the structure upon failure if * desired. Take care to pass along the p

Get a PK algorithm identifier * * AlgorithmIdentifier ::= SEQUENCE { * algorithm OBJECT IDENTIFIER, * parameters

* Helper for mbedtls_pk_sign and mbedtls_pk_verify */

* ECParameters ::= CHOICE { * namedCurve OBJECT IDENTIFIER * } */

* EC public key is an EC point */

=========================================================================== * Restore the heap property by moving down the tree starting at node k,

Construct a PKCS v1.5 encoding of a hashed message * * This is used both for signature generation and verification. * * Parameters: * - md_a

=========================================================================== * Scan a literal or distance tree to determine the frequencies of the co

=========================================================================== * Send a literal or distance tree in compressed form, using the codes in

Append a new keycert entry to a (possibly empty) list */

* Check record counters and renegotiate if they're above the limit. */

* Return -1 is timer is expired, 0 if it isn't. */

* Check if a given ciphersuite is suitable for use with our config/keys/etc * Sets ciphersuite_info only if the suite matches. */

* Generate the HMAC part of a cookie */

* Free the current flight of handshake messages */

* Reset an initialized and used SSL context for re-use while retaining * all application-set variables, function pointers and data. * * If parti

* Actually renegotiate current connection, triggered by either: * - any side: calling mbedtls_ssl_renegotiate(), * - client: receiving a HelloRequ

* Swap transform_out and out_ctr with the alternative ones */

* Rotate/generate keys if necessary */

* Generate a pre-master secret and encrypt it with the server's RSA key */

* Write HelloRequest to request renegotiation on server */

check if a utf8 string contains a prefix which is the utf16 string; if so return length of matching utf8 string

Update the window with the last wsize (normally 32K) bytes written before returning. If window does not exist yet, create it. This is only calle

USE UTF-8 encoding

* Return 0 if before <= after, 1 otherwise */

* Return 0 if name matches wildcard, -1 otherwise */

* Check that the given certificate is not revoked according to the CRL. * Skip validation is no CRL for the given CA is present. */

* X.509 v2/v3 unique identifier (not parsed) */

* Compare two X.509 Names (aka rdnSequence). * * See RFC 5280 section 7.1, though we don't implement the whole algorithm: * we sometimes return

=========================================================================== * Send one empty static block to give enough lookahead for inflate. *

=========================================================================== * Initialize the tree data structures for a new zlib stream. */

* Key expansion, 128-bit case */

* Key expansion, 192-bit case */

* Key expansion, 256-bit case */

=========================================================================== * Construct the Huffman tree for the bit lengths and return the index in