cuberite/polarssl
1
0
Fork 0
mirror of https://github.com/cuberite/polarssl.git synced 2025-11-04 04:32:24 -05:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #785 from gilles-peskine-arm/cipher-nist_kw-changelog

Browse Source 
NIST_KW in cipher: credit the reporter
This commit is contained in:
Gilles Peskine 2020-12-07 14:47:48 +01:00 committed by GitHub
commit 450dbd6d2d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ChangeLog.d/cipher-auth-crypt-nist-kw.txt
View File

@ -3,7 +3,8 @@ API changes
mbedtls_cipher_auth_decrypt() no longer accept NIST_KW contexts, mbedtls_cipher_auth_decrypt() no longer accept NIST_KW contexts,
as they have no way to check if the output buffer is large enough. as they have no way to check if the output buffer is large enough.
Please use mbedtls_cipher_auth_encrypt_ext() and Please use mbedtls_cipher_auth_encrypt_ext() and
mbedtls_cipher_auth_decrypt_ext() instead. mbedtls_cipher_auth_decrypt_ext() instead. Credit to OSS-Fuzz and
Cryptofuzz. Fixes #3665.
Security Security
* The functions mbedtls_cipher_auth_encrypt() and * The functions mbedtls_cipher_auth_encrypt() and