cuberite/polarssl
1
0
Fork 0
mirror of https://github.com/cuberite/polarssl.git synced 2025-09-14 09:36:39 -04:00
Code Issues Packages Projects Releases Wiki Activity

Clarify documentation of ECP_RESTARTABLE

Browse Source 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
This commit is contained in:
Manuel Pégourié-Gonnard 2022-12-09 09:53:55 +01:00
parent 3dc7f238e6
commit b884f7e3dc
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
include/mbedtls/config.h
View File

@ -862,7 +862,8 @@
* This option: * This option:
* - Adds xxx_restartable() variants of existing operations in the * - Adds xxx_restartable() variants of existing operations in the
* following modules, with corresponding restart context types: * following modules, with corresponding restart context types:
* - ECP: scalar multiplication (mult), linear combination (muladd); * - ECP (for Short Weierstrass curves only): scalar multiplication (mul),
* linear combination (muladd);
* - ECDSA: signature generation & verification; * - ECDSA: signature generation & verification;
* - PK: signature generation & verification; * - PK: signature generation & verification;
* - X509: certificate chain verification. * - X509: certificate chain verification.
@ -870,11 +871,12 @@
* - Changes the behaviour of TLS 1.2 clients (not servers) when using the * - Changes the behaviour of TLS 1.2 clients (not servers) when using the
* ECDHE-ECDSA key exchange (not other key exchanges) to make all ECC * ECDHE-ECDSA key exchange (not other key exchanges) to make all ECC
* computations restartable: * computations restartable:
* - ECDH operations from the key exchange; * - ECDH operations from the key exchange, only for Short Weierstass
* curves;
* - verification of the server's key exchange signature; * - verification of the server's key exchange signature;
* - verification of the server's certificate chain; * - verification of the server's certificate chain;
* - generation of our signature if client authentication is used, with an * - generation of the client's signature if client authentication is used,
* ECC key/certificate. * with an ECC key/certificate.
* *
* \note In the cases above, the usual SSL/TLS functions, such as * \note In the cases above, the usual SSL/TLS functions, such as
* mbedtls_ssl_handshake(), can now return * mbedtls_ssl_handshake(), can now return