Correction to comments and changelog removed
Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
This commit is contained in:
parent
458280e67c
commit
299510e889
@ -1,3 +0,0 @@
|
||||
Removals
|
||||
* Remove all instances of MBEDTLS_SSL_MINOR_VERSION_1 and
|
||||
MBEDTLS_SSL_MINOR_VERSION_2 and related dead code and tests. Fixes #4564.
|
@ -661,18 +661,13 @@ typedef struct mbedtls_ssl_hs_buffer mbedtls_ssl_hs_buffer;
|
||||
* - For stream/CBC, (static) encryption/decryption keys for the digest.
|
||||
* - For AEAD transformations, the size (potentially 0) of an explicit,
|
||||
* random initialization vector placed in encrypted records.
|
||||
* - For some transformations (currently AEAD) an implicit IV. It may be static
|
||||
* (e.g. AEAD) or dynamic (e.g. CBC) and (if present) is combined with the
|
||||
* explicit IV in a transformation-dependent way (e.g. appending in TLS 1.2
|
||||
* and XOR'ing in TLS 1.3).
|
||||
* - For some transformations (currently AEAD) an implicit IV. It is static
|
||||
* and (if present) is combined with the explicit IV in a transformation-
|
||||
* -dependent way (e.g. appending in TLS 1.2 and XOR'ing in TLS 1.3).
|
||||
* - For stream/CBC, a flag determining the order of encryption and MAC.
|
||||
* - The details of the transformation depend on the SSL/TLS version.
|
||||
* - The length of the authentication tag.
|
||||
*
|
||||
* Note: These parameters are constant across multiple encryption/decryption
|
||||
* operations. For CBC, the implicit IV needs to be updated after each
|
||||
* operation.
|
||||
*
|
||||
* The struct below refines this abstract view as follows:
|
||||
* - The cipher underlying the transformation is managed in
|
||||
* cipher contexts cipher_ctx_{enc/dec}, which must have the
|
||||
|
@ -3464,7 +3464,9 @@ void ssl_decrypt_non_etm_cbc( int cipher_type, int hash_id, int trunc_hmac,
|
||||
* Test record decryption for CBC without EtM, focused on the verification
|
||||
* of padding and MAC.
|
||||
*
|
||||
* Actually depends on TLS 1.2 and AES.
|
||||
* Actually depends on TLS 1.2 and either AES, ARIA or Camellia, but since
|
||||
* the test framework doesn't support alternation in dependency statements,
|
||||
* just depend on AES.
|
||||
*
|
||||
* The length_selector argument is interpreted as follows:
|
||||
* - if it's -1, the plaintext length is 0 and minimal padding is applied
|
||||
|
Loading…
Reference in New Issue
Block a user