AuroraMiddleware/mbedtls
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Merge pull request #785 from gilles-peskine-arm/cipher-nist_kw-changelog

Browse Source 
NIST_KW in cipher: credit the reporter
This commit is contained in:
Gilles Peskine 2020-12-07 14:47:48 +01:00 committed by GitHub
commit 450dbd6d2d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ChangeLog.d/cipher-auth-crypt-nist-kw.txt
View File

@ -3,7 +3,8 @@ API changes
mbedtls_cipher_auth_decrypt() no longer accept NIST_KW contexts,
as they have no way to check if the output buffer is large enough.
Please use mbedtls_cipher_auth_encrypt_ext() and
mbedtls_cipher_auth_decrypt_ext() instead.
mbedtls_cipher_auth_decrypt_ext() instead. Credit to OSS-Fuzz and
Cryptofuzz. Fixes #3665.
Security
* The functions mbedtls_cipher_auth_encrypt() and