From 06d80cf1720bebcaec8833a6941fc9bce40500a6 Mon Sep 17 00:00:00 2001 From: Simon Butcher Date: Tue, 6 Nov 2018 23:46:04 +0000 Subject: [PATCH] Fix merge of Changelog 128bit CTR_DRBG entry The entry describing support for 128-bit keys in CTR_DRBG was merged into the wrong version. --- ChangeLog | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index 7aa8775a2..fee12dc63 100644 --- a/ChangeLog +++ b/ChangeLog @@ -48,6 +48,8 @@ Features may be up to two bytes shorter. This allows the library to support all hash and signature sizes that comply with FIPS 186-4, including SHA-512 with a 1024-bit key. + * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter + than 256 bits limits the security of generated material to 128 bits. API Changes * Add a common error code of `MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED` for @@ -252,8 +254,6 @@ Features independently contributed again by Paul Sokolovsky. * Add support for key wrapping modes based on AES as defined by NIST SP 800-38F algorithms KW and KWP and by RFC 3394 and RFC 5649. - * Add support for 128-bit keys in CTR_DRBG. Note that using keys shorter - than 256 bits limits the security of generated material to 128 bits. Bugfix * Fix the key_app_writer example which was writing a leading zero byte which