Merge pull request #785 from gilles-peskine-arm/cipher-nist_kw-changelog

NIST_KW in cipher: credit the reporter
This commit is contained in:
Gilles Peskine 2020-12-07 14:47:48 +01:00 committed by GitHub
commit 450dbd6d2d
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -3,7 +3,8 @@ API changes
mbedtls_cipher_auth_decrypt() no longer accept NIST_KW contexts,
as they have no way to check if the output buffer is large enough.
Please use mbedtls_cipher_auth_encrypt_ext() and
mbedtls_cipher_auth_decrypt_ext() instead.
mbedtls_cipher_auth_decrypt_ext() instead. Credit to OSS-Fuzz and
Cryptofuzz. Fixes #3665.
Security
* The functions mbedtls_cipher_auth_encrypt() and