Document that curve lists can include partially-supported curves

Document that a curve returned by mbedtls_ecp_curve_list() or
mbedtls_ecp_grp_id_list() may lack support for ECDH or ECDSA.

Add a corresponding changelog entry, under "API Changes" because we
have changed the behavior: formerly, these functions skipped ECDH-only
curves, although this was not documented.
This commit is contained in:
Gilles Peskine 2019-02-11 18:43:55 +01:00 committed by Janos Follath
parent c6c7c49fd6
commit 7e65c05bb0

View file

@ -286,6 +286,11 @@ API Changes
that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default that it is now optional with the MBEDTLS_CHECK_PARAMS flag which by default
is off. That means that checks which were previously present by default is off. That means that checks which were previously present by default
will no longer be. will no longer be.
* The functions mbedtls_ecp_curve_list() and mbedtls_ecp_grp_id_list() now
list all curves for which at least one of ECDH or ECDSA is supported, not
just curves for which both are supported. Call mbedtls_ecdsa_can_do() or
mbedtls_ecdh_can_do() on each result to check whether each algorithm is
supported.
New deprecations New deprecations
* Deprecate mbedtls_ctr_drbg_update and mbedtls_hmac_drbg_update * Deprecate mbedtls_ctr_drbg_update and mbedtls_hmac_drbg_update