mirror of
https://github.com/yuzu-emu/mbedtls.git
synced 2024-12-24 00:55:36 +00:00
Fix documentation for 3DES removal
This commit is contained in:
parent
0a0e5b12a9
commit
b7c22ecc74
|
@ -565,7 +565,7 @@
|
|||
* to enable (some of) them with mbedtls_ssl_conf_ciphersuites() by including
|
||||
* them explicitly.
|
||||
*
|
||||
* A man-in-the browser attacker can recover authentication tokens sent through
|
||||
* A man-in-the-browser attacker can recover authentication tokens sent through
|
||||
* a TLS connection using a 3DES based cipher suite (see "On the Practical
|
||||
* (In-)Security of 64-bit Block Ciphers" by Karthikeyan Bhargavan and Gaëtan
|
||||
* Leurent, see https://sweet32.info/SWEET32_CCS16.pdf). If this attack falls
|
||||
|
|
|
@ -57,6 +57,7 @@ FILTER=""
|
|||
# - NULL: excluded from our default config
|
||||
# - RC4, single-DES: requires legacy OpenSSL/GnuTLS versions
|
||||
# avoid plain DES but keep 3DES-EDE-CBC (mbedTLS), DES-CBC3 (OpenSSL)
|
||||
# - 3DES: not in default config
|
||||
EXCLUDE='NULL\|DES-CBC-\|RC4\|3DES\|ARCFOUR'
|
||||
VERBOSE=""
|
||||
MEMCHECK=0
|
||||
|
|
Loading…
Reference in a new issue