yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2025-05-31 20:10:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix wording of ChangeLog and 3DES_REMOVE docs

Browse source
This commit is contained in:
Andres Amaya Garcia 2018-11-26 20:57:49 +00:00
parent 21ade06ef8
commit f9b2ed062f
2 changed files with 12 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
ChangeLog
View file

@ -10,6 +10,11 @@ Bugfix
* Reduce stack usage of `mpi_write_hlp()` by eliminating recursion. * Reduce stack usage of `mpi_write_hlp()` by eliminating recursion.
Fixes #2190. Fixes #2190.
Features
* Add MBEDTLS_REMOVE_3DES_CIPHERSUITES to allow removing 3DES ciphersuites
from the default list (enabled by default). See
https://sweet32.info/SWEET32_CCS16.pdf.
Changes Changes
* Include configuration file in all header files that use configuration, * Include configuration file in all header files that use configuration,
instead of relying on other header files that they include. instead of relying on other header files that they include.
@ -23,10 +28,6 @@ Changes
by Aurelien Jarno and submitted by Jeffrey Martin. by Aurelien Jarno and submitted by Jeffrey Martin.
* Ciphersuites based on 3DES now have the lowest priority by default. * Ciphersuites based on 3DES now have the lowest priority by default.
Features
* Add MBEDTLS_REMOVE_3DES_CIPHERSUITES to allow removing 3DES ciphersuites
from the default list (inactive by default).
= mbed TLS 2.7.9 branch released 2018-12-21 = mbed TLS 2.7.9 branch released 2018-12-21
Bugfix Bugfix

7
include/mbedtls/config.h
View file

@ -565,6 +565,13 @@
* to enable (some of) them with mbedtls_ssl_conf_ciphersuites() by including * to enable (some of) them with mbedtls_ssl_conf_ciphersuites() by including
* them explicitly. * them explicitly.
* *
* A man-in-the browser attacker can recover authentication tokens sent through
* a TLS connection using a 3DES based cipher suite (see "On the Practical
* (In-)Security of 64-bit Block Ciphers" by Karthikeyan Bhargavan and Gaëtan
* Leurent, see https://sweet32.info/SWEET32_CCS16.pdf). If this attack falls
* in your threat model or you are unsure, then you should keep this option
* enabled to remove 3DES based cipher suites.
*
* Comment this macro to keep 3DES in the default ciphersuite list. * Comment this macro to keep 3DES in the default ciphersuite list.
*/ */
#define MBEDTLS_REMOVE_3DES_CIPHERSUITES #define MBEDTLS_REMOVE_3DES_CIPHERSUITES