mbedtls/ChangeLog.d/fix-ssl-cf-hmac-alt.txt at 6a55de90577feea1cbe98928df7175417de27a02 - yuzu/mbedtls - Forgejo

yuzu/mbedtls

mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-10-19 04:41:37 +00:00

Manuel Pégourié-Gonnard 21bfbdd703 Fix misuse of MD API in SSL constant-flow HMAC

The sequence of calls starts-update-starts-update-finish is not a
guaranteed valid way to abort an operation and start a new one. Our
software implementation just happens to support it, but alt
implementations may very well not support it.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>

2021-05-19 10:40:02 +02:00

6 lines

306 B

Plaintext

Raw Blame History

 Bugfix
    * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
      (when the encrypt-then-MAC extension is not in use) with some ALT
      implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
      the affected side to wrongly reject valid messages. Fixes #4118.