TeamHepta/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-03-28 07:01:08 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #785 from gilles-peskine-arm/cipher-nist_kw-changelog

Browse Source 
NIST_KW in cipher: credit the reporter
This commit is contained in:
Gilles Peskine
2020-12-07 14:47:48 +01:00
committed by GitHub
parent 3aae5d4ed7 22a191199d
commit 450dbd6d2d
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
ChangeLog.d/cipher-auth-crypt-nist-kw.txt
View File

@@ -3,7 +3,8 @@ API changes
mbedtls_cipher_auth_decrypt() no longer accept NIST_KW contexts,
as they have no way to check if the output buffer is large enough.
Please use mbedtls_cipher_auth_encrypt_ext() and
mbedtls_cipher_auth_decrypt_ext() instead.
mbedtls_cipher_auth_decrypt_ext() instead. Credit to OSS-Fuzz and
Cryptofuzz. Fixes #3665.
Security
* The functions mbedtls_cipher_auth_encrypt() and