From 50afb4378f1282eaf3d62a579016787add81e2ec Mon Sep 17 00:00:00 2001 From: Thomas Daubney Date: Thu, 17 Jun 2021 09:23:41 +0100 Subject: [PATCH] Adds Migration guide Commit adds a migraiton guide entry that was missing. Signed-off-by: Thomas Daubney --- .../remove-truncated-HMAC-extension.md | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 docs/3.0-migration-guide.d/remove-truncated-HMAC-extension.md diff --git a/docs/3.0-migration-guide.d/remove-truncated-HMAC-extension.md b/docs/3.0-migration-guide.d/remove-truncated-HMAC-extension.md new file mode 100644 index 0000000000..12f7c2385e --- /dev/null +++ b/docs/3.0-migration-guide.d/remove-truncated-HMAC-extension.md @@ -0,0 +1,10 @@ +Remove the truncated HMAC extension +----------------------------------- + +This affects all users who use the truncated HMAC extension for cryptographic +operations. + +The config option `MBEDTLS_SSL_TRUNCATED_HMAC` has been removed. Users concerned +about overhead are better served by using any of the CCM-8 ciphersuites rather +than a CBC ciphersuite with truncated HMAC, and so going forward this must be +the approach taken.