mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-03-27 14:37:20 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix indentation

Browse Source 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
This commit is contained in:
Dave Rodgman 2021-07-05 18:09:16 +01:00
parent 16d802ed25
commit 5b13f60aa3
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
ChangeLog
View File

@ -302,15 +302,15 @@ Features
PSA Cryptograpy API 1.0.0 specification. PSA Cryptograpy API 1.0.0 specification.
Security Security
* Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM) * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
private keys and of blinding values for DHM and elliptic curves (ECP) private keys and of blinding values for DHM and elliptic curves (ECP)
computations. Reported by FlorianF89 in #4245. computations. Reported by FlorianF89 in #4245.
* Fix a potential side channel vulnerability in ECDSA ephemeral key generation. * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
An adversary who is capable of very precise timing measurements could An adversary who is capable of very precise timing measurements could
learn partial information about the leading bits of the nonce used for the learn partial information about the leading bits of the nonce used for the
signature, allowing the recovery of the private key after observing a signature, allowing the recovery of the private key after observing a
large number of signature operations. This completes a partial fix in large number of signature operations. This completes a partial fix in
Mbed TLS 2.20.0. Mbed TLS 2.20.0.
* An adversary with access to precise enough information about memory * An adversary with access to precise enough information about memory
accesses (typically, an untrusted operating system attacking a secure accesses (typically, an untrusted operating system attacking a secure
enclave) could recover an RSA private key after observing the victim enclave) could recover an RSA private key after observing the victim