mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-04-24 06:02:44 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Wrap lines to 79 columns max

Browse Source 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
This commit is contained in:
Gilles Peskine 2022-11-29 23:06:21 +01:00
parent 5ba1697e8a
commit 723bee67b2
3 changed files with 11 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
ChangeLog.d/LMS.txt
View File

@ -3,9 +3,9 @@ Features
Signature verification is production-ready, but generation is for testing Signature verification is production-ready, but generation is for testing
purposes only. This currently only supports one parameter set purposes only. This currently only supports one parameter set
(LMS_SHA256_M32_H10), meaning that each private key can be used to sign (LMS_SHA256_M32_H10), meaning that each private key can be used to sign
1024 messages. As such, it is not intended for use in TLS, but instead for 1024 messages. As such, it is not intended for use in TLS, but instead
verification of assets transmitted over an insecure channel, particularly for verification of assets transmitted over an insecure channel,
firmware images. particularly firmware images.
* Add the LM-OTS post-quantum-safe one-time signature scheme, which is * Add the LM-OTS post-quantum-safe one-time signature scheme, which is
required for LMS. This can be used independently, but each key can only be required for LMS. This can be used independently, but each key can only
used to sign one message so is impractical for most circumstances. be used to sign one message so is impractical for most circumstances.

8
ChangeLog.d/fix-tls12server-sent-sigalgs.txt
View File

@ -1,5 +1,5 @@
Bugfix Bugfix
* Fix a bug whereby the the list of signature algorithms sent as part of the * Fix a bug whereby the the list of signature algorithms sent as part of
TLS 1.2 server certificate request would get corrupted, meaning the first the TLS 1.2 server certificate request would get corrupted, meaning the
algorithm would not get sent and an entry consisting of two random bytes first algorithm would not get sent and an entry consisting of two random
would be sent instead. Found by Serban Bejan and Dudek Sebastian. bytes would be sent instead. Found by Serban Bejan and Dudek Sebastian.

3
ChangeLog.d/fix_cmake_gen_files.txt
View File

@ -1,3 +1,4 @@
Bugfix Bugfix
* Fix an issue with CMake builds in releases with GEN_FILES turned off, * Fix an issue with CMake builds in releases with GEN_FILES turned off,
whereby missing generated files could be turned into symlinks to themselves. whereby missing generated files could be turned into symlinks to
themselves.