mbedtls/ChangeLog.d/tls13-reorder-ciphersuite-preference-list.txt
Ronald Cron 675d97d42e Add change log
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2023-02-20 11:42:19 +01:00

12 lines
562 B
Plaintext

Default behavior changes
* The default priority order of TLS 1.3 cipher suites has been modified to
follow the same rules as the TLS 1.2 cipher suites (see
ssl_ciphersuites.c).
Bugfix
* In the TLS 1.3 server, select the prefered client cipher suite, not the
least prefered. The selection error was introduced in Mbed TLS 3.3.0.
* Fix TLS 1.3 session resumption when the established pre-shared key is
384 bits long. That is the length of pre-shared keys created under a
session where the cipher suite is TLS_AES_256_GCM_SHA384.