yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-22 18:05:40 +01:00
Code Issues Packages Projects Releases Wiki Activity

Note incompatibility of truncated HMAC extension in ChangeLog

Browse Source 
The change in the truncated HMAC extension aligns Mbed TLS with the
standard, but breaks interoperability with previous versions. Indicate
this in the ChangeLog, as well as how to restore the old behavior.
This commit is contained in:
Gilles Peskine 2018-02-22 15:22:44 +01:00
parent 5dcae51cd9
commit 04f9bd028f
1 changed files with 14 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
ChangeLog
View File

@ -2,19 +2,21 @@ mbed TLS ChangeLog (Sorted per branch, date)
= mbed TLS x.x.x branch released xxxx-xx-xx = mbed TLS x.x.x branch released xxxx-xx-xx
Default behavior changes
* The truncated HMAC extension now conforms to RFC 6066. This means
that when both sides of a TLS connection negotiate the truncated
HMAC extension, Mbed TLS can now interoperate with other
compliant implementations, but this breaks interoperability with
prior versions of Mbed TLS. To restore the old behavior, enable
the (deprecated) option MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT in
config.h. Found by Andreas Walz (ivESK, Offenburg University of
Applied Sciences).
Security Security
* Fix heap corruption in implementation of truncated HMAC extension. * Fix implementation of the truncated HMAC extension. The previous
When the truncated HMAC extension is enabled and CBC is used, implementation allowed an offline 2^80 brute force attack on the
sending a malicious application packet can be used to selectively HMAC key of a single, uninterrupted connection (with no
corrupt 6 bytes on the peer's heap, potentially leading to crash or resumption of the session).
remote code execution. This can be triggered remotely from either
side in both TLS and DTLS.
* Fix implementation of truncated HMAC extension leading to
compatibility problems with non Mbed TLS peers and allowing
an offline 2^80 brute force attack on the HMAC key of a single,
uninterrupted (excluding session resumption) connection.
Found by Andreas Walz (ivESK, Offenburg University of Applied
Sciences).
Features Features
* Allow comments in test data files. * Allow comments in test data files.