Merge pull request #785 from gilles-peskine-arm/cipher-nist_kw-changelog

NIST_KW in cipher: credit the reporter
This commit is contained in:
Gilles Peskine 2020-12-07 14:47:48 +01:00 committed by GitHub
commit 450dbd6d2d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -3,7 +3,8 @@ API changes
mbedtls_cipher_auth_decrypt() no longer accept NIST_KW contexts, mbedtls_cipher_auth_decrypt() no longer accept NIST_KW contexts,
as they have no way to check if the output buffer is large enough. as they have no way to check if the output buffer is large enough.
Please use mbedtls_cipher_auth_encrypt_ext() and Please use mbedtls_cipher_auth_encrypt_ext() and
mbedtls_cipher_auth_decrypt_ext() instead. mbedtls_cipher_auth_decrypt_ext() instead. Credit to OSS-Fuzz and
Cryptofuzz. Fixes #3665.
Security Security
* The functions mbedtls_cipher_auth_encrypt() and * The functions mbedtls_cipher_auth_encrypt() and