yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-22 11:15:43 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update Changelog for the profiles branch

Browse Source
This commit is contained in:
Manuel Pégourié-Gonnard 2015-06-17 14:26:49 +02:00
parent b31c5f68b1
commit 88d37859b6
1 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
ChangeLog
View File

@ -9,8 +9,12 @@ Features
ability to override the whole module. ability to override the whole module.
* New server-side implementation of session tickets that rotate keys to * New server-side implementation of session tickets that rotate keys to
preserve forward secrecy, and allows sharing across multiple contexts. preserve forward secrecy, and allows sharing across multiple contexts.
* Reduced ROM fooprint of SHA-256 and added an option to reduce it even * Added a concept of X.509 cerificate verification profile that controls
more (at the expense of performance) MBEDTLS_SHA256_SMALLER. which algorithms and key sizes (curves for ECDSA) are acceptable.
* Expanded configurability of security parameters in the SSL module with
mbedtls_ssl_conf_dhm_min_bitlen() and mbedtls_ssl_conf_sig_hashes().
* Introduced a concept of presets for SSL security-relevant configuration
parameters.
API Changes API Changes
* All public identifiers moved to the mbedtls_* or MBEDTLS_* namespace. * All public identifiers moved to the mbedtls_* or MBEDTLS_* namespace.
@ -129,6 +133,8 @@ Default behavior changes
enabled in the default configuration, this is only noticeable if using a enabled in the default configuration, this is only noticeable if using a
custom config.h custom config.h
* Default DHM parameters server-side upgraded from 1024 to 2048 bits. * Default DHM parameters server-side upgraded from 1024 to 2048 bits.
* A minimum RSA key size of 2048 bits is now enforced during ceritificate
chain verification.
* Negotiation of truncated HMAC is now disabled by default on server too. * Negotiation of truncated HMAC is now disabled by default on server too.
* The following functions are now case-sensitive: * The following functions are now case-sensitive:
mbedtls_cipher_info_from_string() mbedtls_cipher_info_from_string()
@ -157,6 +163,8 @@ API changes from the 1.4 preview branch
Changes Changes
* mbedtls_ctr_drbg_random() and mbedtls_hmac_drbg_random() are now * mbedtls_ctr_drbg_random() and mbedtls_hmac_drbg_random() are now
thread-safe if MBEDTLS_THREADING_C is enabled. thread-safe if MBEDTLS_THREADING_C is enabled.
* Reduced ROM fooprint of SHA-256 and added an option to reduce it even
more (at the expense of performance) MBEDTLS_SHA256_SMALLER.
= mbed TLS 1.3 branch = mbed TLS 1.3 branch