Fix order of sections in ChangeLog

This commit is contained in:
Manuel Pégourié-Gonnard 2018-03-06 10:34:56 +01:00
parent 89e7422a27
commit f1985570a9

View File

@ -2,6 +2,16 @@ mbed TLS ChangeLog (Sorted per branch, date)
= mbed TLS 2.1.11 branch released xxxx-xx-xx = mbed TLS 2.1.11 branch released xxxx-xx-xx
Default behavior changes
* The truncated HMAC extension now conforms to RFC 6066. This means
that when both sides of a TLS connection negotiate the truncated
HMAC extension, Mbed TLS can now interoperate with other
compliant implementations, but this breaks interoperability with
prior versions of Mbed TLS. To restore the old behavior, enable
the (deprecated) option MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT in
config.h. Found by Andreas Walz (ivESK, Offenburg University of
Applied Sciences).
Security Security
* Fix implementation of the truncated HMAC extension. The previous * Fix implementation of the truncated HMAC extension. The previous
implementation allowed an offline 2^80 brute force attack on the implementation allowed an offline 2^80 brute force attack on the
@ -25,16 +35,6 @@ Bugfix
daniel in the Mbed TLS forum. #1351 daniel in the Mbed TLS forum. #1351
* Fix Windows x64 builds with the included mbedTLS.sln file. #1347 * Fix Windows x64 builds with the included mbedTLS.sln file. #1347
Default behavior changes
* The truncated HMAC extension now conforms to RFC 6066. This means
that when both sides of a TLS connection negotiate the truncated
HMAC extension, Mbed TLS can now interoperate with other
compliant implementations, but this breaks interoperability with
prior versions of Mbed TLS. To restore the old behavior, enable
the (deprecated) option MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT in
config.h. Found by Andreas Walz (ivESK, Offenburg University of
Applied Sciences).
= mbed TLS 2.1.10 branch released 2018-02-03 = mbed TLS 2.1.10 branch released 2018-02-03
Security Security