mbedtls/fix-ssl-cf-hmac-alt.txt at ea840dea61fcb89b0dcd85c14d37213badcf13c4 - mbedtls - Gitea: Git with a cup of boomerjuice

yuzu-emu/mbedtls

mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-23 19:15:41 +01:00

Manuel Pégourié-Gonnard 21bfbdd703 Fix misuse of MD API in SSL constant-flow HMAC

The sequence of calls starts-update-starts-update-finish is not a
guaranteed valid way to abort an operation and start a new one. Our
software implementation just happens to support it, but alt
implementations may very well not support it.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>

2021-05-19 10:40:02 +02:00

6 lines

306 B

Plaintext

Raw Blame History

 Bugfix
    * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
      (when the encrypt-then-MAC extension is not in use) with some ALT
      implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
      the affected side to wrongly reject valid messages. Fixes #4118.