eden-emu/mbedtls
15
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add ChangeLog entry for modular exponentiation size limit

Browse source 
Signed-off-by: Chris Jones <christopher.jones@arm.com>
This commit is contained in:
Chris Jones 2020-11-30 11:16:48 +00:00
parent 8c650f985d
commit 303e2f47d4
1 changed files with 4 additions and 0 deletions

4
ChangeLog.d/limit_size_of_diffie_hellman_calculations.txt Normal file
View file

@ -0,0 +1,4 @@
Security
* Limit the size of calculations performed by mbedtls_mpi_exp_mod to
MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when
generating Diffie-Hellman key pairs. Credit to OSS-Fuzz.