eden-emu/mbedtls
15
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Modifies ChangeLog and Migration Guide

Browse source 
Entries in ChangeLog and Migration guide files
have been merged to cover both the removal of
MBEDTLS_SSL_TRUNCATED_HMAC and
MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT.

Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>
This commit is contained in:
Thomas Daubney 2021-06-18 10:46:12 +01:00
parent a42bf29b2c
commit 379227cc59
4 changed files with 9 additions and 34 deletions
Download patch file Download diff file Expand all files Collapse all files

10
docs/3.0-migration-guide.d/remove-truncated-HMAC-extension.md
View file

@ -1,10 +0,0 @@
Remove the truncated HMAC extension
-----------------------------------
This affects all users who use the truncated HMAC extension for cryptographic
operations.
The config option `MBEDTLS_SSL_TRUNCATED_HMAC` has been removed. Users concerned
about overhead are better served by using any of the CCM-8 ciphersuites rather
than a CBC ciphersuite with truncated HMAC, and so going forward this must be
the approach taken.

16
docs/3.0-migration-guide.md
View file

@ -137,17 +137,13 @@ and relied on that version in order to communicate with peers that are not up
to date. If one of your peers is in that case, please try contacting them and
encouraging them to upgrade their software.
Remove support for compatibility with old Mbed TLS's truncated HMAC
-------------------------------------------------------------------
Remove support for truncated HMAC
---------------------------------
This doesn't affect people using the default configuration as it was already
disabled by default.
This only affects TLS users who enabled `MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT` and
used the Truncated HMAC extension to communicate with peers using old version
of Mbed TLS. Please consider using a CCM-8 ciphersuite instead of the
Truncated HMAC extension, or convincing your peer to upgrade their version of
Mbed TLS.
This only affects TLS users who enabled `MBEDTLS_SSL_TRUNCATED_HMAC`
`MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT` and used the truncated HMAC extension.
Please consider using a CCM-8 ciphersuite instead of the Truncated HMAC
extension, or convincing your peer to upgrade their version of Mbed TLS.
Remove support for TLS record-level compression
-----------------------------------------------