eden-emu/mbedtls
15
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Document backward compatibility promises for the default TLS profile

Browse source 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
This commit is contained in:
Gilles Peskine 2021-06-17 23:17:05 +02:00
parent ec78bc47b5
commit a03fb29666
1 changed files with 13 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

13
include/mbedtls/ssl.h
View file

@ -2918,6 +2918,14 @@ void mbedtls_ssl_conf_dhm_min_bitlen( mbedtls_ssl_config *conf,
* ECDHE-only curves selected according to the same criteria. * ECDHE-only curves selected according to the same criteria.
* The order favors curves with the lowest resource usage. * The order favors curves with the lowest resource usage.
* *
* \note New minor versions of Mbed TLS may extend this list,
* for example if new curves are added to the library.
* New minor versions of Mbed TLS will not remove items
* from this list unless serious security concerns require it.
* New minor versions of Mbed TLS may change the order in
* keeping with the general principle of favoring the lowest
* resource usage.
*
* \param conf SSL configuration * \param conf SSL configuration
* \param curves Ordered list of allowed curves, * \param curves Ordered list of allowed curves,
* terminated by MBEDTLS_ECP_DP_NONE. * terminated by MBEDTLS_ECP_DP_NONE.
@ -2947,6 +2955,11 @@ void mbedtls_ssl_conf_curves( mbedtls_ssl_config *conf,
* The preference order is currently unspecified and may * The preference order is currently unspecified and may
* change in future versions. * change in future versions.
* *
* \note New minor versions of Mbed TLS may extend this list,
* for example if new curves are added to the library.
* New minor versions of Mbed TLS will not remove items
* from this list unless serious security concerns require it.
*
* \param conf SSL configuration * \param conf SSL configuration
* \param hashes Ordered list of allowed signature hashes, * \param hashes Ordered list of allowed signature hashes,
* terminated by \c MBEDTLS_MD_NONE. * terminated by \c MBEDTLS_MD_NONE.