Add ChangeLog entry for modular exponentiation size limit

Signed-off-by: Chris Jones <[email protected]>
This commit is contained in:
Chris Jones
2020-12-03 16:59:21 +00:00
parent 8c650f985d
commit 303e2f47d4
@@ -0,0 +1,4 @@
Security
* Limit the size of calculations performed by mbedtls_mpi_exp_mod to
MBEDTLS_MPI_MAX_SIZE to prevent a potential denial of service when
generating Diffie-Hellman key pairs. Credit to OSS-Fuzz.