Mbed-TLS/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-09-16 15:19:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'development-restricted' into mbedtls-2.22.0r0

Browse Source 
Signed-off-by: Janos Follath <[email protected]>
This commit is contained in:
Janos Follath
2020-04-08 15:11:40 +01:00
parent 4500e83fe4 ea6af48b7e
commit dca973bbeb
2 changed files with 33 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog
+5
View File
@@ -13,6 +13,11 @@ Security
legitimate clients, resulting in a Denial of Service. This could only
happen when MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE was enabled in config.h
(which it is by default).
* Fix side channel in ECC code that allowed an adversary with access to
precise enough timing and memory access information (typically an
untrusted operating system attacking a secure enclave) to fully recover
an ECDSA private key. Found and reported by Alejandro Cabrera Aldaya,
Billy Brumley and Cesar Pereida Garcia. CVE-2020-10932
Bugfix
* Fix compilation failure when both MBEDTLS_SSL_PROTO_DTLS and