Add NIST keywrap as a cipher mode

Closes #2003 see also #1658
2026-10-07 17:37:25 +00:00 · 2019-04-02 10:02:55 -07:00
parent 1dbc5a257f
commit ffdf28851d
6 changed files with 454 additions and 5 deletions
@@ -41,6 +41,8 @@ Features
   * Add MBEDTLS_REMOVE_3DES_CIPHERSUITES to allow removing 3DES ciphersuites
     from the default list (enabled by default). See
     https://sweet32.info/SWEET32_CCS16.pdf.
+   * It is now possible to use NIST key wrap mode via the mbedtls_cipher API.
+     Contributed by Jack Lloyd and Fortanix Inc.

 API Changes
   * Add a new X.509 API call `mbedtls_x509_parse_der_nocopy()`.