espressif/mbedtls
1
0
Fork 0
mirror of https://github.com/espressif/mbedtls.git synced 2026-08-08 12:37:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add Changelog entry for FFDH missing peerkey check

Browse Source 
Signed-off-by: Manuel Pégourié-Gonnard <[email protected]>
This commit is contained in:
Manuel Pégourié-Gonnard
2026-03-05 13:07:23 +01:00
parent f22ed632b4
commit 35aec41600
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog.d/ffdh-peerkey-check.txt
+6
View File
@@ -0,0 +1,6 @@
Security
* Fix missing validation of the peer's key in key agreement operations using
PSA_ALG_FFDH: low-order elements were not rejected as they should be. This
is a problem for protocols using FFDH that expect contributory behaviour,
that is, where neither party should be able to force the shared secret
into a small set. Found and reported by Kai Tian.