mirror of
https://github.com/espressif/mbedtls.git
synced 2026-06-05 21:14:47 +00:00
ccea2fd244
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
9 lines
455 B
Plaintext
9 lines
455 B
Plaintext
Security
|
|
* The documentation of mbedtls_ssl_session_save(),
|
|
mbedtls_ssl_session_load(), mbedtls_ssl_context_save(), and
|
|
mbedtls_ssl_context_load() has been updated to clarify the responsibility
|
|
of the application to preserve the confidentiality and integrity of
|
|
serialized data, mitigating the risk of misuse of these APIs.
|
|
Credit to Haruto Kimura (Stella) for highlighting risks associated with
|
|
tampered serialized data.
|