Update Changelog for 3.2.0 release
Signed-off-by: Paul Elliott <paul.elliott@arm.com>
This commit is contained in:
Paul Elliott
parent
2089fd0ea9
commit
2238eed2d9
84 changed files with 271 additions and 349 deletions
272
ChangeLog
272
ChangeLog
|
|
@ -1,4 +1,274 @@
|
|||
mbed TLS ChangeLog (Sorted per branch, date)
|
||||
Mbed TLS ChangeLog (Sorted per branch, date)
|
||||
|
||||
= Mbed TLS 3.2.0 branch released 2022-07-11
|
||||
|
||||
Default behavior changes
|
||||
* mbedtls_cipher_set_iv will now fail with ChaCha20 and ChaCha20+Poly1305
|
||||
for IV lengths other than 12. The library was silently overwriting this
|
||||
length with 12, but did not inform the caller about it. Fixes #4301.
|
||||
|
||||
Requirement changes
|
||||
* The library will no longer compile out of the box on a platform without
|
||||
setbuf(). If your platform does not have setbuf(), you can configure an
|
||||
alternative function by enabling MBEDTLS_PLATFORM_SETBUF_ALT or
|
||||
MBEDTLS_PLATFORM_SETBUF_MACRO.
|
||||
|
||||
New deprecations
|
||||
* Deprecate mbedtls_ssl_conf_max_version() and
|
||||
mbedtls_ssl_conf_min_version() in favor of
|
||||
mbedtls_ssl_conf_max_tls_version() and
|
||||
mbedtls_ssl_conf_min_tls_version().
|
||||
* Deprecate mbedtls_cipher_setup_psa(). Use psa_aead_xxx() or
|
||||
psa_cipher_xxx() directly instead.
|
||||
* Secure element drivers enabled by MBEDTLS_PSA_CRYPTO_SE_C are deprecated.
|
||||
This was intended as an experimental feature, but had not been explicitly
|
||||
documented as such. Use opaque drivers with the interface enabled by
|
||||
MBEDTLS_PSA_CRYPTO_DRIVERS instead.
|
||||
* Deprecate mbedtls_ssl_conf_sig_hashes() in favor of the more generic
|
||||
mbedtls_ssl_conf_sig_algs(). Signature algorithms for the TLS 1.2 and
|
||||
TLS 1.3 handshake should now be configured with
|
||||
mbedtls_ssl_conf_sig_algs().
|
||||
|
||||
Features
|
||||
* Add accessor to obtain ciphersuite id from ssl context.
|
||||
* Add accessors to get members from ciphersuite info.
|
||||
* Add mbedtls_ssl_ticket_rotate() for external ticket rotation.
|
||||
* Add accessor to get the raw buffer pointer from a PEM context.
|
||||
* The structures mbedtls_ssl_config and mbedtls_ssl_context now store
|
||||
a piece of user data which is reserved for the application. The user
|
||||
data can be either a pointer or an integer.
|
||||
* Add an accessor function to get the configuration associated with
|
||||
an SSL context.
|
||||
* Add a function to access the protocol version from an SSL context in a
|
||||
form that's easy to compare. Fixes #5407.
|
||||
* Add function mbedtls_md_info_from_ctx() to recall the message digest
|
||||
information that was used to set up a message digest context.
|
||||
* Add ALPN support in TLS 1.3 clients.
|
||||
* Add server certificate selection callback near end of Client Hello.
|
||||
Register callback with mbedtls_ssl_conf_cert_cb().
|
||||
* Provide mechanism to reset handshake cert list by calling
|
||||
mbedtls_ssl_set_hs_own_cert() with NULL value for own_cert param.
|
||||
* Add accessor mbedtls_ssl_get_hs_sni() to retrieve SNI from within
|
||||
cert callback (mbedtls_ssl_conf_cert_cb()) during handshake.
|
||||
* The X.509 module now uses PSA hash acceleration if present.
|
||||
* Add support for psa crypto key derivation for elliptic curve
|
||||
keys. Fixes #3260.
|
||||
* Add function mbedtls_timing_get_final_delay() to access the private
|
||||
final delay field in an mbedtls_timing_delay_context, as requested in
|
||||
#5183.
|
||||
* Add mbedtls_pk_sign_ext() which allows generating RSA-PSS signatures when
|
||||
PSA Crypto is enabled.
|
||||
* Add function mbedtls_ecp_export() to export ECP key pair parameters.
|
||||
Fixes #4838.
|
||||
* Add function mbedtls_ssl_is_handshake_over() to enable querying if the SSL
|
||||
Handshake has completed or not, and thus whether to continue calling
|
||||
mbedtls_ssl_handshake_step(), requested in #4383.
|
||||
* Add the function mbedtls_ssl_get_own_cid() to access our own connection id
|
||||
within mbedtls_ssl_context, as requested in #5184.
|
||||
* Introduce mbedtls_ssl_hs_cb_t typedef for use with
|
||||
mbedtls_ssl_conf_cert_cb() and perhaps future callbacks
|
||||
during TLS handshake.
|
||||
* Add functions mbedtls_ssl_conf_max_tls_version() and
|
||||
mbedtls_ssl_conf_min_tls_version() that use a single value to specify
|
||||
the protocol version.
|
||||
* Extend the existing PSA_ALG_TLS12_PSK_TO_MS() algorithm to support
|
||||
mixed-PSK. Add an optional input PSA_KEY_DERIVATION_INPUT_OTHER_SECRET
|
||||
holding the other secret.
|
||||
* When MBEDTLS_PSA_CRYPTO_CONFIG is enabled, you may list the PSA crypto
|
||||
feature requirements in the file named by the new macro
|
||||
MBEDTLS_PSA_CRYPTO_CONFIG_FILE instead of the default psa/crypto_config.h.
|
||||
Furthermore you may name an additional file to include after the main
|
||||
file with the macro MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE.
|
||||
* Add the function mbedtls_x509_crt_has_ext_type() to access the ext types
|
||||
field within mbedtls_x509_crt context, as requested in #5585.
|
||||
* Add HKDF-Expand and HKDF-Extract as separate algorithms in the PSA API.
|
||||
* Add support for the ARMv8 SHA-2 acceleration instructions when building
|
||||
for Aarch64.
|
||||
* Add support for authentication of TLS 1.3 clients by TLS 1.3 servers.
|
||||
* Add support for server HelloRetryRequest message. The TLS 1.3 client is
|
||||
now capable of negotiating another shared secret if the one sent in its
|
||||
first ClientHello was not suitable to the server.
|
||||
* Add support for client-side TLS version negotiation. If both TLS 1.2 and
|
||||
TLS 1.3 protocols are enabled in the build of Mbed TLS, the TLS client now
|
||||
negotiates TLS 1.3 or TLS 1.2 with TLS servers.
|
||||
* Enable building of Mbed TLS with TLS 1.3 protocol support but without TLS
|
||||
1.2 protocol support.
|
||||
* Mbed TLS provides an implementation of a TLS 1.3 server (ephemeral key
|
||||
establishment only). See docs/architecture/tls13-support.md for a
|
||||
description of the support. The MBEDTLS_SSL_PROTO_TLS1_3 and
|
||||
MBEDTLS_SSL_SRV_C configuration options control this.
|
||||
* Add accessors to configure DN hints for certificate request:
|
||||
mbedtls_ssl_conf_dn_hints() and mbedtls_ssl_set_hs_dn_hints()
|
||||
* The configuration option MBEDTLS_USE_PSA_CRYPTO, which previously
|
||||
affected only a limited subset of crypto operations in TLS, X.509 and PK,
|
||||
now causes most of them to be done using PSA Crypto; see
|
||||
docs/use-psa-crypto.md for the list of exceptions.
|
||||
* The function mbedtls_pk_setup_opaque() now supports RSA key pairs as well.
|
||||
Opaque keys can now be used everywhere a private key is expected in the
|
||||
TLS and X.509 modules.
|
||||
* Opaque pre-shared keys for TLS, provisioned with
|
||||
mbedtls_ssl_conf_psk_opaque() or mbedtls_ssl_set_hs_psk_opaque(), which
|
||||
previously only worked for "pure" PSK key exchange, now can also be used
|
||||
for the "mixed" PSK key exchanges as well: ECDHE-PSK, DHE-PSK, RSA-PSK.
|
||||
* cmake now detects if it is being built as a sub-project, and in that case
|
||||
disables the target export/installation and package configuration.
|
||||
* Make USE_PSA_CRYPTO compatible with KEY_ID_ENCODES_OWNER. Fixes #5259.
|
||||
* Add example programs cipher_aead_demo.c, md_hmac_demo.c, aead_demo.c
|
||||
and hmac_demo.c, which use PSA and the md/cipher interfaces side
|
||||
by side in order to illustrate how the operation is performed in PSA.
|
||||
Addresses #5208.
|
||||
|
||||
Security
|
||||
* Zeroize dynamically-allocated buffers used by the PSA Crypto key storage
|
||||
module before freeing them. These buffers contain secret key material, and
|
||||
could thus potentially leak the key through freed heap.
|
||||
* Fix potential memory leak inside mbedtls_ssl_cache_set() with
|
||||
an invalid session id length.
|
||||
* Add the platform function mbedtls_setbuf() to allow buffering to be
|
||||
disabled on stdio files, to stop secrets loaded from said files being
|
||||
potentially left in memory after file operations. Reported by
|
||||
Glenn Strauss.
|
||||
* Fix a potential heap buffer overread in TLS 1.2 server-side when
|
||||
MBEDTLS_USE_PSA_CRYPTO is enabled, an opaque key (created with
|
||||
mbedtls_pk_setup_opaque()) is provisioned, and a static ECDH ciphersuite
|
||||
is selected. This may result in an application crash or potentially an
|
||||
information leak.
|
||||
* Fix a buffer overread in DTLS ClientHello parsing in servers with
|
||||
MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled. An unauthenticated client
|
||||
or a man-in-the-middle could cause a DTLS server to read up to 255 bytes
|
||||
after the end of the SSL input buffer. The buffer overread only happens
|
||||
when MBEDTLS_SSL_IN_CONTENT_LEN is less than a threshold that depends on
|
||||
the exact configuration: 258 bytes if using mbedtls_ssl_cookie_check(),
|
||||
and possibly up to 571 bytes with a custom cookie check function.
|
||||
Reported by the Cybeats PSI Team.
|
||||
* Fix a buffer overread in TLS 1.3 Certificate parsing. An unauthenticated
|
||||
client or server could cause an MbedTLS server or client to overread up
|
||||
to 64 kBytes of data and potentially overread the input buffer by that
|
||||
amount minus the size of the input buffer. As overread data undergoes
|
||||
various checks, the likelihood of reaching the boundary of the input
|
||||
buffer is rather small but increases as its size
|
||||
MBEDTLS_SSL_IN_CONTENT_LEN decreases.
|
||||
* Fix check of certificate key usage in TLS 1.3. The usage of the public key
|
||||
provided by a client or server certificate for authentication was not
|
||||
checked properly when validating the certificate. This could cause a
|
||||
client or server to be able to authenticate itself through a certificate
|
||||
to an Mbed TLS TLS 1.3 server or client while it does not own a proper
|
||||
certificate to do so.
|
||||
|
||||
Bugfix
|
||||
* Declare or use PSA_WANT_ALG_CCM_STAR_NO_TAG following the general
|
||||
pattern for PSA_WANT_xxx symbols. Previously you had to specify
|
||||
PSA_WANT_ALG_CCM for PSA_ALG_CCM_STAR_NO_TAG.
|
||||
* Fix a memory leak if mbedtls_ssl_config_defaults() is called twice.
|
||||
* Fixed swap of client and server random bytes when exporting them alongside
|
||||
TLS 1.3 handshake and application traffic secret.
|
||||
* Fix several bugs (warnings, compiler and linker errors, test failures)
|
||||
in reduced configurations when MBEDTLS_USE_PSA_CRYPTO is enabled.
|
||||
* Fix a bug in (D)TLS curve negotiation: when MBEDTLS_USE_PSA_CRYPTO was
|
||||
enabled and an ECDHE-ECDSA or ECDHE-RSA key exchange was used, the
|
||||
client would fail to check that the curve selected by the server for
|
||||
ECDHE was indeed one that was offered. As a result, the client would
|
||||
accept any curve that it supported, even if that curve was not allowed
|
||||
according to its configuration. Fixes #5291.
|
||||
* The TLS 1.3 implementation is now compatible with the
|
||||
MBEDTLS_USE_PSA_CRYPTO configuration option.
|
||||
* Fix unit tests that used 0 as the file UID. This failed on some
|
||||
implementations of PSA ITS. Fixes #3838.
|
||||
* Fix mbedtls_ssl_get_version() not reporting TLSv1.3. Fixes #5406.
|
||||
* Fix API violation in mbedtls_md_process() test by adding a call to
|
||||
mbedtls_md_starts(). Fixes #2227.
|
||||
* Fix compile errors when MBEDTLS_HAVE_TIME is not defined. Add tests
|
||||
to catch bad uses of time.h.
|
||||
* Fix a race condition in out-of-source builds with CMake when generated data
|
||||
files are already present. Fixes #5374.
|
||||
* Fix the library search path when building a shared library with CMake
|
||||
on Windows.
|
||||
* Fix bug in the alert sending function mbedtls_ssl_send_alert_message()
|
||||
potentially leading to corrupted alert messages being sent in case
|
||||
the function needs to be re-called after initially returning
|
||||
MBEDTLS_SSL_WANT_WRITE. Fixes #1916.
|
||||
* In configurations with MBEDTLS_SSL_DTLS_CONNECTION_ID enabled but not
|
||||
MBEDTLS_DEBUG_C, DTLS handshakes using CID would crash due to a null
|
||||
pointer dereference. Fix this. Fixes #3998.
|
||||
The fix was released, but not announced, in Mbed TLS 3.1.0.
|
||||
* Fix incorrect documentation of mbedtls_x509_crt_profile. The previous
|
||||
documentation stated that the `allowed_pks` field applies to signatures
|
||||
only, but in fact it does apply to the public key type of the end entity
|
||||
certificate, too. Fixes #1992.
|
||||
* Fix undefined behavior in mbedtls_asn1_find_named_data(), where val is
|
||||
not NULL and val_len is zero.
|
||||
* Fix compilation error with mingw32. Fixed by Cameron Cawley in #4211.
|
||||
* Fix compilation error when using C++ Builder on Windows. Reported by
|
||||
Miroslav Mastny in #4015.
|
||||
* psa_raw_key_agreement() now returns PSA_ERROR_BUFFER_TOO_SMALL when
|
||||
applicable. Fixes #5735.
|
||||
* Fix a bug in the x25519 example program where the removal of
|
||||
MBEDTLS_ECDH_LEGACY_CONTEXT caused the program not to run. Fixes #4901 and
|
||||
#3191.
|
||||
* Fix a TLS 1.3 handshake failure when the peer Finished message has not
|
||||
been received yet when we first try to fetch it.
|
||||
* Encode X.509 dates before 1/1/2000 as UTCTime rather than
|
||||
GeneralizedTime. Fixes #5465.
|
||||
* Add mbedtls_x509_dn_get_next function to return the next relative DN in
|
||||
an X509 name, to allow walking the name list. Fixes #5431.
|
||||
* Fix order value of curve x448.
|
||||
* Fix string representation of DNs when outputting values containing commas
|
||||
and other special characters, conforming to RFC 1779. Fixes #769.
|
||||
* Silence a warning from GCC 12 in the selftest program. Fixes #5974.
|
||||
* Fix check_config.h to check that we have MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
|
||||
when MBEDTLS_SSL_PROTO_TLS1_3 is specified, and make this and other
|
||||
dependencies explicit in the documentation. Fixes #5610.
|
||||
* Fix mbedtls_asn1_write_mpi() writing an incorrect encoding of 0.
|
||||
* Fix a TLS 1.3 handshake failure when the first attempt to send the client
|
||||
Finished message on the network cannot be satisfied. Fixes #5499.
|
||||
* Fix resource leaks in mbedtls_pk_parse_public_key() in low
|
||||
memory conditions.
|
||||
* Fix server connection identifier setting for outgoing encrypted records
|
||||
on DTLS 1.2 session resumption. After DTLS 1.2 session resumption with
|
||||
connection identifier, the Mbed TLS client now properly sends the server
|
||||
connection identifier in encrypted record headers. Fix #5872.
|
||||
* Fix a null pointer dereference when performing some operations on zero
|
||||
represented with 0 limbs (specifically mbedtls_mpi_mod_int() dividing
|
||||
by 2, and mbedtls_mpi_write_string() in base 2).
|
||||
* Fix record sizes larger than 16384 being sometimes accepted despite being
|
||||
non-compliant. This could not lead to a buffer overflow. In particular,
|
||||
application data size was already checked correctly.
|
||||
* Fix MBEDTLS_SVC_KEY_ID_GET_KEY_ID() and MBEDTLS_SVC_KEY_ID_GET_OWNER_ID()
|
||||
which have been broken, resulting in compilation errors, since Mbed TLS
|
||||
3.0.
|
||||
* Ensure that TLS 1.2 ciphersuite/certificate and key selection takes into
|
||||
account not just the type of the key (RSA vs EC) but also what it can
|
||||
actually do. Resolves #5831.
|
||||
* Fix CMake windows host detection, especially when cross compiling.
|
||||
* Fix an error in make where the absence of a generated file caused
|
||||
make to break on a clean checkout. Fixes #5340.
|
||||
* Work around an MSVC ARM64 compiler bug causing incorrect behaviour
|
||||
in mbedtls_mpi_exp_mod(). Reported by Tautvydas Žilys in #5467.
|
||||
* Removed the prompt to exit from all windows build programs that was causing
|
||||
issues in CI/CD environments.
|
||||
|
||||
Changes
|
||||
* The file library/psa_crypto_driver_wrappers.c is now generated
|
||||
from a template. In the future, the generation will support
|
||||
driver descriptions. For the time being, to customize this file,
|
||||
see docs/proposed/psa-driver-wrappers-codegen-migration-guide.md
|
||||
* Return PSA_ERROR_INVALID_ARGUMENT if the algorithm passed to one-shot
|
||||
AEAD functions is not an AEAD algorithm. This aligns them with the
|
||||
multipart functions, and the PSA Crypto API 1.1 specification.
|
||||
* In mbedtls_pk_parse_key(), if no password is provided, don't allocate a
|
||||
temporary variable on the heap. Suggested by Sergey Kanatov in #5304.
|
||||
* Assume source files are in UTF-8 when using MSVC with CMake.
|
||||
* Fix runtime library install location when building with CMake and MinGW.
|
||||
DLLs are now installed in the bin directory instead of lib.
|
||||
* cmake: Use GnuInstallDirs to customize install directories
|
||||
Replace custom LIB_INSTALL_DIR variable with standard CMAKE_INSTALL_LIBDIR
|
||||
variable. For backward compatibility, set CMAKE_INSTALL_LIBDIR if
|
||||
LIB_INSTALL_DIR is set.
|
||||
* Add a CMake option that enables static linking of the runtime library
|
||||
in Microsoft Visual C++ compiler. Contributed by Microplankton.
|
||||
* In CMake builds, add aliases for libraries so that the normal MbedTLS::*
|
||||
targets work when MbedTLS is built as a subdirectory. This allows the
|
||||
use of FetchContent, as requested in #5688.
|
||||
|
||||
= mbed TLS 3.1.0 branch released 2021-12-17
|
||||
|
||||
|
|
|
|||
|
|
@ -1,5 +0,0 @@
|
|||
Changes
|
||||
* The file library/psa_crypto_driver_wrappers.c is now generated
|
||||
from a template. In the future, the generation will support
|
||||
driver descriptions. For the time being, to customize this file,
|
||||
see docs/proposed/psa-driver-wrappers-codegen-migration-guide.md
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
Features
|
||||
* The X.509 module now uses PSA hash acceleration if present.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Bugfix
|
||||
* Fix unit tests that used 0 as the file UID. This failed on some
|
||||
implementations of PSA ITS. Fixes #3838.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Bugfix
|
||||
* Fix API violation in mbedtls_md_process() test by adding a call to
|
||||
mbedtls_md_starts(). Fixes #2227.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Bugfix
|
||||
* Add mbedtls_x509_dn_get_next function to return the next relative DN in
|
||||
an X509 name, to allow walking the name list. Fixes #5431.
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
Features
|
||||
* Add function mbedtls_timing_get_final_delay() to access the private
|
||||
final delay field in an mbedtls_timing_delay_context, as requested in
|
||||
#5183.
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
Features
|
||||
* Add function mbedtls_ssl_is_handshake_over() to enable querying if the SSL
|
||||
Handshake has completed or not, and thus whether to continue calling
|
||||
mbedtls_ssl_handshake_step(), requested in #4383.
|
||||
|
|
@ -1,11 +0,0 @@
|
|||
Security
|
||||
* Add the platform function mbedtls_setbuf() to allow buffering to be
|
||||
disabled on stdio files, to stop secrets loaded from said files being
|
||||
potentially left in memory after file operations. Reported by
|
||||
Glenn Strauss.
|
||||
Requirement changes
|
||||
* The library will no longer compile out of the box on a platform without
|
||||
setbuf(). If your platform does not have setbuf(), you can configure an
|
||||
alternative function by enabling MBEDTLS_PLATFORM_SETBUF_ALT or
|
||||
MBEDTLS_PLATFORM_SETBUF_MACRO.
|
||||
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
Features
|
||||
* Add the function mbedtls_ssl_get_own_cid() to access our own connection id
|
||||
within mbedtls_ssl_context, as requested in #5184.
|
||||
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
Bugfix
|
||||
* Fix bug in the alert sending function mbedtls_ssl_send_alert_message()
|
||||
potentially leading to corrupted alert messages being sent in case
|
||||
the function needs to be re-called after initially returning
|
||||
MBEDTLS_SSL_WANT_WRITE. Fixes #1916.
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
Bugfix
|
||||
* Fix mbedtls_asn1_write_mpi() writing an incorrect encoding of 0.
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
Bugfix
|
||||
* Fix a null pointer dereference when performing some operations on zero
|
||||
represented with 0 limbs (specifically mbedtls_mpi_mod_int() dividing
|
||||
by 2, and mbedtls_mpi_write_string() in base 2).
|
||||
|
|
@ -1,6 +0,0 @@
|
|||
Security
|
||||
* Fix a potential heap buffer overread in TLS 1.2 server-side when
|
||||
MBEDTLS_USE_PSA_CRYPTO is enabled, an opaque key (created with
|
||||
mbedtls_pk_setup_opaque()) is provisioned, and a static ECDH ciphersuite
|
||||
is selected. This may result in an application crash or potentially an
|
||||
information leak.
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
Bugfix
|
||||
* Fix order value of curve x448.
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
Bugfix
|
||||
* Declare or use PSA_WANT_ALG_CCM_STAR_NO_TAG following the general
|
||||
pattern for PSA_WANT_xxx symbols. Previously you had to specify
|
||||
PSA_WANT_ALG_CCM for PSA_ALG_CCM_STAR_NO_TAG.
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
Default behavior changes
|
||||
* mbedtls_cipher_set_iv will now fail with ChaCha20 and ChaCha20+Poly1305
|
||||
for IV lengths other than 12. The library was silently overwriting this
|
||||
length with 12, but did not inform the caller about it. Fixes #4301.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Features
|
||||
* cmake now detects if it is being built as a sub-project, and in that case
|
||||
disables the target export/installation and package configuration.
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
Changes
|
||||
* In CMake builds, add aliases for libraries so that the normal MbedTLS::*
|
||||
targets work when MbedTLS is built as a subdirectory. This allows the
|
||||
use of FetchContent, as requested in #5688.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Changes
|
||||
* Fix runtime library install location when building with CMake and MinGW.
|
||||
DLLs are now installed in the bin directory instead of lib.
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
Changes
|
||||
* Assume source files are in UTF-8 when using MSVC with CMake.
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
Changes
|
||||
* cmake: Use GnuInstallDirs to customize install directories
|
||||
Replace custom LIB_INSTALL_DIR variable with standard CMAKE_INSTALL_LIBDIR
|
||||
variable. For backward compatibility, set CMAKE_INSTALL_LIBDIR if
|
||||
LIB_INSTALL_DIR is set.
|
||||
|
|
@ -1,9 +0,0 @@
|
|||
Security
|
||||
* Fix a buffer overread in DTLS ClientHello parsing in servers with
|
||||
MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled. An unauthenticated client
|
||||
or a man-in-the-middle could cause a DTLS server to read up to 255 bytes
|
||||
after the end of the SSL input buffer. The buffer overread only happens
|
||||
when MBEDTLS_SSL_IN_CONTENT_LEN is less than a threshold that depends on
|
||||
the exact configuration: 258 bytes if using mbedtls_ssl_cookie_check(),
|
||||
and possibly up to 571 bytes with a custom cookie check function.
|
||||
Reported by the Cybeats PSI Team.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
New deprecations
|
||||
* Deprecate mbedtls_cipher_setup_psa(). Use psa_aead_xxx() or
|
||||
psa_cipher_xxx() directly instead.
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
Bugfix
|
||||
* Fix incorrect documentation of mbedtls_x509_crt_profile. The previous
|
||||
documentation stated that the `allowed_pks` field applies to signatures
|
||||
only, but in fact it does apply to the public key type of the end entity
|
||||
certificate, too. Fixes #1992.
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
Bugfix
|
||||
* In configurations with MBEDTLS_SSL_DTLS_CONNECTION_ID enabled but not
|
||||
MBEDTLS_DEBUG_C, DTLS handshakes using CID would crash due to a null
|
||||
pointer dereference. Fix this. Fixes #3998.
|
||||
The fix was released, but not announced, in Mbed TLS 3.1.0.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Bugfix
|
||||
* Fix string representation of DNs when outputting values containing commas
|
||||
and other special characters, conforming to RFC 1779. Fixes #769.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Bugfix
|
||||
* Fix a race condition in out-of-source builds with CMake when generated data
|
||||
files are already present. Fixes #5374.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Bugfix
|
||||
* Encode X.509 dates before 1/1/2000 as UTCTime rather than
|
||||
GeneralizedTime. Fixes #5465.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Bugfix
|
||||
* Fix undefined behavior in mbedtls_asn1_find_named_data(), where val is
|
||||
not NULL and val_len is zero.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Bugfix
|
||||
* Fix the library search path when building a shared library with CMake
|
||||
on Windows.
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
Bugfix
|
||||
* Fix a bug in the x25519 example program where the removal of
|
||||
MBEDTLS_ECDH_LEGACY_CONTEXT caused the program not to run. Fixes #4901 and
|
||||
#3191.
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
Bugfix
|
||||
* Fix MBEDTLS_SVC_KEY_ID_GET_KEY_ID() and MBEDTLS_SVC_KEY_ID_GET_OWNER_ID()
|
||||
which have been broken, resulting in compilation errors, since Mbed TLS
|
||||
3.0.
|
||||
|
|
@ -1,6 +0,0 @@
|
|||
Bugfix
|
||||
* Fix resource leaks in mbedtls_pk_parse_public_key() in low
|
||||
memory conditions.
|
||||
Security
|
||||
* Fix potential memory leak inside mbedtls_ssl_cache_set() with
|
||||
an invalid session id length.
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
Bugfix
|
||||
* Ensure that TLS 1.2 ciphersuite/certificate and key selection takes into
|
||||
account not just the type of the key (RSA vs EC) but also what it can
|
||||
actually do. Resolves #5831.
|
||||
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
Bugfix
|
||||
* Fix record sizes larger than 16384 being sometimes accepted despite being
|
||||
non-compliant. This could not lead to a buffer overflow. In particular,
|
||||
application data size was already checked correctly.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Bugfix
|
||||
* Fix CMake windows host detection, especially when cross compiling.
|
||||
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
Features
|
||||
* Add HKDF-Expand and HKDF-Extract as separate algorithms in the PSA API.
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
Features
|
||||
* Make USE_PSA_CRYPTO compatible with KEY_ID_ENCODES_OWNER. Fixes #5259.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Bugfix
|
||||
* Fix an error in make where the absence of a generated file caused
|
||||
make to break on a clean checkout. Fixes #5340.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Features
|
||||
* Add function mbedtls_ecp_export() to export ECP key pair parameters.
|
||||
Fixes #4838.
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
Features
|
||||
* Add accessor to get the raw buffer pointer from a PEM context.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Features
|
||||
* Add mbedtls_pk_sign_ext() which allows generating RSA-PSS signatures when
|
||||
PSA Crypto is enabled.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Features
|
||||
* Add support for the ARMv8 SHA-2 acceleration instructions when building
|
||||
for Aarch64.
|
||||
|
|
@ -1,7 +0,0 @@
|
|||
Features
|
||||
* Add server certificate selection callback near end of Client Hello.
|
||||
Register callback with mbedtls_ssl_conf_cert_cb().
|
||||
* Provide mechanism to reset handshake cert list by calling
|
||||
mbedtls_ssl_set_hs_own_cert() with NULL value for own_cert param.
|
||||
* Add accessor mbedtls_ssl_get_hs_sni() to retrieve SNI from within
|
||||
cert callback (mbedtls_ssl_conf_cert_cb()) during handshake.
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
Bugfix
|
||||
* Fix a memory leak if mbedtls_ssl_config_defaults() is called twice.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Features
|
||||
* Add accessors to configure DN hints for certificate request:
|
||||
mbedtls_ssl_conf_dn_hints() and mbedtls_ssl_set_hs_dn_hints()
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Features
|
||||
* Add accessor to obtain ciphersuite id from ssl context.
|
||||
* Add accessors to get members from ciphersuite info.
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
Features
|
||||
* Introduce mbedtls_ssl_hs_cb_t typedef for use with
|
||||
mbedtls_ssl_conf_cert_cb() and perhaps future callbacks
|
||||
during TLS handshake.
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
Features
|
||||
* Add mbedtls_ssl_ticket_rotate() for external ticket rotation.
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
Features
|
||||
* Add ALPN support in TLS 1.3 clients.
|
||||
|
|
@ -1,10 +0,0 @@
|
|||
New deprecations
|
||||
* Deprecate mbedtls_ssl_conf_max_version() and
|
||||
mbedtls_ssl_conf_min_version() in favor of
|
||||
mbedtls_ssl_conf_max_tls_version() and
|
||||
mbedtls_ssl_conf_min_tls_version().
|
||||
|
||||
Features
|
||||
* Add functions mbedtls_ssl_conf_max_tls_version() and
|
||||
mbedtls_ssl_conf_min_tls_version() that use a single value to specify
|
||||
the protocol version.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Features
|
||||
* Add function mbedtls_md_info_from_ctx() to recall the message digest
|
||||
information that was used to set up a message digest context.
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
Bugfix
|
||||
* Fix compilation error with mingw32. Fixed by Cameron Cawley in #4211.
|
||||
* Fix compilation error when using C++ Builder on Windows. Reported by
|
||||
Miroslav Mastny in #4015.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Bugfix
|
||||
* Work around an MSVC ARM64 compiler bug causing incorrect behaviour
|
||||
in mbedtls_mpi_exp_mod(). Reported by Tautvydas Žilys in #5467.
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
Features
|
||||
* Add example programs cipher_aead_demo.c, md_hmac_demo.c, aead_demo.c
|
||||
and hmac_demo.c, which use PSA and the md/cipher interfaces side
|
||||
by side in order to illustrate how the operation is performed in PSA.
|
||||
Addresses #5208.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Changes
|
||||
* In mbedtls_pk_parse_key(), if no password is provided, don't allocate a
|
||||
temporary variable on the heap. Suggested by Sergey Kanatov in #5304.
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
Changes
|
||||
* Return PSA_ERROR_INVALID_ARGUMENT if the algorithm passed to one-shot
|
||||
AEAD functions is not an AEAD algorithm. This aligns them with the
|
||||
multipart functions, and the PSA Crypto API 1.1 specification.
|
||||
|
|
@ -1,6 +0,0 @@
|
|||
Features
|
||||
* When MBEDTLS_PSA_CRYPTO_CONFIG is enabled, you may list the PSA crypto
|
||||
feature requirements in the file named by the new macro
|
||||
MBEDTLS_PSA_CRYPTO_CONFIG_FILE instead of the default psa/crypto_config.h.
|
||||
Furthermore you may name an additional file to include after the main
|
||||
file with the macro MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Features
|
||||
* Add support for psa crypto key derivation for elliptic curve
|
||||
keys. Fixes #3260.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Bugfix
|
||||
* Fix several bugs (warnings, compiler and linker errors, test failures)
|
||||
in reduced configurations when MBEDTLS_USE_PSA_CRYPTO is enabled.
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
New deprecations
|
||||
* Secure element drivers enabled by MBEDTLS_PSA_CRYPTO_SE_C are deprecated.
|
||||
This was intended as an experimental feature, but had not been explicitly
|
||||
documented as such. Use opaque drivers with the interface enabled by
|
||||
MBEDTLS_PSA_CRYPTO_DRIVERS instead.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Bugfix
|
||||
* psa_raw_key_agreement() now returns PSA_ERROR_BUFFER_TOO_SMALL when
|
||||
applicable. Fixes #5735.
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
Features
|
||||
* Extend the existing PSA_ALG_TLS12_PSK_TO_MS() algorithm to support
|
||||
mixed-PSK. Add an optional input PSA_KEY_DERIVATION_INPUT_OTHER_SECRET
|
||||
holding the other secret.
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
Bugfix
|
||||
* Removed the prompt to exit from all windows build programs that was causing
|
||||
issues in CI/CD environments.
|
||||
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
Bugfix
|
||||
* Fix server connection identifier setting for outgoing encrypted records
|
||||
on DTLS 1.2 session resumption. After DTLS 1.2 session resumption with
|
||||
connection identifier, the Mbed TLS client now properly sends the server
|
||||
connection identifier in encrypted record headers. Fix #5872.
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
Bugfix
|
||||
* Silence a warning from GCC 12 in the selftest program. Fixes #5974.
|
||||
|
|
@ -1,6 +0,0 @@
|
|||
Features
|
||||
* The structures mbedtls_ssl_config and mbedtls_ssl_context now store
|
||||
a piece of user data which is reserved for the application. The user
|
||||
data can be either a pointer or an integer.
|
||||
* Add an accessor function to get the configuration associated with
|
||||
an SSL context.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Features
|
||||
* Add a function to access the protocol version from an SSL context in a
|
||||
form that's easy to compare. Fixes #5407.
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
Bugfix
|
||||
* Fix mbedtls_ssl_get_version() not reporting TLSv1.3. Fixes #5406.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Changes
|
||||
* Add a CMake option that enables static linking of the runtime library
|
||||
in Microsoft Visual C++ compiler. Contributed by Microplankton.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Bugfix
|
||||
* Fix compile errors when MBEDTLS_HAVE_TIME is not defined. Add tests
|
||||
to catch bad uses of time.h.
|
||||
|
|
@ -1,8 +0,0 @@
|
|||
Security
|
||||
* Fix a buffer overread in TLS 1.3 Certificate parsing. An unauthenticated
|
||||
client or server could cause an MbedTLS server or client to overread up
|
||||
to 64 kBytes of data and potentially overread the input buffer by that
|
||||
amount minus the size of the input buffer. As overread data undergoes
|
||||
various checks, the likelihood of reaching the boundary of the input
|
||||
buffer is rather small but increases as its size
|
||||
MBEDTLS_SSL_IN_CONTENT_LEN decreases.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Bugfix
|
||||
* Fix a TLS 1.3 handshake failure when the peer Finished message has not
|
||||
been received yet when we first try to fetch it.
|
||||
|
|
@ -1,7 +0,0 @@
|
|||
Security
|
||||
* Fix check of certificate key usage in TLS 1.3. The usage of the public key
|
||||
provided by a client or server certificate for authentication was not
|
||||
checked properly when validating the certificate. This could cause a
|
||||
client or server to be able to authenticate itself through a certificate
|
||||
to an Mbed TLS TLS 1.3 server or client while it does not own a proper
|
||||
certificate to do so.
|
||||
|
|
@ -1,18 +0,0 @@
|
|||
Bugfix
|
||||
* Fix a TLS 1.3 handshake failure when the first attempt to send the client
|
||||
Finished message on the network cannot be satisfied. Fixes #5499.
|
||||
|
||||
Features
|
||||
* Add support for authentication of TLS 1.3 clients by TLS 1.3 servers.
|
||||
* Add support for server HelloRetryRequest message. The TLS 1.3 client is
|
||||
now capable of negotiating another shared secret if the one sent in its
|
||||
first ClientHello was not suitable to the server.
|
||||
* Add support for client-side TLS version negotiation. If both TLS 1.2 and
|
||||
TLS 1.3 protocols are enabled in the build of Mbed TLS, the TLS client now
|
||||
negotiates TLS 1.3 or TLS 1.2 with TLS servers.
|
||||
* Enable building of Mbed TLS with TLS 1.3 protocol support but without TLS
|
||||
1.2 protocol support.
|
||||
* Mbed TLS provides an implementation of a TLS 1.3 server (ephemeral key
|
||||
establishment only). See docs/architecture/tls13-support.md for a
|
||||
description of the support. The MBEDTLS_SSL_PROTO_TLS1_3 and
|
||||
MBEDTLS_SSL_SRV_C configuration options control this.
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
New deprecations
|
||||
* Deprecate mbedtls_ssl_conf_sig_hashes() in favor of the more generic
|
||||
mbedtls_ssl_conf_sig_algs(). Signature algorithms for the TLS 1.2 and
|
||||
TLS 1.3 handshake should now be configured with
|
||||
mbedtls_ssl_conf_sig_algs().
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
Bugfix
|
||||
* Fix check_config.h to check that we have MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
|
||||
when MBEDTLS_SSL_PROTO_TLS1_3 is specified, and make this and other
|
||||
dependencies explicit in the documentation. Fixes #5610.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Bugfix
|
||||
* The TLS 1.3 implementation is now compatible with the
|
||||
MBEDTLS_USE_PSA_CRYPTO configuration option.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Bugfix
|
||||
* Fixed swap of client and server random bytes when exporting them alongside
|
||||
TLS 1.3 handshake and application traffic secret.
|
||||
|
|
@ -1,7 +0,0 @@
|
|||
Bugfix
|
||||
* Fix a bug in (D)TLS curve negotiation: when MBEDTLS_USE_PSA_CRYPTO was
|
||||
enabled and an ECDHE-ECDSA or ECDHE-RSA key exchange was used, the
|
||||
client would fail to check that the curve selected by the server for
|
||||
ECDHE was indeed one that was offered. As a result, the client would
|
||||
accept any curve that it supported, even if that curve was not allowed
|
||||
according to its configuration. Fixes #5291.
|
||||
|
|
@ -1,12 +0,0 @@
|
|||
Features
|
||||
* The configuration option MBEDTLS_USE_PSA_CRYPTO, which previously
|
||||
affected only a limited subset of crypto operations in TLS, X.509 and PK,
|
||||
now causes most of them to be done using PSA Crypto; see
|
||||
docs/use-psa-crypto.md for the list of exceptions.
|
||||
* The function mbedtls_pk_setup_opaque() now supports RSA key pairs as well.
|
||||
Opaque keys can now be used everywhere a private key is expected in the
|
||||
TLS and X.509 modules.
|
||||
* Opaque pre-shared keys for TLS, provisioned with
|
||||
mbedtls_ssl_conf_psk_opaque() or mbedtls_ssl_set_hs_psk_opaque(), which
|
||||
previously only worked for "pure" PSK key exchange, now can also be used
|
||||
for the "mixed" PSK key exchanges as well: ECDHE-PSK, DHE-PSK, RSA-PSK.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
Features
|
||||
* Add the function mbedtls_x509_crt_has_ext_type() to access the ext types
|
||||
field within mbedtls_x509_crt context, as requested in #5585.
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
Security
|
||||
* Zeroize dynamically-allocated buffers used by the PSA Crypto key storage
|
||||
module before freeing them. These buffers contain secret key material, and
|
||||
could thus potentially leak the key through freed heap.
|
||||
Loading…
Reference in a new issue