yuzu-emu/mbedtls
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add changelog entry for switching pkparse to new pbe functions

Browse source 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
This commit is contained in:
Waleed Elmelegy 2023-09-20 18:42:05 +01:00
parent 1db5cdaf57
commit 8d83b05ee0
1 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
ChangeLog.d/Switch-pkparse-to-new-pbe-funsctions.txt Normal file
View file

@ -0,0 +1,11 @@
New deprecations
* mbedtls_pkcs5_pbes2() and mbedtls_pkcs12_pbe() functions are now
deprecated in favor of mbedtls_pkcs5_pbes2_ext() and
mbedtls_pkcs12_pbe_ext() as they offer more security by checking
for overflow of the output buffer and reporting the actual length
of the output.
Bugfix
* Pass real length of key to pk_parse_key_pkcs8_unencrypted_der()
after decrypting the key to avoid trailing padding data which are not
part of the original key before encrypting.