Suyu/mbedtls
1
0
Fork 0
mirror of https://git.suyu.dev/suyu/mbedtls.git synced 2026-01-07 06:59:19 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix wording of ChangeLog and 3DES_REMOVE docs

Browse source
This commit is contained in:
Andres Amaya Garcia 2018-11-26 20:57:49 +00:00 • committed by Manuel Pégourié-Gonnard
parent 5d8aade01d
commit 6882ec1521
2 changed files with 9 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
include/mbedtls/config.h
View file

@ -695,6 +695,13 @@
* to enable (some of) them with mbedtls_ssl_conf_ciphersuites() by including
* them explicitly.
*
* A man-in-the browser attacker can recover authentication tokens sent through
* a TLS connection using a 3DES based cipher suite (see "On the Practical
* (In-)Security of 64-bit Block Ciphers" by Karthikeyan Bhargavan and Gaëtan
* Leurent, see https://sweet32.info/SWEET32_CCS16.pdf). If this attack falls
* in your threat model or you are unsure, then you should keep this option
* enabled to remove 3DES based cipher suites.
*
* Comment this macro to keep 3DES in the default ciphersuite list.
*/
#define MBEDTLS_REMOVE_3DES_CIPHERSUITES