coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-11-09 14:50:17 +08:00
Code Issues Packages Projects Releases Wiki Activity

changelog: update documentation for PKCS7 changes

Browse Source 
Signed-off-by: Valerio Setti <vsetti@baylibre.com>
This commit is contained in:
Valerio Setti 2026-06-15 10:34:22 +02:00
parent 3d44f0fcc0
commit c8390f51ad
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ChangeLog.d/pkcs7-reject-weak-hashes.txt
View File

@ -1,3 +1,7 @@
Security
* PKCS7 now rejects weak hash algorithms (RIPEMD160, MD5, SHA-1) on signature
verification.
* PKCS7 now rejects weak hash algorithms (RIPEMD160, MD5, SHA-1, SHA-224,
SHA3-224) on signature verification.
Features
* SHA3-256, SHA3-384 and SHA3-512 are now accepted in the default X.509
certificate profile.