coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-07-30 16:26:33 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add security impact

Browse Source 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
This commit is contained in:
Ben Taylor 2026-05-28 15:18:19 +01:00
parent b35f870331
commit ceaa75b899
1 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
ChangeLog.d/1583-1584-ssl-transcript-errors.txt
View File

@ -1,5 +1,12 @@
Security
* Fix a bug where errors during transcript-hash computation for TLS 1.2
extended master secret and TLS 1.3 resumption master secret could be
ignored instead of causing the handshake to fail.
* Fix a bug where transcript-hash computation errors during TLS 1.2
extended master secret calculation could be ignored instead of causing the
handshake to fail. This could allow a handshake to continue with a master
secret that was not correctly bound to the handshake transcript,
undermining the security guarantees of the extended master secret
extension.
* Fix a bug where TLS 1.3 servers could ignore errors when computing the
resumption master secret instead of causing the handshake to fail. This
could allow a server to issue resumption tickets derived from an invalid
resumption secret, weakening authentication of future resumptions made
with those tickets.