mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-11-09 23:00:03 +08:00
7 lines
379 B
Plaintext
7 lines
379 B
Plaintext
Security
|
|
* Fix missing validation of the peer's key in key agreement operations using
|
|
PSA_ALG_FFDH: low-order elements were not rejected as they should be. This
|
|
is a problem for protocols using FFDH that expect contributory behaviour,
|
|
that is, where neither party should be able to force the shared secret
|
|
into a small set. Found and reported by Kai Tian.
|