mbedtls/ChangeLog.d/fix-pms-ecdh-psa-client-size.txt
Paulo Santos 34a8ce1e85
ssl: size the ECDH premaster secret by PSA alone
_pms_ecdh and _pms_ecdhe_psk are sized by
PSA_RAW_KEY_AGREEMENT_OUTPUT_MAX_SIZE, with no MBEDTLS_ECP_MAX_BYTES
fallback and no new public macro. The ChangeLog entry describes the
user-visible failure.

Signed-off-by: Paulo Santos <paulo.santos-ext@hexagon.com>
2026-10-27 15:41:52 -03:00

8 lines
278 B
Plaintext

Bugfix
* Fix TLS 1.2 ECDHE handshakes failing in PSA-client-only
(MBEDTLS_PSA_CRYPTO_C disabled) builds when PSK
and ECJPAKE key-exchanges were disabled.
In this scenario ECDHE key agreement failed returning
PSA_ERROR_BUFFER_TOO_SMALL.
Fixes #10757.