mbedtls/ChangeLog.d
Paul Elliott ca17ebfbc0 Add tag check to cert algorithm check
Add missing tag check for algorithm parameters when comparing the
signature in the description part of the cert against the actual
signature whilst loading a certificate. This was found by a
certificate (created by fuzzing) that openssl would not verify, but
mbedtls would.

Regression test added (one of the client certs modified accordingly)

Signed-off-by: Paul Elliott <paul.elliott@arm.com>
2020-11-26 16:34:16 +00:00
..
00README.md Add guidance on writing and maintaining changelog entries 2020-03-27 20:14:19 +01:00
bugfix_PR3452.txt Use local labels in padlock.c 2020-07-04 01:43:41 +08:00
build_with_only_montgomery_curves.txt Add ChangeLog entry for single-curve build fixes 2020-07-22 03:17:24 +02:00
cmake-install.txt Library files aren't supposed to be executable 2020-07-02 13:19:17 +02:00
copyright.txt Update copyright notices to use Linux Foundation guidance 2020-08-19 10:35:41 +02:00
do_not_persist_volatile_external_keys.txt Added missing newline in changelog entry 2020-06-17 13:54:18 +02:00
format-signedness.txt Only pass -Wformat-signedness to versions of GCC that support it. 2020-07-03 16:51:14 +08:00
local-lucky13.txt Clarify that the Lucky 13 fix is quite general 2020-08-26 10:10:11 +02:00
netbsd-rand-arc4random_buf.txt Log change as bugfix 2020-08-13 06:24:42 +02:00
protect-base-blinding.txt Add ChangeLog entry for base blinding protection 2020-06-26 11:33:41 +02:00
psa_curve25519_key_support.txt Rewrite changelog for #3425 as requested 2020-07-06 10:52:38 +02:00
psa_curve25519_public_key_import.txt Allow importing Montgomery public keys in PSA Crypto 2020-07-30 15:35:14 +02:00
psa_ecc_dh_macros.txt Add Changelog entry for PSA DH/ECC Macros rename 2020-07-02 17:00:06 +01:00
x509-add-tag-check-to-algorithm-params Add tag check to cert algorithm check 2020-11-26 16:34:16 +00:00
x509-verify-non-dns-san.txt Add ChangeLog entry for X.509 CN-type vulnerability 2020-08-11 10:24:21 +02:00
x509parse_crl-empty_entry.txt x509_crl_parse: fix 1-byte buffer overflow and entry->raw.tag 2020-07-16 18:40:17 +02:00
x509write_csr_heap_alloc.txt Revise comments for x509write_csr_der_internal 2020-07-08 18:32:47 +00:00
zeroising_of_plaintext_buffer.txt Add missing newline 2020-07-16 10:19:18 +02:00
zeroizations_of_sensitive_data_in_PKCS5_and_SHA.txt Zeroize internal buffers and variables in MD hashes 2020-08-25 19:13:59 +02:00