Update the default hash and curve selection for X.509 and TLS#4604

Merged

mpg merged 20 commits intoMbed-TLS:developmentfrom gilles-peskine-arm:default-hashes-curves-3.0

Jun 22, 2021

+223-140

Commits on Jun 17, 2021

Upgrade the default X.509 profile to the former "next" profile
gilles-peskine-arm
committed
Upgrade the default TLS hash and curve selection, matching X.509
gilles-peskine-arm
committed
Changelog entry and migration guide for hash and curve profile upgrades
gilles-peskine-arm
committed
Initializer element was not constant
gilles-peskine-arm
committed
Fix "PSA - ECDH with [non-default curve]"
gilles-peskine-arm
committed
Reduce the default ECP window size
gilles-peskine-arm
committed
Remove meaningless clause
gilles-peskine-arm
committed
In TLS, order curves by resource usage, not size
gilles-peskine-arm
committed
Leave the preference order for hashes unspecified
gilles-peskine-arm
committed
Clarify test case descriptions
gilles-peskine-arm
committed
Add mbedtls_debug_print_mpi test case for 0
gilles-peskine-arm
committed
Simplify mbedtls_debug_print_mpi and fix the case of empty bignums
gilles-peskine-arm
committed
Update the expected default curve in ssl-opt.sh
gilles-peskine-arm
committed
Indicate that the truncation from size_t to int is deliberate
gilles-peskine-arm
committed
Test restartable ECC with a curve that supports it
gilles-peskine-arm
committed
Add missing parentheses
gilles-peskine-arm
committed
Wording clarifications
gilles-peskine-arm
committed
Meld DEFAULT_ALLOW_SHA1_IN_CERTIFICATES removal migration guide
gilles-peskine-arm
committed
Document backward compatibility promises for the default TLS profile
gilles-peskine-arm
committed
Remove secp256k1 from the default X.509 and TLS profiles
gilles-peskine-arm
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update the default hash and curve selection for X.509 and TLS#4604

Commits on Jun 17, 2021

Upgrade the default X.509 profile to the former "next" profile

Upgrade the default TLS hash and curve selection, matching X.509

Changelog entry and migration guide for hash and curve profile upgrades

Initializer element was not constant

Fix "PSA - ECDH with [non-default curve]"

Reduce the default ECP window size

Remove meaningless clause

In TLS, order curves by resource usage, not size

Leave the preference order for hashes unspecified

Clarify test case descriptions

Add mbedtls_debug_print_mpi test case for 0

Simplify mbedtls_debug_print_mpi and fix the case of empty bignums

Update the expected default curve in ssl-opt.sh

Indicate that the truncation from size_t to int is deliberate

Test restartable ECC with a curve that supports it

Add missing parentheses

Wording clarifications

Meld DEFAULT_ALLOW_SHA1_IN_CERTIFICATES removal migration guide

Document backward compatibility promises for the default TLS profile

Remove secp256k1 from the default X.509 and TLS profiles