diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2013-03-22 17:12:33 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2013-09-08 13:14:03 +0100 |
| commit | 5e3ff62c345c976cd1ffbcc5e6042f55264977f5 (patch) | |
| tree | 16c9ffcc2468e21f5ee445e440c835857ed94c81 /CHANGES | |
| parent | 226751ae4a1f3e00021c43399d7bb51a99c22c17 (diff) | |
| download | openssl-5e3ff62c345c976cd1ffbcc5e6042f55264977f5.zip openssl-5e3ff62c345c976cd1ffbcc5e6042f55264977f5.tar.gz openssl-5e3ff62c345c976cd1ffbcc5e6042f55264977f5.tar.bz2 | |
Experimental encrypt-then-mac support.
Experimental support for encrypt then mac from
draft-gutmann-tls-encrypt-then-mac-02.txt
To enable it set the appropriate extension number (0x10 for the test server)
using e.g. -DTLSEXT_TYPE_encrypt_then_mac=0x10
For non-compliant peers (i.e. just about everything) this should have no
effect.
Diffstat (limited to 'CHANGES')
| -rw-r--r-- | CHANGES | 14 |
1 files changed, 14 insertions, 0 deletions
@@ -4,6 +4,20 @@ Changes between 1.0.x and 1.1.0 [xx XXX xxxx] + *) Experimental encrypt-then-mac support. + + Experimental support for encrypt then mac from + draft-gutmann-tls-encrypt-then-mac-02.txt + + To enable it set the appropriate extension number (0x10 for the test + server) using e.g. -DTLSEXT_TYPE_encrypt_then_mac=0x10 + + For non-compliant peers (i.e. just about everything) this should have no + effect. + + WARNING: EXPERIMENTAL, SUBJECT TO CHANGE. + [Steve Henson] + *) Add callbacks supporting generation and retrieval of supplemental data entries. [Scott Deboy <sdeboy@apache.org>, Trevor Perrin and Ben Laurie] |