lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-07-30 22:43:08 +03:00
Code Activity

Deprecate MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT

Browse Source
This commit is contained in:
Hanno Becker
2017-11-21 18:22:53 +00:00
parent 563423fb21
commit 4c2ac7ef58
2 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
library/ssl_tls.c
View File

@ -721,6 +721,13 @@ int mbedtls_ssl_derive_keys( mbedtls_ssl_context *ssl )
* HMAC implementation which also truncates the key
* (Mbed TLS versions from 1.3 to 2.6.0) */
mac_key_len = transform->maclen;
#if defined(MBEDTLS_DEPRECATED_WARNING)
#warning MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT is deprecated and should only be \
enabled temporarily when (1) the use of truncated HMAC is essential in order \
to save bandwidth, and (2) the peer is an Mbed TLS stack that doesn not use the \
fixed implementation yet (version number <= 2.6.0).
#endif
#endif
}
#endif /* MBEDTLS_SSL_TRUNCATED_HMAC */