summaryrefslogtreecommitdiffstats
path: root/CHANGES
diff options
context:
space:
mode:
authorPauli <paul.dale@oracle.com>2019-04-03 08:03:46 +0200
committerPauli <paul.dale@oracle.com>2019-04-03 08:03:46 +0200
commit5516c19b0314ef9416c5b02ae6347c4f52209e6a (patch)
tree501fca9691e7b8ed5827b5d8e03cc14827841f2a /CHANGES
parentRevert "crypto/rand/rand_win.c: include "e_os.h" to get the default _WIN32_WI... (diff)
downloadopenssl-5516c19b0314ef9416c5b02ae6347c4f52209e6a.tar.xz
openssl-5516c19b0314ef9416c5b02ae6347c4f52209e6a.zip
AES-XTS block limit.
Limit the number of AES blocks in a data unit to 2^20 or less. This corresponds to the mandates in IEEE Std 1619-2018 and NIST SP 800-38E. Note: that this is a change from IEEE Std 1619-2007 which only recommended this limit. Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com> (Merged from https://github.com/openssl/openssl/pull/8627)
Diffstat (limited to 'CHANGES')
-rw-r--r--CHANGES3
1 files changed, 3 insertions, 0 deletions
diff --git a/CHANGES b/CHANGES
index 28d732bcf1..e70e42b570 100644
--- a/CHANGES
+++ b/CHANGES
@@ -9,6 +9,9 @@
Changes between 1.1.1 and 3.0.0 [xx XXX xxxx]
+ *) Limit the number of blocks in a data unit for AES-XTS to 2^20 as
+ mandated by IEEE Std 1619-2018.
+
*) Added newline escaping functionality to a filename when using openssl dgst.
This output format is to replicate the output format found in the '*sum'
checksum programs. This aims to preserve backward compatibility.