tls/ccm8: reduce the cipher strength for CCM8 ciphers to 64 bits
authorPauli <pauli@openssl.org>
Thu, 23 Sep 2021 02:27:11 +0000 (12:27 +1000)
committerPauli <pauli@openssl.org>
Fri, 24 Sep 2021 07:38:39 +0000 (17:38 +1000)
commite07102220afe4059bc45aa3d7073b7678329e26e
treea7996f369bad514b8542c1ac320c33608d8ecf86
parent56ffcce492ffc6f36b2f0d9431e23febe054dd04
tls/ccm8: reduce the cipher strength for CCM8 ciphers to 64 bits

This is the length of the tag they use and should be considered an upper bound
on their strength.

This lowers their security strength to level 0.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/16652)
CHANGES.md
doc/man3/SSL_CTX_set_security_level.pod
ssl/s3_lib.c
test/sslapitest.c