edk2/CryptoPkg/Library/MbedTlsLib
INDIA\kanagavels c3bf98f265
Some checks are pending
CodeQL / Analyze (IA32, CryptoPkg) (push) Waiting to run
CodeQL / Analyze (IA32, MdeModulePkg) (push) Waiting to run
CodeQL / Analyze (IA32,X64, DynamicTablesPkg) (push) Waiting to run
CodeQL / Analyze (IA32,X64, FatPkg) (push) Waiting to run
CodeQL / Analyze (IA32,X64, FmpDevicePkg) (push) Waiting to run
CodeQL / Analyze (IA32,X64, IntelFsp2Pkg) (push) Waiting to run
CodeQL / Analyze (IA32,X64, IntelFsp2WrapperPkg) (push) Waiting to run
CodeQL / Analyze (IA32,X64, MdePkg) (push) Waiting to run
CodeQL / Analyze (IA32,X64, PcAtChipsetPkg) (push) Waiting to run
CodeQL / Analyze (IA32,X64, PrmPkg) (push) Waiting to run
CodeQL / Analyze (IA32,X64, SecurityPkg) (push) Waiting to run
CodeQL / Analyze (IA32,X64, ShellPkg) (push) Waiting to run
CodeQL / Analyze (IA32,X64, SourceLevelDebugPkg) (push) Waiting to run
CodeQL / Analyze (IA32,X64, StandaloneMmPkg) (push) Waiting to run
CodeQL / Analyze (IA32,X64, UefiCpuPkg) (push) Waiting to run
CodeQL / Analyze (IA32,X64, UnitTestFrameworkPkg) (push) Waiting to run
CodeQL / Analyze (X64, CryptoPkg) (push) Waiting to run
CodeQL / Analyze (X64, MdeModulePkg) (push) Waiting to run
UPL Build / Build UPL VS2022 (FIT_BUILD=FALSE, windows-latest, 3.12, DEBUG, VS2022) (push) Waiting to run
UPL Build / Build UPL VS2022 (FIT_BUILD=TRUE, windows-latest, 3.12, DEBUG, VS2022) (push) Waiting to run
UPL Build / Build UPL GCC (FIT_BUILD=FALSE, ubuntu-latest, 3.12, DEBUG, GCC) (push) Waiting to run
UPL Build / Build UPL GCC (FIT_BUILD=TRUE, ubuntu-latest, 3.12, DEBUG, GCC) (push) Waiting to run
CryptoPkg: Disable the security risk ciphers.
REF:https://github.com/tianocore/edk2/issues/11040

Since the below mentioned ciphers has a security risks,
Disable
MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
MBEDTLS_SSL_RENEGOTIATION
MBEDTLS_DHM_C

Enable
MBEDTLS_SSL_DTLS_ANTI_REPLAY
MBEDTLS_SSL_DTLS_HELLO_VERIFY.

Signed-off-by: Kanagavel S <kanagavels@ami.com>
2025-07-03 11:11:59 +00:00
..
Include/mbedtls CryptoPkg: Disable the security risk ciphers. 2025-07-03 11:11:59 +00:00
mbedtls@8c89224991 CryptoPkg: Add mbedtls submodule for EDKII 2023-10-12 05:31:19 +00:00
CrtWrapper.c CryptoPkg: Add mbedtls_config and MbedTlsLib.inf 2023-10-12 05:31:19 +00:00
EcSm2Null.c CryptoPkg: Add all .inf files for BaseCryptLibMbedTls 2023-10-12 05:31:19 +00:00
MbedTlsLib.inf CryptoPkg/MbedTls CLANGDWARF: Replace outdated CLANG3x references 2024-09-23 06:11:25 +00:00
MbedTlsLibFull.inf CryptoPkg/MbedTls CLANGDWARF: Replace outdated CLANG3x references 2024-09-23 06:11:25 +00:00