We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 47b3b6e commit cde422bCopy full SHA for cde422b
1 file changed
doc/CHANGELOG.md
@@ -1,5 +1,13 @@
1
## Changelog
2
3
+### 5.1.1-rc0 2021-05-28
4
+
5
+ * tpm2_import: fix fixed AES key CVE-2021-3565
6
+ - tpm2_import used a fixed AES key for the inner wrapper, which means that
7
+ a MITM attack would be able to unwrap the imported key. To fix this,
8
+ ensure the key size is 16 bytes or bigger and use OpenSSL to generate a
9
+ secure random AES key.
10
11
### 5.1 2021-05-24
12
13
* Build
0 commit comments