kumquat-buildroot/package/mbedtls/mbedtls.hash

# From https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.4-and-2.7.13-released
sha1	e446cbac7d24fc3ff1b1c4ee7c021694ede86db6	mbedtls-2.16.4-apache.tgz
sha256	3441f32bda9c8ef58acc9e18028d09eb9c17d199eb27141bec074905152fb2fb	mbedtls-2.16.4-apache.tgz
# Locally calculated
sha256	cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30	apache-2.0.txt
package/mbedtls: security bump to version 2.16.4 Fix CVE-2019-18222: Our bignum implementation is not constant time/constant trace, so side channel attacks can retrieve the blinded value, factor it (as it is smaller than RSA keys and not guaranteed to have only large prime factors), and then, by brute force, recover the key. Reported by Alejandro Cabrera Aldaya and Billy Brumley. Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2020-01-17 22:51:21 +01:00			`# From https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.4-and-2.7.13-released`
			`sha1 e446cbac7d24fc3ff1b1c4ee7c021694ede86db6 mbedtls-2.16.4-apache.tgz`
			`sha256 3441f32bda9c8ef58acc9e18028d09eb9c17d199eb27141bec074905152fb2fb mbedtls-2.16.4-apache.tgz`
mbedtls: security bump to version 2.6.0 Fixes CVE-2017-14032: authentication bypass. https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2017-02 Add license hash. Cc: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2017-09-05 21:05:26 +02:00			`# Locally calculated`
			`sha256 cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30 apache-2.0.txt`