commit 85e1dcff6a90d7aa3bbf3abce64ac97b775fda64
author Ron Eldor <Ron.Eldor@arm.com> Tue Feb 06 15:59:38 2018 +0200
committer Ron Eldor <Ron.Eldor@arm.com> Tue Feb 06 15:59:38 2018 +0200
tree 58c88fd4ab5c4e91fb147f24d36e0503bf4b7fbf
parent 32605dc83042d737e715a685e53176388d73540e

Fix handshake failure in suite B

Fix handshake failure where PK key is translated as `MBEDTLS_ECKEY`
instead of `MBEDTLS_ECDSA`

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 8db0215..48529f3 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,11 @@
 mbed TLS ChangeLog (Sorted per branch, date)
 
+= mbed TLS x.x.x branch released xxxx-xx-xx
+
+Bugfix
+   * Fix handshake failure in NIST suite b, where the key was determined as
+     MBEDTLS_ECKEY instead of MBEDTLS_ECDSA.
+
 = mbed TLS 2.7.0 branch released 2018-02-03
 
 Security

library/x509_crt.c

diff --git a/library/x509_crt.c b/library/x509_crt.c
index c6209fb..0e28dac 100644
--- a/library/x509_crt.c
+++ b/library/x509_crt.c
@@ -133,7 +133,8 @@
     MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA256 ) |
     MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA384 ),
     /* Only ECDSA */
-    MBEDTLS_X509_ID_FLAG( MBEDTLS_PK_ECDSA ),
+    MBEDTLS_X509_ID_FLAG( MBEDTLS_PK_ECDSA ) |
+    MBEDTLS_X509_ID_FLAG( MBEDTLS_PK_ECKEY ),
 #if defined(MBEDTLS_ECP_C)
     /* Only NIST P-256 and P-384 */
     MBEDTLS_X509_ID_FLAG( MBEDTLS_ECP_DP_SECP256R1 ) |