Improve ChangeLog and migration guide entries
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
diff --git a/ChangeLog.d/mandatory-rng-param.txt b/ChangeLog.d/mandatory-rng-param.txt
index 4e04248..39ee335 100644
--- a/ChangeLog.d/mandatory-rng-param.txt
+++ b/ChangeLog.d/mandatory-rng-param.txt
@@ -1,12 +1,14 @@
API changes
- * For all functions that take an RNG parameter, this parameter is now
- mandatory (that is, NULL is not an acceptable value). Functions which
- previously accepted NULL and now reject it are: the X.509 CRT and CSR
- writing functions; the PK sign and decrypt function; the RSA encrypt,
- decrypt, sign and private functions; the function in DHM and ECDH that
- compute the share secret; the scalar multiplication functions in ECP.
+ * For all functions that take a random number generator (RNG) as a
+ parameter, this parameter is now mandatory (that is, NULL is not an
+ acceptable value). Functions which previously accepted NULL and now
+ reject it are: the X.509 CRT and CSR writing functions; the PK and RSA
+ sign and decrypt function; mbedtls_rsa_private(); the functions
+ in DHM and ECDH that compute the shared secret; the scalar multiplication
+ functions in ECP.
* The following functions now require an RNG parameter:
mbedtls_ecp_check_pub_priv(), mbedtls_pk_check_pair(),
mbedtls_pk_parse_key(), mbedtls_pk_parse_keyfile().
+Removals
* The configuration option MBEDTLS_ECP_NO_INTERNAL_RNG has been removed as
it no longer had any effect.
diff --git a/docs/3.0-migration-guide.d/mandatory-rng-param.md b/docs/3.0-migration-guide.d/mandatory-rng-param.md
index 3cbc356..f6aba08 100644
--- a/docs/3.0-migration-guide.d/mandatory-rng-param.md
+++ b/docs/3.0-migration-guide.d/mandatory-rng-param.md
@@ -5,16 +5,20 @@
parameter with `NULL` as the value of this argument; this is no longer
supported.
-The changed functions are: the X.509 CRT and CSR writing functions; the PK
-sign and decrypt function; the RSA encrypt, decrypt, sign and private
-functions; the functions in DHM and ECDH that compute the share secret; the
-scalar multiplication functions in ECP.
+The changed functions are: the X.509 CRT and CSR writing functions; the PK and
+RSA sign and decrypt functions; `mbedtls_rsa_private()`; the functions in DHM
+and ECDH that compute the shared secret; the scalar multiplication functions in
+ECP.
You now need to pass a properly seeded, cryptographically secure RNG to all
functions that accept a `f_rng` parameter. It is of course still possible to
pass `NULL` as the context pointer `p_rng` if your RNG function doesn't need a
context.
+Alternative implementations of a module (enabled with the `MBEDTLS_module_ALT`
+configuration options) may have their own internal and are free to ignore the
+`f_rng` argument but must allow users to pass one anyway.
+
Some functions gained an RNG parameter
--------------------------------------