commit 5d8aade01dd4a3dbbda1a39bbca0d755987d8d7c
author Andres Amaya Garcia <andres.amayagarcia@arm.com> Tue Oct 30 18:21:41 2018 +0000
committer Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Fri Mar 01 10:29:13 2019 +0100
tree 87940c0a9008ab5e865f9cd07a999281f7510482
parent 2c1d492cccd8624f2bb60512f1f114fb5574f2d1

Reduce priority of 3DES ciphersuites

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 311a51a..3b1ab53 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -2,6 +2,10 @@
 
 = mbed TLS 2.x.x branch released xxxx-xx-xx
 
+Features
+   * Add MBEDTLS_REMOVE_3DES_CIPHERSUITES to allow removing 3DES ciphersuites
+     from the default list (inactive by default).
+
 Bugfix
    * Fix a compilation issue with mbedtls_ecp_restart_ctx not being defined
      when MBEDTLS_ECP_ALT is defined. Reported by jwhui. Fixes #2242.
@@ -37,6 +41,7 @@
    * Ensure that ssl-opt.h can be run in OS X. #2029
    * Reduce the complexity of the timing tests. They were assuming more than the
      underlying OS actually guarantees.
+   * Ciphersuites based on 3DES now have the lowest priority by default.
 
 = mbed TLS 2.16.0 branch released 2018-12-21