Files
INDIA\kanagavels c3bf98f265 CryptoPkg: Disable the security risk ciphers.
REF:https://github.com/tianocore/edk2/issues/11040

Since the below mentioned ciphers has a security risks,
Disable
MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
MBEDTLS_SSL_RENEGOTIATION
MBEDTLS_DHM_C

Enable
MBEDTLS_SSL_DTLS_ANTI_REPLAY
MBEDTLS_SSL_DTLS_HELLO_VERIFY.

Signed-off-by: Kanagavel S <kanagavels@ami.com>
2025-07-03 11:11:59 +00:00
..