tree acc6de83adc647b635d6d474f3dc59d3fcba58c8
parent 679d8ceb13a37bf0c6aa1258c24028a9c17b1d6e
author Hanno Becker <hanno.becker@arm.com> 1542493658 +0000
committer Hanno Becker <hanno.becker@arm.com> 1542895554 +0000

Use PSA-based ciphers for record protections in TLS-1.2 only

Reasons:
- For the first release, we attempt to support TLS-1.2 only,
- At least TLS-1.0 is known to not work at the moment, as
  for CBC ciphersuites the code in mbedtls_ssl_decrypt_buf()
  and mbedtls_ssl_encrypt_buf() assumes that mbedtls_cipher_crypt()
  updates the structure field for the IV in the cipher context,
  which the PSA-based implementation currently doesn't.