diff options
author | Brent Cook <bcook@openbsd.org> | 2018-08-03 22:12:20 -0500 |
---|---|---|
committer | Brent Cook <bcook@openbsd.org> | 2018-08-03 22:12:20 -0500 |
commit | 102ae3ad4a3685ed60a5b4aa5b4669b4bb55c237 (patch) | |
tree | bde35f298de1951b3deba4b4ac84dc1aa3fa556a /ChangeLog | |
parent | 29fe12a73285d859ed068f1433bf5006f1da54f3 (diff) | |
download | portable-102ae3ad4a3685ed60a5b4aa5b4669b4bb55c237.tar.gz portable-102ae3ad4a3685ed60a5b4aa5b4669b4bb55c237.tar.bz2 portable-102ae3ad4a3685ed60a5b4aa5b4669b4bb55c237.zip |
Changelog revisions for 2.8.0
Diffstat (limited to 'ChangeLog')
-rw-r--r-- | ChangeLog | 13 |
1 files changed, 8 insertions, 5 deletions
@@ -50,7 +50,8 @@ LibreSSL Portable Release Notes: | |||
50 | * Made ENGINE_finish and ENGINE_free succeed on NULL and simplify callers | 50 | * Made ENGINE_finish and ENGINE_free succeed on NULL and simplify callers |
51 | and matching OpenSSL behavior, rewrote ENGINE_* documentation. | 51 | and matching OpenSSL behavior, rewrote ENGINE_* documentation. |
52 | 52 | ||
53 | * Added const annotations to many existing APIs. | 53 | * Added const annotations to many existing APIs from OpenSSL, making |
54 | interoperability easier for downstream applications. | ||
54 | 55 | ||
55 | * Fixed small timing side-channels in ecdsa_sign_setup and | 56 | * Fixed small timing side-channels in ecdsa_sign_setup and |
56 | dsa_sign_setup. | 57 | dsa_sign_setup. |
@@ -67,17 +68,19 @@ LibreSSL Portable Release Notes: | |||
67 | 68 | ||
68 | * Removed three remaining single DES cipher suites. | 69 | * Removed three remaining single DES cipher suites. |
69 | 70 | ||
70 | * Fixed a potential leak/incorrect return value in DSA signature generation. | 71 | * Fixed a potential leak/incorrect return value in DSA signature |
72 | generation. | ||
71 | 73 | ||
72 | * Added a blinding value when generating DSA and ECDSA signatures, in | 74 | * Added a blinding value when generating DSA and ECDSA signatures, in |
73 | order to reduce the possibility of a side-channel attack leaking the | 75 | order to reduce the possibility of a side-channel attack leaking the |
74 | private key. | 76 | private key. |
75 | 77 | ||
76 | * Added ECC constant time scalar multiplication support. | 78 | * Added ECC constant time scalar multiplication support. |
77 | From Billy Brumley and his team. | 79 | From Billy Brumley and his team at Tampere University of Technology. |
78 | 80 | ||
79 | * Implemented RSASSA-PKCS1-v1_5 as specified in RFC 8017. | 81 | * Revised the implementation of RSASSA-PKCS1-v1_5 to match the |
80 | Based on an OpenSSL commit by David Benjamin. | 82 | specification in RFC 8017. Based on an OpenSSL commit by David |
83 | Benjamin. | ||
81 | 84 | ||
82 | * Cleaned up BN_* implementations following changes made in OpenSSL by | 85 | * Cleaned up BN_* implementations following changes made in OpenSSL by |
83 | Davide Galassi and others. | 86 | Davide Galassi and others. |