diff options
| author | Brent Cook <bcook@openbsd.org> | 2018-11-11 12:36:24 -0600 |
|---|---|---|
| committer | Brent Cook <bcook@openbsd.org> | 2018-11-11 12:36:24 -0600 |
| commit | c109b329e643972da0c051b1bf5f004335eaef53 (patch) | |
| tree | 928d5315b6be036220ce8b7ee340811915ff33ff /ChangeLog | |
| parent | a256df7fe9b556e62f1b219189a78f7008caa6a9 (diff) | |
| download | portable-c109b329e643972da0c051b1bf5f004335eaef53.tar.gz portable-c109b329e643972da0c051b1bf5f004335eaef53.tar.bz2 portable-c109b329e643972da0c051b1bf5f004335eaef53.zip | |
2.9.0 Changelog
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 43 |
1 files changed, 43 insertions, 0 deletions
| @@ -28,6 +28,49 @@ history is also available from Git. | |||
| 28 | 28 | ||
| 29 | LibreSSL Portable Release Notes: | 29 | LibreSSL Portable Release Notes: |
| 30 | 30 | ||
| 31 | 2.9.0 - Development release | ||
| 32 | |||
| 33 | * CRYPTO_LOCK is now automatically initialized, with the legacy | ||
| 34 | callbacks stubbed for compatibility. | ||
| 35 | |||
| 36 | * Added the SM3 hash function from the Chinese standard GB/T | ||
| 37 | 32905-2016. | ||
| 38 | |||
| 39 | * Added more OPENSSL_NO_* macros for compatibility with OpenSSL. | ||
| 40 | |||
| 41 | * Added extensive interoperability tests between LibreSSL and OpenSSL | ||
| 42 | 1.0 and 1.1. | ||
| 43 | |||
| 44 | * Added additional wycheproof tests and related bug fixes. | ||
| 45 | |||
| 46 | * Simplified sigalgs option processing and handshake signing algorithm | ||
| 47 | selection. | ||
| 48 | |||
| 49 | * Added the ability to use the RSA PSS algorithm for handshake | ||
| 50 | signatures. | ||
| 51 | |||
| 52 | * Added bn_rand_interval() and use it in code needing ranges of random | ||
| 53 | bn values. | ||
| 54 | |||
| 55 | * Added functionality to derive early, handshake, and application | ||
| 56 | secrets as per RFC8446. | ||
| 57 | |||
| 58 | * Added handshake state machine from RFC8446. | ||
| 59 | |||
| 60 | * Removed some ASN.1 related code from libcrypto that had not been | ||
| 61 | used since around 2000. | ||
| 62 | |||
| 63 | * Unexported internal symbols and internalized more record layer structs. | ||
| 64 | |||
| 65 | * Added support for assembly optimizations on 32-bit ARM ELF targets. | ||
| 66 | |||
| 67 | * Fix timing vulnerability in ECDSA signature generation (CVE-2018-0735). | ||
| 68 | |||
| 69 | * Fix for Portsmash vulnerability originally by Brumley, ul Hassan and | ||
| 70 | Tuveri. | ||
| 71 | |||
| 72 | * Ensure transcript handshake is always freed with TLS 1.2. | ||
| 73 | |||
| 31 | 2.8.2 - Stable release | 74 | 2.8.2 - Stable release |
| 32 | 75 | ||
| 33 | * Added Wycheproof support for ECDH and ECDSA Web Crypto test vectors, | 76 | * Added Wycheproof support for ECDH and ECDSA Web Crypto test vectors, |
