diff options
| -rw-r--r-- | ChangeLog | 13 |
1 files changed, 8 insertions, 5 deletions
| @@ -50,7 +50,8 @@ LibreSSL Portable Release Notes: | |||
| 50 | * Made ENGINE_finish and ENGINE_free succeed on NULL and simplify callers | 50 | * Made ENGINE_finish and ENGINE_free succeed on NULL and simplify callers |
| 51 | and matching OpenSSL behavior, rewrote ENGINE_* documentation. | 51 | and matching OpenSSL behavior, rewrote ENGINE_* documentation. |
| 52 | 52 | ||
| 53 | * Added const annotations to many existing APIs. | 53 | * Added const annotations to many existing APIs from OpenSSL, making |
| 54 | interoperability easier for downstream applications. | ||
| 54 | 55 | ||
| 55 | * Fixed small timing side-channels in ecdsa_sign_setup and | 56 | * Fixed small timing side-channels in ecdsa_sign_setup and |
| 56 | dsa_sign_setup. | 57 | dsa_sign_setup. |
| @@ -67,17 +68,19 @@ LibreSSL Portable Release Notes: | |||
| 67 | 68 | ||
| 68 | * Removed three remaining single DES cipher suites. | 69 | * Removed three remaining single DES cipher suites. |
| 69 | 70 | ||
| 70 | * Fixed a potential leak/incorrect return value in DSA signature generation. | 71 | * Fixed a potential leak/incorrect return value in DSA signature |
| 72 | generation. | ||
| 71 | 73 | ||
| 72 | * Added a blinding value when generating DSA and ECDSA signatures, in | 74 | * Added a blinding value when generating DSA and ECDSA signatures, in |
| 73 | order to reduce the possibility of a side-channel attack leaking the | 75 | order to reduce the possibility of a side-channel attack leaking the |
| 74 | private key. | 76 | private key. |
| 75 | 77 | ||
| 76 | * Added ECC constant time scalar multiplication support. | 78 | * Added ECC constant time scalar multiplication support. |
| 77 | From Billy Brumley and his team. | 79 | From Billy Brumley and his team at Tampere University of Technology. |
| 78 | 80 | ||
| 79 | * Implemented RSASSA-PKCS1-v1_5 as specified in RFC 8017. | 81 | * Revised the implementation of RSASSA-PKCS1-v1_5 to match the |
| 80 | Based on an OpenSSL commit by David Benjamin. | 82 | specification in RFC 8017. Based on an OpenSSL commit by David |
| 83 | Benjamin. | ||
| 81 | 84 | ||
| 82 | * Cleaned up BN_* implementations following changes made in OpenSSL by | 85 | * Cleaned up BN_* implementations following changes made in OpenSSL by |
| 83 | Davide Galassi and others. | 86 | Davide Galassi and others. |