factotum/libressl-portable
1
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Changelog revisions for 2.8.0

Browse Source
This commit is contained in:
Brent Cook 2018-08-03 22:12:20 -05:00
parent 29fe12a732
commit 102ae3ad4a
1 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
ChangeLog
View File

@ -50,7 +50,8 @@ LibreSSL Portable Release Notes:
* Made ENGINE_finish and ENGINE_free succeed on NULL and simplify callers * Made ENGINE_finish and ENGINE_free succeed on NULL and simplify callers
and matching OpenSSL behavior, rewrote ENGINE_* documentation. and matching OpenSSL behavior, rewrote ENGINE_* documentation.
* Added const annotations to many existing APIs. * Added const annotations to many existing APIs from OpenSSL, making
interoperability easier for downstream applications.
* Fixed small timing side-channels in ecdsa_sign_setup and * Fixed small timing side-channels in ecdsa_sign_setup and
dsa_sign_setup. dsa_sign_setup.
@ -67,17 +68,19 @@ LibreSSL Portable Release Notes:
* Removed three remaining single DES cipher suites. * Removed three remaining single DES cipher suites.
* Fixed a potential leak/incorrect return value in DSA signature generation. * Fixed a potential leak/incorrect return value in DSA signature
generation.
* Added a blinding value when generating DSA and ECDSA signatures, in * Added a blinding value when generating DSA and ECDSA signatures, in
order to reduce the possibility of a side-channel attack leaking the order to reduce the possibility of a side-channel attack leaking the
private key. private key.
* Added ECC constant time scalar multiplication support. * Added ECC constant time scalar multiplication support.
From Billy Brumley and his team. From Billy Brumley and his team at Tampere University of Technology.
* Implemented RSASSA-PKCS1-v1_5 as specified in RFC 8017. * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
Based on an OpenSSL commit by David Benjamin. specification in RFC 8017. Based on an OpenSSL commit by David
Benjamin.
* Cleaned up BN_* implementations following changes made in OpenSSL by * Cleaned up BN_* implementations following changes made in OpenSSL by
Davide Galassi and others. Davide Galassi and others.