aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJack Lloyd <[email protected]>2020-04-01 09:51:47 -0400
committerJack Lloyd <[email protected]>2020-04-01 09:51:47 -0400
commit25347a9b4caeef1f6259d94cd246f84982c3915d (patch)
tree5387dd5edfb11701d34d9646990e0458965d8b2f
parentc9c4b2abc881c4939371cd8024d354836190fb6e (diff)
Update news
-rw-r--r--news.rst13
1 files changed, 11 insertions, 2 deletions
diff --git a/news.rst b/news.rst
index 26b966ffc..49ef85e30 100644
--- a/news.rst
+++ b/news.rst
@@ -13,8 +13,17 @@ Version 2.14.0, Not Yet Released
* Use a new algorithm for modular inversions which is both faster and
more resistant to side channel attacks. (GH #2287 #2296 #2301)
+* Address an issue in CBC padding which would leak the length of the
+ plaintext which was being padded. Unpadding during decryption was
+ not affected. (GH #2312)
+
* Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
+* Increase the size of the ECC blinding mask and scale it based on the
+ size of the group order. (GH #880 #893 #2308)
+
+* Add server side support for the TLS asio wrapper. (GH #2229)
+
* Add support for using Windows certificate store on MinGW (GH #2280)
* Use the library thread pool instead of a new thread for RSA computations,
@@ -34,8 +43,8 @@ Version 2.14.0, Not Yet Released
been removed. Instead only ``botan_all.cpp`` and ``botan_all.h`` are
generated. (GH #2246)
-* Improve support for baremetal systems with no underlying OS.
- (GH #2303 #2304 #2305)
+* Improve support for baremetal systems with no underlying OS, with
+ target OS ``none`` (GH #2303 #2304 #2305)
* The build system now avoids using ``-rpath=$ORIGIN`` or (on macOS)
install_name which allowed running the tests from the build