aboutsummaryrefslogtreecommitdiffstats
path: root/news.rst
diff options
context:
space:
mode:
authorJack Lloyd <[email protected]>2017-03-28 14:45:11 -0400
committerJack Lloyd <[email protected]>2017-03-28 14:45:11 -0400
commit0a45b6d563c9faf87143334f43abf8afec0335d8 (patch)
treeb5d0d0a0e65b2d38a3fc63f7880f31485ff29aa2 /news.rst
parent2539683af23a2e16b07ea7f9e5fd42d221f00eba (diff)
Update release notes
[ci skip]
Diffstat (limited to 'news.rst')
-rw-r--r--news.rst15
1 files changed, 15 insertions, 0 deletions
diff --git a/news.rst b/news.rst
index fc98e79d8..bb871c187 100644
--- a/news.rst
+++ b/news.rst
@@ -8,9 +8,15 @@ Version 2.1.0, Not Yet Released
and 72 characters were truncated at 56 characters. Found and
reported by Solar Designer. (CVE-2017-7252)
+* Correct minimum work factor for Bcrypt password hashes. All other
+ implementations require the work factor be at least 4. Previously
+ Botan simply required it be greater than zero.
+
* Support a 0-length IV in ChaCha stream cipher. Such an IV is treated
identically to an 8-byte IV of all zeros.
+* New C89 API interfaces for testing key validity. (GH #944)
+
* The PKCS11 module did not require any external dependencies, so it
has been enabled by default. The ``-with-pkcs11`` and ``--without-pkcs11``
flags to ``configure.py`` have been removed. (GH #837)
@@ -45,6 +51,15 @@ Version 2.1.0, Not Yet Released
* Add speed tests for modular exponentiations and ECC scalar multiplies.
+* Avoid using IP address for SNI in ``tls_client``. (GH #942)
+
+* Add command line util ``timing_test`` which enables running
+ timing-based side channel analysis of TLS CBC decryption, ECC scalar
+ multiplies, OAEP decoding, and other operations which are prone to
+ providing an oracle via side channel.
+
+* Fix pkg-config output when --build-dir was used (GH #936)
+
* Make it possible to disable `-fstack-protector` using a build-time flag.
GH #863