aboutsummaryrefslogtreecommitdiffstats
path: root/doc/relnotes
Commit message (Collapse)AuthorAgeFilesLines
* Bump version to 1.11.18, update docs to reflect mtn->git conversionJack Lloyd2015-07-022-0/+6
| | | | | | Drop vcs.rst as unlike monotone, git+github probably doesn't require special instructions. Drop users.rst as it has been moved to the github wiki.
* Update for 1.11.17 release1.11.17lloyd2015-06-191-1/+1
|
* Add initial release notes for 1.11.17lloyd2015-06-111-0/+16
|
* Remove RC4 (and all support for stream ciphers) from TLSlloyd2015-05-151-0/+2
|
* Update for 1.11.16 release1.11.16lloyd2015-03-301-2/+5
|
* Relnotes updatelloyd2015-03-231-5/+21
|
* Add ALPN (RFC 7301) and remove NPNlloyd2015-03-201-0/+8
|
* Bump build to 1.11.16lloyd2015-03-121-0/+11
|
* Update for 1.11.15 release1.11.15lloyd2015-03-081-2/+1
|
* Add BOTAN_NOEXCEPT macro to work around missing noexcept in VS 2013.rcdailey2015-03-081-0/+3
| | | | Based on github pull req 23 by Robert Daily.
* Misc doc updatelloyd2015-03-061-1/+4
|
* In Algo_Registry if a maker func fails, try the next most preferred onelloyd2015-03-051-0/+3
| | | | | | | | instead of bailing out immediately. Rename the 'builtin' provider to 'base' since really they are all built in. Fix MARK-4 when OpenSSL was enabled - it did not respect the skip param.
* Hide Algorithm_Factory and use the functions in lookup.h internally.lloyd2015-03-041-0/+2
| | | | | | Fix two memory leaks (in TLS and modes) caused by calling get_foo and then cloning the result before saving it (leaking the original object), a holdover from the conversion between construction techniques in 1.11.14
* When comparing algorithm identifiers consider NULL and emptylloyd2015-03-041-0/+4
| | | | | parameters as equivalent. Based on a patch sent to the mailing list by Uri Blumenthal.
* Fix decrypt in FFI/Python. Github issue 53lloyd2015-03-012-0/+6
|
* Update for 1.11.14 release1.11.14lloyd2015-02-281-22/+56
|
* Update relnotes and todo, fix python signaturelloyd2015-02-191-29/+43
|
* Reduce the CTR_BE buffer down to just a few blocks.lloyd2015-02-171-0/+2
| | | | No performance impact afaict.
* Add new module `ffi` which provides a plain C interface, plus a newlloyd2015-02-161-0/+6
| | | | | | | | | | | | ctypes Python wrapper that uses it. The API is intentionally designed to have a very simple ABI (extern "C", all structs are opaque, no memory ownership passing the FFI boundary, limited set of simple types as args) so the ctypes wrapper is quite simple. Currently ffi provides ciphers, hashes, MACs, RNGs, PBKDF, KDF, bcrypt, and most public key operations. Remove the old boost.python wrapper and all the build code for it.
* Mark modules pulling in external deps (zlib, boost, etc) as such, andlloyd2015-02-061-0/+5
| | | | | | notify the user when they are enabled. Drop botan-config, replaced by `botan config` command added in 1.11.8
* Remove algo factory, engines, global RNG, global state, etc.lloyd2015-02-041-8/+4
| | | | | | | | | | | | | | | Convert all uses of Algorithm_Factory and the engines to using Algo_Registry The shared pool of entropy sources remains but is moved to EntropySource. With that and few remaining initializations (default OIDs and aliases) moved elsewhere, the global state is empty and init and shutdown are no-ops. Remove almost all of the headers and code for handling the global state, except LibraryInitializer which remains as a compatability stub. Update seeding for blinding so only one hacky almost-global RNG instance needs to be setup instead of across all pubkey uses (it uses either the system RNG or an AutoSeeded_RNG if the system RNG is not available).
* Handle repeated initializations of the library better and deal withlloyd2015-01-241-0/+8
| | | | initializations across multiple threads safely.
* Allow reducing the size of the allocated mlock pool via env variablelloyd2015-01-241-0/+9
| | | | | | (BOTAN_MLOCK_POOL_SIZE, specified in decimal KB). Currently we read this even when setuid as the worst a user could do is disable mlock, which they can already do via ulimits.
* Remove memset_s, not implemented on any machine I can test on andlloyd2015-01-231-2/+2
| | | | | | | | problematic for requiring a special define before the first include of string.h. Instead optionally call memset via a volatile function pointer as a faster alternative to byte at a time writes. Github 42, 45
* Update TLS OCB ciphersuites to match draft-zauner-tls-aes-ocb-00lloyd2015-01-212-0/+10
| | | | | and enable them in the default build, though still not enabled in the runtime policy.
* Update for 1.11.13 release1.11.13lloyd2015-01-111-1/+1
|
* Add SipHashlloyd2015-01-111-0/+2
|
* Remove SSLv3 and handling of SSLv2 client hellos.lloyd2015-01-111-0/+3
|
* Convert the asio server from a weird example server to a generic proxy server.lloyd2015-01-101-1/+4
|
* Add MCEIES, an integrated encryption system using McEliece and AES-256/OCBlloyd2015-01-081-0/+3
|
* Change TLS session encryption to use AES-256/GCM instead of CBC+HMAClloyd2015-01-081-6/+22
|
* Add SHA-512/256lloyd2015-01-081-0/+2
| | | | | Define some new functions for copying out arrays of words and use them across hashes.
* Fix install script under Python3lloyd2015-01-061-2/+5
|
* Update relnoteslloyd2015-01-041-0/+8
|
* Tick version to 1.11.13lloyd2015-01-032-0/+5
|
* Update for 1.11.12 release1.11.12lloyd2015-01-022-2/+5
|
* Add ChaCha20Poly1305 TLS ciphersuites compatible with Google's implementationlloyd2014-12-311-0/+3
|
* Add AEAD based on ChaCha20 and Poly1305 defined in ↵lloyd2014-12-291-2/+3
| | | | draft-irtf-cfrg-chacha20-poly1305-03
* Add Poly1305, based on poly1305-donna by Andrew Moon.lloyd2014-12-291-1/+3
|
* When encrypting McEliece or Curve25519 keys, default to GCM instead of CBC.lloyd2014-12-271-3/+9
| | | | Add OIDS for OCB mode with various ciphers.
* Add Curve25519 based on curve25519-donna by Adam Langley.lloyd2014-12-271-0/+4
| | | | | | This uses only the c64 version from curve25519-donna; on systems that don't have a native uint128_t type, a donna128 type stands in for just enough 128-bit operations to satisfy donna.cpp
* Update download link and tick version number.lloyd2014-12-222-0/+4
|
* Update for 1.11.11 release1.11.11lloyd2014-12-221-1/+4
|
* Enable system_rng on Windows and MinGW (untested)lloyd2014-12-211-0/+10
|
* Add abstract database interface so applications can easily store infolloyd2014-12-201-0/+12
| | | | | | in places other than sqlite3, though sqlite3 remains the only implementation. The interface is currently limited to precisely the functionality the TLS session manager needs and will likely expand.
* Add 1.10.9 releaselloyd2014-12-131-0/+20
|
* Tick to 1.11.11lloyd2014-12-131-0/+3
|
* Update for 1.11.10 release1.11.10lloyd2014-12-101-13/+15
|
* Implement RFC 6979 determinstic signatures for DSA and ECDSA.lloyd2014-12-101-0/+4
| | | | | Drop the GNU MP engine. Its implementations were potentially faster in some scenarios but not well protected against side channels.
* Add a basic speed test for McEliecelloyd2014-12-081-7/+8
|
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-24 12:28:21 +0000