Mark Radbourne
mbed TLS Build
Dependents: Encrypt_Decrypt1 mbed_blink_tls encrypt encrypt
ChangeLog@0:cdf462088d13, 2017-01-05 (annotated)
- Committer:
- markrad
- Date:
- Thu Jan 05 00:18:44 2017 +0000
- Revision:
- 0:cdf462088d13
Initial commit
Who changed what in which revision?
| User | Revision | Line number | New contents of line |
|---|---|---|---|
| markrad | 0:cdf462088d13 | 1 | mbed TLS ChangeLog (Sorted per branch, date) |
| markrad | 0:cdf462088d13 | 2 | |
| markrad | 0:cdf462088d13 | 3 | = mbed TLS 2.4.1 branch released 2016-12-13 |
| markrad | 0:cdf462088d13 | 4 | |
| markrad | 0:cdf462088d13 | 5 | Changes |
| markrad | 0:cdf462088d13 | 6 | * Update to CMAC test data, taken from - NIST Special Publication 800-38B - |
| markrad | 0:cdf462088d13 | 7 | Recommendation for Block Cipher Modes of Operation: The CMAC Mode for |
| markrad | 0:cdf462088d13 | 8 | Authentication – October 2016 |
| markrad | 0:cdf462088d13 | 9 | |
| markrad | 0:cdf462088d13 | 10 | = mbed TLS 2.4.0 branch released 2016-10-17 |
| markrad | 0:cdf462088d13 | 11 | |
| markrad | 0:cdf462088d13 | 12 | Security |
| markrad | 0:cdf462088d13 | 13 | * Removed the MBEDTLS_SSL_AEAD_RANDOM_IV option, because it was not compliant |
| markrad | 0:cdf462088d13 | 14 | with RFC-5116 and could lead to session key recovery in very long TLS |
| markrad | 0:cdf462088d13 | 15 | sessions. "Nonce-Disrespecting Adversaries Practical Forgery Attacks on GCM in |
| markrad | 0:cdf462088d13 | 16 | TLS" - H. Bock, A. Zauner, S. Devlin, J. Somorovsky, P. Jovanovic. |
| markrad | 0:cdf462088d13 | 17 | https://eprint.iacr.org/2016/475.pdf |
| markrad | 0:cdf462088d13 | 18 | * Fixed potential stack corruption in mbedtls_x509write_crt_der() and |
| markrad | 0:cdf462088d13 | 19 | mbedtls_x509write_csr_der() when the signature is copied to the buffer |
| markrad | 0:cdf462088d13 | 20 | without checking whether there is enough space in the destination. The |
| markrad | 0:cdf462088d13 | 21 | issue cannot be triggered remotely. Found by Jethro Beekman. |
| markrad | 0:cdf462088d13 | 22 | |
| markrad | 0:cdf462088d13 | 23 | Features |
| markrad | 0:cdf462088d13 | 24 | * Added support for CMAC for AES and 3DES and AES-CMAC-PRF-128, as defined by |
| markrad | 0:cdf462088d13 | 25 | NIST SP 800-38B, RFC-4493 and RFC-4615. |
| markrad | 0:cdf462088d13 | 26 | * Added hardware entropy selftest to verify that the hardware entropy source |
| markrad | 0:cdf462088d13 | 27 | is functioning correctly. |
| markrad | 0:cdf462088d13 | 28 | * Added a script to print build environment info for diagnostic use in test |
| markrad | 0:cdf462088d13 | 29 | scripts, which is also now called by all.sh. |
| markrad | 0:cdf462088d13 | 30 | * Added the macro MBEDTLS_X509_MAX_FILE_PATH_LEN that enables the user to |
| markrad | 0:cdf462088d13 | 31 | configure the maximum length of a file path that can be buffered when |
| markrad | 0:cdf462088d13 | 32 | calling mbedtls_x509_crt_parse_path(). |
| markrad | 0:cdf462088d13 | 33 | * Added a configuration file config-no-entropy.h that configures the subset of |
| markrad | 0:cdf462088d13 | 34 | library features that do not require an entropy source. |
| markrad | 0:cdf462088d13 | 35 | * Added the macro MBEDTLS_ENTROPY_MIN_HARDWARE in config.h. This allows users |
| markrad | 0:cdf462088d13 | 36 | to configure the minimum number of bytes for entropy sources using the |
| markrad | 0:cdf462088d13 | 37 | mbedtls_hardware_poll() function. |
| markrad | 0:cdf462088d13 | 38 | |
| markrad | 0:cdf462088d13 | 39 | Bugfix |
| markrad | 0:cdf462088d13 | 40 | * Fix for platform time abstraction to avoid dependency issues where a build |
| markrad | 0:cdf462088d13 | 41 | may need time but not the standard C library abstraction, and added |
| markrad | 0:cdf462088d13 | 42 | configuration consistency checks to check_config.h |
| markrad | 0:cdf462088d13 | 43 | * Fix dependency issue in Makefile to allow parallel builds. |
| markrad | 0:cdf462088d13 | 44 | * Fix incorrect handling of block lengths in crypt_and_hash.c sample program, |
| markrad | 0:cdf462088d13 | 45 | when GCM is used. Found by udf2457. #441 |
| markrad | 0:cdf462088d13 | 46 | * Fix for key exchanges based on ECDH-RSA or ECDH-ECDSA which weren't |
| markrad | 0:cdf462088d13 | 47 | enabled unless others were also present. Found by David Fernandez. #428 |
| markrad | 0:cdf462088d13 | 48 | * Fix for out-of-tree builds using CMake. Found by jwurzer, and fix based on |
| markrad | 0:cdf462088d13 | 49 | a contribution from Tobias Tangemann. #541 |
| markrad | 0:cdf462088d13 | 50 | * Fixed cert_app.c sample program for debug output and for use when no root |
| markrad | 0:cdf462088d13 | 51 | certificates are provided. |
| markrad | 0:cdf462088d13 | 52 | * Fix conditional statement that would cause a 1 byte overread in |
| markrad | 0:cdf462088d13 | 53 | mbedtls_asn1_get_int(). Found and fixed by Guido Vranken. #599 |
| markrad | 0:cdf462088d13 | 54 | * Fixed pthread implementation to avoid unintended double initialisations |
| markrad | 0:cdf462088d13 | 55 | and double frees. Found by Niklas Amnebratt. |
| markrad | 0:cdf462088d13 | 56 | * Fixed the sample applications gen_key.c, cert_req.c and cert_write.c for |
| markrad | 0:cdf462088d13 | 57 | builds where the configuration MBEDTLS_PEM_WRITE_C is not defined. Found |
| markrad | 0:cdf462088d13 | 58 | by inestlerode. #559. |
| markrad | 0:cdf462088d13 | 59 | * Fix mbedtls_x509_get_sig() to update the ASN1 type in the mbedtls_x509_buf |
| markrad | 0:cdf462088d13 | 60 | data structure until after error checks are successful. Found by |
| markrad | 0:cdf462088d13 | 61 | subramanyam-c. #622 |
| markrad | 0:cdf462088d13 | 62 | * Fix documentation and implementation missmatch for function arguments of |
| markrad | 0:cdf462088d13 | 63 | mbedtls_gcm_finish(). Found by cmiatpaar. #602 |
| markrad | 0:cdf462088d13 | 64 | * Guarantee that P>Q at RSA key generation. Found by inestlerode. #558 |
| markrad | 0:cdf462088d13 | 65 | * Fix potential byte overread when verifying malformed SERVER_HELLO in |
| markrad | 0:cdf462088d13 | 66 | ssl_parse_hello_verify_request() for DTLS. Found by Guido Vranken. |
| markrad | 0:cdf462088d13 | 67 | * Fix check for validity of date when parsing in mbedtls_x509_get_time(). |
| markrad | 0:cdf462088d13 | 68 | Found by subramanyam-c. #626 |
| markrad | 0:cdf462088d13 | 69 | * Fix compatibility issue with Internet Explorer client authentication, |
| markrad | 0:cdf462088d13 | 70 | where the limited hash choices prevented the client from sending its |
| markrad | 0:cdf462088d13 | 71 | certificate. Found by teumas. #513 |
| markrad | 0:cdf462088d13 | 72 | * Fix compilation without MBEDTLS_SELF_TEST enabled. |
| markrad | 0:cdf462088d13 | 73 | |
| markrad | 0:cdf462088d13 | 74 | Changes |
| markrad | 0:cdf462088d13 | 75 | * Extended test coverage of special cases, and added new timing test suite. |
| markrad | 0:cdf462088d13 | 76 | * Removed self-tests from the basic-built-test.sh script, and added all |
| markrad | 0:cdf462088d13 | 77 | missing self-tests to the test suites, to ensure self-tests are only |
| markrad | 0:cdf462088d13 | 78 | executed once. |
| markrad | 0:cdf462088d13 | 79 | * Added support for 3 and 4 byte lengths to mbedtls_asn1_write_len(). |
| markrad | 0:cdf462088d13 | 80 | * Added support for a Yotta specific configuration file - |
| markrad | 0:cdf462088d13 | 81 | through the symbol YOTTA_CFG_MBEDTLS_TARGET_CONFIG_FILE. |
| markrad | 0:cdf462088d13 | 82 | * Added optimization for code space for X.509/OID based on configured |
| markrad | 0:cdf462088d13 | 83 | features. Contributed by Aviv Palivoda. |
| markrad | 0:cdf462088d13 | 84 | * Renamed source file library/net.c to library/net_sockets.c to avoid |
| markrad | 0:cdf462088d13 | 85 | naming collision in projects which also have files with the common name |
| markrad | 0:cdf462088d13 | 86 | net.c. For consistency, the corresponding header file, net.h, is marked as |
| markrad | 0:cdf462088d13 | 87 | deprecated, and its contents moved to net_sockets.h. |
| markrad | 0:cdf462088d13 | 88 | * Changed the strategy for X.509 certificate parsing and validation, to no |
| markrad | 0:cdf462088d13 | 89 | longer disregard certificates with unrecognised fields. |
| markrad | 0:cdf462088d13 | 90 | |
| markrad | 0:cdf462088d13 | 91 | = mbed TLS 2.3.0 branch released 2016-06-28 |
| markrad | 0:cdf462088d13 | 92 | |
| markrad | 0:cdf462088d13 | 93 | Security |
| markrad | 0:cdf462088d13 | 94 | * Fix missing padding length check in mbedtls_rsa_rsaes_pkcs1_v15_decrypt |
| markrad | 0:cdf462088d13 | 95 | required by PKCS1 v2.2 |
| markrad | 0:cdf462088d13 | 96 | * Fix potential integer overflow to buffer overflow in |
| markrad | 0:cdf462088d13 | 97 | mbedtls_rsa_rsaes_pkcs1_v15_encrypt and mbedtls_rsa_rsaes_oaep_encrypt |
| markrad | 0:cdf462088d13 | 98 | (not triggerable remotely in (D)TLS). |
| markrad | 0:cdf462088d13 | 99 | * Fix a potential integer underflow to buffer overread in |
| markrad | 0:cdf462088d13 | 100 | mbedtls_rsa_rsaes_oaep_decrypt. It is not triggerable remotely in |
| markrad | 0:cdf462088d13 | 101 | SSL/TLS. |
| markrad | 0:cdf462088d13 | 102 | |
| markrad | 0:cdf462088d13 | 103 | Features |
| markrad | 0:cdf462088d13 | 104 | * Support for platform abstraction of the standard C library time() |
| markrad | 0:cdf462088d13 | 105 | function. |
| markrad | 0:cdf462088d13 | 106 | |
| markrad | 0:cdf462088d13 | 107 | Bugfix |
| markrad | 0:cdf462088d13 | 108 | * Fix bug in mbedtls_mpi_add_mpi() that caused wrong results when the three |
| markrad | 0:cdf462088d13 | 109 | arguments where the same (in-place doubling). Found and fixed by Janos |
| markrad | 0:cdf462088d13 | 110 | Follath. #309 |
| markrad | 0:cdf462088d13 | 111 | * Fix potential build failures related to the 'apidoc' target, introduced |
| markrad | 0:cdf462088d13 | 112 | in the previous patch release. Found by Robert Scheck. #390 #391 |
| markrad | 0:cdf462088d13 | 113 | * Fix issue in Makefile that prevented building using armar. #386 |
| markrad | 0:cdf462088d13 | 114 | * Fix memory leak that occured only when ECJPAKE was enabled and ECDHE and |
| markrad | 0:cdf462088d13 | 115 | ECDSA was disabled in config.h . The leak didn't occur by default. |
| markrad | 0:cdf462088d13 | 116 | * Fix an issue that caused valid certificates to be rejected whenever an |
| markrad | 0:cdf462088d13 | 117 | expired or not yet valid certificate was parsed before a valid certificate |
| markrad | 0:cdf462088d13 | 118 | in the trusted certificate list. |
| markrad | 0:cdf462088d13 | 119 | * Fix bug in mbedtls_x509_crt_parse that caused trailing extra data in the |
| markrad | 0:cdf462088d13 | 120 | buffer after DER certificates to be included in the raw representation. |
| markrad | 0:cdf462088d13 | 121 | * Fix issue that caused a hang when generating RSA keys of odd bitlength |
| markrad | 0:cdf462088d13 | 122 | * Fix bug in mbedtls_rsa_rsaes_pkcs1_v15_encrypt that made null pointer |
| markrad | 0:cdf462088d13 | 123 | dereference possible. |
| markrad | 0:cdf462088d13 | 124 | * Fix issue that caused a crash if invalid curves were passed to |
| markrad | 0:cdf462088d13 | 125 | mbedtls_ssl_conf_curves. #373 |
| markrad | 0:cdf462088d13 | 126 | * Fix issue in ssl_fork_server which was preventing it from functioning. #429 |
| markrad | 0:cdf462088d13 | 127 | * Fix memory leaks in test framework |
| markrad | 0:cdf462088d13 | 128 | * Fix test in ssl-opt.sh that does not run properly with valgrind |
| markrad | 0:cdf462088d13 | 129 | * Fix unchecked calls to mmbedtls_md_setup(). Fix by Brian Murray. #502 |
| markrad | 0:cdf462088d13 | 130 | |
| markrad | 0:cdf462088d13 | 131 | Changes |
| markrad | 0:cdf462088d13 | 132 | * On ARM platforms, when compiling with -O0 with GCC, Clang or armcc5, |
| markrad | 0:cdf462088d13 | 133 | don't use the optimized assembly for bignum multiplication. This removes |
| markrad | 0:cdf462088d13 | 134 | the need to pass -fomit-frame-pointer to avoid a build error with -O0. |
| markrad | 0:cdf462088d13 | 135 | * Disabled SSLv3 in the default configuration. |
| markrad | 0:cdf462088d13 | 136 | * Optimized mbedtls_mpi_zeroize() for MPI integer size. (Fix by Alexey |
| markrad | 0:cdf462088d13 | 137 | Skalozub). |
| markrad | 0:cdf462088d13 | 138 | * Fix non-compliance server extension handling. Extensions for SSLv3 are now |
| markrad | 0:cdf462088d13 | 139 | ignored, as required by RFC6101. |
| markrad | 0:cdf462088d13 | 140 | |
| markrad | 0:cdf462088d13 | 141 | = mbed TLS 2.2.1 released 2016-01-05 |
| markrad | 0:cdf462088d13 | 142 | |
| markrad | 0:cdf462088d13 | 143 | Security |
| markrad | 0:cdf462088d13 | 144 | * Fix potential double free when mbedtls_asn1_store_named_data() fails to |
| markrad | 0:cdf462088d13 | 145 | allocate memory. Only used for certificate generation, not triggerable |
| markrad | 0:cdf462088d13 | 146 | remotely in SSL/TLS. Found by Rafał Przywara. #367 |
| markrad | 0:cdf462088d13 | 147 | * Disable MD5 handshake signatures in TLS 1.2 by default to prevent the |
| markrad | 0:cdf462088d13 | 148 | SLOTH attack on TLS 1.2 server authentication (other attacks from the |
| markrad | 0:cdf462088d13 | 149 | SLOTH paper do not apply to any version of mbed TLS or PolarSSL). |
| markrad | 0:cdf462088d13 | 150 | https://www.mitls.org/pages/attacks/SLOTH |
| markrad | 0:cdf462088d13 | 151 | |
| markrad | 0:cdf462088d13 | 152 | Bugfix |
| markrad | 0:cdf462088d13 | 153 | * Fix over-restrictive length limit in GCM. Found by Andreas-N. #362 |
| markrad | 0:cdf462088d13 | 154 | * Fix bug in certificate validation that caused valid chains to be rejected |
| markrad | 0:cdf462088d13 | 155 | when the first intermediate certificate has pathLenConstraint=0. Found by |
| markrad | 0:cdf462088d13 | 156 | Nicholas Wilson. Introduced in mbed TLS 2.2.0. #280 |
| markrad | 0:cdf462088d13 | 157 | * Removed potential leak in mbedtls_rsa_rsassa_pkcs1_v15_sign(), found by |
| markrad | 0:cdf462088d13 | 158 | JayaraghavendranK. #372 |
| markrad | 0:cdf462088d13 | 159 | * Fix suboptimal handling of unexpected records that caused interop issues |
| markrad | 0:cdf462088d13 | 160 | with some peers over unreliable links. Avoid dropping an entire DTLS |
| markrad | 0:cdf462088d13 | 161 | datagram if a single record in a datagram is unexpected, instead only |
| markrad | 0:cdf462088d13 | 162 | drop the record and look at subsequent records (if any are present) in |
| markrad | 0:cdf462088d13 | 163 | the same datagram. Found by jeannotlapin. #345 |
| markrad | 0:cdf462088d13 | 164 | |
| markrad | 0:cdf462088d13 | 165 | = mbed TLS 2.2.0 released 2015-11-04 |
| markrad | 0:cdf462088d13 | 166 | |
| markrad | 0:cdf462088d13 | 167 | Security |
| markrad | 0:cdf462088d13 | 168 | * Fix potential double free if mbedtls_ssl_conf_psk() is called more than |
| markrad | 0:cdf462088d13 | 169 | once and some allocation fails. Cannot be forced remotely. Found by Guido |
| markrad | 0:cdf462088d13 | 170 | Vranken, Intelworks. |
| markrad | 0:cdf462088d13 | 171 | * Fix potential heap corruption on Windows when |
| markrad | 0:cdf462088d13 | 172 | mbedtls_x509_crt_parse_path() is passed a path longer than 2GB. Cannot be |
| markrad | 0:cdf462088d13 | 173 | triggered remotely. Found by Guido Vranken, Intelworks. |
| markrad | 0:cdf462088d13 | 174 | * Fix potential buffer overflow in some asn1_write_xxx() functions. |
| markrad | 0:cdf462088d13 | 175 | Cannot be triggered remotely unless you create X.509 certificates based |
| markrad | 0:cdf462088d13 | 176 | on untrusted input or write keys of untrusted origin. Found by Guido |
| markrad | 0:cdf462088d13 | 177 | Vranken, Intelworks. |
| markrad | 0:cdf462088d13 | 178 | * The X509 max_pathlen constraint was not enforced on intermediate |
| markrad | 0:cdf462088d13 | 179 | certificates. Found by Nicholas Wilson, fix and tests provided by |
| markrad | 0:cdf462088d13 | 180 | Janos Follath. #280 and #319 |
| markrad | 0:cdf462088d13 | 181 | |
| markrad | 0:cdf462088d13 | 182 | Features |
| markrad | 0:cdf462088d13 | 183 | * Experimental support for EC J-PAKE as defined in Thread 1.0.0. |
| markrad | 0:cdf462088d13 | 184 | Disabled by default as the specification might still change. |
| markrad | 0:cdf462088d13 | 185 | * Added a key extraction callback to accees the master secret and key |
| markrad | 0:cdf462088d13 | 186 | block. (Potential uses include EAP-TLS and Thread.) |
| markrad | 0:cdf462088d13 | 187 | |
| markrad | 0:cdf462088d13 | 188 | Bugfix |
| markrad | 0:cdf462088d13 | 189 | * Self-signed certificates were not excluded from pathlen counting, |
| markrad | 0:cdf462088d13 | 190 | resulting in some valid X.509 being incorrectly rejected. Found and fix |
| markrad | 0:cdf462088d13 | 191 | provided by Janos Follath. #319 |
| markrad | 0:cdf462088d13 | 192 | * Fix build error with configurations where ECDHE-PSK is the only key |
| markrad | 0:cdf462088d13 | 193 | exchange. Found and fix provided by Chris Hammond. #270 |
| markrad | 0:cdf462088d13 | 194 | * Fix build error with configurations where RSA, RSA-PSK, ECDH-RSA or |
| markrad | 0:cdf462088d13 | 195 | ECHD-ECDSA if the only key exchange. Multiple reports. #310 |
| markrad | 0:cdf462088d13 | 196 | * Fixed a bug causing some handshakes to fail due to some non-fatal alerts |
| markrad | 0:cdf462088d13 | 197 | not being properly ignored. Found by mancha and Kasom Koht-arsa, #308 |
| markrad | 0:cdf462088d13 | 198 | * mbedtls_x509_crt_verify(_with_profile)() now also checks the key type and |
| markrad | 0:cdf462088d13 | 199 | size/curve against the profile. Before that, there was no way to set a |
| markrad | 0:cdf462088d13 | 200 | minimum key size for end-entity certificates with RSA keys. Found by |
| markrad | 0:cdf462088d13 | 201 | Matthew Page of Scannex Electronics Ltd. |
| markrad | 0:cdf462088d13 | 202 | * Fix failures in MPI on Sparc(64) due to use of bad assembly code. |
| markrad | 0:cdf462088d13 | 203 | Found by Kurt Danielson. #292 |
| markrad | 0:cdf462088d13 | 204 | * Fix typo in name of the extKeyUsage OID. Found by inestlerode, #314 |
| markrad | 0:cdf462088d13 | 205 | * Fix bug in ASN.1 encoding of booleans that caused generated CA |
| markrad | 0:cdf462088d13 | 206 | certificates to be rejected by some applications, including OS X |
| markrad | 0:cdf462088d13 | 207 | Keychain. Found and fixed by Jonathan Leroy, Inikup. |
| markrad | 0:cdf462088d13 | 208 | |
| markrad | 0:cdf462088d13 | 209 | Changes |
| markrad | 0:cdf462088d13 | 210 | * Improved performance of mbedtls_ecp_muladd() when one of the scalars is 1 |
| markrad | 0:cdf462088d13 | 211 | or -1. |
| markrad | 0:cdf462088d13 | 212 | |
| markrad | 0:cdf462088d13 | 213 | = mbed TLS 2.1.2 released 2015-10-06 |
| markrad | 0:cdf462088d13 | 214 | |
| markrad | 0:cdf462088d13 | 215 | Security |
| markrad | 0:cdf462088d13 | 216 | * Added fix for CVE-2015-5291 to prevent heap corruption due to buffer |
| markrad | 0:cdf462088d13 | 217 | overflow of the hostname or session ticket. Found by Guido Vranken, |
| markrad | 0:cdf462088d13 | 218 | Intelworks. |
| markrad | 0:cdf462088d13 | 219 | * Fix potential double-free if mbedtls_ssl_set_hs_psk() is called more than |
| markrad | 0:cdf462088d13 | 220 | once in the same handhake and mbedtls_ssl_conf_psk() was used. |
| markrad | 0:cdf462088d13 | 221 | Found and patch provided by Guido Vranken, Intelworks. Cannot be forced |
| markrad | 0:cdf462088d13 | 222 | remotely. |
| markrad | 0:cdf462088d13 | 223 | * Fix stack buffer overflow in pkcs12 decryption (used by |
| markrad | 0:cdf462088d13 | 224 | mbedtls_pk_parse_key(file)() when the password is > 129 bytes. |
| markrad | 0:cdf462088d13 | 225 | Found by Guido Vranken, Intelworks. Not triggerable remotely. |
| markrad | 0:cdf462088d13 | 226 | * Fix potential buffer overflow in mbedtls_mpi_read_string(). |
| markrad | 0:cdf462088d13 | 227 | Found by Guido Vranken, Intelworks. Not exploitable remotely in the context |
| markrad | 0:cdf462088d13 | 228 | of TLS, but might be in other uses. On 32 bit machines, requires reading a |
| markrad | 0:cdf462088d13 | 229 | string of close to or larger than 1GB to exploit; on 64 bit machines, would |
| markrad | 0:cdf462088d13 | 230 | require reading a string of close to or larger than 2^62 bytes. |
| markrad | 0:cdf462088d13 | 231 | * Fix potential random memory allocation in mbedtls_pem_read_buffer() |
| markrad | 0:cdf462088d13 | 232 | on crafted PEM input data. Found and fix provided by Guido Vranken, |
| markrad | 0:cdf462088d13 | 233 | Intelworks. Not triggerable remotely in TLS. Triggerable remotely if you |
| markrad | 0:cdf462088d13 | 234 | accept PEM data from an untrusted source. |
| markrad | 0:cdf462088d13 | 235 | * Fix possible heap buffer overflow in base64_encoded() when the input |
| markrad | 0:cdf462088d13 | 236 | buffer is 512MB or larger on 32-bit platforms. Found by Guido Vranken, |
| markrad | 0:cdf462088d13 | 237 | Intelworks. Not trigerrable remotely in TLS. |
| markrad | 0:cdf462088d13 | 238 | * Fix potential double-free if mbedtls_conf_psk() is called repeatedly on |
| markrad | 0:cdf462088d13 | 239 | the same mbedtls_ssl_config object and memory allocation fails. Found by |
| markrad | 0:cdf462088d13 | 240 | Guido Vranken, Intelworks. Cannot be forced remotely. |
| markrad | 0:cdf462088d13 | 241 | * Fix potential heap buffer overflow in servers that perform client |
| markrad | 0:cdf462088d13 | 242 | authentication against a crafted CA cert. Cannot be triggered remotely |
| markrad | 0:cdf462088d13 | 243 | unless you allow third parties to pick trust CAs for client auth. |
| markrad | 0:cdf462088d13 | 244 | Found by Guido Vranken, Intelworks. |
| markrad | 0:cdf462088d13 | 245 | |
| markrad | 0:cdf462088d13 | 246 | Bugfix |
| markrad | 0:cdf462088d13 | 247 | * Fix compile error in net.c with musl libc. Found and patch provided by |
| markrad | 0:cdf462088d13 | 248 | zhasha (#278). |
| markrad | 0:cdf462088d13 | 249 | * Fix macroization of 'inline' keyword when building as C++. (#279) |
| markrad | 0:cdf462088d13 | 250 | |
| markrad | 0:cdf462088d13 | 251 | Changes |
| markrad | 0:cdf462088d13 | 252 | * Added checking of hostname length in mbedtls_ssl_set_hostname() to ensure |
| markrad | 0:cdf462088d13 | 253 | domain names are compliant with RFC 1035. |
| markrad | 0:cdf462088d13 | 254 | * Fixed paths for check_config.h in example config files. (Found by bachp) |
| markrad | 0:cdf462088d13 | 255 | (#291) |
| markrad | 0:cdf462088d13 | 256 | |
| markrad | 0:cdf462088d13 | 257 | = mbed TLS 2.1.1 released 2015-09-17 |
| markrad | 0:cdf462088d13 | 258 | |
| markrad | 0:cdf462088d13 | 259 | Security |
| markrad | 0:cdf462088d13 | 260 | * Add countermeasure against Lenstra's RSA-CRT attack for PKCS#1 v1.5 |
| markrad | 0:cdf462088d13 | 261 | signatures. (Found by Florian Weimer, Red Hat.) |
| markrad | 0:cdf462088d13 | 262 | https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/ |
| markrad | 0:cdf462088d13 | 263 | * Fix possible client-side NULL pointer dereference (read) when the client |
| markrad | 0:cdf462088d13 | 264 | tries to continue the handshake after it failed (a misuse of the API). |
| markrad | 0:cdf462088d13 | 265 | (Found and patch provided by Fabian Foerg, Gotham Digital Science using |
| markrad | 0:cdf462088d13 | 266 | afl-fuzz.) |
| markrad | 0:cdf462088d13 | 267 | |
| markrad | 0:cdf462088d13 | 268 | Bugfix |
| markrad | 0:cdf462088d13 | 269 | * Fix warning when using a 64bit platform. (found by embedthis) (#275) |
| markrad | 0:cdf462088d13 | 270 | * Fix off-by-one error in parsing Supported Point Format extension that |
| markrad | 0:cdf462088d13 | 271 | caused some handshakes to fail. |
| markrad | 0:cdf462088d13 | 272 | |
| markrad | 0:cdf462088d13 | 273 | Changes |
| markrad | 0:cdf462088d13 | 274 | * Made X509 profile pointer const in mbedtls_ssl_conf_cert_profile() to allow |
| markrad | 0:cdf462088d13 | 275 | use of mbedtls_x509_crt_profile_next. (found by NWilson) |
| markrad | 0:cdf462088d13 | 276 | * When a client initiates a reconnect from the same port as a live |
| markrad | 0:cdf462088d13 | 277 | connection, if cookie verification is available |
| markrad | 0:cdf462088d13 | 278 | (MBEDTLS_SSL_DTLS_HELLO_VERIFY defined in config.h, and usable cookie |
| markrad | 0:cdf462088d13 | 279 | callbacks set with mbedtls_ssl_conf_dtls_cookies()), this will be |
| markrad | 0:cdf462088d13 | 280 | detected and mbedtls_ssl_read() will return |
| markrad | 0:cdf462088d13 | 281 | MBEDTLS_ERR_SSL_CLIENT_RECONNECT - it is then possible to start a new |
| markrad | 0:cdf462088d13 | 282 | handshake with the same context. (See RFC 6347 section 4.2.8.) |
| markrad | 0:cdf462088d13 | 283 | |
| markrad | 0:cdf462088d13 | 284 | = mbed TLS 2.1.0 released 2015-09-04 |
| markrad | 0:cdf462088d13 | 285 | |
| markrad | 0:cdf462088d13 | 286 | Features |
| markrad | 0:cdf462088d13 | 287 | * Added support for yotta as a build system. |
| markrad | 0:cdf462088d13 | 288 | * Primary open source license changed to Apache 2.0 license. |
| markrad | 0:cdf462088d13 | 289 | |
| markrad | 0:cdf462088d13 | 290 | Bugfix |
| markrad | 0:cdf462088d13 | 291 | * Fix segfault in the benchmark program when benchmarking DHM. |
| markrad | 0:cdf462088d13 | 292 | * Fix build error with CMake and pre-4.5 versions of GCC (found by Hugo |
| markrad | 0:cdf462088d13 | 293 | Leisink). |
| markrad | 0:cdf462088d13 | 294 | * Fix bug when parsing a ServerHello without extensions (found by David |
| markrad | 0:cdf462088d13 | 295 | Sears). |
| markrad | 0:cdf462088d13 | 296 | * Fix bug in CMake lists that caused libmbedcrypto.a not to be installed |
| markrad | 0:cdf462088d13 | 297 | (found by Benoit Lecocq). |
| markrad | 0:cdf462088d13 | 298 | * Fix bug in Makefile that caused libmbedcrypto and libmbedx509 not to be |
| markrad | 0:cdf462088d13 | 299 | installed (found by Rawi666). |
| markrad | 0:cdf462088d13 | 300 | * Fix compile error with armcc 5 with --gnu option. |
| markrad | 0:cdf462088d13 | 301 | * Fix bug in Makefile that caused programs not to be installed correctly |
| markrad | 0:cdf462088d13 | 302 | (found by robotanarchy) (#232). |
| markrad | 0:cdf462088d13 | 303 | * Fix bug in Makefile that prevented from installing without building the |
| markrad | 0:cdf462088d13 | 304 | tests (found by robotanarchy) (#232). |
| markrad | 0:cdf462088d13 | 305 | * Fix missing -static-libgcc when building shared libraries for Windows |
| markrad | 0:cdf462088d13 | 306 | with make. |
| markrad | 0:cdf462088d13 | 307 | * Fix link error when building shared libraries for Windows with make. |
| markrad | 0:cdf462088d13 | 308 | * Fix error when loading libmbedtls.so. |
| markrad | 0:cdf462088d13 | 309 | * Fix bug in mbedtls_ssl_conf_default() that caused the default preset to |
| markrad | 0:cdf462088d13 | 310 | be always used (found by dcb314) (#235) |
| markrad | 0:cdf462088d13 | 311 | * Fix bug in mbedtls_rsa_public() and mbedtls_rsa_private() that could |
| markrad | 0:cdf462088d13 | 312 | result trying to unlock an unlocked mutex on invalid input (found by |
| markrad | 0:cdf462088d13 | 313 | Fredrik Axelsson) (#257) |
| markrad | 0:cdf462088d13 | 314 | * Fix -Wshadow warnings (found by hnrkp) (#240) |
| markrad | 0:cdf462088d13 | 315 | * Fix memory corruption on client with overlong PSK identity, around |
| markrad | 0:cdf462088d13 | 316 | SSL_MAX_CONTENT_LEN or higher - not triggerrable remotely (found by |
| markrad | 0:cdf462088d13 | 317 | Aleksandrs Saveljevs) (#238) |
| markrad | 0:cdf462088d13 | 318 | * Fix unused function warning when using MBEDTLS_MDx_ALT or |
| markrad | 0:cdf462088d13 | 319 | MBEDTLS_SHAxxx_ALT (found by Henrik) (#239) |
| markrad | 0:cdf462088d13 | 320 | * Fix memory corruption in pkey programs (found by yankuncheng) (#210) |
| markrad | 0:cdf462088d13 | 321 | |
| markrad | 0:cdf462088d13 | 322 | Changes |
| markrad | 0:cdf462088d13 | 323 | * The PEM parser now accepts a trailing space at end of lines (#226). |
| markrad | 0:cdf462088d13 | 324 | * It is now possible to #include a user-provided configuration file at the |
| markrad | 0:cdf462088d13 | 325 | end of the default config.h by defining MBEDTLS_USER_CONFIG_FILE on the |
| markrad | 0:cdf462088d13 | 326 | compiler's command line. |
| markrad | 0:cdf462088d13 | 327 | * When verifying a certificate chain, if an intermediate certificate is |
| markrad | 0:cdf462088d13 | 328 | trusted, no later cert is checked. (suggested by hannes-landeholm) |
| markrad | 0:cdf462088d13 | 329 | (#220). |
| markrad | 0:cdf462088d13 | 330 | * Prepend a "thread identifier" to debug messages (issue pointed out by |
| markrad | 0:cdf462088d13 | 331 | Hugo Leisink) (#210). |
| markrad | 0:cdf462088d13 | 332 | * Add mbedtls_ssl_get_max_frag_len() to query the current maximum fragment |
| markrad | 0:cdf462088d13 | 333 | length. |
| markrad | 0:cdf462088d13 | 334 | |
| markrad | 0:cdf462088d13 | 335 | = mbed TLS 2.0.0 released 2015-07-13 |
| markrad | 0:cdf462088d13 | 336 | |
| markrad | 0:cdf462088d13 | 337 | Features |
| markrad | 0:cdf462088d13 | 338 | * Support for DTLS 1.0 and 1.2 (RFC 6347). |
| markrad | 0:cdf462088d13 | 339 | * Ability to override core functions from MDx, SHAx, AES and DES modules |
| markrad | 0:cdf462088d13 | 340 | with custom implementation (eg hardware accelerated), complementing the |
| markrad | 0:cdf462088d13 | 341 | ability to override the whole module. |
| markrad | 0:cdf462088d13 | 342 | * New server-side implementation of session tickets that rotate keys to |
| markrad | 0:cdf462088d13 | 343 | preserve forward secrecy, and allows sharing across multiple contexts. |
| markrad | 0:cdf462088d13 | 344 | * Added a concept of X.509 cerificate verification profile that controls |
| markrad | 0:cdf462088d13 | 345 | which algorithms and key sizes (curves for ECDSA) are acceptable. |
| markrad | 0:cdf462088d13 | 346 | * Expanded configurability of security parameters in the SSL module with |
| markrad | 0:cdf462088d13 | 347 | mbedtls_ssl_conf_dhm_min_bitlen() and mbedtls_ssl_conf_sig_hashes(). |
| markrad | 0:cdf462088d13 | 348 | * Introduced a concept of presets for SSL security-relevant configuration |
| markrad | 0:cdf462088d13 | 349 | parameters. |
| markrad | 0:cdf462088d13 | 350 | |
| markrad | 0:cdf462088d13 | 351 | API Changes |
| markrad | 0:cdf462088d13 | 352 | * The library has been split into libmbedcrypto, libmbedx509, libmbedtls. |
| markrad | 0:cdf462088d13 | 353 | You now need to link to all of them if you use TLS for example. |
| markrad | 0:cdf462088d13 | 354 | * All public identifiers moved to the mbedtls_* or MBEDTLS_* namespace. |
| markrad | 0:cdf462088d13 | 355 | Some names have been further changed to make them more consistent. |
| markrad | 0:cdf462088d13 | 356 | Migration helpers scripts/rename.pl and include/mbedlts/compat-1.3.h are |
| markrad | 0:cdf462088d13 | 357 | provided. Full list of renamings in scripts/data_files/rename-1.3-2.0.txt |
| markrad | 0:cdf462088d13 | 358 | * Renamings of fields inside structures, not covered by the previous list: |
| markrad | 0:cdf462088d13 | 359 | mbedtls_cipher_info_t.key_length -> key_bitlen |
| markrad | 0:cdf462088d13 | 360 | mbedtls_cipher_context_t.key_length -> key_bitlen |
| markrad | 0:cdf462088d13 | 361 | mbedtls_ecp_curve_info.size -> bit_size |
| markrad | 0:cdf462088d13 | 362 | * Headers are now found in the 'mbedtls' directory (previously 'polarssl'). |
| markrad | 0:cdf462088d13 | 363 | * The following _init() functions that could return errors have |
| markrad | 0:cdf462088d13 | 364 | been split into an _init() that returns void and another function that |
| markrad | 0:cdf462088d13 | 365 | should generally be the first function called on this context after init: |
| markrad | 0:cdf462088d13 | 366 | mbedtls_ssl_init() -> mbedtls_ssl_setup() |
| markrad | 0:cdf462088d13 | 367 | mbedtls_ccm_init() -> mbedtls_ccm_setkey() |
| markrad | 0:cdf462088d13 | 368 | mbedtls_gcm_init() -> mbedtls_gcm_setkey() |
| markrad | 0:cdf462088d13 | 369 | mbedtls_hmac_drbg_init() -> mbedtls_hmac_drbg_seed(_buf)() |
| markrad | 0:cdf462088d13 | 370 | mbedtls_ctr_drbg_init() -> mbedtls_ctr_drbg_seed() |
| markrad | 0:cdf462088d13 | 371 | Note that for mbedtls_ssl_setup(), you need to be done setting up the |
| markrad | 0:cdf462088d13 | 372 | ssl_config structure before calling it. |
| markrad | 0:cdf462088d13 | 373 | * Most ssl_set_xxx() functions (all except ssl_set_bio(), ssl_set_hostname(), |
| markrad | 0:cdf462088d13 | 374 | ssl_set_session() and ssl_set_client_transport_id(), plus |
| markrad | 0:cdf462088d13 | 375 | ssl_legacy_renegotiation()) have been renamed to mbedtls_ssl_conf_xxx() |
| markrad | 0:cdf462088d13 | 376 | (see rename.pl and compat-1.3.h above) and their first argument's type |
| markrad | 0:cdf462088d13 | 377 | changed from ssl_context to ssl_config. |
| markrad | 0:cdf462088d13 | 378 | * ssl_set_bio() changed signature (contexts merged, order switched, one |
| markrad | 0:cdf462088d13 | 379 | additional callback for read-with-timeout). |
| markrad | 0:cdf462088d13 | 380 | * The following functions have been introduced and must be used in callback |
| markrad | 0:cdf462088d13 | 381 | implementations (SNI, PSK) instead of their *conf counterparts: |
| markrad | 0:cdf462088d13 | 382 | mbedtls_ssl_set_hs_own_cert() |
| markrad | 0:cdf462088d13 | 383 | mbedtls_ssl_set_hs_ca_chain() |
| markrad | 0:cdf462088d13 | 384 | mbedtls_ssl_set_hs_psk() |
| markrad | 0:cdf462088d13 | 385 | * mbedtls_ssl_conf_ca_chain() lost its last argument (peer_cn), now set |
| markrad | 0:cdf462088d13 | 386 | using mbedtls_ssl_set_hostname(). |
| markrad | 0:cdf462088d13 | 387 | * mbedtls_ssl_conf_session_cache() changed prototype (only one context |
| markrad | 0:cdf462088d13 | 388 | pointer, parameters reordered). |
| markrad | 0:cdf462088d13 | 389 | * On server, mbedtls_ssl_conf_session_tickets_cb() must now be used in |
| markrad | 0:cdf462088d13 | 390 | place of mbedtls_ssl_conf_session_tickets() to enable session tickets. |
| markrad | 0:cdf462088d13 | 391 | * The SSL debug callback gained two new arguments (file name, line number). |
| markrad | 0:cdf462088d13 | 392 | * Debug modes were removed. |
| markrad | 0:cdf462088d13 | 393 | * mbedtls_ssl_conf_truncated_hmac() now returns void. |
| markrad | 0:cdf462088d13 | 394 | * mbedtls_memory_buffer_alloc_init() now returns void. |
| markrad | 0:cdf462088d13 | 395 | * X.509 verification flags are now an uint32_t. Affect the signature of: |
| markrad | 0:cdf462088d13 | 396 | mbedtls_ssl_get_verify_result() |
| markrad | 0:cdf462088d13 | 397 | mbedtls_x509_ctr_verify_info() |
| markrad | 0:cdf462088d13 | 398 | mbedtls_x509_crt_verify() (flags, f_vrfy -> needs to be updated) |
| markrad | 0:cdf462088d13 | 399 | mbedtls_ssl_conf_verify() (f_vrfy -> needs to be updated) |
| markrad | 0:cdf462088d13 | 400 | * The following functions changed prototype to avoid an in-out length |
| markrad | 0:cdf462088d13 | 401 | parameter: |
| markrad | 0:cdf462088d13 | 402 | mbedtls_base64_encode() |
| markrad | 0:cdf462088d13 | 403 | mbedtls_base64_decode() |
| markrad | 0:cdf462088d13 | 404 | mbedtls_mpi_write_string() |
| markrad | 0:cdf462088d13 | 405 | mbedtls_dhm_calc_secret() |
| markrad | 0:cdf462088d13 | 406 | * In the NET module, all "int" and "int *" arguments for file descriptors |
| markrad | 0:cdf462088d13 | 407 | changed type to "mbedtls_net_context *". |
| markrad | 0:cdf462088d13 | 408 | * net_accept() gained new arguments for the size of the client_ip buffer. |
| markrad | 0:cdf462088d13 | 409 | * In the threading layer, mbedtls_mutex_init() and mbedtls_mutex_free() now |
| markrad | 0:cdf462088d13 | 410 | return void. |
| markrad | 0:cdf462088d13 | 411 | * ecdsa_write_signature() gained an addtional md_alg argument and |
| markrad | 0:cdf462088d13 | 412 | ecdsa_write_signature_det() was deprecated. |
| markrad | 0:cdf462088d13 | 413 | * pk_sign() no longer accepts md_alg == POLARSSL_MD_NONE with ECDSA. |
| markrad | 0:cdf462088d13 | 414 | * Last argument of x509_crt_check_key_usage() and |
| markrad | 0:cdf462088d13 | 415 | mbedtls_x509write_crt_set_key_usage() changed from int to unsigned. |
| markrad | 0:cdf462088d13 | 416 | * test_ca_list (from certs.h) is renamed to test_cas_pem and is only |
| markrad | 0:cdf462088d13 | 417 | available if POLARSSL_PEM_PARSE_C is defined (it never worked without). |
| markrad | 0:cdf462088d13 | 418 | * Test certificates in certs.c are no longer guaranteed to be nul-terminated |
| markrad | 0:cdf462088d13 | 419 | strings; use the new *_len variables instead of strlen(). |
| markrad | 0:cdf462088d13 | 420 | * Functions mbedtls_x509_xxx_parse(), mbedtls_pk_parse_key(), |
| markrad | 0:cdf462088d13 | 421 | mbedtls_pk_parse_public_key() and mbedtls_dhm_parse_dhm() now expect the |
| markrad | 0:cdf462088d13 | 422 | length parameter to include the terminating null byte for PEM input. |
| markrad | 0:cdf462088d13 | 423 | * Signature of mpi_mul_mpi() changed to make the last argument unsigned |
| markrad | 0:cdf462088d13 | 424 | * calloc() is now used instead of malloc() everywhere. API of platform |
| markrad | 0:cdf462088d13 | 425 | layer and the memory_buffer_alloc module changed accordingly. |
| markrad | 0:cdf462088d13 | 426 | (Thanks to Mansour Moufid for helping with the replacement.) |
| markrad | 0:cdf462088d13 | 427 | * Change SSL_DISABLE_RENEGOTIATION config.h flag to SSL_RENEGOTIATION |
| markrad | 0:cdf462088d13 | 428 | (support for renegotiation now needs explicit enabling in config.h). |
| markrad | 0:cdf462088d13 | 429 | * Split MBEDTLS_HAVE_TIME into MBEDTLS_HAVE_TIME and MBEDTLS_HAVE_TIME_DATE |
| markrad | 0:cdf462088d13 | 430 | in config.h |
| markrad | 0:cdf462088d13 | 431 | * net_connect() and net_bind() have a new 'proto' argument to choose |
| markrad | 0:cdf462088d13 | 432 | between TCP and UDP, using the macros NET_PROTO_TCP or NET_PROTO_UDP. |
| markrad | 0:cdf462088d13 | 433 | Their 'port' argument type is changed to a string. |
| markrad | 0:cdf462088d13 | 434 | * Some constness fixes |
| markrad | 0:cdf462088d13 | 435 | |
| markrad | 0:cdf462088d13 | 436 | Removals |
| markrad | 0:cdf462088d13 | 437 | * Removed mbedtls_ecp_group_read_string(). Only named groups are supported. |
| markrad | 0:cdf462088d13 | 438 | * Removed mbedtls_ecp_sub() and mbedtls_ecp_add(), use |
| markrad | 0:cdf462088d13 | 439 | mbedtls_ecp_muladd(). |
| markrad | 0:cdf462088d13 | 440 | * Removed individual mdX_hmac, shaX_hmac, mdX_file and shaX_file functions |
| markrad | 0:cdf462088d13 | 441 | (use generic functions from md.h) |
| markrad | 0:cdf462088d13 | 442 | * Removed mbedtls_timing_msleep(). Use mbedtls_net_usleep() or a custom |
| markrad | 0:cdf462088d13 | 443 | waiting function. |
| markrad | 0:cdf462088d13 | 444 | * Removed test DHM parameters from the test certs module. |
| markrad | 0:cdf462088d13 | 445 | * Removed the PBKDF2 module (use PKCS5). |
| markrad | 0:cdf462088d13 | 446 | * Removed POLARSSL_ERROR_STRERROR_BC (use mbedtls_strerror()). |
| markrad | 0:cdf462088d13 | 447 | * Removed compat-1.2.h (helper for migrating from 1.2 to 1.3). |
| markrad | 0:cdf462088d13 | 448 | * Removed openssl.h (very partial OpenSSL compatibility layer). |
| markrad | 0:cdf462088d13 | 449 | * Configuration options POLARSSL_HAVE_LONGLONG was removed (now always on). |
| markrad | 0:cdf462088d13 | 450 | * Configuration options POLARSSL_HAVE_INT8 and POLARSSL_HAVE_INT16 have |
| markrad | 0:cdf462088d13 | 451 | been removed (compiler is required to support 32-bit operations). |
| markrad | 0:cdf462088d13 | 452 | * Configuration option POLARSSL_HAVE_IPV6 was removed (always enabled). |
| markrad | 0:cdf462088d13 | 453 | * Removed test program o_p_test, the script compat.sh does more. |
| markrad | 0:cdf462088d13 | 454 | * Removed test program ssl_test, superseded by ssl-opt.sh. |
| markrad | 0:cdf462088d13 | 455 | * Removed helper script active-config.pl |
| markrad | 0:cdf462088d13 | 456 | |
| markrad | 0:cdf462088d13 | 457 | New deprecations |
| markrad | 0:cdf462088d13 | 458 | * md_init_ctx() is deprecated in favour of md_setup(), that adds a third |
| markrad | 0:cdf462088d13 | 459 | argument (allowing memory savings if HMAC is not used) |
| markrad | 0:cdf462088d13 | 460 | |
| markrad | 0:cdf462088d13 | 461 | Semi-API changes (technically public, morally private) |
| markrad | 0:cdf462088d13 | 462 | * Renamed a few headers to include _internal in the name. Those headers are |
| markrad | 0:cdf462088d13 | 463 | not supposed to be included by users. |
| markrad | 0:cdf462088d13 | 464 | * Changed md_info_t into an opaque structure (use md_get_xxx() accessors). |
| markrad | 0:cdf462088d13 | 465 | * Changed pk_info_t into an opaque structure. |
| markrad | 0:cdf462088d13 | 466 | * Changed cipher_base_t into an opaque structure. |
| markrad | 0:cdf462088d13 | 467 | * Removed sig_oid2 and rename sig_oid1 to sig_oid in x509_crt and x509_crl. |
| markrad | 0:cdf462088d13 | 468 | * x509_crt.key_usage changed from unsigned char to unsigned int. |
| markrad | 0:cdf462088d13 | 469 | * Removed r and s from ecdsa_context |
| markrad | 0:cdf462088d13 | 470 | * Removed mode from des_context and des3_context |
| markrad | 0:cdf462088d13 | 471 | |
| markrad | 0:cdf462088d13 | 472 | Default behavior changes |
| markrad | 0:cdf462088d13 | 473 | * The default minimum TLS version is now TLS 1.0. |
| markrad | 0:cdf462088d13 | 474 | * RC4 is now blacklisted by default in the SSL/TLS layer, and excluded from the |
| markrad | 0:cdf462088d13 | 475 | default ciphersuite list returned by ssl_list_ciphersuites() |
| markrad | 0:cdf462088d13 | 476 | * Support for receiving SSLv2 ClientHello is now disabled by default at |
| markrad | 0:cdf462088d13 | 477 | compile time. |
| markrad | 0:cdf462088d13 | 478 | * The default authmode for SSL/TLS clients is now REQUIRED. |
| markrad | 0:cdf462088d13 | 479 | * Support for RSA_ALT contexts in the PK layer is now optional. Since is is |
| markrad | 0:cdf462088d13 | 480 | enabled in the default configuration, this is only noticeable if using a |
| markrad | 0:cdf462088d13 | 481 | custom config.h |
| markrad | 0:cdf462088d13 | 482 | * Default DHM parameters server-side upgraded from 1024 to 2048 bits. |
| markrad | 0:cdf462088d13 | 483 | * A minimum RSA key size of 2048 bits is now enforced during ceritificate |
| markrad | 0:cdf462088d13 | 484 | chain verification. |
| markrad | 0:cdf462088d13 | 485 | * Negotiation of truncated HMAC is now disabled by default on server too. |
| markrad | 0:cdf462088d13 | 486 | * The following functions are now case-sensitive: |
| markrad | 0:cdf462088d13 | 487 | mbedtls_cipher_info_from_string() |
| markrad | 0:cdf462088d13 | 488 | mbedtls_ecp_curve_info_from_name() |
| markrad | 0:cdf462088d13 | 489 | mbedtls_md_info_from_string() |
| markrad | 0:cdf462088d13 | 490 | mbedtls_ssl_ciphersuite_from_string() |
| markrad | 0:cdf462088d13 | 491 | mbedtls_version_check_feature() |
| markrad | 0:cdf462088d13 | 492 | |
| markrad | 0:cdf462088d13 | 493 | Requirement changes |
| markrad | 0:cdf462088d13 | 494 | * The minimum MSVC version required is now 2010 (better C99 support). |
| markrad | 0:cdf462088d13 | 495 | * The NET layer now unconditionnaly relies on getaddrinfo() and select(). |
| markrad | 0:cdf462088d13 | 496 | * Compiler is required to support C99 types such as long long and uint32_t. |
| markrad | 0:cdf462088d13 | 497 | |
| markrad | 0:cdf462088d13 | 498 | API changes from the 1.4 preview branch |
| markrad | 0:cdf462088d13 | 499 | * ssl_set_bio_timeout() was removed, split into mbedtls_ssl_set_bio() with |
| markrad | 0:cdf462088d13 | 500 | new prototype, and mbedtls_ssl_set_read_timeout(). |
| markrad | 0:cdf462088d13 | 501 | * The following functions now return void: |
| markrad | 0:cdf462088d13 | 502 | mbedtls_ssl_conf_transport() |
| markrad | 0:cdf462088d13 | 503 | mbedtls_ssl_conf_max_version() |
| markrad | 0:cdf462088d13 | 504 | mbedtls_ssl_conf_min_version() |
| markrad | 0:cdf462088d13 | 505 | * DTLS no longer hard-depends on TIMING_C, but uses a callback interface |
| markrad | 0:cdf462088d13 | 506 | instead, see mbedtls_ssl_set_timer_cb(), with the Timing module providing |
| markrad | 0:cdf462088d13 | 507 | an example implementation, see mbedtls_timing_delay_context and |
| markrad | 0:cdf462088d13 | 508 | mbedtls_timing_set/get_delay(). |
| markrad | 0:cdf462088d13 | 509 | * With UDP sockets, it is no longer necessary to call net_bind() again |
| markrad | 0:cdf462088d13 | 510 | after a successful net_accept(). |
| markrad | 0:cdf462088d13 | 511 | |
| markrad | 0:cdf462088d13 | 512 | Changes |
| markrad | 0:cdf462088d13 | 513 | * mbedtls_ctr_drbg_random() and mbedtls_hmac_drbg_random() are now |
| markrad | 0:cdf462088d13 | 514 | thread-safe if MBEDTLS_THREADING_C is enabled. |
| markrad | 0:cdf462088d13 | 515 | * Reduced ROM fooprint of SHA-256 and added an option to reduce it even |
| markrad | 0:cdf462088d13 | 516 | more (at the expense of performance) MBEDTLS_SHA256_SMALLER. |
| markrad | 0:cdf462088d13 | 517 | |
| markrad | 0:cdf462088d13 | 518 | = mbed TLS 1.3 branch |
| markrad | 0:cdf462088d13 | 519 | |
| markrad | 0:cdf462088d13 | 520 | Security |
| markrad | 0:cdf462088d13 | 521 | * With authmode set to SSL_VERIFY_OPTIONAL, verification of keyUsage and |
| markrad | 0:cdf462088d13 | 522 | extendedKeyUsage on the leaf certificate was lost (results not accessible |
| markrad | 0:cdf462088d13 | 523 | via ssl_get_verify_results()). |
| markrad | 0:cdf462088d13 | 524 | * Add countermeasure against "Lucky 13 strikes back" cache-based attack, |
| markrad | 0:cdf462088d13 | 525 | https://dl.acm.org/citation.cfm?id=2714625 |
| markrad | 0:cdf462088d13 | 526 | |
| markrad | 0:cdf462088d13 | 527 | Features |
| markrad | 0:cdf462088d13 | 528 | * Improve ECC performance by using more efficient doubling formulas |
| markrad | 0:cdf462088d13 | 529 | (contributed by Peter Dettman). |
| markrad | 0:cdf462088d13 | 530 | * Add x509_crt_verify_info() to display certificate verification results. |
| markrad | 0:cdf462088d13 | 531 | * Add support for reading DH parameters with privateValueLength included |
| markrad | 0:cdf462088d13 | 532 | (contributed by Daniel Kahn Gillmor). |
| markrad | 0:cdf462088d13 | 533 | * Add support for bit strings in X.509 names (request by Fredrik Axelsson). |
| markrad | 0:cdf462088d13 | 534 | * Add support for id-at-uniqueIdentifier in X.509 names. |
| markrad | 0:cdf462088d13 | 535 | * Add support for overriding snprintf() (except on Windows) and exit() in |
| markrad | 0:cdf462088d13 | 536 | the platform layer. |
| markrad | 0:cdf462088d13 | 537 | * Add an option to use macros instead of function pointers in the platform |
| markrad | 0:cdf462088d13 | 538 | layer (helps get rid of unwanted references). |
| markrad | 0:cdf462088d13 | 539 | * Improved Makefiles for Windows targets by fixing library targets and making |
| markrad | 0:cdf462088d13 | 540 | cross-compilation easier (thanks to Alon Bar-Lev). |
| markrad | 0:cdf462088d13 | 541 | * The benchmark program also prints heap usage for public-key primitives |
| markrad | 0:cdf462088d13 | 542 | if POLARSSL_MEMORY_BUFFER_ALLOC_C and POLARSSL_MEMORY_DEBUG are defined. |
| markrad | 0:cdf462088d13 | 543 | * New script ecc-heap.sh helps measuring the impact of ECC parameters on |
| markrad | 0:cdf462088d13 | 544 | speed and RAM (heap only for now) usage. |
| markrad | 0:cdf462088d13 | 545 | * New script memory.sh helps measuring the ROM and RAM requirements of two |
| markrad | 0:cdf462088d13 | 546 | reduced configurations (PSK-CCM and NSA suite B). |
| markrad | 0:cdf462088d13 | 547 | * Add config flag POLARSSL_DEPRECATED_WARNING (off by default) to produce |
| markrad | 0:cdf462088d13 | 548 | warnings on use of deprecated functions (with GCC and Clang only). |
| markrad | 0:cdf462088d13 | 549 | * Add config flag POLARSSL_DEPRECATED_REMOVED (off by default) to produce |
| markrad | 0:cdf462088d13 | 550 | errors on use of deprecated functions. |
| markrad | 0:cdf462088d13 | 551 | |
| markrad | 0:cdf462088d13 | 552 | Bugfix |
| markrad | 0:cdf462088d13 | 553 | * Fix compile errors with PLATFORM_NO_STD_FUNCTIONS. |
| markrad | 0:cdf462088d13 | 554 | * Fix compile error with PLATFORM_EXIT_ALT (thanks to Rafał Przywara). |
| markrad | 0:cdf462088d13 | 555 | * Fix bug in entropy.c when THREADING_C is also enabled that caused |
| markrad | 0:cdf462088d13 | 556 | entropy_free() to crash (thanks to Rafał Przywara). |
| markrad | 0:cdf462088d13 | 557 | * Fix memory leak when gcm_setkey() and ccm_setkey() are used more than |
| markrad | 0:cdf462088d13 | 558 | once on the same context. |
| markrad | 0:cdf462088d13 | 559 | * Fix bug in ssl_mail_client when password is longer that username (found |
| markrad | 0:cdf462088d13 | 560 | by Bruno Pape). |
| markrad | 0:cdf462088d13 | 561 | * Fix undefined behaviour (memcmp( NULL, NULL, 0 );) in X.509 modules |
| markrad | 0:cdf462088d13 | 562 | (detected by Clang's 3.6 UBSan). |
| markrad | 0:cdf462088d13 | 563 | * mpi_size() and mpi_msb() would segfault when called on an mpi that is |
| markrad | 0:cdf462088d13 | 564 | initialized but not set (found by pravic). |
| markrad | 0:cdf462088d13 | 565 | * Fix detection of support for getrandom() on Linux (reported by syzzer) by |
| markrad | 0:cdf462088d13 | 566 | doing it at runtime (using uname) rather that compile time. |
| markrad | 0:cdf462088d13 | 567 | * Fix handling of symlinks by "make install" (found by Gaël PORTAY). |
| markrad | 0:cdf462088d13 | 568 | * Fix potential NULL pointer dereference (not trigerrable remotely) when |
| markrad | 0:cdf462088d13 | 569 | ssl_write() is called before the handshake is finished (introduced in |
| markrad | 0:cdf462088d13 | 570 | 1.3.10) (first reported by Martin Blumenstingl). |
| markrad | 0:cdf462088d13 | 571 | * Fix bug in pk_parse_key() that caused some valid private EC keys to be |
| markrad | 0:cdf462088d13 | 572 | rejected. |
| markrad | 0:cdf462088d13 | 573 | * Fix bug in Via Padlock support (found by Nikos Mavrogiannopoulos). |
| markrad | 0:cdf462088d13 | 574 | * Fix thread safety bug in RSA operations (found by Fredrik Axelsson). |
| markrad | 0:cdf462088d13 | 575 | * Fix hardclock() (only used in the benchmarking program) with some |
| markrad | 0:cdf462088d13 | 576 | versions of mingw64 (found by kxjhlele). |
| markrad | 0:cdf462088d13 | 577 | * Fix warnings from mingw64 in timing.c (found by kxjklele). |
| markrad | 0:cdf462088d13 | 578 | * Fix potential unintended sign extension in asn1_get_len() on 64-bit |
| markrad | 0:cdf462088d13 | 579 | platforms. |
| markrad | 0:cdf462088d13 | 580 | * Fix potential memory leak in ssl_set_psk() (found by Mansour Moufid). |
| markrad | 0:cdf462088d13 | 581 | * Fix compile error when POLARSSL_SSL_DISABLE_RENEGOTATION and |
| markrad | 0:cdf462088d13 | 582 | POLARSSL_SSL_SSESSION_TICKETS where both enabled in config.h (introduced |
| markrad | 0:cdf462088d13 | 583 | in 1.3.10). |
| markrad | 0:cdf462088d13 | 584 | * Add missing extern "C" guard in aesni.h (reported by amir zamani). |
| markrad | 0:cdf462088d13 | 585 | * Add missing dependency on SHA-256 in some x509 programs (reported by |
| markrad | 0:cdf462088d13 | 586 | Gergely Budai). |
| markrad | 0:cdf462088d13 | 587 | * Fix bug related to ssl_set_curves(): the client didn't check that the |
| markrad | 0:cdf462088d13 | 588 | curve picked by the server was actually allowed. |
| markrad | 0:cdf462088d13 | 589 | |
| markrad | 0:cdf462088d13 | 590 | Changes |
| markrad | 0:cdf462088d13 | 591 | * Remove bias in mpi_gen_prime (contributed by Pascal Junod). |
| markrad | 0:cdf462088d13 | 592 | * Remove potential sources of timing variations (some contributed by Pascal |
| markrad | 0:cdf462088d13 | 593 | Junod). |
| markrad | 0:cdf462088d13 | 594 | * Options POLARSSL_HAVE_INT8 and POLARSSL_HAVE_INT16 are deprecated. |
| markrad | 0:cdf462088d13 | 595 | * Enabling POLARSSL_NET_C without POLARSSL_HAVE_IPV6 is deprecated. |
| markrad | 0:cdf462088d13 | 596 | * compat-1.2.h and openssl.h are deprecated. |
| markrad | 0:cdf462088d13 | 597 | * Adjusting/overriding CFLAGS and LDFLAGS with the make build system is now |
| markrad | 0:cdf462088d13 | 598 | more flexible (warning: OFLAGS is not used any more) (see the README) |
| markrad | 0:cdf462088d13 | 599 | (contributed by Alon Bar-Lev). |
| markrad | 0:cdf462088d13 | 600 | * ssl_set_own_cert() no longer calls pk_check_pair() since the |
| markrad | 0:cdf462088d13 | 601 | performance impact was bad for some users (this was introduced in 1.3.10). |
| markrad | 0:cdf462088d13 | 602 | * Move from SHA-1 to SHA-256 in example programs using signatures |
| markrad | 0:cdf462088d13 | 603 | (suggested by Thorsten Mühlfelder). |
| markrad | 0:cdf462088d13 | 604 | * Remove some unneeded inclusions of header files from the standard library |
| markrad | 0:cdf462088d13 | 605 | "minimize" others (eg use stddef.h if only size_t is needed). |
| markrad | 0:cdf462088d13 | 606 | * Change #include lines in test files to use double quotes instead of angle |
| markrad | 0:cdf462088d13 | 607 | brackets for uniformity with the rest of the code. |
| markrad | 0:cdf462088d13 | 608 | * Remove dependency on sscanf() in X.509 parsing modules. |
| markrad | 0:cdf462088d13 | 609 | |
| markrad | 0:cdf462088d13 | 610 | = mbed TLS 1.3.10 released 2015-02-09 |
| markrad | 0:cdf462088d13 | 611 | Security |
| markrad | 0:cdf462088d13 | 612 | * NULL pointer dereference in the buffer-based allocator when the buffer is |
| markrad | 0:cdf462088d13 | 613 | full and polarssl_free() is called (found by Mark Hasemeyer) |
| markrad | 0:cdf462088d13 | 614 | (only possible if POLARSSL_MEMORY_BUFFER_ALLOC_C is enabled, which it is |
| markrad | 0:cdf462088d13 | 615 | not by default). |
| markrad | 0:cdf462088d13 | 616 | * Fix remotely-triggerable uninitialised pointer dereference caused by |
| markrad | 0:cdf462088d13 | 617 | crafted X.509 certificate (TLS server is not affected if it doesn't ask for a |
| markrad | 0:cdf462088d13 | 618 | client certificate) (found using Codenomicon Defensics). |
| markrad | 0:cdf462088d13 | 619 | * Fix remotely-triggerable memory leak caused by crafted X.509 certificates |
| markrad | 0:cdf462088d13 | 620 | (TLS server is not affected if it doesn't ask for a client certificate) |
| markrad | 0:cdf462088d13 | 621 | (found using Codenomicon Defensics). |
| markrad | 0:cdf462088d13 | 622 | * Fix potential stack overflow while parsing crafted X.509 certificates |
| markrad | 0:cdf462088d13 | 623 | (TLS server is not affected if it doesn't ask for a client certificate) |
| markrad | 0:cdf462088d13 | 624 | (found using Codenomicon Defensics). |
| markrad | 0:cdf462088d13 | 625 | * Fix timing difference that could theoretically lead to a |
| markrad | 0:cdf462088d13 | 626 | Bleichenbacher-style attack in the RSA and RSA-PSK key exchanges |
| markrad | 0:cdf462088d13 | 627 | (reported by Sebastian Schinzel). |
| markrad | 0:cdf462088d13 | 628 | |
| markrad | 0:cdf462088d13 | 629 | Features |
| markrad | 0:cdf462088d13 | 630 | * Add support for FALLBACK_SCSV (draft-ietf-tls-downgrade-scsv). |
| markrad | 0:cdf462088d13 | 631 | * Add support for Extended Master Secret (draft-ietf-tls-session-hash). |
| markrad | 0:cdf462088d13 | 632 | * Add support for Encrypt-then-MAC (RFC 7366). |
| markrad | 0:cdf462088d13 | 633 | * Add function pk_check_pair() to test if public and private keys match. |
| markrad | 0:cdf462088d13 | 634 | * Add x509_crl_parse_der(). |
| markrad | 0:cdf462088d13 | 635 | * Add compile-time option POLARSSL_X509_MAX_INTERMEDIATE_CA to limit the |
| markrad | 0:cdf462088d13 | 636 | length of an X.509 verification chain. |
| markrad | 0:cdf462088d13 | 637 | * Support for renegotiation can now be disabled at compile-time |
| markrad | 0:cdf462088d13 | 638 | * Support for 1/n-1 record splitting, a countermeasure against BEAST. |
| markrad | 0:cdf462088d13 | 639 | * Certificate selection based on signature hash, preferring SHA-1 over SHA-2 |
| markrad | 0:cdf462088d13 | 640 | for pre-1.2 clients when multiple certificates are available. |
| markrad | 0:cdf462088d13 | 641 | * Add support for getrandom() syscall on recent Linux kernels with Glibc or |
| markrad | 0:cdf462088d13 | 642 | a compatible enough libc (eg uClibc). |
| markrad | 0:cdf462088d13 | 643 | * Add ssl_set_arc4_support() to make it easier to disable RC4 at runtime |
| markrad | 0:cdf462088d13 | 644 | while using the default ciphersuite list. |
| markrad | 0:cdf462088d13 | 645 | * Added new error codes and debug messages about selection of |
| markrad | 0:cdf462088d13 | 646 | ciphersuite/certificate. |
| markrad | 0:cdf462088d13 | 647 | |
| markrad | 0:cdf462088d13 | 648 | Bugfix |
| markrad | 0:cdf462088d13 | 649 | * Stack buffer overflow if ctr_drbg_update() is called with too large |
| markrad | 0:cdf462088d13 | 650 | add_len (found by Jean-Philippe Aumasson) (not triggerable remotely). |
| markrad | 0:cdf462088d13 | 651 | * Possible buffer overflow of length at most POLARSSL_MEMORY_ALIGN_MULTIPLE |
| markrad | 0:cdf462088d13 | 652 | if memory_buffer_alloc_init() was called with buf not aligned and len not |
| markrad | 0:cdf462088d13 | 653 | a multiple of POLARSSL_MEMORY_ALIGN_MULTIPLE (not triggerable remotely). |
| markrad | 0:cdf462088d13 | 654 | * User set CFLAGS were ignored by Cmake with gcc (introduced in 1.3.9, found |
| markrad | 0:cdf462088d13 | 655 | by Julian Ospald). |
| markrad | 0:cdf462088d13 | 656 | * Fix potential undefined behaviour in Camellia. |
| markrad | 0:cdf462088d13 | 657 | * Fix potential failure in ECDSA signatures when POLARSSL_ECP_MAX_BITS is a |
| markrad | 0:cdf462088d13 | 658 | multiple of 8 (found by Gergely Budai). |
| markrad | 0:cdf462088d13 | 659 | * Fix unchecked return code in x509_crt_parse_path() on Windows (found by |
| markrad | 0:cdf462088d13 | 660 | Peter Vaskovic). |
| markrad | 0:cdf462088d13 | 661 | * Fix assembly selection for MIPS64 (thanks to James Cowgill). |
| markrad | 0:cdf462088d13 | 662 | * ssl_get_verify_result() now works even if the handshake was aborted due |
| markrad | 0:cdf462088d13 | 663 | to a failed verification (found by Fredrik Axelsson). |
| markrad | 0:cdf462088d13 | 664 | * Skip writing and parsing signature_algorithm extension if none of the |
| markrad | 0:cdf462088d13 | 665 | key exchanges enabled needs certificates. This fixes a possible interop |
| markrad | 0:cdf462088d13 | 666 | issue with some servers when a zero-length extension was sent. (Reported |
| markrad | 0:cdf462088d13 | 667 | by Peter Dettman.) |
| markrad | 0:cdf462088d13 | 668 | * On a 0-length input, base64_encode() did not correctly set output length |
| markrad | 0:cdf462088d13 | 669 | (found by Hendrik van den Boogaard). |
| markrad | 0:cdf462088d13 | 670 | |
| markrad | 0:cdf462088d13 | 671 | Changes |
| markrad | 0:cdf462088d13 | 672 | * Use deterministic nonces for AEAD ciphers in TLS by default (possible to |
| markrad | 0:cdf462088d13 | 673 | switch back to random with POLARSSL_SSL_AEAD_RANDOM_IV in config.h). |
| markrad | 0:cdf462088d13 | 674 | * Blind RSA private operations even when POLARSSL_RSA_NO_CRT is defined. |
| markrad | 0:cdf462088d13 | 675 | * ssl_set_own_cert() now returns an error on key-certificate mismatch. |
| markrad | 0:cdf462088d13 | 676 | * Forbid repeated extensions in X.509 certificates. |
| markrad | 0:cdf462088d13 | 677 | * debug_print_buf() now prints a text view in addition to hexadecimal. |
| markrad | 0:cdf462088d13 | 678 | * A specific error is now returned when there are ciphersuites in common |
| markrad | 0:cdf462088d13 | 679 | but none of them is usable due to external factors such as no certificate |
| markrad | 0:cdf462088d13 | 680 | with a suitable (extended)KeyUsage or curve or no PSK set. |
| markrad | 0:cdf462088d13 | 681 | * It is now possible to disable negotiation of truncated HMAC server-side |
| markrad | 0:cdf462088d13 | 682 | at runtime with ssl_set_truncated_hmac(). |
| markrad | 0:cdf462088d13 | 683 | * Example programs for SSL client and server now disable SSLv3 by default. |
| markrad | 0:cdf462088d13 | 684 | * Example programs for SSL client and server now disable RC4 by default. |
| markrad | 0:cdf462088d13 | 685 | * Use platform.h in all test suites and programs. |
| markrad | 0:cdf462088d13 | 686 | |
| markrad | 0:cdf462088d13 | 687 | = PolarSSL 1.3.9 released 2014-10-20 |
| markrad | 0:cdf462088d13 | 688 | Security |
| markrad | 0:cdf462088d13 | 689 | * Lowest common hash was selected from signature_algorithms extension in |
| markrad | 0:cdf462088d13 | 690 | TLS 1.2 (found by Darren Bane) (introduced in 1.3.8). |
| markrad | 0:cdf462088d13 | 691 | * Remotely-triggerable memory leak when parsing some X.509 certificates |
| markrad | 0:cdf462088d13 | 692 | (server is not affected if it doesn't ask for a client certificate) |
| markrad | 0:cdf462088d13 | 693 | (found using Codenomicon Defensics). |
| markrad | 0:cdf462088d13 | 694 | * Remotely-triggerable memory leak when parsing crafted ClientHello |
| markrad | 0:cdf462088d13 | 695 | (not affected if ECC support was compiled out) (found using Codenomicon |
| markrad | 0:cdf462088d13 | 696 | Defensics). |
| markrad | 0:cdf462088d13 | 697 | |
| markrad | 0:cdf462088d13 | 698 | Bugfix |
| markrad | 0:cdf462088d13 | 699 | * Support escaping of commas in x509_string_to_names() |
| markrad | 0:cdf462088d13 | 700 | * Fix compile error in ssl_pthread_server (found by Julian Ospald). |
| markrad | 0:cdf462088d13 | 701 | * Fix net_accept() regarding non-blocking sockets (found by Luca Pesce). |
| markrad | 0:cdf462088d13 | 702 | * Don't print uninitialised buffer in ssl_mail_client (found by Marc Abel). |
| markrad | 0:cdf462088d13 | 703 | * Fix warnings from Clang's scan-build (contributed by Alfred Klomp). |
| markrad | 0:cdf462088d13 | 704 | * Fix compile error in timing.c when POLARSSL_NET_C and POLARSSL_SELFTEST |
| markrad | 0:cdf462088d13 | 705 | are defined but not POLARSSL_HAVE_TIME (found by Stephane Di Vito). |
| markrad | 0:cdf462088d13 | 706 | * Remove non-existent file from VS projects (found by Peter Vaskovic). |
| markrad | 0:cdf462088d13 | 707 | * ssl_read() could return non-application data records on server while |
| markrad | 0:cdf462088d13 | 708 | renegotation was pending, and on client when a HelloRequest was received. |
| markrad | 0:cdf462088d13 | 709 | * Server-initiated renegotiation would fail with non-blocking I/O if the |
| markrad | 0:cdf462088d13 | 710 | write callback returned WANT_WRITE when requesting renegotiation. |
| markrad | 0:cdf462088d13 | 711 | * ssl_close_notify() could send more than one message in some circumstances |
| markrad | 0:cdf462088d13 | 712 | with non-blocking I/O. |
| markrad | 0:cdf462088d13 | 713 | * Fix compiler warnings on iOS (found by Sander Niemeijer). |
| markrad | 0:cdf462088d13 | 714 | * x509_crt_parse() did not increase total_failed on PEM error |
| markrad | 0:cdf462088d13 | 715 | * Fix compile error with armcc in mpi_is_prime() |
| markrad | 0:cdf462088d13 | 716 | * Fix potential bad read in parsing ServerHello (found by Adrien |
| markrad | 0:cdf462088d13 | 717 | Vialletelle). |
| markrad | 0:cdf462088d13 | 718 | |
| markrad | 0:cdf462088d13 | 719 | Changes |
| markrad | 0:cdf462088d13 | 720 | * Ciphersuites using SHA-256 or SHA-384 now require TLS 1.x (there is no |
| markrad | 0:cdf462088d13 | 721 | standard defining how to use SHA-2 with SSL 3.0). |
| markrad | 0:cdf462088d13 | 722 | * Ciphersuites using RSA-PSK key exchange new require TLS 1.x (the spec is |
| markrad | 0:cdf462088d13 | 723 | ambiguous on how to encode some packets with SSL 3.0). |
| markrad | 0:cdf462088d13 | 724 | * Made buffer size in pk_write_(pub)key_pem() more dynamic, eg smaller if |
| markrad | 0:cdf462088d13 | 725 | RSA is disabled, larger if POLARSSL_MPI_MAX_SIZE is larger. |
| markrad | 0:cdf462088d13 | 726 | * ssl_read() now returns POLARSSL_ERR_NET_WANT_READ rather than |
| markrad | 0:cdf462088d13 | 727 | POLARSSL_ERR_SSL_UNEXPECTED_MESSAGE on harmless alerts. |
| markrad | 0:cdf462088d13 | 728 | * POLARSSL_MPI_MAX_SIZE now defaults to 1024 in order to allow 8192 bits |
| markrad | 0:cdf462088d13 | 729 | RSA keys. |
| markrad | 0:cdf462088d13 | 730 | * Accept spaces at end of line or end of buffer in base64_decode(). |
| markrad | 0:cdf462088d13 | 731 | * X.509 certificates with more than one AttributeTypeAndValue per |
| markrad | 0:cdf462088d13 | 732 | RelativeDistinguishedName are not accepted any more. |
| markrad | 0:cdf462088d13 | 733 | |
| markrad | 0:cdf462088d13 | 734 | = PolarSSL 1.3.8 released 2014-07-11 |
| markrad | 0:cdf462088d13 | 735 | Security |
| markrad | 0:cdf462088d13 | 736 | * Fix length checking for AEAD ciphersuites (found by Codenomicon). |
| markrad | 0:cdf462088d13 | 737 | It was possible to crash the server (and client) using crafted messages |
| markrad | 0:cdf462088d13 | 738 | when a GCM suite was chosen. |
| markrad | 0:cdf462088d13 | 739 | |
| markrad | 0:cdf462088d13 | 740 | Features |
| markrad | 0:cdf462088d13 | 741 | * Add CCM module and cipher mode to Cipher Layer |
| markrad | 0:cdf462088d13 | 742 | * Support for CCM and CCM_8 ciphersuites |
| markrad | 0:cdf462088d13 | 743 | * Support for parsing and verifying RSASSA-PSS signatures in the X.509 |
| markrad | 0:cdf462088d13 | 744 | modules (certificates, CRLs and CSRs). |
| markrad | 0:cdf462088d13 | 745 | * Blowfish in the cipher layer now supports variable length keys. |
| markrad | 0:cdf462088d13 | 746 | * Add example config.h for PSK with CCM, optimized for low RAM usage. |
| markrad | 0:cdf462088d13 | 747 | * Optimize for RAM usage in example config.h for NSA Suite B profile. |
| markrad | 0:cdf462088d13 | 748 | * Add POLARSSL_REMOVE_ARC4_CIPHERSUITES to allow removing RC4 ciphersuites |
| markrad | 0:cdf462088d13 | 749 | from the default list (inactive by default). |
| markrad | 0:cdf462088d13 | 750 | * Add server-side enforcement of sent renegotiation requests |
| markrad | 0:cdf462088d13 | 751 | (ssl_set_renegotiation_enforced()) |
| markrad | 0:cdf462088d13 | 752 | * Add SSL_CIPHERSUITES config.h flag to allow specifying a list of |
| markrad | 0:cdf462088d13 | 753 | ciphersuites to use and save some memory if the list is small. |
| markrad | 0:cdf462088d13 | 754 | |
| markrad | 0:cdf462088d13 | 755 | Changes |
| markrad | 0:cdf462088d13 | 756 | * Add LINK_WITH_PTHREAD option in CMake for explicit linking that is |
| markrad | 0:cdf462088d13 | 757 | required on some platforms (e.g. OpenBSD) |
| markrad | 0:cdf462088d13 | 758 | * Migrate zeroizing of data to polarssl_zeroize() instead of memset() |
| markrad | 0:cdf462088d13 | 759 | against unwanted compiler optimizations |
| markrad | 0:cdf462088d13 | 760 | * md_list() now returns hashes strongest first |
| markrad | 0:cdf462088d13 | 761 | * Selection of hash for signing ServerKeyExchange in TLS 1.2 now picks |
| markrad | 0:cdf462088d13 | 762 | strongest offered by client. |
| markrad | 0:cdf462088d13 | 763 | * All public contexts have _init() and _free() functions now for simpler |
| markrad | 0:cdf462088d13 | 764 | usage pattern |
| markrad | 0:cdf462088d13 | 765 | |
| markrad | 0:cdf462088d13 | 766 | Bugfix |
| markrad | 0:cdf462088d13 | 767 | * Fix in debug_print_msg() |
| markrad | 0:cdf462088d13 | 768 | * Enforce alignment in the buffer allocator even if buffer is not aligned |
| markrad | 0:cdf462088d13 | 769 | * Remove less-than-zero checks on unsigned numbers |
| markrad | 0:cdf462088d13 | 770 | * Stricter check on SSL ClientHello internal sizes compared to actual packet |
| markrad | 0:cdf462088d13 | 771 | size (found by TrustInSoft) |
| markrad | 0:cdf462088d13 | 772 | * Fix WSAStartup() return value check (found by Peter Vaskovic) |
| markrad | 0:cdf462088d13 | 773 | * Other minor issues (found by Peter Vaskovic) |
| markrad | 0:cdf462088d13 | 774 | * Fix symlink command for cross compiling with CMake (found by Andre |
| markrad | 0:cdf462088d13 | 775 | Heinecke) |
| markrad | 0:cdf462088d13 | 776 | * Fix DER output of gen_key app (found by Gergely Budai) |
| markrad | 0:cdf462088d13 | 777 | * Very small records were incorrectly rejected when truncated HMAC was in |
| markrad | 0:cdf462088d13 | 778 | use with some ciphersuites and versions (RC4 in all versions, CBC with |
| markrad | 0:cdf462088d13 | 779 | versions < TLS 1.1). |
| markrad | 0:cdf462088d13 | 780 | * Very large records using more than 224 bytes of padding were incorrectly |
| markrad | 0:cdf462088d13 | 781 | rejected with CBC-based ciphersuites and TLS >= 1.1 |
| markrad | 0:cdf462088d13 | 782 | * Very large records using less padding could cause a buffer overread of up |
| markrad | 0:cdf462088d13 | 783 | to 32 bytes with CBC-based ciphersuites and TLS >= 1.1 |
| markrad | 0:cdf462088d13 | 784 | * Restore ability to use a v1 cert as a CA if trusted locally. (This had |
| markrad | 0:cdf462088d13 | 785 | been removed in 1.3.6.) |
| markrad | 0:cdf462088d13 | 786 | * Restore ability to locally trust a self-signed cert that is not a proper |
| markrad | 0:cdf462088d13 | 787 | CA for use as an end entity certificate. (This had been removed in |
| markrad | 0:cdf462088d13 | 788 | 1.3.6.) |
| markrad | 0:cdf462088d13 | 789 | * Fix preprocessor checks for bn_mul PPC asm (found by Barry K. Nathan). |
| markrad | 0:cdf462088d13 | 790 | * Use \n\t rather than semicolons for bn_mul asm, since some assemblers |
| markrad | 0:cdf462088d13 | 791 | interpret semicolons as comment delimiters (found by Barry K. Nathan). |
| markrad | 0:cdf462088d13 | 792 | * Fix off-by-one error in parsing Supported Point Format extension that |
| markrad | 0:cdf462088d13 | 793 | caused some handshakes to fail. |
| markrad | 0:cdf462088d13 | 794 | * Fix possible miscomputation of the premaster secret with DHE-PSK key |
| markrad | 0:cdf462088d13 | 795 | exchange that caused some handshakes to fail with other implementations. |
| markrad | 0:cdf462088d13 | 796 | (Failure rate <= 1/255 with common DHM moduli.) |
| markrad | 0:cdf462088d13 | 797 | * Disable broken Sparc64 bn_mul assembly (found by Florian Obser). |
| markrad | 0:cdf462088d13 | 798 | * Fix base64_decode() to return and check length correctly (in case of |
| markrad | 0:cdf462088d13 | 799 | tight buffers) |
| markrad | 0:cdf462088d13 | 800 | * Fix mpi_write_string() to write "00" as hex output for empty MPI (found |
| markrad | 0:cdf462088d13 | 801 | by Hui Dong) |
| markrad | 0:cdf462088d13 | 802 | |
| markrad | 0:cdf462088d13 | 803 | = PolarSSL 1.3.7 released on 2014-05-02 |
| markrad | 0:cdf462088d13 | 804 | Features |
| markrad | 0:cdf462088d13 | 805 | * debug_set_log_mode() added to determine raw or full logging |
| markrad | 0:cdf462088d13 | 806 | * debug_set_threshold() added to ignore messages over threshold level |
| markrad | 0:cdf462088d13 | 807 | * version_check_feature() added to check for compile-time options at |
| markrad | 0:cdf462088d13 | 808 | run-time |
| markrad | 0:cdf462088d13 | 809 | |
| markrad | 0:cdf462088d13 | 810 | Changes |
| markrad | 0:cdf462088d13 | 811 | * POLARSSL_CONFIG_OPTIONS has been removed. All values are individually |
| markrad | 0:cdf462088d13 | 812 | checked and filled in the relevant module headers |
| markrad | 0:cdf462088d13 | 813 | * Debug module only outputs full lines instead of parts |
| markrad | 0:cdf462088d13 | 814 | * Better support for the different Attribute Types from IETF PKIX (RFC 5280) |
| markrad | 0:cdf462088d13 | 815 | * AES-NI now compiles with "old" assemblers too |
| markrad | 0:cdf462088d13 | 816 | * Ciphersuites based on RC4 now have the lowest priority by default |
| markrad | 0:cdf462088d13 | 817 | |
| markrad | 0:cdf462088d13 | 818 | Bugfix |
| markrad | 0:cdf462088d13 | 819 | * Only iterate over actual certificates in ssl_write_certificate_request() |
| markrad | 0:cdf462088d13 | 820 | (found by Matthew Page) |
| markrad | 0:cdf462088d13 | 821 | * Typos in platform.c and pkcs11.c (found by Daniel Phillips and Steffan |
| markrad | 0:cdf462088d13 | 822 | Karger) |
| markrad | 0:cdf462088d13 | 823 | * cert_write app should use subject of issuer certificate as issuer of cert |
| markrad | 0:cdf462088d13 | 824 | * Fix false reject in padding check in ssl_decrypt_buf() for CBC |
| markrad | 0:cdf462088d13 | 825 | ciphersuites, for full SSL frames of data. |
| markrad | 0:cdf462088d13 | 826 | * Improve interoperability by not writing extension length in ClientHello / |
| markrad | 0:cdf462088d13 | 827 | ServerHello when no extensions are present (found by Matthew Page) |
| markrad | 0:cdf462088d13 | 828 | * rsa_check_pubkey() now allows an E up to N |
| markrad | 0:cdf462088d13 | 829 | * On OpenBSD, use arc4random_buf() instead of rand() to prevent warnings |
| markrad | 0:cdf462088d13 | 830 | * mpi_fill_random() was creating numbers larger than requested on |
| markrad | 0:cdf462088d13 | 831 | big-endian platform when size was not an integer number of limbs |
| markrad | 0:cdf462088d13 | 832 | * Fix dependencies issues in X.509 test suite. |
| markrad | 0:cdf462088d13 | 833 | * Some parts of ssl_tls.c were compiled even when the module was disabled. |
| markrad | 0:cdf462088d13 | 834 | * Fix detection of DragonflyBSD in net.c (found by Markus Pfeiffer) |
| markrad | 0:cdf462088d13 | 835 | * Fix detection of Clang on some Apple platforms with CMake |
| markrad | 0:cdf462088d13 | 836 | (found by Barry K. Nathan) |
| markrad | 0:cdf462088d13 | 837 | |
| markrad | 0:cdf462088d13 | 838 | = PolarSSL 1.3.6 released on 2014-04-11 |
| markrad | 0:cdf462088d13 | 839 | |
| markrad | 0:cdf462088d13 | 840 | Features |
| markrad | 0:cdf462088d13 | 841 | * Support for the ALPN SSL extension |
| markrad | 0:cdf462088d13 | 842 | * Add option 'use_dev_random' to gen_key application |
| markrad | 0:cdf462088d13 | 843 | * Enable verification of the keyUsage extension for CA and leaf |
| markrad | 0:cdf462088d13 | 844 | certificates (POLARSSL_X509_CHECK_KEY_USAGE) |
| markrad | 0:cdf462088d13 | 845 | * Enable verification of the extendedKeyUsage extension |
| markrad | 0:cdf462088d13 | 846 | (POLARSSL_X509_CHECK_EXTENDED_KEY_USAGE) |
| markrad | 0:cdf462088d13 | 847 | |
| markrad | 0:cdf462088d13 | 848 | Changes |
| markrad | 0:cdf462088d13 | 849 | * x509_crt_info() now prints information about parsed extensions as well |
| markrad | 0:cdf462088d13 | 850 | * pk_verify() now returns a specific error code when the signature is valid |
| markrad | 0:cdf462088d13 | 851 | but shorter than the supplied length. |
| markrad | 0:cdf462088d13 | 852 | * Use UTC time to check certificate validity. |
| markrad | 0:cdf462088d13 | 853 | * Reject certificates with times not in UTC, per RFC 5280. |
| markrad | 0:cdf462088d13 | 854 | |
| markrad | 0:cdf462088d13 | 855 | Security |
| markrad | 0:cdf462088d13 | 856 | * Avoid potential timing leak in ecdsa_sign() by blinding modular division. |
| markrad | 0:cdf462088d13 | 857 | (Found by Watson Ladd.) |
| markrad | 0:cdf462088d13 | 858 | * The notAfter date of some certificates was no longer checked since 1.3.5. |
| markrad | 0:cdf462088d13 | 859 | This affects certificates in the user-supplied chain except the top |
| markrad | 0:cdf462088d13 | 860 | certificate. If the user-supplied chain contains only one certificates, |
| markrad | 0:cdf462088d13 | 861 | it is not affected (ie, its notAfter date is properly checked). |
| markrad | 0:cdf462088d13 | 862 | * Prevent potential NULL pointer dereference in ssl_read_record() (found by |
| markrad | 0:cdf462088d13 | 863 | TrustInSoft) |
| markrad | 0:cdf462088d13 | 864 | |
| markrad | 0:cdf462088d13 | 865 | Bugfix |
| markrad | 0:cdf462088d13 | 866 | * The length of various ClientKeyExchange messages was not properly checked. |
| markrad | 0:cdf462088d13 | 867 | * Some example server programs were not sending the close_notify alert. |
| markrad | 0:cdf462088d13 | 868 | * Potential memory leak in mpi_exp_mod() when error occurs during |
| markrad | 0:cdf462088d13 | 869 | calculation of RR. |
| markrad | 0:cdf462088d13 | 870 | * Fixed malloc/free default #define in platform.c (found by Gergely Budai). |
| markrad | 0:cdf462088d13 | 871 | * Fixed type which made POLARSSL_ENTROPY_FORCE_SHA256 uneffective (found by |
| markrad | 0:cdf462088d13 | 872 | Gergely Budai). |
| markrad | 0:cdf462088d13 | 873 | * Fix #include path in ecdsa.h which wasn't accepted by some compilers. |
| markrad | 0:cdf462088d13 | 874 | (found by Gergely Budai) |
| markrad | 0:cdf462088d13 | 875 | * Fix compile errors when POLARSSL_ERROR_STRERROR_BC is undefined (found by |
| markrad | 0:cdf462088d13 | 876 | Shuo Chen). |
| markrad | 0:cdf462088d13 | 877 | * oid_get_numeric_string() used to truncate the output without returning an |
| markrad | 0:cdf462088d13 | 878 | error if the output buffer was just 1 byte too small. |
| markrad | 0:cdf462088d13 | 879 | * dhm_parse_dhm() (hence dhm_parse_dhmfile()) did not set dhm->len. |
| markrad | 0:cdf462088d13 | 880 | * Calling pk_debug() on an RSA-alt key would segfault. |
| markrad | 0:cdf462088d13 | 881 | * pk_get_size() and pk_get_len() were off by a factor 8 for RSA-alt keys. |
| markrad | 0:cdf462088d13 | 882 | * Potential buffer overwrite in pem_write_buffer() because of low length |
| markrad | 0:cdf462088d13 | 883 | indication (found by Thijs Alkemade) |
| markrad | 0:cdf462088d13 | 884 | * EC curves constants, which should be only in ROM since 1.3.3, were also |
| markrad | 0:cdf462088d13 | 885 | stored in RAM due to missing 'const's (found by Gergely Budai). |
| markrad | 0:cdf462088d13 | 886 | |
| markrad | 0:cdf462088d13 | 887 | = PolarSSL 1.3.5 released on 2014-03-26 |
| markrad | 0:cdf462088d13 | 888 | Features |
| markrad | 0:cdf462088d13 | 889 | * HMAC-DRBG as a separate module |
| markrad | 0:cdf462088d13 | 890 | * Option to set the Curve preference order (disabled by default) |
| markrad | 0:cdf462088d13 | 891 | * Single Platform compatilibity layer (for memory / printf / fprintf) |
| markrad | 0:cdf462088d13 | 892 | * Ability to provide alternate timing implementation |
| markrad | 0:cdf462088d13 | 893 | * Ability to force the entropy module to use SHA-256 as its basis |
| markrad | 0:cdf462088d13 | 894 | (POLARSSL_ENTROPY_FORCE_SHA256) |
| markrad | 0:cdf462088d13 | 895 | * Testing script ssl-opt.sh added for testing 'live' ssl option |
| markrad | 0:cdf462088d13 | 896 | interoperability against OpenSSL and PolarSSL |
| markrad | 0:cdf462088d13 | 897 | * Support for reading EC keys that use SpecifiedECDomain in some cases. |
| markrad | 0:cdf462088d13 | 898 | * Entropy module now supports seed writing and reading |
| markrad | 0:cdf462088d13 | 899 | |
| markrad | 0:cdf462088d13 | 900 | Changes |
| markrad | 0:cdf462088d13 | 901 | * Deprecated the Memory layer |
| markrad | 0:cdf462088d13 | 902 | * entropy_add_source(), entropy_update_manual() and entropy_gather() |
| markrad | 0:cdf462088d13 | 903 | now thread-safe if POLARSSL_THREADING_C defined |
| markrad | 0:cdf462088d13 | 904 | * Improvements to the CMake build system, contributed by Julian Ospald. |
| markrad | 0:cdf462088d13 | 905 | * Work around a bug of the version of Clang shipped by Apple with Mavericks |
| markrad | 0:cdf462088d13 | 906 | that prevented bignum.c from compiling. (Reported by Rafael Baptista.) |
| markrad | 0:cdf462088d13 | 907 | * Revamped the compat.sh interoperatibility script to include support for |
| markrad | 0:cdf462088d13 | 908 | testing against GnuTLS |
| markrad | 0:cdf462088d13 | 909 | * Deprecated ssl_set_own_cert_rsa() and ssl_set_own_cert_rsa_alt() |
| markrad | 0:cdf462088d13 | 910 | * Improvements to tests/Makefile, contributed by Oden Eriksson. |
| markrad | 0:cdf462088d13 | 911 | |
| markrad | 0:cdf462088d13 | 912 | Security |
| markrad | 0:cdf462088d13 | 913 | * Forbid change of server certificate during renegotiation to prevent |
| markrad | 0:cdf462088d13 | 914 | "triple handshake" attack when authentication mode is 'optional' (the |
| markrad | 0:cdf462088d13 | 915 | attack was already impossible when authentication is required). |
| markrad | 0:cdf462088d13 | 916 | * Check notBefore timestamp of certificates and CRLs from the future. |
| markrad | 0:cdf462088d13 | 917 | * Forbid sequence number wrapping |
| markrad | 0:cdf462088d13 | 918 | * Fixed possible buffer overflow with overlong PSK |
| markrad | 0:cdf462088d13 | 919 | * Possible remotely-triggered out-of-bounds memory access fixed (found by |
| markrad | 0:cdf462088d13 | 920 | TrustInSoft) |
| markrad | 0:cdf462088d13 | 921 | |
| markrad | 0:cdf462088d13 | 922 | Bugfix |
| markrad | 0:cdf462088d13 | 923 | * ecp_gen_keypair() does more tries to prevent failure because of |
| markrad | 0:cdf462088d13 | 924 | statistics |
| markrad | 0:cdf462088d13 | 925 | * Fixed bug in RSA PKCS#1 v1.5 "reversed" operations |
| markrad | 0:cdf462088d13 | 926 | * Fixed testing with out-of-source builds using cmake |
| markrad | 0:cdf462088d13 | 927 | * Fixed version-major intolerance in server |
| markrad | 0:cdf462088d13 | 928 | * Fixed CMake symlinking on out-of-source builds |
| markrad | 0:cdf462088d13 | 929 | * Fixed dependency issues in test suite |
| markrad | 0:cdf462088d13 | 930 | * Programs rsa_sign_pss and rsa_verify_pss were not using PSS since 1.3.0 |
| markrad | 0:cdf462088d13 | 931 | * Bignum's MIPS-32 assembly was used on MIPS-64, causing chaos. (Found by |
| markrad | 0:cdf462088d13 | 932 | Alex Wilson.) |
| markrad | 0:cdf462088d13 | 933 | * ssl_cache was creating entries when max_entries=0 if TIMING_C was enabled. |
| markrad | 0:cdf462088d13 | 934 | * m_sleep() was sleeping twice too long on most Unix platforms. |
| markrad | 0:cdf462088d13 | 935 | * Fixed bug with session tickets and non-blocking I/O in the unlikely case |
| markrad | 0:cdf462088d13 | 936 | send() would return an EAGAIN error when sending the ticket. |
| markrad | 0:cdf462088d13 | 937 | * ssl_cache was leaking memory when reusing a timed out entry containing a |
| markrad | 0:cdf462088d13 | 938 | client certificate. |
| markrad | 0:cdf462088d13 | 939 | * ssl_srv was leaking memory when client presented a timed out ticket |
| markrad | 0:cdf462088d13 | 940 | containing a client certificate |
| markrad | 0:cdf462088d13 | 941 | * ssl_init() was leaving a dirty pointer in ssl_context if malloc of |
| markrad | 0:cdf462088d13 | 942 | out_ctr failed |
| markrad | 0:cdf462088d13 | 943 | * ssl_handshake_init() was leaving dirty pointers in subcontexts if malloc |
| markrad | 0:cdf462088d13 | 944 | of one of them failed |
| markrad | 0:cdf462088d13 | 945 | * Fix typo in rsa_copy() that impacted PKCS#1 v2 contexts |
| markrad | 0:cdf462088d13 | 946 | * x509_get_current_time() uses localtime_r() to prevent thread issues |
| markrad | 0:cdf462088d13 | 947 | |
| markrad | 0:cdf462088d13 | 948 | = PolarSSL 1.3.4 released on 2014-01-27 |
| markrad | 0:cdf462088d13 | 949 | Features |
| markrad | 0:cdf462088d13 | 950 | * Support for the Koblitz curves: secp192k1, secp224k1, secp256k1 |
| markrad | 0:cdf462088d13 | 951 | * Support for RIPEMD-160 |
| markrad | 0:cdf462088d13 | 952 | * Support for AES CFB8 mode |
| markrad | 0:cdf462088d13 | 953 | * Support for deterministic ECDSA (RFC 6979) |
| markrad | 0:cdf462088d13 | 954 | |
| markrad | 0:cdf462088d13 | 955 | Bugfix |
| markrad | 0:cdf462088d13 | 956 | * Potential memory leak in bignum_selftest() |
| markrad | 0:cdf462088d13 | 957 | * Replaced expired test certificate |
| markrad | 0:cdf462088d13 | 958 | * ssl_mail_client now terminates lines with CRLF, instead of LF |
| markrad | 0:cdf462088d13 | 959 | * net module handles timeouts on blocking sockets better (found by Tilman |
| markrad | 0:cdf462088d13 | 960 | Sauerbeck) |
| markrad | 0:cdf462088d13 | 961 | * Assembly format fixes in bn_mul.h |
| markrad | 0:cdf462088d13 | 962 | |
| markrad | 0:cdf462088d13 | 963 | Security |
| markrad | 0:cdf462088d13 | 964 | * Missing MPI_CHK calls added around unguarded mpi calls (found by |
| markrad | 0:cdf462088d13 | 965 | TrustInSoft) |
| markrad | 0:cdf462088d13 | 966 | |
| markrad | 0:cdf462088d13 | 967 | = PolarSSL 1.3.3 released on 2013-12-31 |
| markrad | 0:cdf462088d13 | 968 | Features |
| markrad | 0:cdf462088d13 | 969 | * EC key generation support in gen_key app |
| markrad | 0:cdf462088d13 | 970 | * Support for adhering to client ciphersuite order preference |
| markrad | 0:cdf462088d13 | 971 | (POLARSSL_SSL_SRV_RESPECT_CLIENT_PREFERENCE) |
| markrad | 0:cdf462088d13 | 972 | * Support for Curve25519 |
| markrad | 0:cdf462088d13 | 973 | * Support for ECDH-RSA and ECDH-ECDSA key exchanges and ciphersuites |
| markrad | 0:cdf462088d13 | 974 | * Support for IPv6 in the NET module |
| markrad | 0:cdf462088d13 | 975 | * AES-NI support for AES, AES-GCM and AES key scheduling |
| markrad | 0:cdf462088d13 | 976 | * SSL Pthread-based server example added (ssl_pthread_server) |
| markrad | 0:cdf462088d13 | 977 | |
| markrad | 0:cdf462088d13 | 978 | Changes |
| markrad | 0:cdf462088d13 | 979 | * gen_prime() speedup |
| markrad | 0:cdf462088d13 | 980 | * Speedup of ECP multiplication operation |
| markrad | 0:cdf462088d13 | 981 | * Relaxed some SHA2 ciphersuite's version requirements |
| markrad | 0:cdf462088d13 | 982 | * Dropped use of readdir_r() instead of readdir() with threading support |
| markrad | 0:cdf462088d13 | 983 | * More constant-time checks in the RSA module |
| markrad | 0:cdf462088d13 | 984 | * Split off curves from ecp.c into ecp_curves.c |
| markrad | 0:cdf462088d13 | 985 | * Curves are now stored fully in ROM |
| markrad | 0:cdf462088d13 | 986 | * Memory usage optimizations in ECP module |
| markrad | 0:cdf462088d13 | 987 | * Removed POLARSSL_THREADING_DUMMY |
| markrad | 0:cdf462088d13 | 988 | |
| markrad | 0:cdf462088d13 | 989 | Bugfix |
| markrad | 0:cdf462088d13 | 990 | * Fixed bug in mpi_set_bit() on platforms where t_uint is wider than int |
| markrad | 0:cdf462088d13 | 991 | * Fixed X.509 hostname comparison (with non-regular characters) |
| markrad | 0:cdf462088d13 | 992 | * SSL now gracefully handles missing RNG |
| markrad | 0:cdf462088d13 | 993 | * Missing defines / cases for RSA_PSK key exchange |
| markrad | 0:cdf462088d13 | 994 | * crypt_and_hash app checks MAC before final decryption |
| markrad | 0:cdf462088d13 | 995 | * Potential memory leak in ssl_ticket_keys_init() |
| markrad | 0:cdf462088d13 | 996 | * Memory leak in benchmark application |
| markrad | 0:cdf462088d13 | 997 | * Fixed x509_crt_parse_path() bug on Windows platforms |
| markrad | 0:cdf462088d13 | 998 | * Added missing MPI_CHK() around some statements in mpi_div_mpi() (found by |
| markrad | 0:cdf462088d13 | 999 | TrustInSoft) |
| markrad | 0:cdf462088d13 | 1000 | * Fixed potential overflow in certificate size verification in |
| markrad | 0:cdf462088d13 | 1001 | ssl_write_certificate() (found by TrustInSoft) |
| markrad | 0:cdf462088d13 | 1002 | |
| markrad | 0:cdf462088d13 | 1003 | Security |
| markrad | 0:cdf462088d13 | 1004 | * Possible remotely-triggered out-of-bounds memory access fixed (found by |
| markrad | 0:cdf462088d13 | 1005 | TrustInSoft) |
| markrad | 0:cdf462088d13 | 1006 | |
| markrad | 0:cdf462088d13 | 1007 | = PolarSSL 1.3.2 released on 2013-11-04 |
| markrad | 0:cdf462088d13 | 1008 | Features |
| markrad | 0:cdf462088d13 | 1009 | * PK tests added to test framework |
| markrad | 0:cdf462088d13 | 1010 | * Added optional optimization for NIST MODP curves (POLARSSL_ECP_NIST_OPTIM) |
| markrad | 0:cdf462088d13 | 1011 | * Support for Camellia-GCM mode and ciphersuites |
| markrad | 0:cdf462088d13 | 1012 | |
| markrad | 0:cdf462088d13 | 1013 | Changes |
| markrad | 0:cdf462088d13 | 1014 | * Padding checks in cipher layer are now constant-time |
| markrad | 0:cdf462088d13 | 1015 | * Value comparisons in SSL layer are now constant-time |
| markrad | 0:cdf462088d13 | 1016 | * Support for serialNumber, postalAddress and postalCode in X509 names |
| markrad | 0:cdf462088d13 | 1017 | * SSL Renegotiation was refactored |
| markrad | 0:cdf462088d13 | 1018 | |
| markrad | 0:cdf462088d13 | 1019 | Bugfix |
| markrad | 0:cdf462088d13 | 1020 | * More stringent checks in cipher layer |
| markrad | 0:cdf462088d13 | 1021 | * Server does not send out extensions not advertised by client |
| markrad | 0:cdf462088d13 | 1022 | * Prevent possible alignment warnings on casting from char * to 'aligned *' |
| markrad | 0:cdf462088d13 | 1023 | * Misc fixes and additions to dependency checks |
| markrad | 0:cdf462088d13 | 1024 | * Const correctness |
| markrad | 0:cdf462088d13 | 1025 | * cert_write with selfsign should use issuer_name as subject_name |
| markrad | 0:cdf462088d13 | 1026 | * Fix ECDSA corner case: missing reduction mod N (found by DualTachyon) |
| markrad | 0:cdf462088d13 | 1027 | * Defines to handle UEFI environment under MSVC |
| markrad | 0:cdf462088d13 | 1028 | * Server-side initiated renegotiations send HelloRequest |
| markrad | 0:cdf462088d13 | 1029 | |
| markrad | 0:cdf462088d13 | 1030 | = PolarSSL 1.3.1 released on 2013-10-15 |
| markrad | 0:cdf462088d13 | 1031 | Features |
| markrad | 0:cdf462088d13 | 1032 | * Support for Brainpool curves and TLS ciphersuites (RFC 7027) |
| markrad | 0:cdf462088d13 | 1033 | * Support for ECDHE-PSK key-exchange and ciphersuites |
| markrad | 0:cdf462088d13 | 1034 | * Support for RSA-PSK key-exchange and ciphersuites |
| markrad | 0:cdf462088d13 | 1035 | |
| markrad | 0:cdf462088d13 | 1036 | Changes |
| markrad | 0:cdf462088d13 | 1037 | * RSA blinding locks for a smaller amount of time |
| markrad | 0:cdf462088d13 | 1038 | * TLS compression only allocates working buffer once |
| markrad | 0:cdf462088d13 | 1039 | * Introduced POLARSSL_HAVE_READDIR_R for systems without it |
| markrad | 0:cdf462088d13 | 1040 | * config.h is more script-friendly |
| markrad | 0:cdf462088d13 | 1041 | |
| markrad | 0:cdf462088d13 | 1042 | Bugfix |
| markrad | 0:cdf462088d13 | 1043 | * Missing MSVC defines added |
| markrad | 0:cdf462088d13 | 1044 | * Compile errors with POLARSSL_RSA_NO_CRT |
| markrad | 0:cdf462088d13 | 1045 | * Header files with 'polarssl/' |
| markrad | 0:cdf462088d13 | 1046 | * Const correctness |
| markrad | 0:cdf462088d13 | 1047 | * Possible naming collision in dhm_context |
| markrad | 0:cdf462088d13 | 1048 | * Better support for MSVC |
| markrad | 0:cdf462088d13 | 1049 | * threading_set_alt() name |
| markrad | 0:cdf462088d13 | 1050 | * Added missing x509write_crt_set_version() |
| markrad | 0:cdf462088d13 | 1051 | |
| markrad | 0:cdf462088d13 | 1052 | = PolarSSL 1.3.0 released on 2013-10-01 |
| markrad | 0:cdf462088d13 | 1053 | Features |
| markrad | 0:cdf462088d13 | 1054 | * Elliptic Curve Cryptography module added |
| markrad | 0:cdf462088d13 | 1055 | * Elliptic Curve Diffie Hellman module added |
| markrad | 0:cdf462088d13 | 1056 | * Ephemeral Elliptic Curve Diffie Hellman support for SSL/TLS |
| markrad | 0:cdf462088d13 | 1057 | (ECDHE-based ciphersuites) |
| markrad | 0:cdf462088d13 | 1058 | * Ephemeral Elliptic Curve Digital Signature Algorithm support for SSL/TLS |
| markrad | 0:cdf462088d13 | 1059 | (ECDSA-based ciphersuites) |
| markrad | 0:cdf462088d13 | 1060 | * Ability to specify allowed ciphersuites based on the protocol version. |
| markrad | 0:cdf462088d13 | 1061 | * PSK and DHE-PSK based ciphersuites added |
| markrad | 0:cdf462088d13 | 1062 | * Memory allocation abstraction layer added |
| markrad | 0:cdf462088d13 | 1063 | * Buffer-based memory allocator added (no malloc() / free() / HEAP usage) |
| markrad | 0:cdf462088d13 | 1064 | * Threading abstraction layer added (dummy / pthread / alternate) |
| markrad | 0:cdf462088d13 | 1065 | * Public Key abstraction layer added |
| markrad | 0:cdf462088d13 | 1066 | * Parsing Elliptic Curve keys |
| markrad | 0:cdf462088d13 | 1067 | * Parsing Elliptic Curve certificates |
| markrad | 0:cdf462088d13 | 1068 | * Support for max_fragment_length extension (RFC 6066) |
| markrad | 0:cdf462088d13 | 1069 | * Support for truncated_hmac extension (RFC 6066) |
| markrad | 0:cdf462088d13 | 1070 | * Support for zeros-and-length (ANSI X.923) padding, one-and-zeros |
| markrad | 0:cdf462088d13 | 1071 | (ISO/IEC 7816-4) padding and zero padding in the cipher layer |
| markrad | 0:cdf462088d13 | 1072 | * Support for session tickets (RFC 5077) |
| markrad | 0:cdf462088d13 | 1073 | * Certificate Request (CSR) generation with extensions (key_usage, |
| markrad | 0:cdf462088d13 | 1074 | ns_cert_type) |
| markrad | 0:cdf462088d13 | 1075 | * X509 Certificate writing with extensions (basic_constraints, |
| markrad | 0:cdf462088d13 | 1076 | issuer_key_identifier, etc) |
| markrad | 0:cdf462088d13 | 1077 | * Optional blinding for RSA, DHM and EC |
| markrad | 0:cdf462088d13 | 1078 | * Support for multiple active certificate / key pairs in SSL servers for |
| markrad | 0:cdf462088d13 | 1079 | the same host (Not to be confused with SNI!) |
| markrad | 0:cdf462088d13 | 1080 | |
| markrad | 0:cdf462088d13 | 1081 | Changes |
| markrad | 0:cdf462088d13 | 1082 | * Ability to enable / disable SSL v3 / TLS 1.0 / TLS 1.1 / TLS 1.2 |
| markrad | 0:cdf462088d13 | 1083 | individually |
| markrad | 0:cdf462088d13 | 1084 | * Introduced separate SSL Ciphersuites module that is based on |
| markrad | 0:cdf462088d13 | 1085 | Cipher and MD information |
| markrad | 0:cdf462088d13 | 1086 | * Internals for SSL module adapted to have separate IV pointer that is |
| markrad | 0:cdf462088d13 | 1087 | dynamically set (Better support for hardware acceleration) |
| markrad | 0:cdf462088d13 | 1088 | * Moved all OID functionality to a separate module. RSA function |
| markrad | 0:cdf462088d13 | 1089 | prototypes for the RSA sign and verify functions changed as a result |
| markrad | 0:cdf462088d13 | 1090 | * Split up the GCM module into a starts/update/finish cycle |
| markrad | 0:cdf462088d13 | 1091 | * Client and server now filter sent and accepted ciphersuites on minimum |
| markrad | 0:cdf462088d13 | 1092 | and maximum protocol version |
| markrad | 0:cdf462088d13 | 1093 | * Ability to disable server_name extension (RFC 6066) |
| markrad | 0:cdf462088d13 | 1094 | * Renamed error_strerror() to the less conflicting polarssl_strerror() |
| markrad | 0:cdf462088d13 | 1095 | (Ability to keep old as well with POLARSSL_ERROR_STRERROR_BC) |
| markrad | 0:cdf462088d13 | 1096 | * SHA2 renamed to SHA256, SHA4 renamed to SHA512 and functions accordingly |
| markrad | 0:cdf462088d13 | 1097 | * All RSA operations require a random generator for blinding purposes |
| markrad | 0:cdf462088d13 | 1098 | * X509 core refactored |
| markrad | 0:cdf462088d13 | 1099 | * x509_crt_verify() now case insensitive for cn (RFC 6125 6.4) |
| markrad | 0:cdf462088d13 | 1100 | * Also compiles / runs without time-based functions (!POLARSSL_HAVE_TIME) |
| markrad | 0:cdf462088d13 | 1101 | * Support faulty X509 v1 certificates with extensions |
| markrad | 0:cdf462088d13 | 1102 | (POLARSSL_X509_ALLOW_EXTENSIONS_NON_V3) |
| markrad | 0:cdf462088d13 | 1103 | |
| markrad | 0:cdf462088d13 | 1104 | Bugfix |
| markrad | 0:cdf462088d13 | 1105 | * Fixed parse error in ssl_parse_certificate_request() |
| markrad | 0:cdf462088d13 | 1106 | * zlib compression/decompression skipped on empty blocks |
| markrad | 0:cdf462088d13 | 1107 | * Support for AIX header locations in net.c module |
| markrad | 0:cdf462088d13 | 1108 | * Fixed file descriptor leaks |
| markrad | 0:cdf462088d13 | 1109 | |
| markrad | 0:cdf462088d13 | 1110 | Security |
| markrad | 0:cdf462088d13 | 1111 | * RSA blinding on CRT operations to counter timing attacks |
| markrad | 0:cdf462088d13 | 1112 | (found by Cyril Arnaud and Pierre-Alain Fouque) |
| markrad | 0:cdf462088d13 | 1113 | |
| markrad | 0:cdf462088d13 | 1114 | |
| markrad | 0:cdf462088d13 | 1115 | = Version 1.2.14 released 2015-05-?? |
| markrad | 0:cdf462088d13 | 1116 | |
| markrad | 0:cdf462088d13 | 1117 | Security |
| markrad | 0:cdf462088d13 | 1118 | * Fix potential invalid memory read in the server, that allows a client to |
| markrad | 0:cdf462088d13 | 1119 | crash it remotely (found by Caj Larsson). |
| markrad | 0:cdf462088d13 | 1120 | * Fix potential invalid memory read in certificate parsing, that allows a |
| markrad | 0:cdf462088d13 | 1121 | client to crash the server remotely if client authentication is enabled |
| markrad | 0:cdf462088d13 | 1122 | (found using Codenomicon Defensics). |
| markrad | 0:cdf462088d13 | 1123 | * Add countermeasure against "Lucky 13 strikes back" cache-based attack, |
| markrad | 0:cdf462088d13 | 1124 | https://dl.acm.org/citation.cfm?id=2714625 |
| markrad | 0:cdf462088d13 | 1125 | |
| markrad | 0:cdf462088d13 | 1126 | Bugfix |
| markrad | 0:cdf462088d13 | 1127 | * Fix bug in Via Padlock support (found by Nikos Mavrogiannopoulos). |
| markrad | 0:cdf462088d13 | 1128 | * Fix hardclock() (only used in the benchmarking program) with some |
| markrad | 0:cdf462088d13 | 1129 | versions of mingw64 (found by kxjhlele). |
| markrad | 0:cdf462088d13 | 1130 | * Fix warnings from mingw64 in timing.c (found by kxjklele). |
| markrad | 0:cdf462088d13 | 1131 | * Fix potential unintended sign extension in asn1_get_len() on 64-bit |
| markrad | 0:cdf462088d13 | 1132 | platforms (found with Coverity Scan). |
| markrad | 0:cdf462088d13 | 1133 | |
| markrad | 0:cdf462088d13 | 1134 | = Version 1.2.13 released 2015-02-16 |
| markrad | 0:cdf462088d13 | 1135 | Note: Although PolarSSL has been renamed to mbed TLS, no changes reflecting |
| markrad | 0:cdf462088d13 | 1136 | this will be made in the 1.2 branch at this point. |
| markrad | 0:cdf462088d13 | 1137 | |
| markrad | 0:cdf462088d13 | 1138 | Security |
| markrad | 0:cdf462088d13 | 1139 | * Fix remotely-triggerable uninitialised pointer dereference caused by |
| markrad | 0:cdf462088d13 | 1140 | crafted X.509 certificate (TLS server is not affected if it doesn't ask |
| markrad | 0:cdf462088d13 | 1141 | for a client certificate) (found using Codenomicon Defensics). |
| markrad | 0:cdf462088d13 | 1142 | * Fix remotely-triggerable memory leak caused by crafted X.509 certificates |
| markrad | 0:cdf462088d13 | 1143 | (TLS server is not affected if it doesn't ask for a client certificate) |
| markrad | 0:cdf462088d13 | 1144 | (found using Codenomicon Defensics). |
| markrad | 0:cdf462088d13 | 1145 | * Fix potential stack overflow while parsing crafted X.509 certificates |
| markrad | 0:cdf462088d13 | 1146 | (TLS server is not affected if it doesn't ask for a client certificate) |
| markrad | 0:cdf462088d13 | 1147 | found using Codenomicon Defensics). |
| markrad | 0:cdf462088d13 | 1148 | * Fix buffer overread of size 1 when parsing crafted X.509 certificates |
| markrad | 0:cdf462088d13 | 1149 | (TLS server is not affected if it doesn't ask for a client certificate). |
| markrad | 0:cdf462088d13 | 1150 | |
| markrad | 0:cdf462088d13 | 1151 | Bugfix |
| markrad | 0:cdf462088d13 | 1152 | * Fix potential undefined behaviour in Camellia. |
| markrad | 0:cdf462088d13 | 1153 | * Fix memory leaks in PKCS#5 and PKCS#12. |
| markrad | 0:cdf462088d13 | 1154 | * Stack buffer overflow if ctr_drbg_update() is called with too large |
| markrad | 0:cdf462088d13 | 1155 | add_len (found by Jean-Philippe Aumasson) (not triggerable remotely). |
| markrad | 0:cdf462088d13 | 1156 | * Fix bug in MPI/bignum on s390/s390x (reported by Dan Horák) (introduced |
| markrad | 0:cdf462088d13 | 1157 | in 1.2.12). |
| markrad | 0:cdf462088d13 | 1158 | * Fix unchecked return code in x509_crt_parse_path() on Windows (found by |
| markrad | 0:cdf462088d13 | 1159 | Peter Vaskovic). |
| markrad | 0:cdf462088d13 | 1160 | * Fix assembly selection for MIPS64 (thanks to James Cowgill). |
| markrad | 0:cdf462088d13 | 1161 | * ssl_get_verify_result() now works even if the handshake was aborted due |
| markrad | 0:cdf462088d13 | 1162 | to a failed verification (found by Fredrik Axelsson). |
| markrad | 0:cdf462088d13 | 1163 | * Skip writing and parsing signature_algorithm extension if none of the |
| markrad | 0:cdf462088d13 | 1164 | key exchanges enabled needs certificates. This fixes a possible interop |
| markrad | 0:cdf462088d13 | 1165 | issue with some servers when a zero-length extension was sent. (Reported |
| markrad | 0:cdf462088d13 | 1166 | by Peter Dettman.) |
| markrad | 0:cdf462088d13 | 1167 | * On a 0-length input, base64_encode() did not correctly set output length |
| markrad | 0:cdf462088d13 | 1168 | (found by Hendrik van den Boogaard). |
| markrad | 0:cdf462088d13 | 1169 | |
| markrad | 0:cdf462088d13 | 1170 | Changes |
| markrad | 0:cdf462088d13 | 1171 | * Blind RSA private operations even when POLARSSL_RSA_NO_CRT is defined. |
| markrad | 0:cdf462088d13 | 1172 | * Forbid repeated extensions in X.509 certificates. |
| markrad | 0:cdf462088d13 | 1173 | * Add compile-time option POLARSSL_X509_MAX_INTERMEDIATE_CA to limit the |
| markrad | 0:cdf462088d13 | 1174 | length of an X.509 verification chain (default = 8). |
| markrad | 0:cdf462088d13 | 1175 | = Version 1.2.12 released 2014-10-24 |
| markrad | 0:cdf462088d13 | 1176 | |
| markrad | 0:cdf462088d13 | 1177 | Security |
| markrad | 0:cdf462088d13 | 1178 | * Remotely-triggerable memory leak when parsing some X.509 certificates |
| markrad | 0:cdf462088d13 | 1179 | (server is not affected if it doesn't ask for a client certificate). |
| markrad | 0:cdf462088d13 | 1180 | (Found using Codenomicon Defensics.) |
| markrad | 0:cdf462088d13 | 1181 | |
| markrad | 0:cdf462088d13 | 1182 | Bugfix |
| markrad | 0:cdf462088d13 | 1183 | * Fix potential bad read in parsing ServerHello (found by Adrien |
| markrad | 0:cdf462088d13 | 1184 | Vialletelle). |
| markrad | 0:cdf462088d13 | 1185 | * ssl_close_notify() could send more than one message in some circumstances |
| markrad | 0:cdf462088d13 | 1186 | with non-blocking I/O. |
| markrad | 0:cdf462088d13 | 1187 | * x509_crt_parse() did not increase total_failed on PEM error |
| markrad | 0:cdf462088d13 | 1188 | * Fix compiler warnings on iOS (found by Sander Niemeijer). |
| markrad | 0:cdf462088d13 | 1189 | * Don't print uninitialised buffer in ssl_mail_client (found by Marc Abel). |
| markrad | 0:cdf462088d13 | 1190 | * Fix net_accept() regarding non-blocking sockets (found by Luca Pesce). |
| markrad | 0:cdf462088d13 | 1191 | * ssl_read() could return non-application data records on server while |
| markrad | 0:cdf462088d13 | 1192 | renegotation was pending, and on client when a HelloRequest was received. |
| markrad | 0:cdf462088d13 | 1193 | * Fix warnings from Clang's scan-build (contributed by Alfred Klomp). |
| markrad | 0:cdf462088d13 | 1194 | |
| markrad | 0:cdf462088d13 | 1195 | Changes |
| markrad | 0:cdf462088d13 | 1196 | * X.509 certificates with more than one AttributeTypeAndValue per |
| markrad | 0:cdf462088d13 | 1197 | RelativeDistinguishedName are not accepted any more. |
| markrad | 0:cdf462088d13 | 1198 | * ssl_read() now returns POLARSSL_ERR_NET_WANT_READ rather than |
| markrad | 0:cdf462088d13 | 1199 | POLARSSL_ERR_SSL_UNEXPECTED_MESSAGE on harmless alerts. |
| markrad | 0:cdf462088d13 | 1200 | * Accept spaces at end of line or end of buffer in base64_decode(). |
| markrad | 0:cdf462088d13 | 1201 | |
| markrad | 0:cdf462088d13 | 1202 | = Version 1.2.11 released 2014-07-11 |
| markrad | 0:cdf462088d13 | 1203 | Features |
| markrad | 0:cdf462088d13 | 1204 | * Entropy module now supports seed writing and reading |
| markrad | 0:cdf462088d13 | 1205 | |
| markrad | 0:cdf462088d13 | 1206 | Changes |
| markrad | 0:cdf462088d13 | 1207 | * Introduced POLARSSL_HAVE_READDIR_R for systems without it |
| markrad | 0:cdf462088d13 | 1208 | * Improvements to the CMake build system, contributed by Julian Ospald. |
| markrad | 0:cdf462088d13 | 1209 | * Work around a bug of the version of Clang shipped by Apple with Mavericks |
| markrad | 0:cdf462088d13 | 1210 | that prevented bignum.c from compiling. (Reported by Rafael Baptista.) |
| markrad | 0:cdf462088d13 | 1211 | * Improvements to tests/Makefile, contributed by Oden Eriksson. |
| markrad | 0:cdf462088d13 | 1212 | * Use UTC time to check certificate validity. |
| markrad | 0:cdf462088d13 | 1213 | * Reject certificates with times not in UTC, per RFC 5280. |
| markrad | 0:cdf462088d13 | 1214 | * Migrate zeroizing of data to polarssl_zeroize() instead of memset() |
| markrad | 0:cdf462088d13 | 1215 | against unwanted compiler optimizations |
| markrad | 0:cdf462088d13 | 1216 | |
| markrad | 0:cdf462088d13 | 1217 | Security |
| markrad | 0:cdf462088d13 | 1218 | * Forbid change of server certificate during renegotiation to prevent |
| markrad | 0:cdf462088d13 | 1219 | "triple handshake" attack when authentication mode is optional (the |
| markrad | 0:cdf462088d13 | 1220 | attack was already impossible when authentication is required). |
| markrad | 0:cdf462088d13 | 1221 | * Check notBefore timestamp of certificates and CRLs from the future. |
| markrad | 0:cdf462088d13 | 1222 | * Forbid sequence number wrapping |
| markrad | 0:cdf462088d13 | 1223 | * Prevent potential NULL pointer dereference in ssl_read_record() (found by |
| markrad | 0:cdf462088d13 | 1224 | TrustInSoft) |
| markrad | 0:cdf462088d13 | 1225 | * Fix length checking for AEAD ciphersuites (found by Codenomicon). |
| markrad | 0:cdf462088d13 | 1226 | It was possible to crash the server (and client) using crafted messages |
| markrad | 0:cdf462088d13 | 1227 | when a GCM suite was chosen. |
| markrad | 0:cdf462088d13 | 1228 | |
| markrad | 0:cdf462088d13 | 1229 | Bugfix |
| markrad | 0:cdf462088d13 | 1230 | * Fixed X.509 hostname comparison (with non-regular characters) |
| markrad | 0:cdf462088d13 | 1231 | * SSL now gracefully handles missing RNG |
| markrad | 0:cdf462088d13 | 1232 | * crypt_and_hash app checks MAC before final decryption |
| markrad | 0:cdf462088d13 | 1233 | * Fixed x509_crt_parse_path() bug on Windows platforms |
| markrad | 0:cdf462088d13 | 1234 | * Added missing MPI_CHK() around some statements in mpi_div_mpi() (found by |
| markrad | 0:cdf462088d13 | 1235 | TrustInSoft) |
| markrad | 0:cdf462088d13 | 1236 | * Fixed potential overflow in certificate size verification in |
| markrad | 0:cdf462088d13 | 1237 | ssl_write_certificate() (found by TrustInSoft) |
| markrad | 0:cdf462088d13 | 1238 | * Fix ASM format in bn_mul.h |
| markrad | 0:cdf462088d13 | 1239 | * Potential memory leak in bignum_selftest() |
| markrad | 0:cdf462088d13 | 1240 | * Replaced expired test certificate |
| markrad | 0:cdf462088d13 | 1241 | * ssl_mail_client now terminates lines with CRLF, instead of LF |
| markrad | 0:cdf462088d13 | 1242 | * Fix bug in RSA PKCS#1 v1.5 "reversed" operations |
| markrad | 0:cdf462088d13 | 1243 | * Fixed testing with out-of-source builds using cmake |
| markrad | 0:cdf462088d13 | 1244 | * Fixed version-major intolerance in server |
| markrad | 0:cdf462088d13 | 1245 | * Fixed CMake symlinking on out-of-source builds |
| markrad | 0:cdf462088d13 | 1246 | * Bignum's MIPS-32 assembly was used on MIPS-64, causing chaos. (Found by |
| markrad | 0:cdf462088d13 | 1247 | Alex Wilson.) |
| markrad | 0:cdf462088d13 | 1248 | * ssl_init() was leaving a dirty pointer in ssl_context if malloc of |
| markrad | 0:cdf462088d13 | 1249 | out_ctr failed |
| markrad | 0:cdf462088d13 | 1250 | * ssl_handshake_init() was leaving dirty pointers in subcontexts if malloc |
| markrad | 0:cdf462088d13 | 1251 | of one of them failed |
| markrad | 0:cdf462088d13 | 1252 | * x509_get_current_time() uses localtime_r() to prevent thread issues |
| markrad | 0:cdf462088d13 | 1253 | * Some example server programs were not sending the close_notify alert. |
| markrad | 0:cdf462088d13 | 1254 | * Potential memory leak in mpi_exp_mod() when error occurs during |
| markrad | 0:cdf462088d13 | 1255 | calculation of RR. |
| markrad | 0:cdf462088d13 | 1256 | * Improve interoperability by not writing extension length in ClientHello |
| markrad | 0:cdf462088d13 | 1257 | when no extensions are present (found by Matthew Page) |
| markrad | 0:cdf462088d13 | 1258 | * rsa_check_pubkey() now allows an E up to N |
| markrad | 0:cdf462088d13 | 1259 | * On OpenBSD, use arc4random_buf() instead of rand() to prevent warnings |
| markrad | 0:cdf462088d13 | 1260 | * mpi_fill_random() was creating numbers larger than requested on |
| markrad | 0:cdf462088d13 | 1261 | big-endian platform when size was not an integer number of limbs |
| markrad | 0:cdf462088d13 | 1262 | * Fix detection of DragonflyBSD in net.c (found by Markus Pfeiffer) |
| markrad | 0:cdf462088d13 | 1263 | * Stricter check on SSL ClientHello internal sizes compared to actual packet |
| markrad | 0:cdf462088d13 | 1264 | size (found by TrustInSoft) |
| markrad | 0:cdf462088d13 | 1265 | * Fix preprocessor checks for bn_mul PPC asm (found by Barry K. Nathan). |
| markrad | 0:cdf462088d13 | 1266 | * Use \n\t rather than semicolons for bn_mul asm, since some assemblers |
| markrad | 0:cdf462088d13 | 1267 | interpret semicolons as comment delimiters (found by Barry K. Nathan). |
| markrad | 0:cdf462088d13 | 1268 | * Disable broken Sparc64 bn_mul assembly (found by Florian Obser). |
| markrad | 0:cdf462088d13 | 1269 | * Fix base64_decode() to return and check length correctly (in case of |
| markrad | 0:cdf462088d13 | 1270 | tight buffers) |
| markrad | 0:cdf462088d13 | 1271 | |
| markrad | 0:cdf462088d13 | 1272 | = Version 1.2.10 released 2013-10-07 |
| markrad | 0:cdf462088d13 | 1273 | Changes |
| markrad | 0:cdf462088d13 | 1274 | * Changed RSA blinding to a slower but thread-safe version |
| markrad | 0:cdf462088d13 | 1275 | |
| markrad | 0:cdf462088d13 | 1276 | Bugfix |
| markrad | 0:cdf462088d13 | 1277 | * Fixed memory leak in RSA as a result of introduction of blinding |
| markrad | 0:cdf462088d13 | 1278 | * Fixed ssl_pkcs11_decrypt() prototype |
| markrad | 0:cdf462088d13 | 1279 | * Fixed MSVC project files |
| markrad | 0:cdf462088d13 | 1280 | |
| markrad | 0:cdf462088d13 | 1281 | = Version 1.2.9 released 2013-10-01 |
| markrad | 0:cdf462088d13 | 1282 | Changes |
| markrad | 0:cdf462088d13 | 1283 | * x509_verify() now case insensitive for cn (RFC 6125 6.4) |
| markrad | 0:cdf462088d13 | 1284 | |
| markrad | 0:cdf462088d13 | 1285 | Bugfix |
| markrad | 0:cdf462088d13 | 1286 | * Fixed potential memory leak when failing to resume a session |
| markrad | 0:cdf462088d13 | 1287 | * Fixed potential file descriptor leaks (found by Remi Gacogne) |
| markrad | 0:cdf462088d13 | 1288 | * Minor fixes |
| markrad | 0:cdf462088d13 | 1289 | |
| markrad | 0:cdf462088d13 | 1290 | Security |
| markrad | 0:cdf462088d13 | 1291 | * Fixed potential heap buffer overflow on large hostname setting |
| markrad | 0:cdf462088d13 | 1292 | * Fixed potential negative value misinterpretation in load_file() |
| markrad | 0:cdf462088d13 | 1293 | * RSA blinding on CRT operations to counter timing attacks |
| markrad | 0:cdf462088d13 | 1294 | (found by Cyril Arnaud and Pierre-Alain Fouque) |
| markrad | 0:cdf462088d13 | 1295 | |
| markrad | 0:cdf462088d13 | 1296 | = Version 1.2.8 released 2013-06-19 |
| markrad | 0:cdf462088d13 | 1297 | Features |
| markrad | 0:cdf462088d13 | 1298 | * Parsing of PKCS#8 encrypted private key files |
| markrad | 0:cdf462088d13 | 1299 | * PKCS#12 PBE and derivation functions |
| markrad | 0:cdf462088d13 | 1300 | * Centralized module option values in config.h to allow user-defined |
| markrad | 0:cdf462088d13 | 1301 | settings without editing header files by using POLARSSL_CONFIG_OPTIONS |
| markrad | 0:cdf462088d13 | 1302 | |
| markrad | 0:cdf462088d13 | 1303 | Changes |
| markrad | 0:cdf462088d13 | 1304 | * HAVEGE random generator disabled by default |
| markrad | 0:cdf462088d13 | 1305 | * Internally split up x509parse_key() into a (PEM) handler function |
| markrad | 0:cdf462088d13 | 1306 | and specific DER parser functions for the PKCS#1 and unencrypted |
| markrad | 0:cdf462088d13 | 1307 | PKCS#8 private key formats |
| markrad | 0:cdf462088d13 | 1308 | * Added mechanism to provide alternative implementations for all |
| markrad | 0:cdf462088d13 | 1309 | symmetric cipher and hash algorithms (e.g. POLARSSL_AES_ALT in |
| markrad | 0:cdf462088d13 | 1310 | config.h) |
| markrad | 0:cdf462088d13 | 1311 | * PKCS#5 module added. Moved PBKDF2 functionality inside and deprecated |
| markrad | 0:cdf462088d13 | 1312 | old PBKDF2 module |
| markrad | 0:cdf462088d13 | 1313 | |
| markrad | 0:cdf462088d13 | 1314 | Bugfix |
| markrad | 0:cdf462088d13 | 1315 | * Secure renegotiation extension should only be sent in case client |
| markrad | 0:cdf462088d13 | 1316 | supports secure renegotiation |
| markrad | 0:cdf462088d13 | 1317 | * Fixed offset for cert_type list in ssl_parse_certificate_request() |
| markrad | 0:cdf462088d13 | 1318 | * Fixed const correctness issues that have no impact on the ABI |
| markrad | 0:cdf462088d13 | 1319 | * x509parse_crt() now better handles PEM error situations |
| markrad | 0:cdf462088d13 | 1320 | * ssl_parse_certificate() now calls x509parse_crt_der() directly |
| markrad | 0:cdf462088d13 | 1321 | instead of the x509parse_crt() wrapper that can also parse PEM |
| markrad | 0:cdf462088d13 | 1322 | certificates |
| markrad | 0:cdf462088d13 | 1323 | * x509parse_crtpath() is now reentrant and uses more portable stat() |
| markrad | 0:cdf462088d13 | 1324 | * Fixed bignum.c and bn_mul.h to support Thumb2 and LLVM compiler |
| markrad | 0:cdf462088d13 | 1325 | * Fixed values for 2-key Triple DES in cipher layer |
| markrad | 0:cdf462088d13 | 1326 | * ssl_write_certificate_request() can handle empty ca_chain |
| markrad | 0:cdf462088d13 | 1327 | |
| markrad | 0:cdf462088d13 | 1328 | Security |
| markrad | 0:cdf462088d13 | 1329 | * A possible DoS during the SSL Handshake, due to faulty parsing of |
| markrad | 0:cdf462088d13 | 1330 | PEM-encoded certificates has been fixed (found by Jack Lloyd) |
| markrad | 0:cdf462088d13 | 1331 | |
| markrad | 0:cdf462088d13 | 1332 | = Version 1.2.7 released 2013-04-13 |
| markrad | 0:cdf462088d13 | 1333 | Features |
| markrad | 0:cdf462088d13 | 1334 | * Ability to specify allowed ciphersuites based on the protocol version. |
| markrad | 0:cdf462088d13 | 1335 | |
| markrad | 0:cdf462088d13 | 1336 | Changes |
| markrad | 0:cdf462088d13 | 1337 | * Default Blowfish keysize is now 128-bits |
| markrad | 0:cdf462088d13 | 1338 | * Test suites made smaller to accommodate Raspberry Pi |
| markrad | 0:cdf462088d13 | 1339 | |
| markrad | 0:cdf462088d13 | 1340 | Bugfix |
| markrad | 0:cdf462088d13 | 1341 | * Fix for MPI assembly for ARM |
| markrad | 0:cdf462088d13 | 1342 | * GCM adapted to support sizes > 2^29 |
| markrad | 0:cdf462088d13 | 1343 | |
| markrad | 0:cdf462088d13 | 1344 | = Version 1.2.6 released 2013-03-11 |
| markrad | 0:cdf462088d13 | 1345 | Bugfix |
| markrad | 0:cdf462088d13 | 1346 | * Fixed memory leak in ssl_free() and ssl_reset() for active session |
| markrad | 0:cdf462088d13 | 1347 | * Corrected GCM counter incrementation to use only 32-bits instead of |
| markrad | 0:cdf462088d13 | 1348 | 128-bits (found by Yawning Angel) |
| markrad | 0:cdf462088d13 | 1349 | * Fixes for 64-bit compilation with MS Visual Studio |
| markrad | 0:cdf462088d13 | 1350 | * Fixed net_bind() for specified IP addresses on little endian systems |
| markrad | 0:cdf462088d13 | 1351 | * Fixed assembly code for ARM (Thumb and regular) for some compilers |
| markrad | 0:cdf462088d13 | 1352 | |
| markrad | 0:cdf462088d13 | 1353 | Changes |
| markrad | 0:cdf462088d13 | 1354 | * Internally split up rsa_pkcs1_encrypt(), rsa_pkcs1_decrypt(), |
| markrad | 0:cdf462088d13 | 1355 | rsa_pkcs1_sign() and rsa_pkcs1_verify() to separate PKCS#1 v1.5 and |
| markrad | 0:cdf462088d13 | 1356 | PKCS#1 v2.1 functions |
| markrad | 0:cdf462088d13 | 1357 | * Added support for custom labels when using rsa_rsaes_oaep_encrypt() |
| markrad | 0:cdf462088d13 | 1358 | or rsa_rsaes_oaep_decrypt() |
| markrad | 0:cdf462088d13 | 1359 | * Re-added handling for SSLv2 Client Hello when the define |
| markrad | 0:cdf462088d13 | 1360 | POLARSSL_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO is set |
| markrad | 0:cdf462088d13 | 1361 | * The SSL session cache module (ssl_cache) now also retains peer_cert |
| markrad | 0:cdf462088d13 | 1362 | information (not the entire chain) |
| markrad | 0:cdf462088d13 | 1363 | |
| markrad | 0:cdf462088d13 | 1364 | Security |
| markrad | 0:cdf462088d13 | 1365 | * Removed further timing differences during SSL message decryption in |
| markrad | 0:cdf462088d13 | 1366 | ssl_decrypt_buf() |
| markrad | 0:cdf462088d13 | 1367 | * Removed timing differences due to bad padding from |
| markrad | 0:cdf462088d13 | 1368 | rsa_rsaes_pkcs1_v15_decrypt() and rsa_pkcs1_decrypt() for PKCS#1 v1.5 |
| markrad | 0:cdf462088d13 | 1369 | operations |
| markrad | 0:cdf462088d13 | 1370 | |
| markrad | 0:cdf462088d13 | 1371 | = Version 1.2.5 released 2013-02-02 |
| markrad | 0:cdf462088d13 | 1372 | Changes |
| markrad | 0:cdf462088d13 | 1373 | * Allow enabling of dummy error_strerror() to support some use-cases |
| markrad | 0:cdf462088d13 | 1374 | * Debug messages about padding errors during SSL message decryption are |
| markrad | 0:cdf462088d13 | 1375 | disabled by default and can be enabled with POLARSSL_SSL_DEBUG_ALL |
| markrad | 0:cdf462088d13 | 1376 | * Sending of security-relevant alert messages that do not break |
| markrad | 0:cdf462088d13 | 1377 | interoperability can be switched on/off with the flag |
| markrad | 0:cdf462088d13 | 1378 | POLARSSL_SSL_ALL_ALERT_MESSAGES |
| markrad | 0:cdf462088d13 | 1379 | |
| markrad | 0:cdf462088d13 | 1380 | Security |
| markrad | 0:cdf462088d13 | 1381 | * Removed timing differences during SSL message decryption in |
| markrad | 0:cdf462088d13 | 1382 | ssl_decrypt_buf() due to badly formatted padding |
| markrad | 0:cdf462088d13 | 1383 | |
| markrad | 0:cdf462088d13 | 1384 | = Version 1.2.4 released 2013-01-25 |
| markrad | 0:cdf462088d13 | 1385 | Changes |
| markrad | 0:cdf462088d13 | 1386 | * More advanced SSL ciphersuite representation and moved to more dynamic |
| markrad | 0:cdf462088d13 | 1387 | SSL core |
| markrad | 0:cdf462088d13 | 1388 | * Added ssl_handshake_step() to allow single stepping the handshake process |
| markrad | 0:cdf462088d13 | 1389 | |
| markrad | 0:cdf462088d13 | 1390 | Bugfix |
| markrad | 0:cdf462088d13 | 1391 | * Memory leak when using RSA_PKCS_V21 operations fixed |
| markrad | 0:cdf462088d13 | 1392 | * Handle future version properly in ssl_write_certificate_request() |
| markrad | 0:cdf462088d13 | 1393 | * Correctly handle CertificateRequest message in client for <= TLS 1.1 |
| markrad | 0:cdf462088d13 | 1394 | without DN list |
| markrad | 0:cdf462088d13 | 1395 | |
| markrad | 0:cdf462088d13 | 1396 | = Version 1.2.3 released 2012-11-26 |
| markrad | 0:cdf462088d13 | 1397 | Bugfix |
| markrad | 0:cdf462088d13 | 1398 | * Server not always sending correct CertificateRequest message |
| markrad | 0:cdf462088d13 | 1399 | |
| markrad | 0:cdf462088d13 | 1400 | = Version 1.2.2 released 2012-11-24 |
| markrad | 0:cdf462088d13 | 1401 | Changes |
| markrad | 0:cdf462088d13 | 1402 | * Added p_hw_data to ssl_context for context specific hardware acceleration |
| markrad | 0:cdf462088d13 | 1403 | data |
| markrad | 0:cdf462088d13 | 1404 | * During verify trust-CA is only checked for expiration and CRL presence |
| markrad | 0:cdf462088d13 | 1405 | |
| markrad | 0:cdf462088d13 | 1406 | Bugfixes |
| markrad | 0:cdf462088d13 | 1407 | * Fixed client authentication compatibility |
| markrad | 0:cdf462088d13 | 1408 | * Fixed dependency on POLARSSL_SHA4_C in SSL modules |
| markrad | 0:cdf462088d13 | 1409 | |
| markrad | 0:cdf462088d13 | 1410 | = Version 1.2.1 released 2012-11-20 |
| markrad | 0:cdf462088d13 | 1411 | Changes |
| markrad | 0:cdf462088d13 | 1412 | * Depth that the certificate verify callback receives is now numbered |
| markrad | 0:cdf462088d13 | 1413 | bottom-up (Peer cert depth is 0) |
| markrad | 0:cdf462088d13 | 1414 | |
| markrad | 0:cdf462088d13 | 1415 | Bugfixes |
| markrad | 0:cdf462088d13 | 1416 | * Fixes for MSVC6 |
| markrad | 0:cdf462088d13 | 1417 | * Moved mpi_inv_mod() outside POLARSSL_GENPRIME |
| markrad | 0:cdf462088d13 | 1418 | * Allow R and A to point to same mpi in mpi_div_mpi (found by Manuel |
| markrad | 0:cdf462088d13 | 1419 | Pégourié-Gonnard) |
| markrad | 0:cdf462088d13 | 1420 | * Fixed possible segfault in mpi_shift_r() (found by Manuel |
| markrad | 0:cdf462088d13 | 1421 | Pégourié-Gonnard) |
| markrad | 0:cdf462088d13 | 1422 | * Added max length check for rsa_pkcs1_sign with PKCS#1 v2.1 |
| markrad | 0:cdf462088d13 | 1423 | |
| markrad | 0:cdf462088d13 | 1424 | = Version 1.2.0 released 2012-10-31 |
| markrad | 0:cdf462088d13 | 1425 | Features |
| markrad | 0:cdf462088d13 | 1426 | * Added support for NULL cipher (POLARSSL_CIPHER_NULL_CIPHER) and weak |
| markrad | 0:cdf462088d13 | 1427 | ciphersuites (POLARSSL_ENABLE_WEAK_CIPHERSUITES). They are disabled by |
| markrad | 0:cdf462088d13 | 1428 | default! |
| markrad | 0:cdf462088d13 | 1429 | * Added support for wildcard certificates |
| markrad | 0:cdf462088d13 | 1430 | * Added support for multi-domain certificates through the X509 Subject |
| markrad | 0:cdf462088d13 | 1431 | Alternative Name extension |
| markrad | 0:cdf462088d13 | 1432 | * Added preliminary ASN.1 buffer writing support |
| markrad | 0:cdf462088d13 | 1433 | * Added preliminary X509 Certificate Request writing support |
| markrad | 0:cdf462088d13 | 1434 | * Added key_app_writer example application |
| markrad | 0:cdf462088d13 | 1435 | * Added cert_req example application |
| markrad | 0:cdf462088d13 | 1436 | * Added base Galois Counter Mode (GCM) for AES |
| markrad | 0:cdf462088d13 | 1437 | * Added TLS 1.2 support (RFC 5246) |
| markrad | 0:cdf462088d13 | 1438 | * Added GCM suites to TLS 1.2 (RFC 5288) |
| markrad | 0:cdf462088d13 | 1439 | * Added commandline error code convertor (util/strerror) |
| markrad | 0:cdf462088d13 | 1440 | * Added support for Hardware Acceleration hooking in SSL/TLS |
| markrad | 0:cdf462088d13 | 1441 | * Added OpenSSL / PolarSSL compatibility script (tests/compat.sh) and |
| markrad | 0:cdf462088d13 | 1442 | example application (programs/ssl/o_p_test) (requires OpenSSL) |
| markrad | 0:cdf462088d13 | 1443 | * Added X509 CA Path support |
| markrad | 0:cdf462088d13 | 1444 | * Added Thumb assembly optimizations |
| markrad | 0:cdf462088d13 | 1445 | * Added DEFLATE compression support as per RFC3749 (requires zlib) |
| markrad | 0:cdf462088d13 | 1446 | * Added blowfish algorithm (Generic and cipher layer) |
| markrad | 0:cdf462088d13 | 1447 | * Added PKCS#5 PBKDF2 key derivation function |
| markrad | 0:cdf462088d13 | 1448 | * Added Secure Renegotiation (RFC 5746) |
| markrad | 0:cdf462088d13 | 1449 | * Added predefined DHM groups from RFC 5114 |
| markrad | 0:cdf462088d13 | 1450 | * Added simple SSL session cache implementation |
| markrad | 0:cdf462088d13 | 1451 | * Added ServerName extension parsing (SNI) at server side |
| markrad | 0:cdf462088d13 | 1452 | * Added option to add minimum accepted SSL/TLS protocol version |
| markrad | 0:cdf462088d13 | 1453 | |
| markrad | 0:cdf462088d13 | 1454 | Changes |
| markrad | 0:cdf462088d13 | 1455 | * Removed redundant POLARSSL_DEBUG_MSG define |
| markrad | 0:cdf462088d13 | 1456 | * AES code only check for Padlock once |
| markrad | 0:cdf462088d13 | 1457 | * Fixed const-correctness mpi_get_bit() |
| markrad | 0:cdf462088d13 | 1458 | * Documentation for mpi_lsb() and mpi_msb() |
| markrad | 0:cdf462088d13 | 1459 | * Moved out_msg to out_hdr + 32 to support hardware acceleration |
| markrad | 0:cdf462088d13 | 1460 | * Changed certificate verify behaviour to comply with RFC 6125 section 6.3 |
| markrad | 0:cdf462088d13 | 1461 | to not match CN if subjectAltName extension is present (Closes ticket #56) |
| markrad | 0:cdf462088d13 | 1462 | * Cipher layer cipher_mode_t POLARSSL_MODE_CFB128 is renamed to |
| markrad | 0:cdf462088d13 | 1463 | POLARSSL_MODE_CFB, to also handle different block size CFB modes. |
| markrad | 0:cdf462088d13 | 1464 | * Removed handling for SSLv2 Client Hello (as per RFC 5246 recommendation) |
| markrad | 0:cdf462088d13 | 1465 | * Revamped session resumption handling |
| markrad | 0:cdf462088d13 | 1466 | * Generalized external private key implementation handling (like PKCS#11) |
| markrad | 0:cdf462088d13 | 1467 | in SSL/TLS |
| markrad | 0:cdf462088d13 | 1468 | * Revamped x509_verify() and the SSL f_vrfy callback implementations |
| markrad | 0:cdf462088d13 | 1469 | * Moved from unsigned long to fixed width uint32_t types throughout code |
| markrad | 0:cdf462088d13 | 1470 | * Renamed ciphersuites naming scheme to IANA reserved names |
| markrad | 0:cdf462088d13 | 1471 | |
| markrad | 0:cdf462088d13 | 1472 | Bugfix |
| markrad | 0:cdf462088d13 | 1473 | * Fixed handling error in mpi_cmp_mpi() on longer B values (found by |
| markrad | 0:cdf462088d13 | 1474 | Hui Dong) |
| markrad | 0:cdf462088d13 | 1475 | * Fixed potential heap corruption in x509_name allocation |
| markrad | 0:cdf462088d13 | 1476 | * Fixed single RSA test that failed on Big Endian systems (Closes ticket #54) |
| markrad | 0:cdf462088d13 | 1477 | * mpi_exp_mod() now correctly handles negative base numbers (Closes ticket |
| markrad | 0:cdf462088d13 | 1478 | #52) |
| markrad | 0:cdf462088d13 | 1479 | * Handle encryption with private key and decryption with public key as per |
| markrad | 0:cdf462088d13 | 1480 | RFC 2313 |
| markrad | 0:cdf462088d13 | 1481 | * Handle empty certificate subject names |
| markrad | 0:cdf462088d13 | 1482 | * Prevent reading over buffer boundaries on X509 certificate parsing |
| markrad | 0:cdf462088d13 | 1483 | * mpi_add_abs() now correctly handles adding short numbers to long numbers |
| markrad | 0:cdf462088d13 | 1484 | with carry rollover (found by Ruslan Yushchenko) |
| markrad | 0:cdf462088d13 | 1485 | * Handle existence of OpenSSL Trust Extensions at end of X.509 DER blob |
| markrad | 0:cdf462088d13 | 1486 | * Fixed MPI assembly for SPARC64 platform |
| markrad | 0:cdf462088d13 | 1487 | |
| markrad | 0:cdf462088d13 | 1488 | Security |
| markrad | 0:cdf462088d13 | 1489 | * Fixed potential memory zeroization on miscrafted RSA key (found by Eloi |
| markrad | 0:cdf462088d13 | 1490 | Vanderbeken) |
| markrad | 0:cdf462088d13 | 1491 | |
| markrad | 0:cdf462088d13 | 1492 | = Version 1.1.8 released on 2013-10-01 |
| markrad | 0:cdf462088d13 | 1493 | Bugfix |
| markrad | 0:cdf462088d13 | 1494 | * Fixed potential memory leak when failing to resume a session |
| markrad | 0:cdf462088d13 | 1495 | * Fixed potential file descriptor leaks |
| markrad | 0:cdf462088d13 | 1496 | |
| markrad | 0:cdf462088d13 | 1497 | Security |
| markrad | 0:cdf462088d13 | 1498 | * Potential buffer-overflow for ssl_read_record() (independently found by |
| markrad | 0:cdf462088d13 | 1499 | both TrustInSoft and Paul Brodeur of Leviathan Security Group) |
| markrad | 0:cdf462088d13 | 1500 | * Potential negative value misinterpretation in load_file() |
| markrad | 0:cdf462088d13 | 1501 | * Potential heap buffer overflow on large hostname setting |
| markrad | 0:cdf462088d13 | 1502 | |
| markrad | 0:cdf462088d13 | 1503 | = Version 1.1.7 released on 2013-06-19 |
| markrad | 0:cdf462088d13 | 1504 | Changes |
| markrad | 0:cdf462088d13 | 1505 | * HAVEGE random generator disabled by default |
| markrad | 0:cdf462088d13 | 1506 | |
| markrad | 0:cdf462088d13 | 1507 | Bugfix |
| markrad | 0:cdf462088d13 | 1508 | * x509parse_crt() now better handles PEM error situations |
| markrad | 0:cdf462088d13 | 1509 | * ssl_parse_certificate() now calls x509parse_crt_der() directly |
| markrad | 0:cdf462088d13 | 1510 | instead of the x509parse_crt() wrapper that can also parse PEM |
| markrad | 0:cdf462088d13 | 1511 | certificates |
| markrad | 0:cdf462088d13 | 1512 | * Fixed values for 2-key Triple DES in cipher layer |
| markrad | 0:cdf462088d13 | 1513 | * ssl_write_certificate_request() can handle empty ca_chain |
| markrad | 0:cdf462088d13 | 1514 | |
| markrad | 0:cdf462088d13 | 1515 | Security |
| markrad | 0:cdf462088d13 | 1516 | * A possible DoS during the SSL Handshake, due to faulty parsing of |
| markrad | 0:cdf462088d13 | 1517 | PEM-encoded certificates has been fixed (found by Jack Lloyd) |
| markrad | 0:cdf462088d13 | 1518 | |
| markrad | 0:cdf462088d13 | 1519 | = Version 1.1.6 released on 2013-03-11 |
| markrad | 0:cdf462088d13 | 1520 | Bugfix |
| markrad | 0:cdf462088d13 | 1521 | * Fixed net_bind() for specified IP addresses on little endian systems |
| markrad | 0:cdf462088d13 | 1522 | |
| markrad | 0:cdf462088d13 | 1523 | Changes |
| markrad | 0:cdf462088d13 | 1524 | * Allow enabling of dummy error_strerror() to support some use-cases |
| markrad | 0:cdf462088d13 | 1525 | * Debug messages about padding errors during SSL message decryption are |
| markrad | 0:cdf462088d13 | 1526 | disabled by default and can be enabled with POLARSSL_SSL_DEBUG_ALL |
| markrad | 0:cdf462088d13 | 1527 | |
| markrad | 0:cdf462088d13 | 1528 | Security |
| markrad | 0:cdf462088d13 | 1529 | * Removed timing differences during SSL message decryption in |
| markrad | 0:cdf462088d13 | 1530 | ssl_decrypt_buf() |
| markrad | 0:cdf462088d13 | 1531 | * Removed timing differences due to bad padding from |
| markrad | 0:cdf462088d13 | 1532 | rsa_rsaes_pkcs1_v15_decrypt() and rsa_pkcs1_decrypt() for PKCS#1 v1.5 |
| markrad | 0:cdf462088d13 | 1533 | operations |
| markrad | 0:cdf462088d13 | 1534 | |
| markrad | 0:cdf462088d13 | 1535 | = Version 1.1.5 released on 2013-01-16 |
| markrad | 0:cdf462088d13 | 1536 | Bugfix |
| markrad | 0:cdf462088d13 | 1537 | * Fixed MPI assembly for SPARC64 platform |
| markrad | 0:cdf462088d13 | 1538 | * Handle existence of OpenSSL Trust Extensions at end of X.509 DER blob |
| markrad | 0:cdf462088d13 | 1539 | * mpi_add_abs() now correctly handles adding short numbers to long numbers |
| markrad | 0:cdf462088d13 | 1540 | with carry rollover |
| markrad | 0:cdf462088d13 | 1541 | * Moved mpi_inv_mod() outside POLARSSL_GENPRIME |
| markrad | 0:cdf462088d13 | 1542 | * Prevent reading over buffer boundaries on X509 certificate parsing |
| markrad | 0:cdf462088d13 | 1543 | * mpi_exp_mod() now correctly handles negative base numbers (Closes ticket |
| markrad | 0:cdf462088d13 | 1544 | #52) |
| markrad | 0:cdf462088d13 | 1545 | * Fixed possible segfault in mpi_shift_r() (found by Manuel |
| markrad | 0:cdf462088d13 | 1546 | Pégourié-Gonnard) |
| markrad | 0:cdf462088d13 | 1547 | * Allow R and A to point to same mpi in mpi_div_mpi (found by Manuel |
| markrad | 0:cdf462088d13 | 1548 | Pégourié-Gonnard) |
| markrad | 0:cdf462088d13 | 1549 | * Added max length check for rsa_pkcs1_sign with PKCS#1 v2.1 |
| markrad | 0:cdf462088d13 | 1550 | * Memory leak when using RSA_PKCS_V21 operations fixed |
| markrad | 0:cdf462088d13 | 1551 | * Handle encryption with private key and decryption with public key as per |
| markrad | 0:cdf462088d13 | 1552 | RFC 2313 |
| markrad | 0:cdf462088d13 | 1553 | * Fixes for MSVC6 |
| markrad | 0:cdf462088d13 | 1554 | |
| markrad | 0:cdf462088d13 | 1555 | Security |
| markrad | 0:cdf462088d13 | 1556 | * Fixed potential memory zeroization on miscrafted RSA key (found by Eloi |
| markrad | 0:cdf462088d13 | 1557 | Vanderbeken) |
| markrad | 0:cdf462088d13 | 1558 | |
| markrad | 0:cdf462088d13 | 1559 | = Version 1.1.4 released on 2012-05-31 |
| markrad | 0:cdf462088d13 | 1560 | Bugfix |
| markrad | 0:cdf462088d13 | 1561 | * Correctly handle empty SSL/TLS packets (Found by James Yonan) |
| markrad | 0:cdf462088d13 | 1562 | * Fixed potential heap corruption in x509_name allocation |
| markrad | 0:cdf462088d13 | 1563 | * Fixed single RSA test that failed on Big Endian systems (Closes ticket #54) |
| markrad | 0:cdf462088d13 | 1564 | |
| markrad | 0:cdf462088d13 | 1565 | = Version 1.1.3 released on 2012-04-29 |
| markrad | 0:cdf462088d13 | 1566 | Bugfix |
| markrad | 0:cdf462088d13 | 1567 | * Fixed random MPI generation to not generate more size than requested. |
| markrad | 0:cdf462088d13 | 1568 | |
| markrad | 0:cdf462088d13 | 1569 | = Version 1.1.2 released on 2012-04-26 |
| markrad | 0:cdf462088d13 | 1570 | Bugfix |
| markrad | 0:cdf462088d13 | 1571 | * Fixed handling error in mpi_cmp_mpi() on longer B values (found by |
| markrad | 0:cdf462088d13 | 1572 | Hui Dong) |
| markrad | 0:cdf462088d13 | 1573 | |
| markrad | 0:cdf462088d13 | 1574 | Security |
| markrad | 0:cdf462088d13 | 1575 | * Fixed potential memory corruption on miscrafted client messages (found by |
| markrad | 0:cdf462088d13 | 1576 | Frama-C team at CEA LIST) |
| markrad | 0:cdf462088d13 | 1577 | * Fixed generation of DHM parameters to correct length (found by Ruslan |
| markrad | 0:cdf462088d13 | 1578 | Yushchenko) |
| markrad | 0:cdf462088d13 | 1579 | |
| markrad | 0:cdf462088d13 | 1580 | = Version 1.1.1 released on 2012-01-23 |
| markrad | 0:cdf462088d13 | 1581 | Bugfix |
| markrad | 0:cdf462088d13 | 1582 | * Check for failed malloc() in ssl_set_hostname() and x509_get_entries() |
| markrad | 0:cdf462088d13 | 1583 | (Closes ticket #47, found by Hugo Leisink) |
| markrad | 0:cdf462088d13 | 1584 | * Fixed issues with Intel compiler on 64-bit systems (Closes ticket #50) |
| markrad | 0:cdf462088d13 | 1585 | * Fixed multiple compiler warnings for VS6 and armcc |
| markrad | 0:cdf462088d13 | 1586 | * Fixed bug in CTR_CRBG selftest |
| markrad | 0:cdf462088d13 | 1587 | |
| markrad | 0:cdf462088d13 | 1588 | = Version 1.1.0 released on 2011-12-22 |
| markrad | 0:cdf462088d13 | 1589 | Features |
| markrad | 0:cdf462088d13 | 1590 | * Added ssl_session_reset() to allow better multi-connection pools of |
| markrad | 0:cdf462088d13 | 1591 | SSL contexts without needing to set all non-connection-specific |
| markrad | 0:cdf462088d13 | 1592 | data and pointers again. Adapted ssl_server to use this functionality. |
| markrad | 0:cdf462088d13 | 1593 | * Added ssl_set_max_version() to allow clients to offer a lower maximum |
| markrad | 0:cdf462088d13 | 1594 | supported version to a server to help buggy server implementations. |
| markrad | 0:cdf462088d13 | 1595 | (Closes ticket #36) |
| markrad | 0:cdf462088d13 | 1596 | * Added cipher_get_cipher_mode() and cipher_get_cipher_operation() |
| markrad | 0:cdf462088d13 | 1597 | introspection functions (Closes ticket #40) |
| markrad | 0:cdf462088d13 | 1598 | * Added CTR_DRBG based on AES-256-CTR (NIST SP 800-90) random generator |
| markrad | 0:cdf462088d13 | 1599 | * Added a generic entropy accumulator that provides support for adding |
| markrad | 0:cdf462088d13 | 1600 | custom entropy sources and added some generic and platform dependent |
| markrad | 0:cdf462088d13 | 1601 | entropy sources |
| markrad | 0:cdf462088d13 | 1602 | |
| markrad | 0:cdf462088d13 | 1603 | Changes |
| markrad | 0:cdf462088d13 | 1604 | * Documentation for AES and Camellia in modes CTR and CFB128 clarified. |
| markrad | 0:cdf462088d13 | 1605 | * Fixed rsa_encrypt and rsa_decrypt examples to use public key for |
| markrad | 0:cdf462088d13 | 1606 | encryption and private key for decryption. (Closes ticket #34) |
| markrad | 0:cdf462088d13 | 1607 | * Inceased maximum size of ASN1 length reads to 32-bits. |
| markrad | 0:cdf462088d13 | 1608 | * Added an EXPLICIT tag number parameter to x509_get_ext() |
| markrad | 0:cdf462088d13 | 1609 | * Added a separate CRL entry extension parsing function |
| markrad | 0:cdf462088d13 | 1610 | * Separated the ASN.1 parsing code from the X.509 specific parsing code. |
| markrad | 0:cdf462088d13 | 1611 | So now there is a module that is controlled with POLARSSL_ASN1_PARSE_C. |
| markrad | 0:cdf462088d13 | 1612 | * Changed the defined key-length of DES ciphers in cipher.h to include the |
| markrad | 0:cdf462088d13 | 1613 | parity bits, to prevent mistakes in copying data. (Closes ticket #33) |
| markrad | 0:cdf462088d13 | 1614 | * Loads of minimal changes to better support WINCE as a build target |
| markrad | 0:cdf462088d13 | 1615 | (Credits go to Marco Lizza) |
| markrad | 0:cdf462088d13 | 1616 | * Added POLARSSL_MPI_WINDOW_SIZE definition to allow easier time to memory |
| markrad | 0:cdf462088d13 | 1617 | trade-off |
| markrad | 0:cdf462088d13 | 1618 | * Introduced POLARSSL_MPI_MAX_SIZE and POLARSSL_MPI_MAX_BITS for MPI size |
| markrad | 0:cdf462088d13 | 1619 | management (Closes ticket #44) |
| markrad | 0:cdf462088d13 | 1620 | * Changed the used random function pointer to more flexible format. Renamed |
| markrad | 0:cdf462088d13 | 1621 | havege_rand() to havege_random() to prevent mistakes. Lots of changes as |
| markrad | 0:cdf462088d13 | 1622 | a consequence in library code and programs |
| markrad | 0:cdf462088d13 | 1623 | * Moved all examples programs to use the new entropy and CTR_DRBG |
| markrad | 0:cdf462088d13 | 1624 | * Added permissive certificate parsing to x509parse_crt() and |
| markrad | 0:cdf462088d13 | 1625 | x509parse_crtfile(). With permissive parsing the parsing does not stop on |
| markrad | 0:cdf462088d13 | 1626 | encountering a parse-error. Beware that the meaning of return values has |
| markrad | 0:cdf462088d13 | 1627 | changed! |
| markrad | 0:cdf462088d13 | 1628 | * All error codes are now negative. Even on mermory failures and IO errors. |
| markrad | 0:cdf462088d13 | 1629 | |
| markrad | 0:cdf462088d13 | 1630 | Bugfix |
| markrad | 0:cdf462088d13 | 1631 | * Fixed faulty HMAC-MD2 implementation. Found by dibac. (Closes |
| markrad | 0:cdf462088d13 | 1632 | ticket #37) |
| markrad | 0:cdf462088d13 | 1633 | * Fixed a bug where the CRL parser expected an EXPLICIT ASN.1 tag |
| markrad | 0:cdf462088d13 | 1634 | before version numbers |
| markrad | 0:cdf462088d13 | 1635 | * Allowed X509 key usage parsing to accept 4 byte values instead of the |
| markrad | 0:cdf462088d13 | 1636 | standard 1 byte version sometimes used by Microsoft. (Closes ticket #38) |
| markrad | 0:cdf462088d13 | 1637 | * Fixed incorrect behaviour in case of RSASSA-PSS with a salt length |
| markrad | 0:cdf462088d13 | 1638 | smaller than the hash length. (Closes ticket #41) |
| markrad | 0:cdf462088d13 | 1639 | * If certificate serial is longer than 32 octets, serial number is now |
| markrad | 0:cdf462088d13 | 1640 | appended with '....' after first 28 octets |
| markrad | 0:cdf462088d13 | 1641 | * Improved build support for s390x and sparc64 in bignum.h |
| markrad | 0:cdf462088d13 | 1642 | * Fixed MS Visual C++ name clash with int64 in sha4.h |
| markrad | 0:cdf462088d13 | 1643 | * Corrected removal of leading "00:" in printing serial numbers in |
| markrad | 0:cdf462088d13 | 1644 | certificates and CRLs |
| markrad | 0:cdf462088d13 | 1645 | |
| markrad | 0:cdf462088d13 | 1646 | = Version 1.0.0 released on 2011-07-27 |
| markrad | 0:cdf462088d13 | 1647 | Features |
| markrad | 0:cdf462088d13 | 1648 | * Expanded cipher layer with support for CFB128 and CTR mode |
| markrad | 0:cdf462088d13 | 1649 | * Added rsa_encrypt and rsa_decrypt simple example programs. |
| markrad | 0:cdf462088d13 | 1650 | |
| markrad | 0:cdf462088d13 | 1651 | Changes |
| markrad | 0:cdf462088d13 | 1652 | * The generic cipher and message digest layer now have normal error |
| markrad | 0:cdf462088d13 | 1653 | codes instead of integers |
| markrad | 0:cdf462088d13 | 1654 | |
| markrad | 0:cdf462088d13 | 1655 | Bugfix |
| markrad | 0:cdf462088d13 | 1656 | * Undid faulty bug fix in ssl_write() when flushing old data (Ticket |
| markrad | 0:cdf462088d13 | 1657 | #18) |
| markrad | 0:cdf462088d13 | 1658 | |
| markrad | 0:cdf462088d13 | 1659 | = Version 0.99-pre5 released on 2011-05-26 |
| markrad | 0:cdf462088d13 | 1660 | Features |
| markrad | 0:cdf462088d13 | 1661 | * Added additional Cipher Block Modes to symmetric ciphers |
| markrad | 0:cdf462088d13 | 1662 | (AES CTR, Camellia CTR, XTEA CBC) including the option to |
| markrad | 0:cdf462088d13 | 1663 | enable and disable individual modes when needed |
| markrad | 0:cdf462088d13 | 1664 | * Functions requiring File System functions can now be disabled |
| markrad | 0:cdf462088d13 | 1665 | by undefining POLARSSL_FS_IO |
| markrad | 0:cdf462088d13 | 1666 | * A error_strerror function() has been added to translate between |
| markrad | 0:cdf462088d13 | 1667 | error codes and their description. |
| markrad | 0:cdf462088d13 | 1668 | * Added mpi_get_bit() and mpi_set_bit() individual bit setter/getter |
| markrad | 0:cdf462088d13 | 1669 | functions. |
| markrad | 0:cdf462088d13 | 1670 | * Added ssl_mail_client and ssl_fork_server as example programs. |
| markrad | 0:cdf462088d13 | 1671 | |
| markrad | 0:cdf462088d13 | 1672 | Changes |
| markrad | 0:cdf462088d13 | 1673 | * Major argument / variable rewrite. Introduced use of size_t |
| markrad | 0:cdf462088d13 | 1674 | instead of int for buffer lengths and loop variables for |
| markrad | 0:cdf462088d13 | 1675 | better unsigned / signed use. Renamed internal bigint types |
| markrad | 0:cdf462088d13 | 1676 | t_int and t_dbl to t_uint and t_udbl in the process |
| markrad | 0:cdf462088d13 | 1677 | * mpi_init() and mpi_free() now only accept a single MPI |
| markrad | 0:cdf462088d13 | 1678 | argument and do not accept variable argument lists anymore. |
| markrad | 0:cdf462088d13 | 1679 | * The error codes have been remapped and combining error codes |
| markrad | 0:cdf462088d13 | 1680 | is now done with a PLUS instead of an OR as error codes |
| markrad | 0:cdf462088d13 | 1681 | used are negative. |
| markrad | 0:cdf462088d13 | 1682 | * Changed behaviour of net_read(), ssl_fetch_input() and ssl_recv(). |
| markrad | 0:cdf462088d13 | 1683 | net_recv() now returns 0 on EOF instead of |
| markrad | 0:cdf462088d13 | 1684 | POLARSSL_ERR_NET_CONN_RESET. ssl_fetch_input() returns |
| markrad | 0:cdf462088d13 | 1685 | POLARSSL_ERR_SSL_CONN_EOF on an EOF from its f_recv() function. |
| markrad | 0:cdf462088d13 | 1686 | ssl_read() returns 0 if a POLARSSL_ERR_SSL_CONN_EOF is received |
| markrad | 0:cdf462088d13 | 1687 | after the handshake. |
| markrad | 0:cdf462088d13 | 1688 | * Network functions now return POLARSSL_ERR_NET_WANT_READ or |
| markrad | 0:cdf462088d13 | 1689 | POLARSSL_ERR_NET_WANT_WRITE instead of the ambiguous |
| markrad | 0:cdf462088d13 | 1690 | POLARSSL_ERR_NET_TRY_AGAIN |
| markrad | 0:cdf462088d13 | 1691 | |
| markrad | 0:cdf462088d13 | 1692 | = Version 0.99-pre4 released on 2011-04-01 |
| markrad | 0:cdf462088d13 | 1693 | Features |
| markrad | 0:cdf462088d13 | 1694 | * Added support for PKCS#1 v2.1 encoding and thus support |
| markrad | 0:cdf462088d13 | 1695 | for the RSAES-OAEP and RSASSA-PSS operations. |
| markrad | 0:cdf462088d13 | 1696 | * Reading of Public Key files incorporated into default x509 |
| markrad | 0:cdf462088d13 | 1697 | functionality as well. |
| markrad | 0:cdf462088d13 | 1698 | * Added mpi_fill_random() for centralized filling of big numbers |
| markrad | 0:cdf462088d13 | 1699 | with random data (Fixed ticket #10) |
| markrad | 0:cdf462088d13 | 1700 | |
| markrad | 0:cdf462088d13 | 1701 | Changes |
| markrad | 0:cdf462088d13 | 1702 | * Debug print of MPI now removes leading zero octets and |
| markrad | 0:cdf462088d13 | 1703 | displays actual bit size of the value. |
| markrad | 0:cdf462088d13 | 1704 | * x509parse_key() (and as a consequence x509parse_keyfile()) |
| markrad | 0:cdf462088d13 | 1705 | does not zeroize memory in advance anymore. Use rsa_init() |
| markrad | 0:cdf462088d13 | 1706 | before parsing a key or keyfile! |
| markrad | 0:cdf462088d13 | 1707 | |
| markrad | 0:cdf462088d13 | 1708 | Bugfix |
| markrad | 0:cdf462088d13 | 1709 | * Debug output of MPI's now the same independent of underlying |
| markrad | 0:cdf462088d13 | 1710 | platform (32-bit / 64-bit) (Fixes ticket #19, found by Mads |
| markrad | 0:cdf462088d13 | 1711 | Kiilerich and Mihai Militaru) |
| markrad | 0:cdf462088d13 | 1712 | * Fixed bug in ssl_write() when flushing old data (Fixed ticket |
| markrad | 0:cdf462088d13 | 1713 | #18, found by Nikolay Epifanov) |
| markrad | 0:cdf462088d13 | 1714 | * Fixed proper handling of RSASSA-PSS verification with variable |
| markrad | 0:cdf462088d13 | 1715 | length salt lengths |
| markrad | 0:cdf462088d13 | 1716 | |
| markrad | 0:cdf462088d13 | 1717 | = Version 0.99-pre3 released on 2011-02-28 |
| markrad | 0:cdf462088d13 | 1718 | This release replaces version 0.99-pre2 which had possible copyright issues. |
| markrad | 0:cdf462088d13 | 1719 | Features |
| markrad | 0:cdf462088d13 | 1720 | * Parsing PEM private keys encrypted with DES and AES |
| markrad | 0:cdf462088d13 | 1721 | are now supported as well (Fixes ticket #5) |
| markrad | 0:cdf462088d13 | 1722 | * Added crl_app program to allow easy reading and |
| markrad | 0:cdf462088d13 | 1723 | printing of X509 CRLs from file |
| markrad | 0:cdf462088d13 | 1724 | |
| markrad | 0:cdf462088d13 | 1725 | Changes |
| markrad | 0:cdf462088d13 | 1726 | * Parsing of PEM files moved to separate module (Fixes |
| markrad | 0:cdf462088d13 | 1727 | ticket #13). Also possible to remove PEM support for |
| markrad | 0:cdf462088d13 | 1728 | systems only using DER encoding |
| markrad | 0:cdf462088d13 | 1729 | |
| markrad | 0:cdf462088d13 | 1730 | Bugfixes |
| markrad | 0:cdf462088d13 | 1731 | * Corrected parsing of UTCTime dates before 1990 and |
| markrad | 0:cdf462088d13 | 1732 | after 1950 |
| markrad | 0:cdf462088d13 | 1733 | * Support more exotic OID's when parsing certificates |
| markrad | 0:cdf462088d13 | 1734 | (found by Mads Kiilerich) |
| markrad | 0:cdf462088d13 | 1735 | * Support more exotic name representations when parsing |
| markrad | 0:cdf462088d13 | 1736 | certificates (found by Mads Kiilerich) |
| markrad | 0:cdf462088d13 | 1737 | * Replaced the expired test certificates |
| markrad | 0:cdf462088d13 | 1738 | * Do not bail out if no client certificate specified. Try |
| markrad | 0:cdf462088d13 | 1739 | to negotiate anonymous connection (Fixes ticket #12, |
| markrad | 0:cdf462088d13 | 1740 | found by Boris Krasnovskiy) |
| markrad | 0:cdf462088d13 | 1741 | |
| markrad | 0:cdf462088d13 | 1742 | Security fixes |
| markrad | 0:cdf462088d13 | 1743 | * Fixed a possible Man-in-the-Middle attack on the |
| markrad | 0:cdf462088d13 | 1744 | Diffie Hellman key exchange (thanks to Larry Highsmith, |
| markrad | 0:cdf462088d13 | 1745 | Subreption LLC) |
| markrad | 0:cdf462088d13 | 1746 | |
| markrad | 0:cdf462088d13 | 1747 | = Version 0.99-pre1 released on 2011-01-30 |
| markrad | 0:cdf462088d13 | 1748 | Features |
| markrad | 0:cdf462088d13 | 1749 | Note: Most of these features have been donated by Fox-IT |
| markrad | 0:cdf462088d13 | 1750 | * Added Doxygen source code documentation parts |
| markrad | 0:cdf462088d13 | 1751 | * Added reading of DHM context from memory and file |
| markrad | 0:cdf462088d13 | 1752 | * Improved X509 certificate parsing to include extended |
| markrad | 0:cdf462088d13 | 1753 | certificate fields, including Key Usage |
| markrad | 0:cdf462088d13 | 1754 | * Improved certificate verification and verification |
| markrad | 0:cdf462088d13 | 1755 | against the available CRLs |
| markrad | 0:cdf462088d13 | 1756 | * Detection for DES weak keys and parity bits added |
| markrad | 0:cdf462088d13 | 1757 | * Improvements to support integration in other |
| markrad | 0:cdf462088d13 | 1758 | applications: |
| markrad | 0:cdf462088d13 | 1759 | + Added generic message digest and cipher wrapper |
| markrad | 0:cdf462088d13 | 1760 | + Improved information about current capabilities, |
| markrad | 0:cdf462088d13 | 1761 | status, objects and configuration |
| markrad | 0:cdf462088d13 | 1762 | + Added verification callback on certificate chain |
| markrad | 0:cdf462088d13 | 1763 | verification to allow external blacklisting |
| markrad | 0:cdf462088d13 | 1764 | + Additional example programs to show usage |
| markrad | 0:cdf462088d13 | 1765 | * Added support for PKCS#11 through the use of the |
| markrad | 0:cdf462088d13 | 1766 | libpkcs11-helper library |
| markrad | 0:cdf462088d13 | 1767 | |
| markrad | 0:cdf462088d13 | 1768 | Changes |
| markrad | 0:cdf462088d13 | 1769 | * x509parse_time_expired() checks time in addition to |
| markrad | 0:cdf462088d13 | 1770 | the existing date check |
| markrad | 0:cdf462088d13 | 1771 | * The ciphers member of ssl_context and the cipher member |
| markrad | 0:cdf462088d13 | 1772 | of ssl_session have been renamed to ciphersuites and |
| markrad | 0:cdf462088d13 | 1773 | ciphersuite respectively. This clarifies the difference |
| markrad | 0:cdf462088d13 | 1774 | with the generic cipher layer and is better naming |
| markrad | 0:cdf462088d13 | 1775 | altogether |
| markrad | 0:cdf462088d13 | 1776 | |
| markrad | 0:cdf462088d13 | 1777 | = Version 0.14.0 released on 2010-08-16 |
| markrad | 0:cdf462088d13 | 1778 | Features |
| markrad | 0:cdf462088d13 | 1779 | * Added support for SSL_EDH_RSA_AES_128_SHA and |
| markrad | 0:cdf462088d13 | 1780 | SSL_EDH_RSA_CAMELLIA_128_SHA ciphersuites |
| markrad | 0:cdf462088d13 | 1781 | * Added compile-time and run-time version information |
| markrad | 0:cdf462088d13 | 1782 | * Expanded ssl_client2 arguments for more flexibility |
| markrad | 0:cdf462088d13 | 1783 | * Added support for TLS v1.1 |
| markrad | 0:cdf462088d13 | 1784 | |
| markrad | 0:cdf462088d13 | 1785 | Changes |
| markrad | 0:cdf462088d13 | 1786 | * Made Makefile cleaner |
| markrad | 0:cdf462088d13 | 1787 | * Removed dependency on rand() in rsa_pkcs1_encrypt(). |
| markrad | 0:cdf462088d13 | 1788 | Now using random fuction provided to function and |
| markrad | 0:cdf462088d13 | 1789 | changed the prototype of rsa_pkcs1_encrypt(), |
| markrad | 0:cdf462088d13 | 1790 | rsa_init() and rsa_gen_key(). |
| markrad | 0:cdf462088d13 | 1791 | * Some SSL defines were renamed in order to avoid |
| markrad | 0:cdf462088d13 | 1792 | future confusion |
| markrad | 0:cdf462088d13 | 1793 | |
| markrad | 0:cdf462088d13 | 1794 | Bug fixes |
| markrad | 0:cdf462088d13 | 1795 | * Fixed CMake out of source build for tests (found by |
| markrad | 0:cdf462088d13 | 1796 | kkert) |
| markrad | 0:cdf462088d13 | 1797 | * rsa_check_private() now supports PKCS1v2 keys as well |
| markrad | 0:cdf462088d13 | 1798 | * Fixed deadlock in rsa_pkcs1_encrypt() on failing random |
| markrad | 0:cdf462088d13 | 1799 | generator |
| markrad | 0:cdf462088d13 | 1800 | |
| markrad | 0:cdf462088d13 | 1801 | = Version 0.13.1 released on 2010-03-24 |
| markrad | 0:cdf462088d13 | 1802 | Bug fixes |
| markrad | 0:cdf462088d13 | 1803 | * Fixed Makefile in library that was mistakenly merged |
| markrad | 0:cdf462088d13 | 1804 | * Added missing const string fixes |
| markrad | 0:cdf462088d13 | 1805 | |
| markrad | 0:cdf462088d13 | 1806 | = Version 0.13.0 released on 2010-03-21 |
| markrad | 0:cdf462088d13 | 1807 | Features |
| markrad | 0:cdf462088d13 | 1808 | * Added option parsing for host and port selection to |
| markrad | 0:cdf462088d13 | 1809 | ssl_client2 |
| markrad | 0:cdf462088d13 | 1810 | * Added support for GeneralizedTime in X509 parsing |
| markrad | 0:cdf462088d13 | 1811 | * Added cert_app program to allow easy reading and |
| markrad | 0:cdf462088d13 | 1812 | printing of X509 certificates from file or SSL |
| markrad | 0:cdf462088d13 | 1813 | connection. |
| markrad | 0:cdf462088d13 | 1814 | |
| markrad | 0:cdf462088d13 | 1815 | Changes |
| markrad | 0:cdf462088d13 | 1816 | * Added const correctness for main code base |
| markrad | 0:cdf462088d13 | 1817 | * X509 signature algorithm determination is now |
| markrad | 0:cdf462088d13 | 1818 | in a function to allow easy future expansion |
| markrad | 0:cdf462088d13 | 1819 | * Changed symmetric cipher functions to |
| markrad | 0:cdf462088d13 | 1820 | identical interface (returning int result values) |
| markrad | 0:cdf462088d13 | 1821 | * Changed ARC4 to use separate input/output buffer |
| markrad | 0:cdf462088d13 | 1822 | * Added reset function for HMAC context as speed-up |
| markrad | 0:cdf462088d13 | 1823 | for specific use-cases |
| markrad | 0:cdf462088d13 | 1824 | |
| markrad | 0:cdf462088d13 | 1825 | Bug fixes |
| markrad | 0:cdf462088d13 | 1826 | * Fixed bug resulting in failure to send the last |
| markrad | 0:cdf462088d13 | 1827 | certificate in the chain in ssl_write_certificate() and |
| markrad | 0:cdf462088d13 | 1828 | ssl_write_certificate_request() (found by fatbob) |
| markrad | 0:cdf462088d13 | 1829 | * Added small fixes for compiler warnings on a Mac |
| markrad | 0:cdf462088d13 | 1830 | (found by Frank de Brabander) |
| markrad | 0:cdf462088d13 | 1831 | * Fixed algorithmic bug in mpi_is_prime() (found by |
| markrad | 0:cdf462088d13 | 1832 | Smbat Tonoyan) |
| markrad | 0:cdf462088d13 | 1833 | |
| markrad | 0:cdf462088d13 | 1834 | = Version 0.12.1 released on 2009-10-04 |
| markrad | 0:cdf462088d13 | 1835 | Changes |
| markrad | 0:cdf462088d13 | 1836 | * Coverage test definitions now support 'depends_on' |
| markrad | 0:cdf462088d13 | 1837 | tagging system. |
| markrad | 0:cdf462088d13 | 1838 | * Tests requiring specific hashing algorithms now honor |
| markrad | 0:cdf462088d13 | 1839 | the defines. |
| markrad | 0:cdf462088d13 | 1840 | |
| markrad | 0:cdf462088d13 | 1841 | Bug fixes |
| markrad | 0:cdf462088d13 | 1842 | * Changed typo in #ifdef in x509parse.c (found |
| markrad | 0:cdf462088d13 | 1843 | by Eduardo) |
| markrad | 0:cdf462088d13 | 1844 | |
| markrad | 0:cdf462088d13 | 1845 | = Version 0.12.0 released on 2009-07-28 |
| markrad | 0:cdf462088d13 | 1846 | Features |
| markrad | 0:cdf462088d13 | 1847 | * Added CMake makefiles as alternative to regular Makefiles. |
| markrad | 0:cdf462088d13 | 1848 | * Added preliminary Code Coverage tests for AES, ARC4, |
| markrad | 0:cdf462088d13 | 1849 | Base64, MPI, SHA-family, MD-family, HMAC-SHA-family, |
| markrad | 0:cdf462088d13 | 1850 | Camellia, DES, 3-DES, RSA PKCS#1, XTEA, Diffie-Hellman |
| markrad | 0:cdf462088d13 | 1851 | and X509parse. |
| markrad | 0:cdf462088d13 | 1852 | |
| markrad | 0:cdf462088d13 | 1853 | Changes |
| markrad | 0:cdf462088d13 | 1854 | * Error codes are not (necessarily) negative. Keep |
| markrad | 0:cdf462088d13 | 1855 | this is mind when checking for errors. |
| markrad | 0:cdf462088d13 | 1856 | * RSA_RAW renamed to SIG_RSA_RAW for consistency. |
| markrad | 0:cdf462088d13 | 1857 | * Fixed typo in name of POLARSSL_ERR_RSA_OUTPUT_TOO_LARGE. |
| markrad | 0:cdf462088d13 | 1858 | * Changed interface for AES and Camellia setkey functions |
| markrad | 0:cdf462088d13 | 1859 | to indicate invalid key lengths. |
| markrad | 0:cdf462088d13 | 1860 | |
| markrad | 0:cdf462088d13 | 1861 | Bug fixes |
| markrad | 0:cdf462088d13 | 1862 | * Fixed include location of endian.h on FreeBSD (found by |
| markrad | 0:cdf462088d13 | 1863 | Gabriel) |
| markrad | 0:cdf462088d13 | 1864 | * Fixed include location of endian.h and name clash on |
| markrad | 0:cdf462088d13 | 1865 | Apples (found by Martin van Hensbergen) |
| markrad | 0:cdf462088d13 | 1866 | * Fixed HMAC-MD2 by modifying md2_starts(), so that the |
| markrad | 0:cdf462088d13 | 1867 | required HMAC ipad and opad variables are not cleared. |
| markrad | 0:cdf462088d13 | 1868 | (found by code coverage tests) |
| markrad | 0:cdf462088d13 | 1869 | * Prevented use of long long in bignum if |
| markrad | 0:cdf462088d13 | 1870 | POLARSSL_HAVE_LONGLONG not defined (found by Giles |
| markrad | 0:cdf462088d13 | 1871 | Bathgate). |
| markrad | 0:cdf462088d13 | 1872 | * Fixed incorrect handling of negative strings in |
| markrad | 0:cdf462088d13 | 1873 | mpi_read_string() (found by code coverage tests). |
| markrad | 0:cdf462088d13 | 1874 | * Fixed segfault on handling empty rsa_context in |
| markrad | 0:cdf462088d13 | 1875 | rsa_check_pubkey() and rsa_check_privkey() (found by |
| markrad | 0:cdf462088d13 | 1876 | code coverage tests). |
| markrad | 0:cdf462088d13 | 1877 | * Fixed incorrect handling of one single negative input |
| markrad | 0:cdf462088d13 | 1878 | value in mpi_add_abs() (found by code coverage tests). |
| markrad | 0:cdf462088d13 | 1879 | * Fixed incorrect handling of negative first input |
| markrad | 0:cdf462088d13 | 1880 | value in mpi_sub_abs() (found by code coverage tests). |
| markrad | 0:cdf462088d13 | 1881 | * Fixed incorrect handling of negative first input |
| markrad | 0:cdf462088d13 | 1882 | value in mpi_mod_mpi() and mpi_mod_int(). Resulting |
| markrad | 0:cdf462088d13 | 1883 | change also affects mpi_write_string() (found by code |
| markrad | 0:cdf462088d13 | 1884 | coverage tests). |
| markrad | 0:cdf462088d13 | 1885 | * Corrected is_prime() results for 0, 1 and 2 (found by |
| markrad | 0:cdf462088d13 | 1886 | code coverage tests). |
| markrad | 0:cdf462088d13 | 1887 | * Fixed Camellia and XTEA for 64-bit Windows systems. |
| markrad | 0:cdf462088d13 | 1888 | |
| markrad | 0:cdf462088d13 | 1889 | = Version 0.11.1 released on 2009-05-17 |
| markrad | 0:cdf462088d13 | 1890 | * Fixed missing functionality for SHA-224, SHA-256, SHA384, |
| markrad | 0:cdf462088d13 | 1891 | SHA-512 in rsa_pkcs1_sign() |
| markrad | 0:cdf462088d13 | 1892 | |
| markrad | 0:cdf462088d13 | 1893 | = Version 0.11.0 released on 2009-05-03 |
| markrad | 0:cdf462088d13 | 1894 | * Fixed a bug in mpi_gcd() so that it also works when both |
| markrad | 0:cdf462088d13 | 1895 | input numbers are even and added testcases to check |
| markrad | 0:cdf462088d13 | 1896 | (found by Pierre Habouzit). |
| markrad | 0:cdf462088d13 | 1897 | * Added support for SHA-224, SHA-256, SHA-384 and SHA-512 |
| markrad | 0:cdf462088d13 | 1898 | one way hash functions with the PKCS#1 v1.5 signing and |
| markrad | 0:cdf462088d13 | 1899 | verification. |
| markrad | 0:cdf462088d13 | 1900 | * Fixed minor bug regarding mpi_gcd located within the |
| markrad | 0:cdf462088d13 | 1901 | POLARSSL_GENPRIME block. |
| markrad | 0:cdf462088d13 | 1902 | * Fixed minor memory leak in x509parse_crt() and added better |
| markrad | 0:cdf462088d13 | 1903 | handling of 'full' certificate chains (found by Mathias |
| markrad | 0:cdf462088d13 | 1904 | Olsson). |
| markrad | 0:cdf462088d13 | 1905 | * Centralized file opening and reading for x509 files into |
| markrad | 0:cdf462088d13 | 1906 | load_file() |
| markrad | 0:cdf462088d13 | 1907 | * Made definition of net_htons() endian-clean for big endian |
| markrad | 0:cdf462088d13 | 1908 | systems (Found by Gernot). |
| markrad | 0:cdf462088d13 | 1909 | * Undefining POLARSSL_HAVE_ASM now also handles prevents asm in |
| markrad | 0:cdf462088d13 | 1910 | padlock and timing code. |
| markrad | 0:cdf462088d13 | 1911 | * Fixed an off-by-one buffer allocation in ssl_set_hostname() |
| markrad | 0:cdf462088d13 | 1912 | responsible for crashes and unwanted behaviour. |
| markrad | 0:cdf462088d13 | 1913 | * Added support for Certificate Revocation List (CRL) parsing. |
| markrad | 0:cdf462088d13 | 1914 | * Added support for CRL revocation to x509parse_verify() and |
| markrad | 0:cdf462088d13 | 1915 | SSL/TLS code. |
| markrad | 0:cdf462088d13 | 1916 | * Fixed compatibility of XTEA and Camellia on a 64-bit system |
| markrad | 0:cdf462088d13 | 1917 | (found by Felix von Leitner). |
| markrad | 0:cdf462088d13 | 1918 | |
| markrad | 0:cdf462088d13 | 1919 | = Version 0.10.0 released on 2009-01-12 |
| markrad | 0:cdf462088d13 | 1920 | * Migrated XySSL to PolarSSL |
| markrad | 0:cdf462088d13 | 1921 | * Added XTEA symmetric cipher |
| markrad | 0:cdf462088d13 | 1922 | * Added Camellia symmetric cipher |
| markrad | 0:cdf462088d13 | 1923 | * Added support for ciphersuites: SSL_RSA_CAMELLIA_128_SHA, |
| markrad | 0:cdf462088d13 | 1924 | SSL_RSA_CAMELLIA_256_SHA and SSL_EDH_RSA_CAMELLIA_256_SHA |
| markrad | 0:cdf462088d13 | 1925 | * Fixed dangerous bug that can cause a heap overflow in |
| markrad | 0:cdf462088d13 | 1926 | rsa_pkcs1_decrypt (found by Christophe Devine) |
| markrad | 0:cdf462088d13 | 1927 | |
| markrad | 0:cdf462088d13 | 1928 | ================================================================ |
| markrad | 0:cdf462088d13 | 1929 | XySSL ChangeLog |
| markrad | 0:cdf462088d13 | 1930 | |
| markrad | 0:cdf462088d13 | 1931 | = Version 0.9 released on 2008-03-16 |
| markrad | 0:cdf462088d13 | 1932 | |
| markrad | 0:cdf462088d13 | 1933 | * Added support for ciphersuite: SSL_RSA_AES_128_SHA |
| markrad | 0:cdf462088d13 | 1934 | * Enabled support for large files by default in aescrypt2.c |
| markrad | 0:cdf462088d13 | 1935 | * Preliminary openssl wrapper contributed by David Barrett |
| markrad | 0:cdf462088d13 | 1936 | * Fixed a bug in ssl_write() that caused the same payload to |
| markrad | 0:cdf462088d13 | 1937 | be sent twice in non-blocking mode when send returns EAGAIN |
| markrad | 0:cdf462088d13 | 1938 | * Fixed ssl_parse_client_hello(): session id and challenge must |
| markrad | 0:cdf462088d13 | 1939 | not be swapped in the SSLv2 ClientHello (found by Greg Robson) |
| markrad | 0:cdf462088d13 | 1940 | * Added user-defined callback debug function (Krystian Kolodziej) |
| markrad | 0:cdf462088d13 | 1941 | * Before freeing a certificate, properly zero out all cert. data |
| markrad | 0:cdf462088d13 | 1942 | * Fixed the "mode" parameter so that encryption/decryption are |
| markrad | 0:cdf462088d13 | 1943 | not swapped on PadLock; also fixed compilation on older versions |
| markrad | 0:cdf462088d13 | 1944 | of gcc (bug reported by David Barrett) |
| markrad | 0:cdf462088d13 | 1945 | * Correctly handle the case in padlock_xcryptcbc() when input or |
| markrad | 0:cdf462088d13 | 1946 | ouput data is non-aligned by falling back to the software |
| markrad | 0:cdf462088d13 | 1947 | implementation, as VIA Nehemiah cannot handle non-aligned buffers |
| markrad | 0:cdf462088d13 | 1948 | * Fixed a memory leak in x509parse_crt() which was reported by Greg |
| markrad | 0:cdf462088d13 | 1949 | Robson-Garth; some x509write.c fixes by Pascal Vizeli, thanks to |
| markrad | 0:cdf462088d13 | 1950 | Matthew Page who reported several bugs |
| markrad | 0:cdf462088d13 | 1951 | * Fixed x509_get_ext() to accept some rare certificates which have |
| markrad | 0:cdf462088d13 | 1952 | an INTEGER instead of a BOOLEAN for BasicConstraints::cA. |
| markrad | 0:cdf462088d13 | 1953 | * Added support on the client side for the TLS "hostname" extension |
| markrad | 0:cdf462088d13 | 1954 | (patch contributed by David Patino) |
| markrad | 0:cdf462088d13 | 1955 | * Make x509parse_verify() return BADCERT_CN_MISMATCH when an empty |
| markrad | 0:cdf462088d13 | 1956 | string is passed as the CN (bug reported by spoofy) |
| markrad | 0:cdf462088d13 | 1957 | * Added an option to enable/disable the BN assembly code |
| markrad | 0:cdf462088d13 | 1958 | * Updated rsa_check_privkey() to verify that (D*E) = 1 % (P-1)*(Q-1) |
| markrad | 0:cdf462088d13 | 1959 | * Disabled obsolete hash functions by default (MD2, MD4); updated |
| markrad | 0:cdf462088d13 | 1960 | selftest and benchmark to not test ciphers that have been disabled |
| markrad | 0:cdf462088d13 | 1961 | * Updated x509parse_cert_info() to correctly display byte 0 of the |
| markrad | 0:cdf462088d13 | 1962 | serial number, setup correct server port in the ssl client example |
| markrad | 0:cdf462088d13 | 1963 | * Fixed a critical denial-of-service with X.509 cert. verification: |
| markrad | 0:cdf462088d13 | 1964 | peer may cause xyssl to loop indefinitely by sending a certificate |
| markrad | 0:cdf462088d13 | 1965 | for which the RSA signature check fails (bug reported by Benoit) |
| markrad | 0:cdf462088d13 | 1966 | * Added test vectors for: AES-CBC, AES-CFB, DES-CBC and 3DES-CBC, |
| markrad | 0:cdf462088d13 | 1967 | HMAC-MD5, HMAC-SHA1, HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512 |
| markrad | 0:cdf462088d13 | 1968 | * Fixed HMAC-SHA-384 and HMAC-SHA-512 (thanks to Josh Sinykin) |
| markrad | 0:cdf462088d13 | 1969 | * Modified ssl_parse_client_key_exchange() to protect against |
| markrad | 0:cdf462088d13 | 1970 | Daniel Bleichenbacher attack on PKCS#1 v1.5 padding, as well |
| markrad | 0:cdf462088d13 | 1971 | as the Klima-Pokorny-Rosa extension of Bleichenbacher's attack |
| markrad | 0:cdf462088d13 | 1972 | * Updated rsa_gen_key() so that ctx->N is always nbits in size |
| markrad | 0:cdf462088d13 | 1973 | * Fixed assembly PPC compilation errors on Mac OS X, thanks to |
| markrad | 0:cdf462088d13 | 1974 | David Barrett and Dusan Semen |
| markrad | 0:cdf462088d13 | 1975 | |
| markrad | 0:cdf462088d13 | 1976 | = Version 0.8 released on 2007-10-20 |
| markrad | 0:cdf462088d13 | 1977 | |
| markrad | 0:cdf462088d13 | 1978 | * Modified the HMAC functions to handle keys larger |
| markrad | 0:cdf462088d13 | 1979 | than 64 bytes, thanks to Stephane Desneux and gary ng |
| markrad | 0:cdf462088d13 | 1980 | * Fixed ssl_read_record() to properly update the handshake |
| markrad | 0:cdf462088d13 | 1981 | message digests, which fixes IE6/IE7 client authentication |
| markrad | 0:cdf462088d13 | 1982 | * Cleaned up the XYSSL* #defines, suggested by Azriel Fasten |
| markrad | 0:cdf462088d13 | 1983 | * Fixed net_recv(), thanks to Lorenz Schori and Egon Kocjan |
| markrad | 0:cdf462088d13 | 1984 | * Added user-defined callbacks for handling I/O and sessions |
| markrad | 0:cdf462088d13 | 1985 | * Added lots of debugging output in the SSL/TLS functions |
| markrad | 0:cdf462088d13 | 1986 | * Added preliminary X.509 cert. writing by Pascal Vizeli |
| markrad | 0:cdf462088d13 | 1987 | * Added preliminary support for the VIA PadLock routines |
| markrad | 0:cdf462088d13 | 1988 | * Added AES-CFB mode of operation, contributed by chmike |
| markrad | 0:cdf462088d13 | 1989 | * Added an SSL/TLS stress testing program (ssl_test.c) |
| markrad | 0:cdf462088d13 | 1990 | * Updated the RSA PKCS#1 code to allow choosing between |
| markrad | 0:cdf462088d13 | 1991 | RSA_PUBLIC and RSA_PRIVATE, as suggested by David Barrett |
| markrad | 0:cdf462088d13 | 1992 | * Updated ssl_read() to skip 0-length records from OpenSSL |
| markrad | 0:cdf462088d13 | 1993 | * Fixed the make install target to comply with *BSD make |
| markrad | 0:cdf462088d13 | 1994 | * Fixed a bug in mpi_read_binary() on 64-bit platforms |
| markrad | 0:cdf462088d13 | 1995 | * mpi_is_prime() speedups, thanks to Kevin McLaughlin |
| markrad | 0:cdf462088d13 | 1996 | * Fixed a long standing memory leak in mpi_is_prime() |
| markrad | 0:cdf462088d13 | 1997 | * Replaced realloc with malloc in mpi_grow(), and set |
| markrad | 0:cdf462088d13 | 1998 | the sign of zero as positive in mpi_init() (reported |
| markrad | 0:cdf462088d13 | 1999 | by Jonathan M. McCune) |
| markrad | 0:cdf462088d13 | 2000 | |
| markrad | 0:cdf462088d13 | 2001 | = Version 0.7 released on 2007-07-07 |
| markrad | 0:cdf462088d13 | 2002 | |
| markrad | 0:cdf462088d13 | 2003 | * Added support for the MicroBlaze soft-core processor |
| markrad | 0:cdf462088d13 | 2004 | * Fixed a bug in ssl_tls.c which sometimes prevented SSL |
| markrad | 0:cdf462088d13 | 2005 | connections from being established with non-blocking I/O |
| markrad | 0:cdf462088d13 | 2006 | * Fixed a couple bugs in the VS6 and UNIX Makefiles |
| markrad | 0:cdf462088d13 | 2007 | * Fixed the "PIC register ebx clobbered in asm" bug |
| markrad | 0:cdf462088d13 | 2008 | * Added HMAC starts/update/finish support functions |
| markrad | 0:cdf462088d13 | 2009 | * Added the SHA-224, SHA-384 and SHA-512 hash functions |
| markrad | 0:cdf462088d13 | 2010 | * Fixed the net_set_*block routines, thanks to Andreas |
| markrad | 0:cdf462088d13 | 2011 | * Added a few demonstration programs: md5sum, sha1sum, |
| markrad | 0:cdf462088d13 | 2012 | dh_client, dh_server, rsa_genkey, rsa_sign, rsa_verify |
| markrad | 0:cdf462088d13 | 2013 | * Added new bignum import and export helper functions |
| markrad | 0:cdf462088d13 | 2014 | * Rewrote README.txt in program/ssl/ca to better explain |
| markrad | 0:cdf462088d13 | 2015 | how to create a test PKI |
| markrad | 0:cdf462088d13 | 2016 | |
| markrad | 0:cdf462088d13 | 2017 | = Version 0.6 released on 2007-04-01 |
| markrad | 0:cdf462088d13 | 2018 | |
| markrad | 0:cdf462088d13 | 2019 | * Ciphers used in SSL/TLS can now be disabled at compile |
| markrad | 0:cdf462088d13 | 2020 | time, to reduce the memory footprint on embedded systems |
| markrad | 0:cdf462088d13 | 2021 | * Added multiply assembly code for the TriCore and modified |
| markrad | 0:cdf462088d13 | 2022 | havege_struct for this processor, thanks to David Patiño |
| markrad | 0:cdf462088d13 | 2023 | * Added multiply assembly code for 64-bit PowerPCs, |
| markrad | 0:cdf462088d13 | 2024 | thanks to Peking University and the OSU Open Source Lab |
| markrad | 0:cdf462088d13 | 2025 | * Added experimental support of Quantum Cryptography |
| markrad | 0:cdf462088d13 | 2026 | * Added support for autoconf, contributed by Arnaud Cornet |
| markrad | 0:cdf462088d13 | 2027 | * Fixed "long long" compilation issues on IA-64 and PPC64 |
| markrad | 0:cdf462088d13 | 2028 | * Fixed a bug introduced in xyssl-0.5/timing.c: hardclock |
| markrad | 0:cdf462088d13 | 2029 | was not being correctly defined on ARM and MIPS |
| markrad | 0:cdf462088d13 | 2030 | |
| markrad | 0:cdf462088d13 | 2031 | = Version 0.5 released on 2007-03-01 |
| markrad | 0:cdf462088d13 | 2032 | |
| markrad | 0:cdf462088d13 | 2033 | * Added multiply assembly code for SPARC and Alpha |
| markrad | 0:cdf462088d13 | 2034 | * Added (beta) support for non-blocking I/O operations |
| markrad | 0:cdf462088d13 | 2035 | * Implemented session resuming and client authentication |
| markrad | 0:cdf462088d13 | 2036 | * Fixed some portability issues on WinCE, MINIX 3, Plan9 |
| markrad | 0:cdf462088d13 | 2037 | (thanks to Benjamin Newman), HP-UX, FreeBSD and Solaris |
| markrad | 0:cdf462088d13 | 2038 | * Improved the performance of the EDH key exchange |
| markrad | 0:cdf462088d13 | 2039 | * Fixed a bug that caused valid packets with a payload |
| markrad | 0:cdf462088d13 | 2040 | size of 16384 bytes to be rejected |
| markrad | 0:cdf462088d13 | 2041 | |
| markrad | 0:cdf462088d13 | 2042 | = Version 0.4 released on 2007-02-01 |
| markrad | 0:cdf462088d13 | 2043 | |
| markrad | 0:cdf462088d13 | 2044 | * Added support for Ephemeral Diffie-Hellman key exchange |
| markrad | 0:cdf462088d13 | 2045 | * Added multiply asm code for SSE2, ARM, PPC, MIPS and M68K |
| markrad | 0:cdf462088d13 | 2046 | * Various improvement to the modular exponentiation code |
| markrad | 0:cdf462088d13 | 2047 | * Rewrote the headers to generate the API docs with doxygen |
| markrad | 0:cdf462088d13 | 2048 | * Fixed a bug in ssl_encrypt_buf (incorrect padding was |
| markrad | 0:cdf462088d13 | 2049 | generated) and in ssl_parse_client_hello (max. client |
| markrad | 0:cdf462088d13 | 2050 | version was not properly set), thanks to Didier Rebeix |
| markrad | 0:cdf462088d13 | 2051 | * Fixed another bug in ssl_parse_client_hello: clients with |
| markrad | 0:cdf462088d13 | 2052 | cipherlists larger than 96 bytes were incorrectly rejected |
| markrad | 0:cdf462088d13 | 2053 | * Fixed a couple memory leak in x509_read.c |
| markrad | 0:cdf462088d13 | 2054 | |
| markrad | 0:cdf462088d13 | 2055 | = Version 0.3 released on 2007-01-01 |
| markrad | 0:cdf462088d13 | 2056 | |
| markrad | 0:cdf462088d13 | 2057 | * Added server-side SSLv3 and TLSv1.0 support |
| markrad | 0:cdf462088d13 | 2058 | * Multiple fixes to enhance the compatibility with g++, |
| markrad | 0:cdf462088d13 | 2059 | thanks to Xosé Antón Otero Ferreira |
| markrad | 0:cdf462088d13 | 2060 | * Fixed a bug in the CBC code, thanks to dowst; also, |
| markrad | 0:cdf462088d13 | 2061 | the bignum code is no longer dependent on long long |
| markrad | 0:cdf462088d13 | 2062 | * Updated rsa_pkcs1_sign to handle arbitrary large inputs |
| markrad | 0:cdf462088d13 | 2063 | * Updated timing.c for improved compatibility with i386 |
| markrad | 0:cdf462088d13 | 2064 | and 486 processors, thanks to Arnaud Cornet |
| markrad | 0:cdf462088d13 | 2065 | |
| markrad | 0:cdf462088d13 | 2066 | = Version 0.2 released on 2006-12-01 |
| markrad | 0:cdf462088d13 | 2067 | |
| markrad | 0:cdf462088d13 | 2068 | * Updated timing.c to support ARM and MIPS arch |
| markrad | 0:cdf462088d13 | 2069 | * Updated the MPI code to support 8086 on MSVC 1.5 |
| markrad | 0:cdf462088d13 | 2070 | * Added the copyright notice at the top of havege.h |
| markrad | 0:cdf462088d13 | 2071 | * Fixed a bug in sha2_hmac, thanks to newsoft/Wenfang Zhang |
| markrad | 0:cdf462088d13 | 2072 | * Fixed a bug reported by Adrian Rüegsegger in x509_read_key |
| markrad | 0:cdf462088d13 | 2073 | * Fixed a bug reported by Torsten Lauter in ssl_read_record |
| markrad | 0:cdf462088d13 | 2074 | * Fixed a bug in rsa_check_privkey that would wrongly cause |
| markrad | 0:cdf462088d13 | 2075 | valid RSA keys to be dismissed (thanks to oldwolf) |
| markrad | 0:cdf462088d13 | 2076 | * Fixed a bug in mpi_is_prime that caused some primes to fail |
| markrad | 0:cdf462088d13 | 2077 | the Miller-Rabin primality test |
| markrad | 0:cdf462088d13 | 2078 | |
| markrad | 0:cdf462088d13 | 2079 | I'd also like to thank Younès Hafri for the CRUX linux port, |
| markrad | 0:cdf462088d13 | 2080 | Khalil Petit who added XySSL into pkgsrc and Arnaud Cornet |
| markrad | 0:cdf462088d13 | 2081 | who maintains the Debian package :-) |
| markrad | 0:cdf462088d13 | 2082 | |
| markrad | 0:cdf462088d13 | 2083 | = Version 0.1 released on 2006-11-01 |
| markrad | 0:cdf462088d13 | 2084 |