summary refs log tree commit diff
diff options
context:
space:
mode:
-rw-r--r--crypto/Contributors.html3
-rw-r--r--crypto/Readme.html50
2 files changed, 51 insertions, 2 deletions
diff --git a/crypto/Contributors.html b/crypto/Contributors.html
index eb826fb7b..921378c19 100644
--- a/crypto/Contributors.html
+++ b/crypto/Contributors.html
@@ -274,6 +274,9 @@ University of Wollongong, Institute of Cybersecurity and Cryptology, under the s
 		<li>
 			<p>Ben Adams (https://github.com/benaadams) - Performance optimization for AES-NI.</p>
 		</li>
+		<li>
+			<p>Daniel Bleichenbacher - Fixed rounding issue in FF1. Reported incompatible RFC 3394 wrapping of 64 bit keys.</p>
+		</li>
 		</ul>
 	</body>
 </html>
diff --git a/crypto/Readme.html b/crypto/Readme.html
index 27720b7a5..38de4bd1e 100644
--- a/crypto/Readme.html
+++ b/crypto/Readme.html
@@ -32,6 +32,8 @@
                                 <a href="#mozTocId3413">Notes:</a>
                                 <ol>
                                     <li>
+                                        <a href="#mozTocId85327">Release 2.1.0</a>
+                                    <li>
                                         <a href="#mozTocId85326">Release 2.0.0</a>
                                     <li>
                                         <a href="#mozTocId85325">Release 1.9.0</a>
@@ -319,6 +321,50 @@
         <hr style="WIDTH: 100%; HEIGHT: 2px">
         <h3><a class="mozTocH3" name="mozTocId3413"></a>Notes:</h3>
 
+        <h4><a class="mozTocH4" name="mozTocId85327"></a>Release 2.1.0, Saturday February 18, 2023</h4>
+        <h5>Defects Fixed</h5>
+        <ul>
+            <li>Fixed a rounding issue with FF1 Format Preserving Encryption algorithm for certain radices.</li>
+            <li>Fixed RFC3394WrapEngine handling of 64 bit keys.</li>
+            <li>PkixCertPathValidator: fixed fetching of DateOfCertGen extension.</li>
+            <li>
+                PkixCertPathValidator: correctly remove ExtendedKeyUsage from critical extensions
+                (https://github.com/bcgit/bc-csharp/issues/395).
+            </li>
+            <li>PkixNameConstraintValidator: fixed special handling of 'serialNumber' in RDNs.</li>
+        </ul>
+        <h5>Additional Features and Functionality</h5>
+        <ul>
+            <li>The BIKE implementation has been updated according to the NIST PQC Round 4 modifications.</li>
+            <li>The HQC implementation has been updated according to the NIST PQC Round 4 modifications.</li>
+            <li>
+                EdDSA verification now conforms to the recommendations of
+                <a href="https://ia.cr/2020/1244">Taming the many EdDSAs</a>, in particular cofactored verification.
+                As a side benefit, <a href="https://ia.cr/2020/454">Pornin's basis reduction</a> is now used for EdDSA
+                verification, giving a significant performance boost.
+            </li>
+            <li>Major performance improvements for Anomalous Binary (Koblitz) Curves.</li>
+            <li>Added implementations of <a href="https://ascon.iaik.tugraz.at/">Ascon</a> AEAD, Hash and XOF algorithms.</li>
+            <li>Added AriaWrapEngine, an implementation of RFC 3394 wrapping for the ARIA cipher.</li>
+            <li>
+                User customization of the GCM multiplier has been obsoleted. We recommend no longer supplying a custom
+                multiplier to GcmBlockCipher.
+            </li>
+            <li>
+                Several large properties files used by the PQC algorithms have been compressed in order to reduce the
+                size of the assembly.
+            </li>
+            <li>Debug symbols have been extracted to a separate snupkg package.</li>
+            <li>Major performance improvements for GCM bulk processing when Pclmulqdq, Ssse3 intrinsics available.</li>
+        </ul>
+        <h5>Additional Notes</h5>
+        <ul>
+            <li>
+                See the (cumulative) list of GitHub pull requests that we have accepted at
+                <a href="https://github.com/bcgit/bc-csharp/pulls?q=is%3Apr+is%3Aclosed">bcgit/bc-csharp</a>.
+            </li>
+        </ul>
+
         <h4><a class="mozTocH4" name="mozTocId85326"></a>Release 2.0.0, Tuesday November 15, 2022</h4>
         <p>
             With this release we have finally moved to building for modern .NET versions (directly targeted frameworks:
@@ -346,7 +392,7 @@
         <h5>Defects Fixed</h5>
         <ul>
             <li>Fixed TLS 1.3 Export Keying Material (https://github.com/bcgit/bc-java/issues/1133).</li>
-            <li>BasicOcspResponseGenerator now allows nullable 'nextUpdate' (https://github.com/bcgit/bc-csharp/issues/371)</li>
+            <li>BasicOcspResponseGenerator now allows nullable 'nextUpdate' (https://github.com/bcgit/bc-csharp/issues/371).</li>
         </ul>
         <h5>Additional Features and Functionality</h5>
         <ul>
@@ -365,7 +411,7 @@
             </li>
             <li>
                 Many APIs have now added variants of existing methods to enable use of
-                <a href="https://learn.microsoft.com/en-us/dotnet/api/system.span-1">Span</a> (only available int the
+                <a href="https://learn.microsoft.com/en-us/dotnet/api/system.span-1">Span</a> (only available in the
                 net6.0 version).
             </li>
             <li>The library has been converted to use generic collections throughout.</li>