From 974f6ddde36ede91f0ebb20706806c7a83e1096a Mon Sep 17 00:00:00 2001 From: Peter Dettman Date: Tue, 7 May 2024 23:38:39 +0700 Subject: Updates after 2.3.1 release --- crypto/Contributors.html | 6 +++--- crypto/Readme.html | 26 +++++++++++++++++++++++++- 2 files changed, 28 insertions(+), 4 deletions(-) (limited to 'crypto') diff --git a/crypto/Contributors.html b/crypto/Contributors.html index 1f8ef780c..953b26ee1 100644 --- a/crypto/Contributors.html +++ b/crypto/Contributors.html @@ -268,9 +268,9 @@ University of Wollongong, Institute of Cybersecurity and Cryptology, under the s

  • Matthew Sitton (https://github.com/mdsitton) - Addition of missing ALPN Protocol names.

    • -
  • -

    Jozef Gajdoš (https://github.com/harrison314) - Time constructor optimization, RevokedStatus fix, improved thread-safe singleton code (e.g. X509Certificate/X509Crl cached encoding), SubjectPublicKeyInfo support in OpenSsl.PemWriter, fixed PSS raw signing over spans.

    -
    • +
  • +

    Jozef Gajdoš (https://github.com/harrison314) - Time constructor optimization, RevokedStatus fix, improved thread-safe singleton code (e.g. X509Certificate/X509Crl cached encoding), SubjectPublicKeyInfo support in OpenSsl.PemWriter, fixed PSS raw signing over spans.

    +

  • Ben Adams (https://github.com/benaadams) - Performance optimization for AES-NI.

    • diff --git a/crypto/Readme.html b/crypto/Readme.html index 76afc29a4..98b7dee72 100644 --- a/crypto/Readme.html +++ b/crypto/Readme.html @@ -31,6 +31,8 @@
  • Notes:
      +
    1. + Release 2.4.0
    2. Release 2.3.1
    3. @@ -331,13 +333,35 @@

      Notes:

      -

      Release 2.3.1, TBD

      +

      Release 2.4.0, TBD

      Defects Fixed
        +
      +
      Additional Features and Functionality
      +
        +
      +
      Additional Notes
      +
        +
      • + See the (cumulative) list of GitHub pull requests that we have accepted at + bcgit/bc-csharp. +
        • +
      + +

      Release 2.3.1, Tuesday May 7, 2024

      +
      Defects Fixed
      +
        +
      • TLS: Fixed timing side-channel for RSA key exchange ("The Marvin Attack").
      • PSS: Fixed regression in 2.3.0 when updating signer from a span.
        • +
      • + EdDSA: Fixed verification infinite loop (regression in 2.1.0) + - see corresponding bc-java issue. +
      Additional Features and Functionality
        +
      • ASN.1: Limited OID contents to 4096 bytes.
        • +
      • EC: Restricted m value in F2m curves.
      Additional Notes
        -- cgit 1.4.1