120 lines
2.7 KiB
Plaintext
120 lines
2.7 KiB
Plaintext
|
||
Tongsuo CHANGES
|
||
_______________
|
||
|
||
Changes between 8.3.0 and 8.4.0 [15 Dec 2023]
|
||
|
||
*) 修复多个安全漏洞
|
||
|
||
*) 支持零知识证明算法-NIZKPoK 和实现 ZKP 范围证明工具
|
||
|
||
*) 实现基于64位平台架构的SM2算法性能优化
|
||
|
||
*) 实现基于SM2曲线参数特化的快速模约减和快速模逆元算法
|
||
|
||
*) 支持零知识证明算法-bulletproofs (r1cs)
|
||
|
||
*) ZUC 算法优化以及 speed 支持 ZUC 算法
|
||
|
||
*) s_server支持配置多证书测试TLCP SNI功能
|
||
|
||
*) SSL_connection_is_ntls改成使用预读方式判断是否为NTLS
|
||
|
||
*) 支持零知识证明算法-bulletproofs (range proof)
|
||
|
||
*) Paillier 支持硬件加速
|
||
|
||
*) BIGNUM 运算支持 method 机制
|
||
|
||
*) 支持半同态加密算法 Twisted-EC-ElGamal
|
||
|
||
*) 支持半同态加密算法 EC-ElGamal 命令行
|
||
|
||
*) 支持半同态加密算法-Paillier
|
||
|
||
*) 删除多种不常用算法
|
||
|
||
*) 删除对VMS系统的支持
|
||
|
||
*) 删除多种文档相关、工具类代码
|
||
|
||
*) 支持新特性 - 添加导出符号前缀
|
||
|
||
*) 删除PA-RISC架构代码
|
||
|
||
*) 删除SPARC架构代码
|
||
|
||
*) 支持椭圆曲线（EC）点计算硬件加速 API
|
||
|
||
*) 修复2处SM2签名算法的实现bug [0x9527-zhou]
|
||
|
||
*) 基础代码迁移到OpenSSL 3.0.2
|
||
|
||
以下是BabaSSL的CHANGES:
|
||
|
||
Changes between 8.2.0 and 8.3.0 [28 Feb 2022]
|
||
|
||
*) Fix CVE-2021-4160
|
||
|
||
*) Support wrap mode in `openssl enc` command
|
||
|
||
*) ASYNC: Fixes for nested job creation
|
||
|
||
*) Support TLS certificate compression (RFC 8879)
|
||
|
||
*) A bundle of upstream patches are backported [hustliyilin]
|
||
|
||
*) Support NTLS session ticket
|
||
|
||
*) Support integrity algorithm 128-EIA3
|
||
|
||
*) Support NTLS client authentication
|
||
|
||
*) Remove ARIA cipher
|
||
|
||
*) Support software random generator in compliance with Chinese SCA
|
||
|
||
*) Support PHE algorithm EC-Elgamal
|
||
|
||
*) Support RSA_SM4 cipher suites for NTLS
|
||
|
||
*) SM3 and SM4 hardware acceleration on aarch64
|
||
|
||
*) SM4 optimization for non-asm mode
|
||
|
||
Changes between 8.1.3 and 8.2.0 [19 May 2021]
|
||
|
||
*) Support NTLS(formal GM double cert) handshake processing, GB/T 38636-2020 TLCP
|
||
|
||
*) Support delegated credential
|
||
|
||
*) Update BoringSSL QUIC API
|
||
|
||
*) Fix CVE-2021-3449
|
||
|
||
*) Fix CVE-2021-23840 and CVE-2021-23841
|
||
|
||
Changes with 8.1.3 [15 Jan 2021]
|
||
|
||
*) Support more QUIC related APIs
|
||
|
||
*) Fix CVE-2020-1971
|
||
|
||
*) Fix CVE-2020-1967
|
||
|
||
*) Give a default sm2-id for sm2 sign process which not set sm-id
|
||
|
||
*) Support BoringSSL QUIC API
|
||
|
||
*) Fix up problems of CVE-2019-1551
|
||
|
||
*) Support TLS1.3-GM cipher suite, see https://datatracker.ietf.org/doc/html/rfc8998 for more information
|
||
|
||
*) Support global session cache, asynchronous session lookup
|
||
|
||
*) Support SM2 cert sign, SM2 speed testing for babassl/apps
|
||
|
||
*) Support dynamic cipher, make EVP api compatible with lua ffi
|
||
|
||
*) Fork from OpenSSL version 1.1.1d
|