120 lines
2.7 KiB
Plaintext
120 lines
2.7 KiB
Plaintext
|
|
Tongsuo CHANGES
|
|
_______________
|
|
|
|
Changes between 8.3.0 and 8.4.0 [15 Dec 2023]
|
|
|
|
*) 修复多个安全漏洞
|
|
|
|
*) 支持零知识证明算法-NIZKPoK 和实现 ZKP 范围证明工具
|
|
|
|
*) 实现基于64位平台架构的SM2算法性能优化
|
|
|
|
*) 实现基于SM2曲线参数特化的快速模约减和快速模逆元算法
|
|
|
|
*) 支持零知识证明算法-bulletproofs (r1cs)
|
|
|
|
*) ZUC 算法优化以及 speed 支持 ZUC 算法
|
|
|
|
*) s_server支持配置多证书测试TLCP SNI功能
|
|
|
|
*) SSL_connection_is_ntls改成使用预读方式判断是否为NTLS
|
|
|
|
*) 支持零知识证明算法-bulletproofs (range proof)
|
|
|
|
*) Paillier 支持硬件加速
|
|
|
|
*) BIGNUM 运算支持 method 机制
|
|
|
|
*) 支持半同态加密算法 Twisted-EC-ElGamal
|
|
|
|
*) 支持半同态加密算法 EC-ElGamal 命令行
|
|
|
|
*) 支持半同态加密算法-Paillier
|
|
|
|
*) 删除多种不常用算法
|
|
|
|
*) 删除对VMS系统的支持
|
|
|
|
*) 删除多种文档相关、工具类代码
|
|
|
|
*) 支持新特性 - 添加导出符号前缀
|
|
|
|
*) 删除PA-RISC架构代码
|
|
|
|
*) 删除SPARC架构代码
|
|
|
|
*) 支持椭圆曲线（EC）点计算硬件加速 API
|
|
|
|
*) 修复2处SM2签名算法的实现bug [0x9527-zhou]
|
|
|
|
*) 基础代码迁移到OpenSSL 3.0.2
|
|
|
|
以下是BabaSSL的CHANGES:
|
|
|
|
Changes between 8.2.0 and 8.3.0 [28 Feb 2022]
|
|
|
|
*) Fix CVE-2021-4160
|
|
|
|
*) Support wrap mode in `openssl enc` command
|
|
|
|
*) ASYNC: Fixes for nested job creation
|
|
|
|
*) Support TLS certificate compression (RFC 8879)
|
|
|
|
*) A bundle of upstream patches are backported [hustliyilin]
|
|
|
|
*) Support NTLS session ticket
|
|
|
|
*) Support integrity algorithm 128-EIA3
|
|
|
|
*) Support NTLS client authentication
|
|
|
|
*) Remove ARIA cipher
|
|
|
|
*) Support software random generator in compliance with Chinese SCA
|
|
|
|
*) Support PHE algorithm EC-Elgamal
|
|
|
|
*) Support RSA_SM4 cipher suites for NTLS
|
|
|
|
*) SM3 and SM4 hardware acceleration on aarch64
|
|
|
|
*) SM4 optimization for non-asm mode
|
|
|
|
Changes between 8.1.3 and 8.2.0 [19 May 2021]
|
|
|
|
*) Support NTLS(formal GM double cert) handshake processing, GB/T 38636-2020 TLCP
|
|
|
|
*) Support delegated credential
|
|
|
|
*) Update BoringSSL QUIC API
|
|
|
|
*) Fix CVE-2021-3449
|
|
|
|
*) Fix CVE-2021-23840 and CVE-2021-23841
|
|
|
|
Changes with 8.1.3 [15 Jan 2021]
|
|
|
|
*) Support more QUIC related APIs
|
|
|
|
*) Fix CVE-2020-1971
|
|
|
|
*) Fix CVE-2020-1967
|
|
|
|
*) Give a default sm2-id for sm2 sign process which not set sm-id
|
|
|
|
*) Support BoringSSL QUIC API
|
|
|
|
*) Fix up problems of CVE-2019-1551
|
|
|
|
*) Support TLS1.3-GM cipher suite, see https://datatracker.ietf.org/doc/html/rfc8998 for more information
|
|
|
|
*) Support global session cache, asynchronous session lookup
|
|
|
|
*) Support SM2 cert sign, SM2 speed testing for babassl/apps
|
|
|
|
*) Support dynamic cipher, make EVP api compatible with lua ffi
|
|
|
|
*) Fork from OpenSSL version 1.1.1d
|