diff options
| author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2019-07-21 10:06:22 +0200 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2019-07-21 10:06:22 +0200 |
| commit | b619e595c0a94ddad67c521245b9da79e1738469 (patch) | |
| tree | 9a06794c42ef22c8809f7062e9e5131e846b89ca | |
| parent | b539b9843b4d49dce5a6b0b852a91e4f57e2fc63 (diff) | |
| download | gnutls-b619e595c0a94ddad67c521245b9da79e1738469.tar.gz | |
NEWS: updated for upcoming release [ci skip]
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
| -rw-r--r-- | NEWS | 29 |
1 files changed, 15 insertions, 14 deletions
@@ -7,17 +7,24 @@ See the end for copying conditions. * Version 3.6.9 (unreleased) -** libgnutls: gnutls_privkey_sign_hash2 now accepts the GNUTLS_PRIVKEY_SIGN_FLAG_TLS1_RSA - flag as documented. This makes it a complete replacement of gnutls_privkey_sign_hash(). +** libgnutls: add gnutls_hash_copy/gnutls_hmac_copy functions that will create a copy + of digest or MAC context. Copying contexts for externally-registered digest and MAC + contexts is unupported (#787). -** Marked the crypto cipher registration APIs as deprecated. These APIs are rarely used, - are for a niche use case, but have significant side effects, such as preventing any - internal re-organization and extension of the internal cipher API. The APIs remain +** Marked the crypto implementation override APIs as deprecated. These APIs are rarely + used, are for a niche use case, but have significant side effects, such as preventing + any internal re-organization and extension of the internal cipher API. The APIs remain functional though a compiler warning will be issued, and a future minor version update - may transform them to a no-op while keeping the ABI compatibility (#789) + may transform them to a no-op while keeping ABI compatibility (#789). + +** libgnutls: Added support for AES-GMAC, as a separate to GCM, MAC algorithm (#781). + +** libgnutls: gnutls_privkey_sign_hash2 now accepts the GNUTLS_PRIVKEY_SIGN_FLAG_TLS1_RSA + flag as documented. This makes it a complete replacement of gnutls_privkey_sign_hash(). ** The priority configuration was enhanced to allow more elaborate - system-wide configuration of the library. The following changes were done: + system-wide configuration of the library (#587). + The following changes were included: - The file is read as an ini file with '#' indicating a comment. - The section "[priorities]" or global follows the existing semantics of the configuration file, and allows to specify system-wide priority strings @@ -34,21 +41,15 @@ See the end for copying conditions. the GNUTLS_SYSTEM_PRIORITY_FAIL_ON_INVALID environment parameter is set to 1. -** libgnutls: add gnutls_hash_copy/gnutls_hmac_copy functions that will create a copy - of digest or MAC context. Copying contexts for externally-registered digest and MAC - contexts is unupported. - ** libgnutls: Added new flag for GNUTLS_CPUID_OVERRIDE - 0x20: Enable SHA_NI instruction set -** libgnutls: Added support for AES-GMAC MAC (#781) - ** API and ABI modifications: -gnutls_get_system_config_file: Added gnutls_crypto_register_cipher: Deprecated gnutls_crypto_register_aead_cipher: Deprecated gnutls_crypto_register_digest: Deprecated gnutls_crypto_register_mac: Deprecated +gnutls_get_system_config_file: Added gnutls_hash_copy: Added gnutls_hmac_copy: Added GNUTLS_MAC_AES_GMAC_128: Added |