From b619e595c0a94ddad67c521245b9da79e1738469 Mon Sep 17 00:00:00 2001 From: Nikos Mavrogiannopoulos Date: Sun, 21 Jul 2019 10:06:22 +0200 Subject: NEWS: updated for upcoming release [ci skip] Signed-off-by: Nikos Mavrogiannopoulos --- NEWS | 29 +++++++++++++++-------------- 1 file changed, 15 insertions(+), 14 deletions(-) diff --git a/NEWS b/NEWS index 35bd412b2c..5a3dcb3257 100644 --- a/NEWS +++ b/NEWS @@ -7,17 +7,24 @@ See the end for copying conditions. * Version 3.6.9 (unreleased) -** libgnutls: gnutls_privkey_sign_hash2 now accepts the GNUTLS_PRIVKEY_SIGN_FLAG_TLS1_RSA - flag as documented. This makes it a complete replacement of gnutls_privkey_sign_hash(). +** libgnutls: add gnutls_hash_copy/gnutls_hmac_copy functions that will create a copy + of digest or MAC context. Copying contexts for externally-registered digest and MAC + contexts is unupported (#787). -** Marked the crypto cipher registration APIs as deprecated. These APIs are rarely used, - are for a niche use case, but have significant side effects, such as preventing any - internal re-organization and extension of the internal cipher API. The APIs remain +** Marked the crypto implementation override APIs as deprecated. These APIs are rarely + used, are for a niche use case, but have significant side effects, such as preventing + any internal re-organization and extension of the internal cipher API. The APIs remain functional though a compiler warning will be issued, and a future minor version update - may transform them to a no-op while keeping the ABI compatibility (#789) + may transform them to a no-op while keeping ABI compatibility (#789). + +** libgnutls: Added support for AES-GMAC, as a separate to GCM, MAC algorithm (#781). + +** libgnutls: gnutls_privkey_sign_hash2 now accepts the GNUTLS_PRIVKEY_SIGN_FLAG_TLS1_RSA + flag as documented. This makes it a complete replacement of gnutls_privkey_sign_hash(). ** The priority configuration was enhanced to allow more elaborate - system-wide configuration of the library. The following changes were done: + system-wide configuration of the library (#587). + The following changes were included: - The file is read as an ini file with '#' indicating a comment. - The section "[priorities]" or global follows the existing semantics of the configuration file, and allows to specify system-wide priority strings @@ -34,21 +41,15 @@ See the end for copying conditions. the GNUTLS_SYSTEM_PRIORITY_FAIL_ON_INVALID environment parameter is set to 1. -** libgnutls: add gnutls_hash_copy/gnutls_hmac_copy functions that will create a copy - of digest or MAC context. Copying contexts for externally-registered digest and MAC - contexts is unupported. - ** libgnutls: Added new flag for GNUTLS_CPUID_OVERRIDE - 0x20: Enable SHA_NI instruction set -** libgnutls: Added support for AES-GMAC MAC (#781) - ** API and ABI modifications: -gnutls_get_system_config_file: Added gnutls_crypto_register_cipher: Deprecated gnutls_crypto_register_aead_cipher: Deprecated gnutls_crypto_register_digest: Deprecated gnutls_crypto_register_mac: Deprecated +gnutls_get_system_config_file: Added gnutls_hash_copy: Added gnutls_hmac_copy: Added GNUTLS_MAC_AES_GMAC_128: Added -- cgit v1.2.1