X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=blobdiff_plain;f=CHANGES;h=8cc6aa128d3d2cd28f0315e7818e54c6c9085eb3;hp=060fcd822bfed139296278665175c38547bf8058;hb=1d42fb5f4aae476e4f917d8a334952c05685f86a;hpb=47b71e6ee9c421162b1cf610bd1ca22843691764 diff --git a/CHANGES b/CHANGES index 060fcd822b..8cc6aa128d 100644 --- a/CHANGES +++ b/CHANGES @@ -4,10 +4,16 @@ Changes between 0.9.8f and 0.9.9 [xx XXX xxxx] + *) Add option -stream to use PKCS#7 streaming in smime utility. New + function i2d_PKCS7_bio_stream() and PEM_write_PKCS7_bio_stream() + to output in BER and PEM format. + [Steve Henson] + *) Experimental support for use of HMAC via EVP_PKEY interface. This allows HMAC to be handled via the EVP_DigestSign*() interface. The EVP_PKEY "key" in this case is the HMAC key, potentially allowing - ENGINE support for HMAC keys which are unextractable. + ENGINE support for HMAC keys which are unextractable. New -mac and + -macopt options to dgst utility. [Steve Henson] *) New option -sigopt to dgst utility. Update dgst to use @@ -495,6 +501,26 @@ Changes between 0.9.8e and 0.9.8f [xx XXX xxxx] + *) Squeeze another 10% out of IGE mode when in != out. + [Ben Laurie] + + *) AES IGE mode speedup. + [Dean Gaudet (Google)] + + *) Add the Korean symmetric 128-bit cipher SEED (see + http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp) and + add SEED ciphersuites from RFC 4162: + + TLS_RSA_WITH_SEED_CBC_SHA = "SEED-SHA" + TLS_DHE_DSS_WITH_SEED_CBC_SHA = "DHE-DSS-SEED-SHA" + TLS_DHE_RSA_WITH_SEED_CBC_SHA = "DHE-RSA-SEED-SHA" + TLS_DH_anon_WITH_SEED_CBC_SHA = "ADH-SEED-SHA" + + To minimize changes between patchlevels in the OpenSSL 0.9.8 + series, SEED remains excluded from compilation unless OpenSSL + is configured with 'enable-seed'. + [KISA, Bodo Moeller] + *) Mitigate branch prediction attacks, which can be practical if a single processor is shared, allowing a spy process to extract information. For detailed background information, see