[thirdparty/openssl.git] / CHANGES


 OpenSSL CHANGES
 _______________

 Changes between 0.9.8a and 0.9.9  [xx XXX xxxx]

  *) Add support for key derivation (agreement) in the API, DH method and
     pkeyutl.
     [Steve Henson]

  *) Add DSA pkey method and DH pkey methods, extend DH ASN1 method to support
     public and private key formats. As a side effect these add additional 
     command line functionality not previously available: DSA signatures can be
     generated and verified using pkeyutl and DH key support and generation in
     pkey, genpkey.
     [Steve Henson]

  *) BeOS support.
     [Oliver Tappe <zooey@hirschkaefer.de>]

  *) New make target "install_html_docs" installs HTML renditions of the
     manual pages.
     [Oliver Tappe <zooey@hirschkaefer.de>]

  *) New utility "genpkey" this is analagous to "genrsa" etc except it can
     generate keys for any algorithm. Extend and update EVP_PKEY_METHOD to
     support key and parameter generation and add initial key generation
     functionality for RSA.
     [Steve Henson]

  *) Add functions for main EVP_PKEY_method operations. The undocumented
     functions EVP_PKEY_{encrypt,decrypt} have been renamed to
     EVP_PKEY_{encrypt,decrypt}_old. 
     [Steve Henson]

  *) Initial definitions for EVP_PKEY_METHOD. This will be a high level public
     key API, doesn't do much yet.
     [Steve Henson]

  *) New function EVP_PKEY_asn1_get0_info() to retrieve information about
     public key algorithms. New option to openssl utility:
     "list-public-key-algorithms" to print out info.
     [Steve Henson]

  *) Implement the Supported Elliptic Curves Extension for
     ECC ciphersuites from draft-ietf-tls-ecc-12.txt.
     [Douglas Stebila]

  *) Don't free up OIDs in OBJ_cleanup() if they are in use by EVP_MD or
     EVP_CIPHER structures to avoid later problems in EVP_cleanup().
     [Steve Henson]

  *) New utilities pkey and pkeyparam. These are similar to algorithm specific
     utilities such as rsa, dsa, dsaparam etc except they process any key
     type.
     [Steve Henson]

  *) Transfer public key printing routines to EVP_PKEY_ASN1_METHOD. New 
     functions EVP_PKEY_print_public(), EVP_PKEY_print_private(),
     EVP_PKEY_print_param() to print public key data from an EVP_PKEY
     structure.
     [Steve Henson]

  *) Initial support for pluggable public key ASN1.
     De-spaghettify the public key ASN1 handling. Move public and private
     key ASN1 handling to a new EVP_PKEY_ASN1_METHOD structure. Relocate
     algorithm specific handling to a single module within the relevant
     algorithm directory. Add functions to allow (near) opaque processing
     of public and private key structures.
     [Steve Henson]

  *) Implement the Supported Point Formats Extension for
     ECC ciphersuites from draft-ietf-tls-ecc-12.txt.
     [Douglas Stebila]

  *) Add initial support for RFC 4279 PSK TLS ciphersuites. Add members
     for the psk identity [hint] and the psk callback functions to the
     SSL_SESSION, SSL and SSL_CTX structure.
     
     New ciphersuites:
         PSK-RC4-SHA, PSK-3DES-EDE-CBC-SHA, PSK-AES128-CBC-SHA,
         PSK-AES256-CBC-SHA
 
     New functions:
         SSL_CTX_use_psk_identity_hint
         SSL_get_psk_identity_hint
         SSL_get_psk_identity
         SSL_use_psk_identity_hint

     [Mika Kousa and Pasi Eronen of Nokia Corporation]

  *) Add RFC 3161 compliant time stamp request creation, response generation
     and response verification functionality.
Commit	Line	Data
81a6c781	1
f1c236f8	2	OpenSSL CHANGES
651d0aff RE	3	_______________
651d0aff RE	4
bf3d6c0c	5	Changes between 0.9.8a and 0.9.9 [xx XXX xxxx]
28e4fe34	6
ffb1ac67 DSH	7	*) Add support for key derivation (agreement) in the API, DH method and
	8	pkeyutl.
	9	[Steve Henson]
	10
3ba0885a DSH	11	*) Add DSA pkey method and DH pkey methods, extend DH ASN1 method to support
	12	public and private key formats. As a side effect these add additional
	13	command line functionality not previously available: DSA signatures can be
	14	generated and verified using pkeyutl and DH key support and generation in
	15	pkey, genpkey.
	16	[Steve Henson]
	17
4700aea9 UM	18	*) BeOS support.
	19	[Oliver Tappe <zooey@hirschkaefer.de>]
	20
	21	*) New make target "install_html_docs" installs HTML renditions of the
	22	manual pages.
	23	[Oliver Tappe <zooey@hirschkaefer.de>]
	24
f5cda4cb DSH	25	*) New utility "genpkey" this is analagous to "genrsa" etc except it can
	26	generate keys for any algorithm. Extend and update EVP_PKEY_METHOD to
	27	support key and parameter generation and add initial key generation
	28	functionality for RSA.
	29	[Steve Henson]
	30
f733a5ef DSH	31	*) Add functions for main EVP_PKEY_method operations. The undocumented
	32	functions EVP_PKEY_{encrypt,decrypt} have been renamed to
	33	EVP_PKEY_{encrypt,decrypt}_old.
	34	[Steve Henson]
	35
0b6f3c66 DSH	36	*) Initial definitions for EVP_PKEY_METHOD. This will be a high level public
	37	key API, doesn't do much yet.
	38	[Steve Henson]
	39
0b33dac3 DSH	40	*) New function EVP_PKEY_asn1_get0_info() to retrieve information about
	41	public key algorithms. New option to openssl utility:
	42	"list-public-key-algorithms" to print out info.
	43	[Steve Henson]
	44
33273721 BM	45	*) Implement the Supported Elliptic Curves Extension for
	46	ECC ciphersuites from draft-ietf-tls-ecc-12.txt.
	47	[Douglas Stebila]
	48
246e0931 DSH	49	*) Don't free up OIDs in OBJ_cleanup() if they are in use by EVP_MD or
	50	EVP_CIPHER structures to avoid later problems in EVP_cleanup().
	51	[Steve Henson]
	52
3e4585c8	53	*) New utilities pkey and pkeyparam. These are similar to algorithm specific
f5cda4cb	54	utilities such as rsa, dsa, dsaparam etc except they process any key
3e4585c8	55	type.
3e84b6e1 DSH	56	[Steve Henson]
3e84b6e1 DSH	57
35208f36 DSH	58	*) Transfer public key printing routines to EVP_PKEY_ASN1_METHOD. New
	59	functions EVP_PKEY_print_public(), EVP_PKEY_print_private(),
	60	EVP_PKEY_print_param() to print public key data from an EVP_PKEY
	61	structure.
	62	[Steve Henson]
	63
448be743 DSH	64	*) Initial support for pluggable public key ASN1.
	65	De-spaghettify the public key ASN1 handling. Move public and private
	66	key ASN1 handling to a new EVP_PKEY_ASN1_METHOD structure. Relocate
	67	algorithm specific handling to a single module within the relevant
	68	algorithm directory. Add functions to allow (near) opaque processing
	69	of public and private key structures.
	70	[Steve Henson]
	71
36ca4ba6 BM	72	*) Implement the Supported Point Formats Extension for
	73	ECC ciphersuites from draft-ietf-tls-ecc-12.txt.
	74	[Douglas Stebila]
	75
ddac1974 NL	76	*) Add initial support for RFC 4279 PSK TLS ciphersuites. Add members
	77	for the psk identity [hint] and the psk callback functions to the
	78	SSL_SESSION, SSL and SSL_CTX structure.
	79
	80	New ciphersuites:
	81	PSK-RC4-SHA, PSK-3DES-EDE-CBC-SHA, PSK-AES128-CBC-SHA,
	82	PSK-AES256-CBC-SHA
	83
	84	New functions:
	85	SSL_CTX_use_psk_identity_hint
	86	SSL_get_psk_identity_hint
	87	SSL_get_psk_identity
	88	SSL_use_psk_identity_hint
	89
	90	[Mika Kousa and Pasi Eronen of Nokia Corporation]
	91
c7235be6 UM	92	*) Add RFC 3161 compliant time stamp request creation, response generation
	93	and response verification functionality.
	94