]>
Commit | Line | Data |
---|---|---|
81a6c781 | 1 | |
f1c236f8 | 2 | OpenSSL CHANGES |
651d0aff RE |
3 | _______________ |
4 | ||
f72c1a58 | 5 | Changes between 1.0.0f and 1.0.1 [xx XXX xxxx] |
9472baae | 6 | |
bd6941cf DSH |
7 | *) Add support for TLS/DTLS heartbeats. |
8 | [Robin Seggelmann <seggelmann@fh-muenster.de>] | |
9 | ||
6e750fcb DSH |
10 | *) Add support for SCTP. |
11 | [Robin Seggelmann <seggelmann@fh-muenster.de>] | |
12 | ||
62308f3f DSH |
13 | *) Improved PRNG seeding for VOS. |
14 | [Paul Green <Paul.Green@stratus.com>] | |
15 | ||
cecafcce AP |
16 | *) Extensive assembler packs updates, most notably: |
17 | ||
18 | - x86[_64]: AES-NI, PCLMULQDQ, RDRAND support; | |
19 | - x86[_64]: SSSE3 support (SHA1, vector-permutation AES); | |
20 | - x86_64: bit-sliced AES implementation; | |
21 | - ARM: NEON support, contemporary platforms optimizations; | |
22 | - s390x: z196 support; | |
23 | - *: GHASH and GF(2^m) multiplication implementations; | |
24 | ||
25 | [Andy Polyakov] | |
26 | ||
ca0efb75 DSH |
27 | *) Make TLS-SRP code conformant with RFC 5054 API cleanup |
28 | (removal of unnecessary code) | |
29 | [Peter Sylvester <peter.sylvester@edelweb.fr>] | |
30 | ||
b1d74291 BL |
31 | *) Add TLS key material exporter from RFC 5705. |
32 | [Eric Rescorla] | |
33 | ||
060a38a2 BL |
34 | *) Add DTLS-SRTP negotiation from RFC 5764. |
35 | [Eric Rescorla] | |
36 | ||
e2809bfb BL |
37 | *) Add Next Protocol Negotiation, |
38 | http://tools.ietf.org/html/draft-agl-tls-nextprotoneg-00. Can be | |
39 | disabled with a no-npn flag to config or Configure. Code donated | |
40 | by Google. | |
41 | [Adam Langley <agl@google.com> and Ben Laurie] | |
42 | ||
9c37519b BM |
43 | *) Add optional 64-bit optimized implementations of elliptic curves NIST-P224, |
44 | NIST-P256, NIST-P521, with constant-time single point multiplication on | |
45 | typical inputs. Compiler support for the nonstandard type __uint128_t is | |
3d520f7c BM |
46 | required to use this (present in gcc 4.4 and later, for 64-bit builds). |
47 | Code made available under Apache License version 2.0. | |
9c37519b | 48 | |
3d520f7c BM |
49 | Specify "enable-ec_nistp_64_gcc_128" on the Configure (or config) command |
50 | line to include this in your build of OpenSSL, and run "make depend" (or | |
51 | "make update"). This enables the following EC_METHODs: | |
9c37519b BM |
52 | |
53 | EC_GFp_nistp224_method() | |
54 | EC_GFp_nistp256_method() | |
55 | EC_GFp_nistp521_method() | |
56 | ||
57 | EC_GROUP_new_by_curve_name() will automatically use these (while | |
58 | EC_GROUP_new_curve_GFp() currently prefers the more flexible | |
59 | implementations). | |
60 |