[thirdparty/openssl.git] / CHANGES


 OpenSSL CHANGES
 _______________

 Changes between 0.9.7c and 0.9.8  [xx XXX xxxx]

  *) Fix prime generation loop in crypto/bn/bn_prime.pl by making
     sure the loop does correctly stop and breaking ("division by zero")
     modulus operations are not performed. The (pre-generated) prime
     table crypto/bn/bn_prime.h was already correct, but it could not be
     re-generated on some platforms because of the "division by zero"
     situation in the script.
     [Ralf S. Engelschall]

  *) Update support for ECC-based TLS ciphersuites according to
     draft-ietf-tls-ecc-03.txt: the KDF1 key derivation function with
     SHA-1 now is only used for "small" curves (where the
     representation of a field element takes up to 24 bytes); for
     larger curves, the field element resulting from ECDH is directly
     used as premaster secret.
     [Douglas Stebila (Sun Microsystems Laboratories)]

  *) Add code for kP+lQ timings to crypto/ec/ectest.c, and add SEC2
     curve secp160r1 to the tests.
     [Douglas Stebila (Sun Microsystems Laboratories)]

  *) Add the possibility to load symbols globally with DSO.
Commit	Line	Data
81a6c781	1
f1c236f8	2	OpenSSL CHANGES
651d0aff RE	3	_______________
651d0aff RE	4
beab098d	5	Changes between 0.9.7c and 0.9.8 [xx XXX xxxx]
4d94ae00	6
6bd27f86 RE	7	*) Fix prime generation loop in crypto/bn/bn_prime.pl by making
	8	sure the loop does correctly stop and breaking ("division by zero")
	9	modulus operations are not performed. The (pre-generated) prime
	10	table crypto/bn/bn_prime.h was already correct, but it could not be
	11	re-generated on some platforms because of the "division by zero"
	12	situation in the script.
	13	[Ralf S. Engelschall]
	14
968766ca BM	15	*) Update support for ECC-based TLS ciphersuites according to
	16	draft-ietf-tls-ecc-03.txt: the KDF1 key derivation function with
	17	SHA-1 now is only used for "small" curves (where the
	18	representation of a field element takes up to 24 bytes); for
	19	larger curves, the field element resulting from ECDH is directly
	20	used as premaster secret.
	21	[Douglas Stebila (Sun Microsystems Laboratories)]
	22
652ae06b BM	23	*) Add code for kP+lQ timings to crypto/ec/ectest.c, and add SEC2
	24	curve secp160r1 to the tests.
	25	[Douglas Stebila (Sun Microsystems Laboratories)]
	26
e666c459 RL	27	*) Add the possibility to load symbols globally with DSO.
	28