diff options
| author | Bodo Möller <bodo@openssl.org> | 2002-07-04 08:51:09 +0000 |
|---|---|---|
| committer | Bodo Möller <bodo@openssl.org> | 2002-07-04 08:51:09 +0000 |
| commit | ea4f109c99955c5119258c90c9ecd78623cf180e (patch) | |
| tree | aa23c4f75d28eeaf081ab6a41adb0352c4c732b5 /CHANGES | |
| parent | 7650934f21d43fe024d7a7958bab1be7f7864b29 (diff) | |
| download | openssl-ea4f109c99955c5119258c90c9ecd78623cf180e.tar.gz | |
AES cipher suites are now official (RFC3268)
Diffstat (limited to 'CHANGES')
| -rw-r--r-- | CHANGES | 26 |
1 files changed, 18 insertions, 8 deletions
@@ -4,6 +4,15 @@ Changes between 0.9.7 and 0.9.8 [xx XXX 2002] + *) Change default behaviour of 'openssl asn1parse' so that more + information is visible when viewing, e.g., a certificate: + + Modify asn1_parse2 (crypto/asn1/asn1_par.c) so that in non-'dump' + mode the content of non-printable OCTET STRINGs is output in a + style similar to INTEGERs, but with '[HEX DUMP]' prepended to + avoid the appearance of a printable string. + [Nils Larsch <nla@trustcenter.de>] + *) Add 'asn1_flag' and 'asn1_form' member to EC_GROUP with access functions EC_GROUP_set_asn1_flag() @@ -1143,14 +1152,15 @@ des-cbc 3624.96k 5258.21k 5530.91k 5624.30k 5628.26k handle the new API. Currently only ECB, CBC modes supported. Add new AES OIDs. - Add TLS AES ciphersuites as described in the "AES Ciphersuites - for TLS" draft-ietf-tls-ciphersuite-06.txt. As these are not yet - official, they are not enabled by default and are not even part - of the "ALL" ciphersuite alias; for now, they must be explicitly - requested by specifying the new "AESdraft" ciphersuite alias. If - you want the default ciphersuite list plus the new ciphersuites, - use "DEFAULT:AESdraft:@STRENGTH". - [Ben Laurie, Steve Henson, Bodo Moeller] + Add TLS AES ciphersuites as described in RFC3268, "Advanced + Encryption Standard (AES) Ciphersuites for Transport Layer + Security (TLS)". (In beta versions of OpenSSL 0.9.7, these were + not enabled by default and were not part of the "ALL" ciphersuite + alias because they were not yet official; they could be + explicitly requested by specifying the "AESdraft" ciphersuite + group alias. In the final release of OpenSSL 0.9.7, the group + alias is called "AES" and is part of "ALL".) + [Ben Laurie, Steve Henson, Bodo Moeller] *) New function OCSP_copy_nonce() to copy nonce value (if present) from request to response. |