release of the cryptographic library , used in the project , a fork of GnuPG. The library provides a large collection , used in the TLS protocol, X.509 certificates, AEAD ciphers, TPM modules, PKCS#11, password hashing, and post-quantum cryptography. The library is written in C++11 and under the BSD license.
Among in the new release:
- Added password hashing function Argon2 and key derivation functions based on password, using Argon2 and Bcrypt;
- Added support for certificate storage systems in Windows and Linux. Implemented the System_Certificate_Store API, which operates on Windows, macOS, and Linux certificate stores. Added CLI trust_roots for checking system certificate stores;
- Added a layer for compatibility with libsodium (sodium.h);
- Added support for sending DTLS HelloVerifyRequest messages from the server side;
- Implemented TLS streams compatible with boost::asio::ssl;
- Supported TLS testing using the test suite from BoringSSL;
- Increased performance in mode ;
- XMSS (Extended Merkle Signature Scheme) implementation updated to comply with RFC 8391;
- Added support for the supported_versions extension for TLS 1.3;
- Added implementation of Ed25519ph, compatible with RFC 8032.
Source: opennet.ru
