release of the cryptographic library , used in the project , a fork of GnuPG. The library provides a large collection , used in the TLS protocol, X.509 certificates, AEAD ciphers, TPM modules, PKCS#11, password hashing, and post-quantum cryptography (hash-based signatures and key agreement based on McEliece and NewHope). The library is written in C++11 and under the BSD license.
Among in the new release:
- Added support for NEON and AltiVec optimizations to ensure constant-time execution of the AES implementation;
- Improved performance of the RSA, GCM, OCB, XTS, CTR, and ChaCha20Poly1305 implementations;
- Added support for generating Argon2 hashes larger than 64 bytes;
- In DTLS, optimized MTU split operations and added handling of connection drops due to client-side issues, with subsequent reconnection from the same port number;
- Added support for downgrading TLS 1.3 connections to a lower protocol version;
- Added support for the digital signature algorithm ;
- Increased RDRAND performance on x86-64 systems;
- Added support for the hardware random number generator provided in POWER9 processors, and increased performance on POWER8 systems with AES instructions;
- New utilities 'entropy', 'base32_enc', and 'base32_dec' have been added;
- Many header files are now marked as for internal use only and raise warnings when attempting to use them in applications;
- Enabled the use of the Python module on Windows.
Source: opennet.ru
