Botan 3.0.0, laibulale yachinsinsi yomwe imagwiritsidwa ntchito mu projekiti ya NeoPG, foloko ya GnuPG 2, ilipo tsopano. Laibulaleyi imapereka mndandanda waukulu wazinthu zakale zokonzeka kugwiritsidwa ntchito zomwe zimagwiritsidwa ntchito mu protocol ya TLS, ziphaso za X.509, zilembo za AEAD, ma module a TPM, PKCS#11, mawu achinsinsi, ndi post-quantum cryptography (ma signature a hash-based and McEliece-based key agreement). Laibulaleyi imalembedwa mu C ++ ndipo ili ndi chilolezo pansi pa chilolezo cha BSD.
Zosintha pakutulutsa kwatsopano zikuphatikiza:
- Codebase tsopano imathandizira C ++ 20 muyezo (kale C ++ 11), ndipo zofunikira za compiler zawonjezeka-kumanga tsopano kumafuna osachepera GCC 11, Clang 14, kapena MSVC 2022. Thandizo la HP ndi Pathscale compilers, komanso ntchito za Google NaCL ndi IncludeOS, zatha.
- Zosintha zambiri zidayambitsidwa zomwe zimaphwanya kuyanjana kwambuyo. Mafayilo ambiri apamutu omwe adachotsedwa kale adachotsedwa, monga omwe amatsata ma algorithms ena (aes.h, ndi zina). Kukhazikitsa kwa ntchito zomwe zidasiyidwa kale ndi ma algorithms achotsedwa (CAST-256, MISTY1, Kasumi, DESX, XTEA, PBKDF1, MCEIES, CBC-MAC, Tiger, NEWHOPE, CECPQ1). Kugwiritsa ntchito / proc ndi / dev/mwachisawawa popanga entropy ya jenereta ya pseudo-random number kwatha. Makalasi ena (monga Data_Store), zomanga, ndi ziwerengero zachotsedwa mu API. Kubweza ndi kugwiritsa ntchito zolozera zopanda kanthu kwalekeka ngati nkotheka.
- Thandizo lowonjezera la TLS 1.3. Thandizo la TLS 1.0, TLS 1.1, ndi DTLS 1.0 lathetsedwa. Thandizo la DSA, SRP, SEED, AES-128 OCB, CECPQ1, DHE_PSK, ndi Camellia CBC cipher suites, ma ciphers osadziwika, ndi ma SHA-1 hashes achotsedwa pakukhazikitsa kwa TLS.
- Thandizo lowonjezera la Kyber post-quantum cryptography algorithm, yomwe imalimbana ndi kuukira koopsa pakompyuta ya quantum.
- Thandizo lowonjezera la Dilithium post-quantum cryptography algorithm yogwira ntchito ndi siginecha ya digito.
- Thandizo lowonjezera la elliptic curve point hashing pogwiritsa ntchito njira ya SSWU (draft-irtf-cfrg-hash-to-curve).
- Thandizo lowonjezera la BLAKE2b cryptographic hash function.
- API T::new_object yatsopano ikufunsidwa, kubweretsa wapadera_ptr m'malo mwa chizindikiro "T*" chopanda kanthu.
- Ntchito zatsopano ndi ma API awonjezedwa: X509_DN::DER_encode, Public_Key::get_int_field, ideal_granularity, needs_entre_message, SymmetricAlgorithm::has_keying_material. Ntchito zambiri zatsopano zawonjezedwa kuti zigwiritsidwe ntchito mu code C89.
- Kukhazikitsa kwa algorithm ya Argon2 kumagwiritsa ntchito malangizo a AVX2.
- Kuchepetsa kukula kwa tebulo pakukhazikitsa ma algorithms a Camellia, ARIA, SEED, DES, ndi Whirlpool.
- Kukhazikitsa kwatsopano kwa DES/3DES kukuyembekezeka kukhala kotetezedwa motsutsana ndi magulu ambiri achitetezo cham'mbali mwa cache.
- Kukhazikitsa kwa SHACAL2 kumakongoletsedwa pamakina otengera ma ARMv8 ndi POWER zomangamanga.
- Khodi yowerengera ma bits a parity, kutembenuka kwa bcrypt/base64, ndi kudziwa mtundu wa chingwe cha ASN.1 chachotsedwa pakuyang'ana patebulo ndipo tsopano sichidziyimira pawokha ku data yomwe ikukonzedwa (imayenda nthawi zonse).
Source: opennet.ru
