Iyo Botan 3.0.0 cryptography library yave kuwanikwa kuti ishandiswe muNeoPG project, forogo yeGnuPG 2. Raibhurari inopa muunganidzwa wakakura wezvakagadzirwa-zvakagadzirwa zvepakutanga zvakashandiswa muTLS protocol, X.509 zvitupa, AEAD ciphers, TPM modules. , PKCS#11, password hashing uye post-quantum cryptography (hash-based siginicha uye McEliece-based key agreement). Raibhurari yakanyorwa muC ++ uye yakagoverwa pasi perezinesi reBSD.
Pakati pekuchinja mukuburitswa kutsva:
- Iyo kodhi base inobvumira kushandiswa kweiyo C ++ 20 yakajairwa (yaimbove C++ 11 yaishandiswa); nekudaro, izvo zvinodikanwa zvema compiler zvawedzerwa - ingangoita GCC 11, Clang 14 kana MSVC 2022 ikozvino inodiwa pakuungana. yeHP nePathscale compilers yakamiswa, pamwe neGoogle NaCL uye IncludeOS mapurojekiti.
- Chikamu chikuru chekuchinja chakaitwa icho chinotyora kumashure kuenderana. Mafaira akawanda emumusoro echinyakare akabviswa, semuenzaniso, iwo chaiwo kune mamwe maalgorithms (aes.h, nezvimwewo). Kuitwa kwemabasa uye maalgorithms akambonzi haashandi akabviswa (CAST-256, MISTY1, Kasumi, DESX, XTEA, PBKDF1, MCEIES, CBC-MAC, Tiger, NEWHOPE, CECPQ1). Pakugadzira entropy yepseudorandom nhamba jenareta, isu takamira kushandisa /proc uye /dev/random. Mamwe makirasi (semuenzaniso, Data_Store), zvimiro uye nhamba zvakabviswa muAPI. Kudzosa uye kushandiswa kwezvikwangwani zvisina chinhu kwakamiswa pazvinogoneka.
- Yakawedzera rutsigiro rweTLS 1.3 protocol. Tsigiro yeTLS 1.0, TLS 1.1 uye DTLS 1.0 yakamiswa. Tsigiro yeDSA, SRP, SEED, AES-128 OCB, CECPQ1, DHE_PSK uye Camellia CBC cipher suites, maciphers asingazivikanwe, uye SHA-1 hashes akabviswa mukushandiswa kweTLS.
- Yakawedzera tsigiro yeKyber post-quantum cryptography algorithm, iyo inoshingirira kune brute simba pane quantum komputa.
- Yakawedzerwa rutsigiro rweDilithium post-quantum cryptography algorithm yekushanda nemasiginecha edhijitari.
- Yakawedzerwa rutsigiro rweelliptic curve point fomati hashing uchishandisa iyo SSWU (dhizaini-irtf-cfrg-hash-to-curve) maitiro.
- Yakawedzera rutsigiro rweBLAKE2b cryptographic hash basa.
- A new programming interface T::new_object yakatsanangurwa inodzosera yakasarudzika_ptr pachinzvimbo chechiratidzo che "T*" chakashama.
- Yakawedzera mabasa matsva uye API: X509_DN::DER_encode, Public_Key::get_int_field, ideal_granularity, inoda_entre_message, SymmetricAlgorithm::has_keying_material. Yakawedzera seti yakakura yemabasa matsva ekushandisa muC (C89) kodhi.
- Kuitwa kweArgon2 algorithm inoshandisa AVX2 mirairo.
- Saizi yematafura mukuitwa kweCamellia, ARIA, SEED, DES uye Whirlpool algorithms yakaderedzwa.
- Kuitwa kutsva kweDES/3DES kunorongwa, kwakachengetedzwa kubva kune mazhinji makirasi ekurwiswa kwepadivi-chiteshi anoongorora mamiriro ecache.
- Kuitwa kweSHACAL2 kwakagadziridzwa masisitimu akavakirwa paARMv8 uye POWER zvivakwa.
- Iyo kodhi yekuverenga parity bits, bcrypt/base64 kutendeuka uye kuona iyo ASN.1 tambo mhando yakasunungurwa kubva patafura lookups uye ikozvino yakazvimiririra kune iyo data iri kugadziriswa (inomhanya nguva dzose)
Source: opennet.ru