Maktabada cryptography ee Botan 3.0.0 ayaa hadda diyaar u ah isticmaalka mashruuca NeoPG, fargeeto GnuPG 2 ah. Maktabadu waxay bixisaa ururin badan oo ah agabyo diyaarsan oo loo isticmaalo borotokoolka TLS, shahaadooyinka X.509, AEAD ciphers, modules TPM , PKCS#11, hashing password iyo post-quantum cryptography (saxiixa xashiishka ku salaysan iyo heshiiska muhiimka ah ee McEliece ku salaysan). Maktabadu waxay ku qoran tahay C++ waxaana lagu qaybiyaa shatiga BSD.
Waxaa ka mid ah isbeddelada sii deynta cusub:
- Saldhigga koodhka ayaa oggolaanaya isticmaalka heerka C++20 (horey C++11 ayaa loo isticmaali jiray); si waafaqsan, shuruudaha isku-dubaridyadu waa la kordhiyey - ugu yaraan GCC 11, Clang 14 ama MSVC 2022 ayaa hadda looga baahan yahay isu imaatinka. ee HP iyo Pathscale compilers waa la joojiyay, iyo sidoo kale Google NaCL iyo mashaariicda ay ku jiraan.
- Qayb weyn oo isbeddel ah ayaa la sameeyay kuwaas oo ku xad-gudbay is-waafajinta dambe. Faylal madax badan oo duugoobay ayaa meesha laga saaray, tusaale ahaan, kuwa u gaarka ah algorithms (aes.h, iwm.). Hirgelinta hawlaha iyo algorithmsyada hore loogu sheegay inay duugoobeen waa laga saaray (CAST-256, MISTY1, Kasumi, DESX, XTEA, PBKDF1, MCEIES, CBC-MAC, Tiger, NEWHOPE, CECPQ1). Markii aan abuurnay entropy koronto-dhaliye nambarka pseudorandom, waxaan joojinay adeegsiga /proc iyo /dev/random. Fasallada qaarkood (tusaale ahaan, Data_Store), qaab-dhismeedyada iyo tirinta ayaa laga saaray API. Soo noqoshada iyo isticmaalka calaamadaha qaawan waa la joojiyay halka ay suurtagal tahay.
- Taageero lagu daray borotokoolka TLS 1.3. Taageerada TLS 1.0, TLS 1.1 iyo DTLS 1.0 waa la joojiyay. Taageerada DSA, SRP, SEED, AES-128 OCB, CECPQ1, DHE_PSK iyo Camellia CBC suites ciphers, xashiishka qarsoodiga ah, iyo xashiishka SHA-1 ayaa laga saaray fulinta TLS.
- Taageero lagu daray Kyber post-quantum cryptography algorithm, kaas oo u adkeysanaya in uu xoog waxyeeleeyo kombuyuutarka tirada.
- Taageerada lagu daray Dilithium post-quantum cryptography algorithm ee la shaqaynta saxeexyada dhijitaalka ah.
- Taageerada lagu daray ee qaabka qalooca qalooca elliptical hashing iyadoo la isticmaalayo farsamada SSWU (draft-irtf-cfrg-hash-to-curve).
- Taageero lagu daray BLAKE2b shaqada xashiishka cryptographic.
- Interface barmaamij cusub T :: new_shay ayaa la soo jeediyay oo soo celiya gaar ah_ptr halkii tilmaanta "T*" qaawan.
- Lagu daray hawlo cusub iyo API: X509_DN :: DER_encode, Public_Key :: get_int_field, ideal_granularity, waxay u baahan tahay fariin_dhan Waxaa lagu daray hawlo badan oo cusub si loogu isticmaalo koodka C (C89).
- Hirgelinta Argon2 algorithm waxay isticmaashaa tilmaamaha AVX2.
- Baaxadda shaxanka fulinta Camellia, ARIA, SEED, DES iyo algorithmsamka waa la dhimay.
- Hirgelin cusub oo DES/3DES ah ayaa la soo jeediyay, lagana ilaaliyo inta badan fasallada weerarrada dhinaca kanaalka ah ee qiimeeya xaaladda kaydka.
- Hirgelinta SHACAL2 waxaa loo habeeyay nidaamyada ku saleysan ARMv8 iyo qaab dhismeedka AWOODDA.
- Koodhka xisaabinta sinnaanta, beddelka bcrypt/base64 iyo go'aaminta nooca xadhigga ASN.1 ayaa laga xoreeyay raadinta miiska oo hadda wuu ka madax bannaan yahay xogta la farsamaynayo (wuxuu socdaa waqti joogto ah)
Source: opennet.ru