Ukukhutshwa kweThala leencwadi leBotan Cryptographic 2.11.0

Iyafumaneka ukukhululwa kwelayibrari ye-cryptographic IBotan 2.11.0, isetyenziswe kwiprojekthi NeoPG, ifolokhwe ye-GnuPG 2. Ithala leencwadi libonelela ngengqokelela enkulu iiprimitives esele zenziwe, esetyenziswa kwi TLS protocol, X.509 certificates, AEAD ciphers, TPMs, PKCS#11, password hashing, kunye nepost-quantum cryptography. Ilayibrari ibhalwe C ++ 11 kunye inikwe phantsi kwelayisensi ye-BSD.

Phakathi utshintsho kukhupho olutsha:

• Yongeza i-Argon2 i-password hashing kunye ne-password-based key generation function usebenzisa i-Argon2 kunye ne-Bcrypt;
• Inkxaso eyongeziweyo yeesistim zokugcina isatifikethi seWindows kunye neLinux. System_Certificate_Store API iphunyeziwe, isebenza ngaphezulu kweevenkile zesatifikethi ezikhethekileyo kwiWindows, macOS kunye neLinux. Yongeziwe trust_roots CLI ukujonga iivenkile zesatifikethi inkqubo;
• Yongeza umaleko ukuqinisekisa ukuhambelana ne-libsodium (sodium.h);
• Inkxaso eyongeziweyo yokuthumela imiyalezo ye-DTLS HelloVerifyRequest kwicala lomncedisi;
• Imiliselwe imijelo ye-TLS ehambelana ne-boost::asio::ssl;
• Ukubonelela ngenkxaso yovavanyo lwe-TLS kusetyenziswa i-suite yovavanyo evela kwi-BoringSSL;
• Ukonyuka kwendlela yokusebenza GCM;
• Ukuphunyezwa kwe-XMSS (iNkqubo yoMsayino eyoNgezelelweyo ye-Merkle) ihambelana ne-RFC 8391;
• Inkxaso eyongeziweyo yokwandiswa kweenguqulelo ze-TLS 1.3;
• Ukuphunyezwa okuthobelayo kwe-RFC 25519 ye-Ed8032ph.

umthombo: opennet.ru