-------------- o SNI client extension support for SSL (Server Name Indicator) o Standards.PEM + Added some support for encrypted PEM files o Nettle refactored
CBC cipher mode is now twice as fast.
GCM (Galois Counter Mode) cipher mode added.
o AES support added to the SSL module This adds support for the following cipher suites: TLS_rsa_with_aes_128_cbc_sha TLS_dhe_dss_with_aes_128_cbc_sha TLS_dhe_rsa_with_aes_128_cbc_sha TLS_rsa_with_aes_256_cbc_sha TLS_dhe_dss_with_aes_256_cbc_sha TLS_dhe_rsa_with_aes_256_cbc_sha
The SHA-3 secure hash algorithm has been added in multiple variants. o Crypto.GOST94 and RIPEMD160 The lesser used hash functions GOST R 34.11-94 (RFC 4357) and RIPEMD160 have been added. o Crypto.RSA and Crypto.DSA The key generation for RSA and DSA are now done by Nettle. This
results in faster key generation for RSA
faster key generation for RSA
is 10 times slower, but produces better quality keys
o Crypto.Hash Added support for pbkdf1 from PKCS#5v1.5 and pbkdf2 from PKCS#5v2.0. o Standards.X509 X509 was moved from Tools to Standards and has been refactored and bug fixed. It is now possible to extend both validation and creation of certificates with new cipher and hash algorithms. A range of new