pike.git
/
CHANGES
version
»
Context lines:
10
20
40
80
file
none
3
pike.git/CHANGES:828:
-------------- o SNI client extension support for SSL (Server Name Indicator) o Standards.PEM + Added some support for encrypted PEM files o Nettle refactored
+
CBC cipher mode is now twice as fast.
+
+
o Crypto.GCM
+
+
GCM (Galois Counter Mode) cipher mode added.
+
o AES support added to the SSL module This adds support for the following cipher suites: TLS_rsa_with_aes_128_cbc_sha TLS_dhe_dss_with_aes_128_cbc_sha TLS_dhe_rsa_with_aes_128_cbc_sha TLS_rsa_with_aes_256_cbc_sha TLS_dhe_dss_with_aes_256_cbc_sha TLS_dhe_rsa_with_aes_256_cbc_sha
pike.git/CHANGES:883:
The SHA-3 secure hash algorithm has been added in multiple variants. o Crypto.GOST94 and RIPEMD160 The lesser used hash functions GOST R 34.11-94 (RFC 4357) and RIPEMD160 have been added. o Crypto.RSA and Crypto.DSA The key generation for RSA and DSA are now done by Nettle. This
-
results in faster key generation for RSA
and
stronger
keys
for DSA.
+
results in
90%
faster key generation for RSA
.
Key
generation
for DSA
+
is 10 times slower, but produces better quality keys
.
o Crypto.Hash Added support for pbkdf1 from PKCS#5v1.5 and pbkdf2 from PKCS#5v2.0. o Standards.X509 X509 was moved from Tools to Standards and has been refactored and bug fixed. It is now possible to extend both validation and creation of certificates with new cipher and hash algorithms. A range of new