CHANGES: Update CHANGES file for 0.8.0

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
This commit is contained in:
Stefan Berger 2020-05-28 09:45:38 -04:00 committed by Stefan Berger
parent 5d7a04c624
commit c762ca4aa6

13
CHANGES
View File

@ -1,7 +1,8 @@
CHANGES - changes for libtpms
version 0.8.0
- updated to TPM 2 code release 159
- NOTE: Downgrade to previous versions is not possible. See below.
- Update to TPM 2 code release 159
- X509 support is enabled
- SM2 signing of ceritificates is NOT supported
- Authenticated timers are disabled
@ -9,6 +10,16 @@ version 0.8.0
possible to downgrade from libtpms version 0.8.0 to some previous version.
The seeds are now associated with an age so that older seeds use the old
TPM 2 prime number generation code while newer seed use the newer code.
- Update to TPM 2 code relase 162
- ECC encryption / decryption is disabled
- Fix support for elliptic curve due to missing unmarshalling code
- Runtime filter supported elliptic curves supported by OpenSSL
- Fix output buffer parameter and size for RSA decryption that could cause
stack corruption under certain circumstances
- Set the RSA PSS salt length to the digest length rathern than max. possible
- Fixes to symmetric decrytion related to input size check,
defer padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)] and
to always use a temporary malloc'ed buffer for decryption
version 0.7.0
- use OpenSSL crypto for AES, TDES, EC, and RSA operations when possible