1
<?xml version="1.0" encoding="latin1" ?>
2
<!DOCTYPE chapter SYSTEM "chapter.dtd">
9
<holder>Ericsson AB, All Rights Reserved</holder>
12
The contents of this file are subject to the Erlang Public License,
13
Version 1.1, (the "License"); you may not use this file except in
14
compliance with the License. You should have received a copy of the
15
Erlang Public License along with this software. If not, it can be
16
retrieved online at http://www.erlang.org/.
18
Software distributed under the License is distributed on an "AS IS"
19
basis, WITHOUT WARRANTY OF ANY KIND, either express or implied. See
20
the License for the specific language governing rights and limitations
23
The Initial Developer of the Original Code is Ericsson AB.
26
<title>Crypto Release Notes</title>
27
<prepared>Peter Högfeldt</prepared>
29
<date>2003-06-06</date>
31
<file>notes.sgml</file>
33
<p>This document describes the changes made to the Crypto application.</p>
35
<section><title>Crypto 1.5.3</title>
37
<section><title>Improvements and New Features</title>
41
Added new functions: dss_verify/3, rsa_verify/3,
42
rsa_verify/4, dss_sign/2, rsa_sign/2, rsa_sign/3,
43
rsa_public_encrypt, rsa_private_decrypt/3,
44
rsa_private_encrypt/3, rsa_public_decrypt/3,
45
dh_generate_key/1, dh_generate_key/2, dh_compute_key/3.</p>
54
<section><title>Crypto 1.5.2.1</title>
56
<section><title>Improvements and New Features</title>
60
Minor performance optimization.</p>
69
<section><title>Crypto 1.5.2</title>
71
<section><title>Fixed Bugs and Malfunctions</title>
75
./configure has been improved to find 64-bit OpenSSL
84
<section><title>Improvements and New Features</title>
88
crypto and zlib drivers improved to allow concurent smp
99
<title>Crypto 1.5.1.1</title>
102
<title>Improvements and New Features</title>
103
<list type="bulleted">
105
<p>The linked in driver for the crypto application is now
106
linked statically against the OpenSSL libraries, to avoid
107
installation and runtime problems in connection to the
108
OpenSSL library locations.</p>
109
<p>Own Id: OTP-6680</p>
112
<p>Minor Makefile changes.</p>
113
<p>Own Id: OTP-6689</p>
120
<title>Crypto 1.5</title>
123
<title>Improvements and New Features</title>
124
<list type="bulleted">
126
<p>It is now explicitly checked at start-up that the crypto
127
driver is properly loaded (Thanks to Claes Wikstrom).</p>
128
<p>Own Id: OTP-6109</p>
135
<title>Crypto 1.4</title>
138
<title>Improvements and New Features</title>
139
<list type="bulleted">
141
<p>The previously undocumented and UNSUPPORTED <c>ssh</c>
142
application has been updated and documented. This release
143
of the <c>ssh</c> application is still considered to be a
144
beta release and (if necessary) there could still be
145
changes in its API before it reaches 1.0.</p>
146
<p>Also, more cryptographic algorithms have been added to
147
the <c>crypto</c> application.</p>
148
<p>*** POTENTIAL INCOMPATIBILITY ***</p>
149
<p>Own Id: OTP-5631</p>
156
<title>Crypto 1.3</title>
159
<title>Improvements and New Features</title>
160
<list type="bulleted">
162
<p>Added support for RFC 3826 - The Advanced Encryption Standard
163
(AES) Cipher Algorithm in the SNMP User-based Security Model.
165
Martin Björklund</p>
172
<title>Crypto 1.2.3</title>
175
<title>Fixed Bugs and Malfunctions</title>
176
<list type="bulleted">
178
<p>Linked in drivers in the crypto, and asn1 applications
179
are now compiled with the -D_THREAD_SAFE and -D_REENTRANT
180
switches on unix when the emulator has thread support
182
<p>Linked in drivers on MacOSX are not compiled with the
183
undocumented -lbundle1.o switch anymore. Thanks to Sean
184
Hinde who sent us a patch.</p>
185
<p>Linked in driver in crypto, and port programs in ssl, now
186
compiles on OSF1.</p>
187
<p>Minor makefile improvements in runtime_tools.</p>
188
<p>Own Id: OTP-5346</p>
195
<title>Crypto 1.2.2</title>
198
<title>Improvements and New Features</title>
199
<list type="bulleted">
201
<p>Corrected error handling. If the port to the driver that
202
crypto uses is unexpectedly closed (which should not
203
happen during normal operation of crypto), crypto will
204
terminate immediately (rather than crashing the next time
205
crypto is used). Also corrected build problems on Mac OS
207
<p>Own Id: OTP-5279</p>
214
<title>Crypto 1.2.1</title>
217
<title>Fixed Bugs and Malfunctions</title>
218
<list type="bulleted">
220
<p>It was not possible in R9 to relink the crypto driver.
221
The object file was missing as well as an example
222
makefile. The crypto driver object file is now released
223
with the application (installed in priv/obj). An example
224
makefile has also been added to the priv/obj directory.
225
The makefile serves as an example of how to relink the
226
driver on Unix (crypto_drv.so) or Windows
227
(crypto_drv.dll).</p>
228
<p>Own Id: OTP-4828 Aux Id: seq8193 </p>
235
<title>Crypto 1.2</title>
238
<title>Improvements and New Features</title>
239
<list type="bulleted">
241
<p>Previous versions of Crypto where delivered with
242
statically linked binaries based on SSLeay. That is not
243
longer the case. The current version of Crypto requires
244
dynamically linked OpenSSL libraries that the user has to
245
install. The library needed is <c>libcrypto.so</c> (Unix)
246
or <c>libeay32.[lib|dll]</c> (Win32). For further details
247
see the crypto(6) application manual page.</p>
250
<p>This version of Crypto uses the new DES interface of
251
OpenSSL 0.9.7, which is not backward compatible with
252
earlier versions of OpenSSL.
255
<item>The functions <c>des_ede3_cbc_encrypt/5</c> and
256
<c>des_ede3_cbc_decrypt/5</c> have been renamed to
257
<c>des3_cbc_encrypt/5</c> and <c>des3_cbc_decrypt/5</c>,
258
respectively. The old functions have been retained (they are
259
deprecated and not listed in the crypto(3) manual page).</item>
264
<title>Reported Fixed Bugs and Malfunctions</title>
265
<list type="bulleted">
267
<p>The start of crypto failed on Windows, due to erroneous addition
268
of a DES3 algorithm.</p>
278
<title>Crypto 1.1.3</title>
281
<title>Reported Fixed Bugs and Malfunctions</title>
282
<list type="bulleted">
283
<item>To obtain backward compatibility with the old SSLeay
284
package, and with earlier versions of OpenSSL, the macro
285
OPENSSL_DES_LIBDES_COMPATIBILITY has been added to
286
<c>crypto_drv.c</c>. This is of importance only for the open
287
source version of Crypto.
294
<title>Crypto 1.1.2</title>
297
<title>Reported Fixed Bugs and Malfunctions</title>
298
<list type="bulleted">
300
<p>In the manual page <c>crypto(3)</c> the function names
301
<c>md5_finish</c> and <c>sha_finish</c> have been changed to
302
<c>md5_final</c> and <c>sha_final</c> to correctly document
303
the implementation.</p>
312
<title>Crypto 1.1.1</title>
313
<p>Code replacement in runtime is supported. Upgrade can be done from
314
from version 1.1 and downgrade to version 1.1.
318
<title>Improvements and New Features</title>
319
<list type="bulleted">
321
<p>The driver part of the Crypto application has been
322
updated to use the erl_driver header file. Version 1.1.1
323
requires emulator version 4.9.1 or later.</p>
330
<title>Crypto 1.1</title>
333
<title>Reported Fixed Bugs and Malfunctions</title>
334
<list type="bulleted">
336
<p>On Windows the crypto_drv was incorrectly linked to
337
static run-time libraries instead of dynamic ones.</p>
346
<title>Crypto 1.0</title>