General Improvements
- fixed security problems
- Bump minimal required OpenSSL version to 1.0.1 (#1658)
- Implement basic unit tests for asn1 library, compression and simpletlv parser (#1830)
- Allow generating code coverage
- Improve fuzzing by providing corpus from real cards (#1830)
- Implement support for OAEP encryption
- New separate debug level for PIN commands (d06f23e)
- Fix handling of card/reader insertion/removal events in pcscd
- Many bugfixes reported by oss-fuzz, coverity and lgtm.com
- Fixes of removed readers handling (#1970)
- Fix Firefox crash because of invalid pcsc context (#2077)
PKCS#11
- Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards (#2030)
- Propagate ignore_user_content to PKCS#11 layer not to confuse applications (#2040)
Minidriver
- Fix check of ATR length (2-to 33 characters inclusive) (#2146)
MacOS
- Add installer signing for PR and master
- Avoid app bundle relocations after installation
- Move OpenSC to MacOS Utilities folder (#2063)
OpenSC tools
pkcs11-tool
- Make SHA256 default for OAEP encryption
- pkcs11-tool: allow using SW tokens (#2113)
opensc-explorer
OpenPGP
- Add new ec curves supported by GNUK (#1853)
- First steps supporting OpenPGP 3.4
- Add support for EC key import (#1821)
Rutoken
- Add ATR for Rutoken ECP SC NFC (#2122)
CardOS
- Improve detection of various CardOS 5 configurations (#1987)
DNIe
- Add new DNIe CA structure for the secure channel (#2109)
ePass2003
IAS-ECC (#2070):
- Fixed support for Idemia Cosmo cards with AWP middleware interoperability (previously broken).
- Added support for Idemia Cosmo v8 cards.
- PIN padding settings are now used from PKCS#15 info when available.
- Added PIN-pad support for PIN unblock.
IDPrime
- New driver for Gemalto IDPrime (only some types) (#1772)
eDo
- New driver with initial support for Polish eID card (e-dowód, eDO) (#2023)
MCRD
- Remove unused and broken RSA EstEID support (#2095)
TCOS
- Add missing encryption certificates (#2083)
PIV
CAC1
- Support changing PIN with CAC Alt tokens (#2129)