Features
- TLS (
tls)
- add support for ignoring the supported versions extension to the TLS server (#186)
- read the ALPN protocol names from both codepoints during capability generation (#189)
- add support for ignoring the supported versions extension to the TLS server (#186)
- IKE (
ike)
- Simulations (
simulations)
- add checker for the acceptance of the proposal set offered by a client (#185)
- Simulations (
Notable fixes
- Generic
- forge the ephemeral key of a Montgomery curve during elliptic-curve Diffie-Hellman key exchange (#194)
- handle primality and safe primality independently
- forge the ephemeral key of a Montgomery curve during elliptic-curve Diffie-Hellman key exchange (#194)
- TLS (
tls)
- offer the standalone post-quantum signature algorithms in the client hello (#190)
- do not offer TLS 1.3 only named groups in earlier protocol versions (#191)
- handle server hello without the supported versions extension (#186)
- handle connection reset while sending the client hello (#187)
- handle the missing authentication algorithm of TLS 1.3 cipher suites (#196)
- handle a named group whose size is unknown (#194)
- handle servers supporting only ShangMi (SM2) cipher suites (#198)
- offer supported groups to anonymous elliptic-curve Diffie-Hellman servers (#197)
- resolve the protocol handler by protocol version instead of by name (#195)
- handle the GREASE extension in the TLS server (#189)
- keep the state of the capability converter instances separated (#189)
- offer the standalone post-quantum signature algorithms in the client hello (#190)
- IKE (
ike)
- keep the IKEv1 result when the responder picks an unusable Diffie-Hellman group (#199)
- keep the IKEv1 result when the responder picks an unusable Diffie-Hellman group (#199)