Changeset 464 for azure_iot_hub_f767zi/trunk/wolfssl-4.7.0/README

Timestamp:

Jun 22, 2021, 9:00:19 PM (3 years ago)

Author:

coas-nagasima

Message:

WolfSSLとAzure IoT SDKを更新

Location:

azure_iot_hub_f767zi/trunk/wolfssl-4.7.0

Files:

• . (moved) (moved from azure_iot_hub_f767zi/trunk/wolfssl-4.4.0 )
• README (modified) (1 diff)

azure_iot_hub_f767zi/trunk/wolfssl-4.7.0/README

@@ -74 +74 @@
 
 
-# wolfSSL Release 4.4.0 (04/22/2020)
+# wolfSSL Release 4.7.0 (February 16, 2021)
+Release 4.7.0 of wolfSSL embedded TLS has bug fixes and new features including:
 
-If you have questions about this release, feel free to contact us on our
-info@ address.
+### New Feature Additions
+* Compatibility Layer expansion SSL_get_verify_mode, X509_VERIFY_PARAM API, X509_STORE_CTX API added
+* WOLFSSL_PSK_IDENTITY_ALERT macro added for enabling a subset of TLS alerts
+* Function wolfSSL_CTX_NoTicketTLSv12 added to enable turning off session tickets with TLS 1.2 while keeping TLS 1.3 session tickets available
+* Implement RFC 5705: Keying Material Exporters for TLS
+* Added --enable-reproducible-build flag for making more deterministic library outputs to assist debugging
 
-Release 4.4.0 of wolfSSL embedded TLS has bug fixes and new features including:
+### Fixes
+* Fix to free mutex when cert manager is free’d
+* Compatibility layer EVP function to return the correct block size and type
+* DTLS secure renegotiation fixes including resetting timeout and retransmit on duplicate HelloRequest
+* Fix for edge case with shrink buffer and secure renegotiation
+* Compile fix for type used with curve448 and PPC64
+* Fixes for SP math all with PPC64 and other embedded compilers
+* SP math all fix when performing montgomery reduction on one word modulus
+* Fixes to SP math all to better support digit size of 8-bit
+* Fix for results of edge case with SP integer square operation
+* Stop non-ct mod inv from using register x29 with SP ARM64 build
+* Fix edge case when generating z value of ECC with SP code
+* Fixes for PKCS7 with crypto callback (devId) with RSA and RNG
+* Fix for compiling builds with RSA verify and public only
+* Fix for PKCS11 not properly exporting the public key due to a missing key type field
+* Call certificate callback with certificate depth issues
+* Fix for out-of-bounds read in TLSX_CSR_Parse()
+* Fix incorrect AES-GCM tag generation in the EVP layer
+* Fix for out of bounds write with SP math all enabled and an edge case of calling sp_tohex on the result of sp_mont_norm
+* Fix for parameter check in sp_rand_prime to handle 0 length values
+* Fix for edge case of failing malloc resulting in an out of bounds write with SHA256/SHA512 when small stack is enabled
 
-## New Feature Additions
 
-* Hexagon support.
-* DSP builds to offload ECC verify operations.
-* Certificate Manager callback support.
-* New APIs for running updates to ChaCha20/Poly1305 AEAD.
-* Support for use with Apache.
-* Add support for IBM s390x.
-* PKCS8 support for ED25519.
-* OpenVPN support.
-* Add P384 curve support to SP.
-* Add BIO and EVP API.
-* Add AES-OFB mode.
-* Add AES-CFB mode.
-* Add Curve448, X448, and Ed448.
-* Add Renesas Synergy S7G2 build and hardware acceleration.
+### Improvements/Optimizations
+* Added --enable-wolftpm option for easily building wolfSSL to be used with wolfTPM
+* DTLS macro WOLFSSL_DTLS_RESEND_ONLY_TIMEOUT added for resending flight only after a timeout
+* Update linux kernel module to use kvmalloc and kvfree
+* Add user settings option to cmake build
+* Added support for AES GCM session ticket encryption
+* Thread protection for global RNG used by wolfSSL_RAND_bytes function calls
+* Sanity check on FIPs configure flag used against the version of FIPs bundle
+* --enable-aesgcm=table now is compatible with --enable-linuxkm
+* Increase output buffer size that wolfSSL_RAND_bytes can handle
+* Out of directory builds resolved, wolfSSL can now be built in a separate directory than the root wolfssl directory
 
-## Fixes
+### Vulnerabilities
+* [HIGH] CVE-2021-3336: In earlier versions of wolfSSL there exists a potential man in the middle attack on TLS 1.3 clients. Malicious attackers with a privileged network position can impersonate TLS 1.3 servers and bypass authentication. Users that have applications with client side code and have TLS 1.3 turned on, should update to the latest version of wolfSSL. Users that do not have TLS 1.3 turned on, or that are server side only, are NOT affected by this report. For the code change see https://github.com/wolfSSL/wolfssl/pull/3676.
+* [LOW] In the case of using custom ECC curves there is the potential for a crafted compressed ECC key that has a custom prime value to cause a hang when imported. This only affects applications that are loading in ECC keys with wolfSSL builds that have compressed ECC keys and custom ECC curves enabled.
+* [LOW] With TLS 1.3 authenticated-only ciphers a section of the server hello could contain 16 bytes of uninitialized data when sent to the connected peer. This affects only a specific build of wolfSSL with TLS 1.3 early data enabled and using authenticated-only ciphers with TLS 1.3.
 
-* Fix for RSA public encrypt / private sign with RSA key sizes over 2048-bit.
-* Correct misspellings.
-* Secure renegotiation fix.
-* Fix memory leak when using ATECC and non-SECP256R1 curves for sign, verify,
-  or shared secret.
-* Fix for K64 MMCAU with `WOLFSSL_SMALL_STACK_CACHE`.
-* Fix the RSA verify only build.
-* Fix in SP C implementation for small stack.
-* Fix using the auth key id extension is set, hash might not be present.
-* Fix when flattening certificate structure to include the subject alt names.
-* Fixes for building with ECC sign/verify only.
-* Fix for ECC and no cache resistance.
-* Fix memory leak in DSA.
-* Fix build on minGW.
-* Fix `PemToDer()` call in `ProcessBuffer()` to set more than ECC.
-* Fix for using RSA without SHA-512.
-* Add some close tags to the echoserver HTTP example output.
-* Miscellaneous fixes and updates for static analysis reports.
-* Fixes for time structure support.
-* Fixes for VxWorks support.
-* Fixes for Async crypto support.
-* Fix cache resist compile to work with SP C code.
-* Fixes for Curve25519 x64 asm.
-* Fix for SP x64 div.
-* Fix for DTLS edge case where CCS and Finished come out of order and the
-  retransmit pool gets flushed.
-* Fix for infinite loop in SHA-1 with small inputs. Thanks to Peter W.
-* Fix for FIPS Hmac where `wc_HmacInit()` isn't used. `wc_HmacSetKey()` needs
-  to initialize the Hmac structure. Type is set to NONE, and checked against
-  NONE, not 0.
-* Fixes for SP RSA private operations.
-* Fixes for Xilinx SDK and Zynq UltraScale+ MPSoC
-* Fix leak when building with HAVE_AESGCM and NO_AES_DECRYPT. Thanks G.G.
-* Fixes for building ECC without ASN.
-* Fix for async TLSv1.3 issues.
-* Fix `wc_KeyPemToDer()` with PKCS1 and empty key.
-* Omit `-fomit-frame-pointer` from CFLAGS in configure.ac.
-
-## Improvements/Optimizations
-
-* Qt 5.12 and 5.13 support.
-* Added more digest types to Cryptocell RSA sign/verify.
-* Some memory usage improvements.
-* Speed improvements for mp_rand.
-* Improvements to CRL and OCSP support.
-* Refactor Poly1305 AEAD/MAC to reduce duplicate code.
-* Add blinding to RSA key gen.
-* Improvements to blinding.
-* Improvement and expansion of OpenSSL Compatibility Layer.
-* Improvements to ChaCha20.
-* Improvements to X.509 processing.
-* Improvements to ECC support.
-* Improvement in detecting 64-bit support.
-* Refactor to combine duplicate ECC parameter parsing code.
-* Improve keyFormat to be set by algId and let later key parsing produce fail.
-* Add test cases for 3072-bit and 4096-bit RSA keys.
-* Improve signature wrapper and DH test cases.
-* Improvements to the configure.ac script.
-* Added constant time RSA q modinv p.
-* Improve performance of SP Intel 64-bit asm.
-* Added a few more functions to the ABI list.
-* Improve TLS bidirectional shutdown behavior.
-* OpenSSH 8.1 support.
-* Improve performance of RSA/DH operations on x64.
-* Add support for PKCS7/CMS Enveloped data with fragmented encrypted content.
-* Example linker description for FIPS builds to enforce object ordering.
-* C# wrapper improvements. Added TLS client example and TLSv1.3 methods.
-* Allow setting MTU in DTLS.
-* Improve PKCS12 create for outputting encrypted bundles.
-* Constant time EC map to affine for private operations.
-* Improve performance of RSA public key ops with TFM.
-* Smaller table version of AES encrypt/decrypt.
-* Support IAR with position independent code (ROPI).
-* Improve speed of AArch64 assembly.
-* Support AES-CTR with AES-NI.
-* Support AES-CTR on esp32.
-* Add a no malloc option for small SP math.
-
-## This release of wolfSSL includes fixes for 2 security vulnerabilities.
-
-* For fast math, use a constant time modular inverse when mapping to affine
-  when operation involves a private key - keygen, calc shared secret, sign.
-  Thank you to Alejandro Cabrera Aldaya, Cesar Pereida Garc鱈a and
-  Billy Bob Brumley from the Network and Information Security Group (NISEC)
-  at Tampere University for the report.
-
-* Change constant time and cache resistant ECC mulmod. Ensure points being
-  operated on change to make constant time. Thank you to Pietro Borrello at
-  Sapienza University of Rome.
 
 For additional vulnerability information visit the vulnerability page at