Skip to content

CHANGELOG.md

Latest commit

 

History

History
257 lines (219 loc) · 24.3 KB

CHANGELOG.md

File metadata and controls

257 lines (219 loc) · 24.3 KB
Raw

Intel® Cryptography Primitives Library

This is a list of notable changes to Intel® Cryptography Primitives Library, in reverse chronological order.

Intel(R) Cryptography Primitives Library 2.4.0

New features and changes

  • XMSS, LMS, ML-KEM, ML-DSA are no longer preview features: the IPPCP_PREVIEW_* macros are not needed to use them.
  • Added ippsLMSGetPublicKeyElems and ippsLMSGetSignatureElems getters to extract the individual components of an LMS public key and signature state.
  • Added XMSS examples: key generation, signing and verification of the generated signature and verification of a signature from an externally provided public key and signature components.
  • Added the -DIPPCP_ENABLE_FUNC_DATA_SECTIONS:BOOL=on build option (off by default) to place each function and data item into its own section (-ffunction-sections -fdata-sections on Linux*, /Gy /Gw on Windows*), enabling linker garbage collection of unused code and data (-Wl,--gc-sections / /OPT:REF) to reduce the footprint of applications that statically link the library.
  • Increased minimum required NASM* version to 3.01 for library build.

Performance

  • Added single-buffer SM4 optimizations that use the SM4 instructions on CPUs with Intel® AVX10.2, covering ECB, CBC decryption, CFB128 decryption and CTR.
  • Added multi-buffer SM4 optimizations that use the SM4 instructions on CPUs with Intel® AVX10.2, covering ECB, CBC, CBC-MAC, CFB128, CTR, OFB, XTS and the counter mode inside GCM, which SM4-CCM and SM4-GCM also use.
  • Added optimizations for the ML-DSA NTT, inverse NTT, and multiply NTT with Intel® AVX2 (l9 and above).
  • Optimized ML-DSA scalar hot paths: division-free Decompose, phase-split rejection sampling, and a short-circuit on the ||z|| bound in the signing loop.
  • Optimized ML-DSA bit packing and unpacking of keys and signatures, and rearranged the scalar NTT and inverse NTT loops so the compiler can vectorize every layer.
  • Added a 4-way multi-buffer SHAKE128/SHAKE256 implementation on Intel® AVX2 (l9), used to batch ML-DSA sampling and ExpandMask and shared with ML-KEM matrix and rejection sampling.
  • Improved LMS key-generation performance by optimizing repeated SHA-256 hashing during LM-OTS public-key generation.

Fixes

  • Fixed the counter increment in ippsAESEncryptCTR and ippsAESDecryptCTR on the Intel® AVX-512 VAES (k1) and Intel® AVX10.2 (d1) code paths for counter sizes from 65 to 127 bits.
  • Fixed ippsAES_CCMStart, ippsSMS4_CCMStart, ippsAES_CCMEncrypt and ippsAES_CCMDecrypt to return ippStsLengthErr when the message length is too large for the CCM length field or the block counter, or when the processed data exceeds the length set by ippsAES_CCMMessageLen.
  • Zeroized additional secret-bearing stack and pool scratch before return: hash/HMAC digest buffers, AES-CCM/CMAC/GCM tag scratch, EC signing ephemeral points and modular-inverse working sets (DSA/NR/SM2, single- and multi-buffer), ECDH projective-to-affine inversion buffers, and RSA multi-buffer CRT intermediates.
  • Changed ippsAES_GCMEncrypt, ippsAES_GCMDecrypt, ippsAES_CCMEncrypt, ippsAES_CCMDecrypt, ippsSMS4_CCMEncrypt and ippsSMS4_CCMDecrypt to read each source byte only once and to never read the destination buffer back, on all code paths. ippsAES_SIVEncrypt no longer reads the pSIV output back, and ippsAES_SIVDecrypt reads the pSIV input once. The multi-buffer SM4-GCM and SM4-CCM documentation now states that these functions may read the input more than once and read the output back.

Intel(R) Cryptography Primitives Library 2.3.0

  • Updated ML-KEM to use RDSEED as the internal randomness source; optimized byte/bit conversion hot paths and introduced Montgomery-domain arithmetic for NTT operations to improve performance.
  • Fixed ippsGFpECTstKeyPair, ippsGFpECVerify, ippsGFpECSignNR and ippsGFpECVerifyNR returning wrong results on AVX-512 IFMA when a precomputed base-point table is bound via ippsGFpECBindGxyTblStd* (the generic base-point multiplication consumed the IFMA radix-52 table).
  • Fixed ippsGFpECVerifySM2 rejecting valid signatures on the AVX-512 IFMA (k1/d1) code path due to a scratch-buffer aliasing defect in the optimized SM2 verify kernel.
  • Introduced external Mu verification for the ML-DSA scheme to allow signature verification with pre-computed hashes, reducing memory overhead for large messages. Includes full FIPS self-testing and validation.
  • Increased minimum required CMake version to 3.18 for library and examples build.
  • Zeroized stack secrets on all error paths in ML-KEM/ML-DSA key generation, signing, encapsulation and expansion helpers, and fixed a stack out-of-bounds write in ML-DSA rejection sampling.
  • Made ML-KEM ciphertext compression and RSA-PKCS#1 v1.5 decryption decoding constant-time to remove timing side channels.
  • Added on-curve validation of the public point in EC signature verification (DSA/NR/SM2) and SM2-ECIES key setup, and private-key size validation in SM2 key exchange.
  • Added bounds checks rejecting oversized message lengths in ippsLMSVerify and multi-buffer Ed25519 sign/verify, and fixed an out-of-bounds read in cpAddWithCarry_BNU.
  • Added candidate size validation in ippsPrimeTest_BN and RNG-status propagation in DLP key and domain-parameter generation.
  • Advanced the LMS one-time-key index before signing so it is consumed even on error, preventing one-time-key reuse.
  • Zeroized outputs on authentication failure in AES-GCM and AES-SIV decryption, and rejected zero-length IVs in AES-GCM IV processing.

Intel(R) Cryptography Primitives Library 2.2.0

  • Fixed SHA3 AVX512 incremental absorb potential out-of-bounds read in multi-call scenarios.
  • Fixed ML-DSA signature verification to strictly enforce hint vector weight bounds.
  • Added strict output buffer size validation when input parameter is zero for GCD BN function.
  • Strengthened quotient validation checks for BN division operation.
  • Fixed stack out-of-bounds read in AES/SM4 CCM streaming modes when processing non-block-aligned data chunks.
  • Eliminated potential out-of-bounds writes of the output tag in the ippsHashGetTag_rmf API.
  • Fixed SM2 signature forgery vulnerability by adding missing input validation in ippsGFpECVerifySM2.

Intel(R) Cryptography Primitives Library 2.1.0

  • Added FIPS self-tests for ML-DSA (Module-Lattice-Based Digital Signature Algorithm) operations including key generation, signing, and verification functionality.

Intel(R) Cryptography Primitives Library 2.0.0

  • Fixed an issue in LMS key and signature generation for certain values of extraBufSize.
  • Added more precise input parameters validation for multi-buffer functions (mbx_sm3_msg_digest_mb16, mbx_sm3_update_mb16, mbx_exp_mb8 and mbx_exp{1024,2048,3072,4096}_mb8).
  • Removed support fips_selftest_ippsRSASignVerify_PKCS1v15_rmf_get_size_keys and fips_selftest_ippsRSASignVerify_PKCS1v15_rmf_get_size.
  • Fully disabled Intel® SSE2 (w7), Intel® SSE3 (m7), Intel® SSSE3 (n8, s8) and Intel® AVX (e9, g9) optimization code paths, including the respective 1cpu headers and 1cpu libraries.
  • Added new optimization code paths (d1) to support Intel® AVX10.2 instruction set.
  • Fixed multi-buffer library installation paths to use configurable variables instead of hardcoded paths for separate library builds.
  • Eliminated branching depending on the GHASH value from the AES-GCM internal precomputation kernel.
  • Updated the versions of some of the build tools and increased the minimal supported OpenSSL version from 3.0.8 to 3.5.5, as 3.0.8 reaches end of support in September 2026. For more information, please refer to the Software Requirements.

Intel(R) Cryptography Primitives Library 1.4.0

  • Added key and signature generations for the Leighton-Micali Hash-Based Signatures (LMS) algorithm.
  • Added initialization checks for static variables in methods regulating hashing and arithmetic over GF(q) to optimize multi-call usage scenarios.
  • ML-KEM key generation, encapsulation and decapsulation were optimized with Intel(R) Advanced Vector Extensions 512 (Intel(R) AVX-512) instructions.
  • Fixed the issue with ippsHashUnpack_rmf and ippsHMACUnpack_rmf. The function could cause segmentation faults in some scenarios.
  • Cleaned-up the library from the outdated macOS specific code.
  • Added RSA partial key setting functions to enable incremental construction of RSA keys by setting individual components separately.
  • Extended ippsRSAVerify_PKCS1v15_rmf function to support pre-hashed message verification.
  • Added a new pkcs5-pbkdf2 key derivation function as part of PKCS-5, RFC-8018
  • Added support for ML-DSA scheme with Key Generation, Signing and Verification functionality implemented according to the FIPS 204.
  • Added support for Hash Deterministic Random Bit Generator (DRBG) according to the NIST SP 800-90.

Intel(R) Cryptography Primitives Library 1.3.0

  • Added support for ML-KEM scheme with Key Generation, Encapsulation and Decapsulation functionality implemented according to the FIPS 203.
  • Added API for hash squeezing for Extendable-output functions (XOF) from the Keccak family.
  • Optimized performance for SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHAKE128 and SHAKE256 hash algorithms.

Intel(R) Cryptography Primitives Library 1.2.0

  • Crypto Multi buffer library was extended with Intel® AVX-IFMA implementation of ECDSA (Sign and Verify), public key generation, ECDHE over NIST p256r1 curve.
  • Added support for HKDF, Hashed Message Authentication Code (HMAC)-based key derivation function as defined by RFC-5869.
  • Added key and signature generations for the eXtended Merkle Signature Scheme (XMSS) algorithm.
  • Minimal supported BoringSSL version was increased to 0.20250114.0 tag.
  • Added support for SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHAKE128 and SHAKE256 hash algorithms as defined by FIPS PUB 202.

Intel(R) Cryptography Primitives Library 1.1.0

  • Added single buffer SM4 (former SMS4) algorithm with the new SM4 instructions for Lunar Lake and Arrow Lake S CPUs.
  • Added single buffer SHA384, SHA512, SHA512/224, SHA512/256 hash algorithm optimizations with the new SHA512 instructions for Lunar Lake and Arrow Lake S CPUs.
  • Enabled support of specific ISA library build for Crypto Multi buffer library. Cmake build options -DMERGED_BLD:BOOL=off -DMBX_PLATFORM_LIST="k1;l9" may be used. Please refer to BUILD.md for the details.
  • Fixed AVX512 IFMA implementation (k1 branch) of SM2 signature and verification single-buffer algorithm. The optimized path is re-enabled.
  • Added ippsHashMethod_SM3_NI and ippsHashMethod_SM3_TT methods for SM3 hash algorithm optimization with the new SM3 instructions for Lunar Lake and Arrow Lake S CPUs. The runtime dispatch introduced in Intel(R) Cryptography Primitives Library 1.0.0 release ippsHashMethod_SM3 is moved to ippsHashMethod_SM3_TT and the behavior of ippsHashMethod API is aligned with SHA hash family.
  • Deprecated fips_selftest_ippsRSASignVerify_PKCS1v15_rmf_get_size_keys and fips_selftest_ippsRSASignVerify_PKCS1v15_rmf_get_size. Please see DEPRECATION_NOTES for more details.

Intel(R) Cryptography Primitives Library 1.0.1

  • Fixed an issue with invalid memory access for AES-GCM algorithm with Intel® Advanced Vector Extensions 2 (Intel® AVX2) vector extensions of Intel® AES New Instructions (Intel® AES-NI) in case of corner sizes.

Intel(R) Cryptography Primitives Library 1.0.0

  • Intel® Integrated Performance Primitives Cryptography (Intel® IPP Cryptography) was renamed to Intel(R) Cryptography Primitives Library.
  • Added single buffer SM3 hash algorithm optimization with the new SM3 instructions for Lunar Lake and Arrow Lake S CPUs.
  • Added Intel® AVX-IFMA RSA implementation to Crypto Multi buffer library.
  • Fixed bug in IceLake optimization (k1 branch) of ECDSA signature function caused by incorrect processing of R and S component's size and sign.
  • Added FIPS selftest for Leighton-Micali Hash-Based Signatures(LMS) verification algorithm.
  • Added examples for SM3 Hash / LMS post-quantum verification / NIST Curve P-256 ECDSA signature generation algorithms.
  • Changed -DBABASSL:BOOL=on CMake build option to -DTONGSUO:BOOL=on for Tongsuo library.
  • Removed API that were deprecated in Intel® Integrated Performance Primitives Cryptography 2020 Update1. More details can be found in DEPRECATION_NOTES.md. Please note that ippsHash<GetSize/Init/Duplicate/Pack/Unpack/Update/GetTag/Final/HashMessage> API still remain in the library.
  • Removed support for SSSE3(s8 for ia32 and n8 for intel64) and AVX(g9 for ia32 and e9 for intel64) code-paths. Execution was moved to SSE3(w7 for ia32 and m7 for intel64) and SSE4.2(p8 for ia32 and y8 for intel64) respectively. There is still the possibility to use 1cpu headers and 1cpu libraries without breaking change for 1 year but some performance drops are expected.

Intel(R) IPP Cryptography 2021.12.1

  • Added FIPS_CUSTOM_IPPCP_API_HEADER build flag to support FIPS self-tests for a specific use case when Custom Library Tool is used with custom prefix for IPPCP API.

Intel(R) IPP Cryptography 2021.12

  • Added single-buffer implementation of Leighton-Micali Hash-Based Signatures(LMS) algorithm, verification part.
  • Added support of Clang 16.0 compiler for Linux.
  • Added examples of AES-GCM Encryption/Decryption usage.
  • AES-GCM algorithm with Intel® Advanced Vector Extensions 2 (Intel® AVX2) vector extensions of Intel® AES New Instructions (Intel® AES-NI) was optimized.

Intel(R) IPP Cryptography 2021.11

  • Minimal supported BoringSSL version was increased to 45cf810d tag.

Intel(R) IPP Cryptography 2021.10

  • Added the verification part of eXtended Merkle Signature Scheme (XMSS) algorithm.
  • Added FIPS-compliance mode for the library. More information can be found in the Intel(R) IPP Cryptography FIPS Guide.

Intel(R) IPP Cryptography 2021.9

  • Added optimized RSA-2048 code for multi-buffer (8 buffers) Intel® AVX-512 implementation.
  • Added Intel® Advanced Vector Extensions 2 (Intel® AVX2) vector extensions of Intel® AES New Instructions (Intel® AES-NI) optimization for AES-GCM algorithm.
  • Changed the minimal supported OpenSSL version to 3.0.8 since 1.1.1 is not supported since September 2023.
  • Raised the minimal CMake version to 3.18 since this is the minimal version that supports OpenSSL 3.0.8: https://cmake.org/cmake/help/latest/module/FindOpenSSL.html.

Intel(R) IPP Cryptography 2021.8

  • Crypto Multi-buffer library was extended with XTS mode of SM4 algorithm.

Intel(R) IPP Cryptography 2021.7.1

  • Added re-initialization API for AES-GCM context - ippsAES_GCMReinit. The use-case of this function is very specific, please, refer to the documentation for more details.

Intel(R) IPP Cryptography 2021.7

  • Mitigation for Frequency Throttling Side-Channel Attack (Frequency Throttling Side Channel Software Guidance for Cryptography Implementations) was added for ECB, CMAC and GCM modes of AES (for more details refer to ippsAESSetupNoise, ippsAES_GCMSetupNoise and ippsAES_CMACSetupNoise).
  • Crypto Multi-buffer library was extended with CCM and GCM modes of SM4 algorithm.
  • In Crypto Multi-buffer library in-place mode of executing (when pa_out == pa_inp) was fixed for SM4 CBC and CFB modes.
  • New API that updates pointer to IppsHashMethod context inside the IppsHashState_rmf state was added (please, refer to ippsHashStateMethodSet_ API).
  • ippsHMAC_Pack(_rmf), ippsHMAC_Unpack(_rmf) APIs were fixed - context id is set up properly now during the packing-unpacking process.

Intel(R) IPP Cryptography 2021.6

  • EC cryptography functionality for the NIST curves p256r1, p384r1, p521r1 and SM2 curve was enabled with Intel® Advanced Vector Extensions 512 (Intel® AVX-512) IFMA instructions.
  • EC cryptography functionality input parameters checking was improved by adding keys boundaries check.
  • AES-GCM input parameters checking was improved by adding input text boundary check.
  • An issue in AES-CTR Intel® Advanced Vector Extensions 512 (Intel® AVX-512) code path related to handling of last partial block was fixed.
  • The ability to build Intel® IPP Cryptography library and Crypto Multi buffer library with Microsoft Visual C++ Compiler* version 19.30 provided by Microsoft Visual Studio* 2022 version 17.0 was added.

Intel(R) IPP Cryptography 2021.5

  • AES-GCM small packets processing was optimized for Intel® Advanced Vector Extensions 512 (Intel® AVX-512) code path.
  • The ability to build Intel® IPP Cryptography library and Crypto Multi buffer library with GCC* 10, GCC* 11, Clang* 9, Clang* 12 and Intel® C++ Compiler Classic 2021.3 was added.
  • The ability to build Crypto Multi buffer library with OpenSSL* 3.0 was added.

Intel(R) IPP Cryptography 2021.4

  • Crypto Multi buffer library was extended with ECB, CBC, CTR, OFB and CFB modes of SM4 algorithm.
  • Crypto Multi buffer library was extended with EC SM2 public key generation, ECDHE and ECDSA (Sign and Verify) algorithms.
  • Crypto Multi buffer library extended with ECDSA Ed25519 verify algorithm.
  • Crypto Multi buffer library extended with modular exponent algorithm.

Intel(R) IPP Cryptography 2021.3

  • Enabled ECDSA Ed25519sign crypto multi buffer API within Intel® IPP Cryptography for 3rd Generation Intel® Xeon® Processor Scalable and 10th Gen Intel® Core™ Processors.
  • Enabled RSA single buffer 3k, 4k within Intel® IPP Cryptography for 3rd Generation Intel® Xeon® Processor Scalable and 10th Gen Intel® Core™ Processors.
  • Fixed Intel® IPP Cryptography AES-GCM decryption incorrect tag issue while dispatching on processors supported with Intel® Advanced Vector Extensions 512 (Intel® AVX-512).

Intel(R) IPP Cryptography 2021.2

  • Crypto Multi buffer library was extended with ECDSA (Sign) and ECDHE for the NIST curves p521r1.
  • Added ECDSA verify with new Instruction Set Architecture(ISA) for the NIST curve p384r1, p256r1 and p521r1.
  • Added SM3 multi buffer with new Instruction Set Architecture(ISA).
  • Added new Intel® IPP Cryptography pre-defined hash algorithm APIs ippsHashMethodGetSize and ippsHashMethodInit.
  • RSA-2048 decryption (CRT) was enabled for Intel(R) Microarchitecture Code Named Ice Lake.
  • Crypto Multi buffer library was extended with ECDSA (Sign) and ECDHE for the NIST curves p256r1 and p384r1.
  • Fixed a build issue that affect build of the Intel(R) IPP Cryptography library with MSVC* compiler on Windows* OS.
  • Duplicated APIs of HASH, HMAC, MGF, RSA, ECCP functionality were marked as deprecated. For more information see Deprecation notes
  • Added examples demonstrating usage of SMS4-CBC encryption and decryption.

Intel(R) IPP Cryptography 2020 Update 3

  • Refactoring of Crypto Multi buffer library, added build and installation of crypto_mb dynamic library and CPU features detection.
  • Added multi buffer implementation of AES-CFB optimized with Intel(R) AES New Instructions (Intel(R) AES-NI) and vector extensions of Intel(R) AES New Instructions (Intel(R) AES-NI) instruction sets.
  • Fixed compatibility issue with x64 ABI (restored non-volatile registers after function call in Intel® Advanced Vector Extensions (Intel® AVX)/Intel® Advanced Vector Extensions 2 (Intel® AVX2) assembly code).
  • Updated Intel IPP Custom Library Tool.

Intel(R) IPP Cryptography 2020 Update 2

  • AES-GCM algorithm was optimized for Intel(R) Microarchitecture Code Named Cascade Lake with Intel(R) AES New Instructions (Intel(R) AES-NI).
  • Crypto Multi buffer library installation instructions update. The Readme file of Crypto Multi buffer Library was updated by information about possible installation fails in specific environment.
  • Position Independent Execution (PIE) option was added to Crypto Multi buffer Library build scripts.
  • AES-XTS optimization for Intel(R) Microarchitecture Code Named Ice Lake with vector extensions of Intel(R) AES New Instructions (Intel(R) AES-NI) was improved.
  • SM4-ECB, SM4-CBC and SM4-CTR were enabled for Intel(R) Microarchitecture Code Named Ice Lake with Intel(R) Advanced Vector Extensions 512 (Intel(R) AVX-512) GFNI instructions.
  • Added support of Clang 9.0 for Linux and Clang 11.0 for MacOS compilers.
  • Added example of RSA Multi Buffer Encryption/Decryption usage.
  • The library was enabled with Intel® Control-Flow Enforcement Technology (Intel® CET) on Linux and Windows.
  • Changed API of ippsGFpECSignDSA, ippsGFpECSignNR and ippsGFpECSignSM2 functions: const-ness requirement of private ephemeral keys is removed and now the ephemeral keys are cleaned up after signing.

Intel(R) IPP Cryptography 2020 Update 1

  • Added RSA IFMA Muti-buffer Library.
  • Added RSA PSS multi buffer signature generation and verification.
  • Added RSA PKCS#1 v1.5 multi buffer signature generation and verification.
  • Removed Android support. Use Linux libraries instead.
  • Fixed all build warnings for supported GCC* and MSVC* compilers.
  • Assembler sources were migrated to NASM* assembler.

Intel(R) IPP Cryptography 2020

  • Added RSA multi buffer encryption and decryption.
  • Added Intel(R) IPP Cryptography library examples: AES-CTR, RSA-OAEP, RSA-PSS.
  • Fixed code generation for kernel code model in Linux* Intel(R) 64 non-PIC builds.
  • Fixes in Intel IPP Custom Library Tool.
  • Added Microsoft* Visual Studio* 2019 build support.
  • A dynamic dispatcher library and a set of CPU-optimized dynamic libraries were replaced by a single merged dynamic library with an internal dispatcher.
  • Removed deprecated multi-threaded version of the library.
  • Removed Supplemental Streaming SIMD Extensions 3 (SSSE3) support on macOS.

Intel(R) IPP Cryptography 2019 Update 5

  • 1024, 2048, 3072 and 4096 bit RSA were enabled with AVX512 IFMA instructions.
  • AES-GCM was enabled with vector extensions of Intel(R) AES New Instructions (Intel(R) AES-NI).
  • AES-XTS was enabled with vector extensions of Intel(R) AES New Instructions (Intel(R) AES-NI).
  • Fixed GCC* and MSVC* builds of IA32 generic CPU code (pure C) with -DMERGED_BLD:BOOL=off option.
  • Added single-CPU headers generation.
  • Aligned structure of the build output directory across all supported operation systems.
  • AES-CFB was enabled with vector extensions of Intel(R) AES New Instructions (Intel(R) AES-NI).
  • ippsGFpECGetPointOctString and ippsGFpECSetPointOctString now support elliptic curves over both prime and extended finite fields.
  • Added the ability to build the Intel(R) IPP Cryptography library with GCC* 8.2.

Intel(R) IPP Cryptography 2019 Update 4

  • AES-ECB, AES-CBC and AES-CTR were enabled with vector extensions of Intel(R) AES New Instructions (Intel(R) AES-NI).
  • Improved optimization of Intel(R) AES-NI based CMAC.
  • Added the ippsGFpGetInfo function, which returns information about a finite field.
  • Added the ippsHashGetInfo_rmf function, which returns information about a hash algorithm.
  • Fixed selection of CPU-specific code in dynamic/shared libraries.

Intel(R) IPP Cryptography 2019 Update 3

  • Added the ability to build the Intel(R) IPP Cryptography library with the Intel(R) C++ Compiler 19.
  • Added Intel IPP Custom Library Tool based on Python.

Intel(R) IPP Cryptography 2019 Update 1

  • Added the ability to build the Intel(R) IPP Cryptography library with the Microsoft* Visual C++ Compiler 2017.
  • Added the new SM2 encryption scheme.
  • Changed the range of the message being signed or verified by EC and DLP.
  • Deprecated the ARCFour functionality.
  • Fixed a potential security problem in the signing functions over elliptic curves.
  • Fixed a potential security problem in the key expansion function for AES Encryption.
  • Fixed a potential security problem in the AES-CTR cipher functions.
  • Fixed a potential security problem in the AES-GCM cipher functions.
  • Fixed a potential security problem in the DLP signing and key generation functions.
  • Fixed minor issues with DLP functions.
  • Fixed some of the compilation warnings observed when building the static dispatcher on Windows* OS.

Intel is a trademark of Intel Corporation or its subsidiaries in the U.S. and/or other countries. * Other names and brands may be claimed as the property of others.