Release v1.6.0

• Disable 3DES by default

Release v1.1.0 FIPS

• Disable 3DES by default
• Upper bound number of x509 certificate policy tree nodes

Release v1.5.1

• Merge various upstream changes from BoringSSL
• Remove old Rust bindings that have been relocated (#850)
• KEM: fix key retrieval when public/secret key is missing (#855)
• Rename bssl to awslc, add version cmd (#865)
• Avoid potential for buffer overflow in SHA3 ARMv8 assembly (#863)

Release v1.5.0

• Allow RSA keys with d > n to be imported (#844)
• Support for PKCS#8 v2 encoding & decoding of Ed25519 and X25519 keys. (#828)
• Go tooling has been updated to use Go 1.20 release.
• Support for RSA keys without e component. (#814)

Release v1.4.0

• Fix for CVE-2023-0286
• Add a way to allow parsing RSA keys with d > n
• Add back ssl stat counters
• Fix timebomb by disabling time check in this test
• EVP PKCS#8 v2 Key Support for Ed25519 and X25519
• Key Encapsulation Mechanism (KEM) API
• Add SSH KDF to FIPS boundary
• Remove the 32 consecutive KeyUpdate limit for TLS 1.3
• Various build and CI features and fixes
• Various FIPS tool changes

Release v1.0.3 FIPS

• Fix for CVE-2023-0286
• Add AES128-SHA256 and ECDHE-RSA-AES128-SHA256 ciphers

Release: v1.3.0

Major changes since the last release (v.1.2.0):

• Add support to use a static or shared libcrypto when building consuming application or libraries
• Automatically link libjitterentropy.a into libcrypto.a for static builds so consuming libraries do not need to update their linker flags
• Add EVP_aead_aes_128_ccm_matter cipher

Release: v1.2.0

Major changes since the last release (v.1.1.0):

• Added additional EVP_CIPHER CFB ciphers.
• Added SHA3 and SHAKE implementation. Run-time enabling required.
• Added EVP_PKEY_HKDF support.
• Made EVP_CIPHER opaque.
• Added SSL_CTX_SET_ciphersuites support.
• Imported jitter entropy 3.4.0.
• Installing bssl tool by default.
• Bumped required cmake version to 3.0.
• Added awslc_api_version_num for getting api version number.
• Synced s2n-bignum.
• Added optimised md5 implementation for aarch64.
• Added stitched implementation for aes-cbc+hmac TLS ciphers.

Release v1.0.2

Changes from the previous release (v1.0.1):

• Allow FIPS integrity test to be run on-demand (#489)

Release: v1.1.0

Major changes since the last release (v.1.0.2):

• Import latest Jitter source code
• Optimized HMAC implementation
• Simplified benchmarking framework
• Android CI
• secp256k1 curve support
• Windows FIPS support
• AES-XTS optimization for aarch64 and x86_64
• P-384/521 s2n-bignum on Apple platforms
• AES128-SHA256 and ECDHE-RSA-AES128-SHA256