v2.1.2

• Fixed a memory corruption issue that caused p11rewrap to crash, when working on elliptic curve key pairs

v2.1.1

Bug bix: wrapping DES keys with PKCS#1 v1.5 algorithm bug corrected

v2.1.0

• support for Edwards curve based keys ( ED448 and ED25519 ), for all commands (closing issue #11).

v2.0.2

• include file lib/pkcs11_ossl.h to the source distribution (Issue #24)
• typo in documentation (Issue #24)
• compilation on older RedHat derivatives that use openssl11-dev instead of openssl-dev

v2.0.1

This patch release fixes a number of issues preventing to cross-compile the toolkit for Windows. The documentation related to cross-compiling has also been updated.

v2.0.0

The toolkit has reached v2.0. It features several major changes:

• it supports (and requires) OpenSSL v1.1.1+
• signing commands (p11mkcert, p11req and masqreq) implement OpenSSL algorithm methods. This will enable supporting more algorithms in the future.
• major overhaul of the wrapping/unwrapping system: it is now possible to perform double wrapping (aka enveloppe wrapping) with a single command, in a secure fashion
• p11keygen can now generate a session key and wrap it under one or several wrapping keys
• a new command, p11rewrap, allows to unwrap a key and immediately rewrap in under one or several wrapping keys, in a secure fashion.
• helper scripts greatly enhanced, to support also pkcs11-spy.so shim when executing a command.
• support for more HSMs and cryptographic tokens included

v1.2.0

Enhanced

• implemented CKA_AES_KEY_WRAP (rfc3394) and CKA_AES_KEY_WRAP_PAD (rfc5649)
• added support for Gemalto Safenet Luna HSM
• added flavour=nss parameter to rfc5649 algorithm, to identify non compliant RFC5649 implementation of NSS

Fixed

• fixed compilation warning on linux/debian 10 with gcc
• fixed issue that prevented cross-compilation to work, for mingw32

v1.1.0

• the build process can leverage pkg-config, when available
• the Git repository does not store generated source files anymore. It requires to execute bootstrap.sh before configure
• gnulibis now a submodule of the project
• PKCS11 version upgraded to v2.40, with the backport of EdDSA defines from v3.0
• enhanced installation documentation

v1.0.3

• Fix for token labels having maximum length (i.e. 32 characters) (Issue #7)

v1.0.2

Fix for Issue #1: cross-compilation fails when trying to detect optional header files.
Fixed in Pull Request #2