TLS-Attacker 3.7.2

Fixes log4shell

TLS-Attacker 3.7.1

Fixed certificates

TLS-Attacker 3.7.0

Lots of minor improvements
Fix for NPE's that can occur during fuzzing with TLS-Attacker.
Fixed a bug that caused handshakes to fail with x448 and x25519 for servers
Fixed SKE signature generation for non-SECP256R1 ECDH handshakes
Updated Autoformatter & re-Formatted everthing
Implemented HRR for TLS 1.3
Added KeyUpdate
Removed PrettyPrinter for XML
Reworked Transport Module
Refactored ALPN Code
Added Dynamic Renegotiation WorkflowTraceType
Updated Readme
Fixed a bug where TLS-Attacker would write the signature length in anon cipher suites into SKE messages
Fixed a bug in the socket state determination
Added flag for CCS encryption in TLS 1.3
Added a flag to keep server sequence numbers (ccs)
Updated SCT code
Made XSD validation optional
Fixed chacha draft cipher suites
Fixed an infinite loop with f2m curves
Fixed CipherState reset in StreamCiphers
Implemented CookieExtension
Added serialisation possibilities for messages and actions

TLS-Attacker 3.6.0

Java 11 support
Fixed flaw in signature and hash algorithm selection
Improved automatic Certificate selection
Updated Invalid Curve Attacker
Fixed createPointOnCurve for Secp224
Added createPointOnCurve for F2m curves
Added Constants for explicit elliptic curves
TLS 1.3 handshakes now correctly set the named group
Removed TLS 1.3 draft versions
Improved Timing Measurement code
Fixed a lot of flaws/exceptions which can occur if you do completely random modifications
Streamlined API's
Improved Starttls integration
Improved ESNI support
Changed alertLevel and description to enums in the config
Integrated OCSP support

TLS-Attacker 3.5.0

• Fixes in TLS 1.3 implementation
• Removed TLS 1.3 draft version
• Fixed lots of smallish bugs with very invalid messages found during fuzzing
• Fixed an infinite loop when using TlsAttackerSocket with large amounts of data
• Added first draft of TLS 1.3 client authentication

TLS-Attacker 3.0b

The exact development version of TLS-Attacker used in the paper:
"Analysis of DTLS Implementations Using Protocol State Fuzzing"

TLS-Attacker 3.4.0

-improved invalid curve attacker (now also with twist support)
-certificate delegate now also supports .pem files
-fixed some bugs

TLS-Attacker 3.3.1

Fixed a NullPointerException in the InvalidCurveAttacker
Fixed a Bug which affects the BouncyCastleProviderChecker in some ClassLoader setups

TLS-Attacker 3.3.0

• Bug fixes
• New versioning scheme

TLS-Attacker 3.2

Contains only a minor "bug" fix in the HeartbleedAttacker to make it work dynamically, even if the default ciphersuite is not supported by the server