@@ -591,10 +591,17 @@ may not work with all asyncore.dispatcher subclasses.
591591* fix compatibility issue with 8192 bit SRP group from RFC 5054
592592* fix CVE-2018-1000159 - incorrect verification of MAC in MAC then Encrypt
593593 mode
594+ * workaround CVE-2020-26263 - Bleichenbacher oracle in RSA decryption.
595+ Please note that while the code was fortified, because of peculiarities of
596+ python, it's not possible to fully fix it. If you require resistance against
597+ side-channel attacks please use a different library.
594598* fix Python_RSAKey multithreading support - performing private key operation
595599 in two threads at the same time could make all future calls return incorrect
596600 results
597601* Python 3.7 support (`async` is now a keyword) (Pierre Ståhl)
602+ * Python 3.8 test suite compatibility
603+ * Python 3.9 support (slight changes in imaplib caused our wrapper to stop
604+ working)
598605* Compatibility with M2Crypto on Python 3
599606* fix Python 2 comaptibility issue with X.509 DER parsing (Erkki Vahala)
600607* TLS 1.3
@@ -664,6 +671,17 @@ may not work with all asyncore.dispatcher subclasses.
664671* add multiple well-known DH groups from RFC 2409, RFC 5114 and RFC 3526,
665672 unify formatting of the existing DH group (use exactly the formatting used
666673 in the RFC's)
674+ * add benchmarking tool for RSA (`scripts/speed.py`)
675+ * add support for gmpy2, use it and gmpy in more places for RSA calculations
676+ (minor speed up for RSA operations)
677+ * refactor certificate selection, make server select certificate based on
678+ curves and signature algorithms advertised by client (Ivan Nikolchev)
679+ * basic support for DSA certificates; not usable in TLS yet (Frantisek
680+ Krenzelok)
681+ * small optimisations to PRF methods, speeds to handshake
682+ * support for MD5 signatures in X.509 certificates (Jean-Romain Garnier)
683+ * add support for Brainpool curves in TLS 1.2 and earlier (pytz)
684+
667685
6686860.7.0 - 2017-07-31
669687
0 commit comments