Skip to content

Commit 974ec53

Browse files
committed
update readme
1 parent e86a285 commit 974ec53

File tree

1 file changed

+18
-0
lines changed

1 file changed

+18
-0
lines changed

README.md

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -591,10 +591,17 @@ may not work with all asyncore.dispatcher subclasses.
591591
* fix compatibility issue with 8192 bit SRP group from RFC 5054
592592
* fix CVE-2018-1000159 - incorrect verification of MAC in MAC then Encrypt
593593
mode
594+
* workaround CVE-2020-26263 - Bleichenbacher oracle in RSA decryption.
595+
Please note that while the code was fortified, because of peculiarities of
596+
python, it's not possible to fully fix it. If you require resistance against
597+
side-channel attacks please use a different library.
594598
* fix Python_RSAKey multithreading support - performing private key operation
595599
in two threads at the same time could make all future calls return incorrect
596600
results
597601
* Python 3.7 support (`async` is now a keyword) (Pierre Ståhl)
602+
* Python 3.8 test suite compatibility
603+
* Python 3.9 support (slight changes in imaplib caused our wrapper to stop
604+
working)
598605
* Compatibility with M2Crypto on Python 3
599606
* fix Python 2 comaptibility issue with X.509 DER parsing (Erkki Vahala)
600607
* TLS 1.3
@@ -664,6 +671,17 @@ may not work with all asyncore.dispatcher subclasses.
664671
* add multiple well-known DH groups from RFC 2409, RFC 5114 and RFC 3526,
665672
unify formatting of the existing DH group (use exactly the formatting used
666673
in the RFC's)
674+
* add benchmarking tool for RSA (`scripts/speed.py`)
675+
* add support for gmpy2, use it and gmpy in more places for RSA calculations
676+
(minor speed up for RSA operations)
677+
* refactor certificate selection, make server select certificate based on
678+
curves and signature algorithms advertised by client (Ivan Nikolchev)
679+
* basic support for DSA certificates; not usable in TLS yet (Frantisek
680+
Krenzelok)
681+
* small optimisations to PRF methods, speeds to handshake
682+
* support for MD5 signatures in X.509 certificates (Jean-Romain Garnier)
683+
* add support for Brainpool curves in TLS 1.2 and earlier (pytz)
684+
667685
668686
0.7.0 - 2017-07-31
669687

0 commit comments

Comments
 (0)