228 lines
		
	
	
		
			7.2 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
			
		
		
	
	
			228 lines
		
	
	
		
			7.2 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
Changelog
 | 
						|
 | 
						|
2.2.0-pre (This version)
 | 
						|
 | 
						|
Major changes
 | 
						|
 | 
						|
All code has been reformatted to be consistent. A .clang-format file and format.sh script has been added that can be use to verify and enforce consistent formatting. An automated check on code formatting is now part of travis build.
 | 
						|
 | 
						|
Other changes
 | 
						|
 | 
						|
PR #409 - Compatibilty with LibreSSL
 | 
						|
 | 
						|
PR #406 - Fix unprotect when pktlen < (2*mki_size + tag_len)
 | 
						|
 | 
						|
PR #405 - Prevent potential double free
 | 
						|
 | 
						|
PR #404 - Add back extern to global variables
 | 
						|
 | 
						|
PR #403 - Set gcm IV directly with EVP_CipherInit_ex
 | 
						|
 | 
						|
PR #401 - Fix memory access issue in srtp_get_session_keys()
 | 
						|
 | 
						|
PR #398 - Fix memory access fixes when invalid profiles where used
 | 
						|
 | 
						|
PR #391 - Return NULL when allocating memory of size zero
 | 
						|
 | 
						|
PR #390 - Bitvector of length zero is not valid
 | 
						|
 | 
						|
PR #385 - Treat warnings as errors on travis builds
 | 
						|
 | 
						|
PR #388 - Moved externs from crypto_kernel into its own header
 | 
						|
 | 
						|
PR #379 - Fixed several compiler warnings from Firefox builds
 | 
						|
 | 
						|
PR #377 - Removed variable init code in rdbx which never gets used
 | 
						|
 | 
						|
PR #381 - Added error in case the platform is not detected
 | 
						|
 | 
						|
PR #376 - Add coverity scan to travis builds
 | 
						|
 | 
						|
PR #374 - Add a big endian build on travis
 | 
						|
 | 
						|
PR #373 - Fixed buffer size issue in test/srtp_driver.c
 | 
						|
 | 
						|
PR #372 - Make rtp_decoder compile on MinGW
 | 
						|
 | 
						|
PR #367 - Rename configure.in to configure.ac
 | 
						|
 | 
						|
PR #365 - Replace calls to free() with srtp_crypto_free()
 | 
						|
 | 
						|
PR #364 - Add valgrind to travis and fix leaks in tests
 | 
						|
 | 
						|
PR #363 - Change smtp_crypto_alloc to initialize memory to zero
 | 
						|
 | 
						|
PR #354 - Fix potential leak if cloning of stream fails
 | 
						|
 | 
						|
PR #340 - Fix potential leak in srtp_add_stream()
 | 
						|
 | 
						|
PR #323 - Fix running test in out of source builds
 | 
						|
 | 
						|
Issue #316  - Remove VERSION file
 | 
						|
 | 
						|
2.1.0
 | 
						|
 | 
						|
Compatibility changes
 | 
						|
 | 
						|
  PR #253 - Cipher type cleanup for AES
 | 
						|
    When libSRTP is compiled with OpenSSL and the AES 256 ICM cipher is used
 | 
						|
    with RTCP an incorrect initialization vector is formed.
 | 
						|
    This change will break backwards compatibility with older versions (1.5,
 | 
						|
    2.0) of libSRTP when using the AES 256 ICM cipher with OpenSSL for RTCP.
 | 
						|
 | 
						|
  PR #259 - Sequence number incorrectly masked for AES GCM IV
 | 
						|
    The initialization vector for AES GCM encryption was incorrectly formed on
 | 
						|
    little endian machines.
 | 
						|
    This change will break backwards compatibility with older versions (1.5,
 | 
						|
    2.0) of libSRTP when using the AES GCM cipher for RTCP.
 | 
						|
 | 
						|
  PR #287 - Fix OOB read in key generation for encrypted headers with GCM ciphers
 | 
						|
    Adds padding of GCM salt to the corresponding ICM length used for header
 | 
						|
    encryption.
 | 
						|
    This change will break backwards compatibility with version 2.0 of libSRTP
 | 
						|
    when using the header encryption extension with the AES GCM cipher.
 | 
						|
 | 
						|
Major changes
 | 
						|
 | 
						|
  PR #204 - OpenSSL performance improvements
 | 
						|
    Changed key expansion to occur once per key instead of once per packet.
 | 
						|
 | 
						|
  PR #209 - Restore AES-192 under BoringSSL
 | 
						|
    BoringSSL supports AES-192 and is now enabled in libSRTP.
 | 
						|
 | 
						|
  PR #224 - Master Key Identifiers (MKI) Support patch
 | 
						|
    Adds MKI support with up to 4 keys.
 | 
						|
 | 
						|
  PR #234 - Report SSRC instead of srtp_stream_t in srtp_event_data_t
 | 
						|
    srtp_stream_t is an opaque type making the event framework almost useless.
 | 
						|
    Now the SSRC is returned instead for use as a key in the public API.
 | 
						|
 | 
						|
  PR #238 - Configure changes and improvements
 | 
						|
    CFLAGS check more shell neutral, quotation fixes, always generate and
 | 
						|
    install pkg-config file, improved OpenSSL discovery and linking, remove
 | 
						|
    -fPIC flag on Windows, fix shared library generation under Cygwin, replace
 | 
						|
    hardcoded CFLAGS with compiler checks, and regenerate configure after
 | 
						|
    configure.in changes.
 | 
						|
 | 
						|
  PR #241 & PR #261 - Improved logging API to receive log messages from libSRTP
 | 
						|
    Provides a logging API and the ability to enable logging to stdout and a
 | 
						|
    file, as well as a switch to enable all internal debug modules.
 | 
						|
 | 
						|
  PR #289 - Added support for set and get the roll-over-counter
 | 
						|
    Adds an API to set and get the ROC in an (S)RTP session.
 | 
						|
 | 
						|
  PR #304 - Fix (S)RTP and (S)RTCP for big endian machines
 | 
						|
    The structures srtp_hdr_t, srtcp_hdr_t and srtcp_trailer_t were defined
 | 
						|
    incorrectly on big endian systems.
 | 
						|
 | 
						|
Other changes
 | 
						|
 | 
						|
  PR #149 - Don't create a symlink if there is no $(SHAREDLIBVERSION)
 | 
						|
 | 
						|
  PR #151 - Make srtp_driver compile for MIPS
 | 
						|
 | 
						|
  PR #160 - Use PKG_PROG_PKG_CONFIG to find correct pkg-config
 | 
						|
 | 
						|
  PR #167 - Additional RTCP and SRTCP tests
 | 
						|
 | 
						|
  PR #169 - Identified merge conflict created by commit 6b71fb9
 | 
						|
 | 
						|
  PR #173 - Avoid error 'possibly undefined macro: AM_PROG_AR'
 | 
						|
 | 
						|
  PR #174 - Avoid warning 'The macro AC_TRY_LINK is obsolete.'
 | 
						|
 | 
						|
  PR #175 - Remove 2nd -fPIC
 | 
						|
 | 
						|
  PR #182 - Add a length check before reading packet data
 | 
						|
 | 
						|
  PR #191 - On debug, output correct endianness of SSRC
 | 
						|
 | 
						|
  PR #192 - Replace octet_string_is_eq with a constant-time implementation
 | 
						|
 | 
						|
  PR #195 - Add missing __cplusplus header guards
 | 
						|
 | 
						|
  PR #198 - Update sha1_driver.c to avoid memory leaks
 | 
						|
 | 
						|
  PR #202 - Add an explicit cast to avoid a printf format warning on macOS
 | 
						|
 | 
						|
  PR #205 - Update Windows build files to Visual Studio 2015
 | 
						|
 | 
						|
  PR #207 - Fix to install-win.bat syntax, and add installation of x64 libraries
 | 
						|
 | 
						|
  PR #208 - Make replace_cipher and replace_auth public again
 | 
						|
 | 
						|
  PR #211 - Changes for OpenSSL 1.1.0 compatibility
 | 
						|
 | 
						|
  PR #213 - Add cast to `unsigned int` in call to printf in test
 | 
						|
 | 
						|
  PR #214 - Avoid empty initializer braces
 | 
						|
 | 
						|
  PR #222 - Fix issue: No consistency when use some srtp_* functions
 | 
						|
 | 
						|
  PR #231 - Advance version on master in preparation for 2.1 release
 | 
						|
 | 
						|
  PR #232 - Update Travis, do not build with OpenSSL on OSX
 | 
						|
 | 
						|
  PR #233 - crypto/replay/rdbx.c: Return type of srtp_index_guess from int to
 | 
						|
    int32_t
 | 
						|
 | 
						|
  PR #236 - test/rtp_decoder.c: Removed superfluous conditional
 | 
						|
 | 
						|
  PR #237 - test/rtp_decoder.c: spring cleaning
 | 
						|
 | 
						|
  PR #239 - octet_string_set_to_zero() delegates to OPENSSL_cleanse() if
 | 
						|
    available, if not it will use srtp_cleanse() to zero memory
 | 
						|
 | 
						|
  PR #243 - EKT is not really supported yet, remove from install
 | 
						|
 | 
						|
  PR #244 - Add simple error checking in timing test to avoid false results
 | 
						|
 | 
						|
  PR #245 - Add missing srtp_cipher_dealloc calls when test fails
 | 
						|
 | 
						|
  PR #246 - test/rtp_decoder: Add missing conditional
 | 
						|
 | 
						|
  PR #248 - New README.md that integrates intro, credits and references from
 | 
						|
    /doc/ and is used to generate documentation
 | 
						|
 | 
						|
  PR #249 - Remove support for generic aesicm from configure.in
 | 
						|
 | 
						|
  PR #250 - Update README.md, incorrect tag for link
 | 
						|
 | 
						|
  PR #255 - Cleanup outdated comment related to MKI
 | 
						|
 | 
						|
  PR #258 - Add AES-GCM to DTLS-SRTP Protection Profiles
 | 
						|
 | 
						|
  PR #263 - Cleaning up and removing duplicated and outdated code
 | 
						|
 | 
						|
  PR #265 - Introduction of unit test framework: CUTest
 | 
						|
 | 
						|
  PR #267 - crypto/kernel/err.c: Include datatypes.h
 | 
						|
 | 
						|
  PR #272 - Reduce literal constants
 | 
						|
 | 
						|
  PR #273 - SRTP AEAD SRTCP initialization vector regression tests
 | 
						|
 | 
						|
  PR #274 - Update Travis build - add ccache
 | 
						|
 | 
						|
  PR #276 - Reference and docs updates
 | 
						|
 | 
						|
  PR #278 - Removed crypto/test/auth_driver.c and test/lfsr.c
 | 
						|
 | 
						|
  PR #279 - Bump copyright year
 | 
						|
 | 
						|
  PR #283 - Add missing docs in srtp.h
 | 
						|
 | 
						|
  PR #284 - Add strict-prototypes warning if supported
 | 
						|
 | 
						|
  PR #291 - Use const char * for srtp_set_debug_module()
 | 
						|
 | 
						|
  PR #294 - Fix incorrect result of rdb_increment on overflow
 | 
						|
 | 
						|
  PR #300 - Standalone tests
 | 
						|
 | 
						|
  PR #301 - Configure fixes
 | 
						|
 | 
						|
  PR #302 - Fix warning regarding unused variable
 | 
						|
 | 
						|
  PR #303 - Makefile.in: Add gnu as match for shared lib suffix
 |