* [RELEASE CANDIDATE] tpm2-openssl 1.3.0-rc0
@ 2025-01-08 21:36 Petr Gotthard
2026-04-19 13:56 ` [RELEASE CANDIDATE] tpm2-openssl 1.3.1-rc0 Petr Gotthard
0 siblings, 1 reply; 2+ messages in thread
From: Petr Gotthard @ 2025-01-08 21:36 UTC (permalink / raw)
To: tpm2
Hello,
I would like to announce the release of tpm2-openssl 1.3.0-rc0: https://github.com/tpm2-software/tpm2-openssl/releases/tag/1.3.0-rc0
This is a feature release with few new functions, but most notably it should work in multi-thread and multi-process applications.
Added
- Added support for RSA-OAEP decryption.
- Added 'xof' and 'algid-absent' parameters to digests.
- Added Parent to textual information printed by 'openssl pkey -text'.
Fixed
- Fixed multi-threaded operation, preventing the 'Esys called in bad sequence' errors (thanks to @Danigaralfo, @famez, and @AndreasFuchsTPM).
- Fixed retrieval of OSSL_PKEY_PARAM_MAX_SIZE for RSA keys. The exact value is returned instead of a fixed TPM2_MAX_RSA_KEY_BYTES.
- Fixed handling of absent emptyAuth value in the TSS2 PRIVATE KEY file.
- Set authorization value of newly generated keys. This allows users of the C API to direcly use just generated EVP_PKEY.
Kind Regards,
Petr
^ permalink raw reply [flat|nested] 2+ messages in thread
* [RELEASE CANDIDATE] tpm2-openssl 1.3.1-rc0
2025-01-08 21:36 [RELEASE CANDIDATE] tpm2-openssl 1.3.0-rc0 Petr Gotthard
@ 2026-04-19 13:56 ` Petr Gotthard
0 siblings, 0 replies; 2+ messages in thread
From: Petr Gotthard @ 2026-04-19 13:56 UTC (permalink / raw)
To: tpm2
Hello,
I would like to announce the release of tpm2-openssl 1.3.1-rc0: https://github.com/tpm2-software/tpm2-openssl/releases/tag/1.3.1-rc0
This is a bugfix release:
- Fixed compatibility with OpenSSL 4.0.
- Fixed the ECDSA signature algorithm to omit the parameters field (thanks to @smhmeier).
- Fixed cipher padding validation according to PKCS#5/PKCS#7, so zero padding is now rejected (thanks to @hyperfinitism).
- Fixed buffer indexing for block ciphers without padding (thanks to @hyperfinitism).
- Fixed cleansing of sensitive data upon buffer deallocation and fixed buffer allocator consistency (thanks to @hyperfinitism).
- Fixed missing NULL checks and harmless type cast errors in RSA and ECDSA algorithms (thanks to @hyperfinitism).
- Fixed semaphore destruction (thanks to @Deadolus).
Kind Regards,
Petr
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2026-04-19 13:58 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2025-01-08 21:36 [RELEASE CANDIDATE] tpm2-openssl 1.3.0-rc0 Petr Gotthard
2026-04-19 13:56 ` [RELEASE CANDIDATE] tpm2-openssl 1.3.1-rc0 Petr Gotthard
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox