diff options
author | Justus Winter <justus@sequoia-pgp.org> | 2024-05-29 15:52:45 +0200 |
---|---|---|
committer | Justus Winter <justus@sequoia-pgp.org> | 2024-05-29 15:52:45 +0200 |
commit | e7f7361a9030e7b129e61d409b96bea92db2e60b (patch) | |
tree | a8b46dbea3dec3011d6645a4c37c7e7bb3ccb4c3 | |
parent | de071b7563234818da26190976f63886535e9c5f (diff) |
openpgp: Reorder NEWS.
-rw-r--r-- | openpgp/NEWS | 36 |
1 files changed, 18 insertions, 18 deletions
diff --git a/openpgp/NEWS b/openpgp/NEWS index 03616278..876d5b6f 100644 --- a/openpgp/NEWS +++ b/openpgp/NEWS @@ -5,7 +5,25 @@ * Changes in 1.21.0 +** Notable fixes + - Sequoia built with the OpenSSL backend or the RustCrypto backend + will now make sure that the secret primes of generated RSA keys + are ordered the way OpenPGP demands (i.e. `p` < `q`). + - Sequoia built with the OpenSSL backend, the CNG backend, or the + RustCrypto backend will now make sure that the secret primes of + imported RSA keys are ordered the way OpenPGP demands. + - Loosen trait bounds on Key::clone and Key4::clone. +** Notable changes + - All signature verification methods now take an immutable + reference to the signature. This will cause existing code to + emit warnings about unused mutability, but should not break + anything. + - Sequoia now lazily verifies self signatures in certificates. + Previously, they were eagerly verified during certificate + canonicalization, incurring a substantial cost even for + signatures that were not otherwise considered. ** New functionality + - CipherSuite::variants. - ComponentBundle::certifications2 - ComponentBundle::other_revocations2 - ComponentBundle::self_revocations2 @@ -18,29 +36,11 @@ curve P-384. - The RustCrypto backend now supports ECDH and ECDSA over the NIST curve P-521. - - CipherSuite::variants. -** Notable fixes - - Sequoia built with the OpenSSL backend or the RustCrypto backend - will now make sure that the secret primes of generated RSA keys - are ordered the way OpenPGP demands (i.e. `p` < `q`). - - Sequoia built with the OpenSSL backend, the CNG backend, or the - RustCrypto backend will now make sure that the secret primes of - imported RSA keys are ordered the way OpenPGP demands. - - Loosen trait bounds on Key::clone and Key4::clone. ** Deprecated functionality - ComponentBundle::certifications - ComponentBundle::other_revocations - ComponentBundle::self_revocations - ComponentBundle::self_signatures -** Notable changes - - All signature verification methods now take an immutable - reference to the signature. This will cause existing code to - emit warnings about unused mutability, but should not break - anything. - - Sequoia now lazily verifies self signatures in certificates. - Previously, they were eagerly verified during certificate - canonicalization, incurring a substantial cost even for - signatures that were not otherwise considered. * Changes in 1.20.0 ** New functionality - S2K::Implicit |