Release: v1.3.55

Weekly release for October 17 2023

What's Changed

• Run clang-format by @goatgoose in #4238
• bindings: release 0.0.39 by @goatgoose in #4235
• feat: Processes post-handshake messages for quic by @maddeleine in #4218
• chore: pin dependency to fix rust MSRV issues by @toidiu in #4243
• feat: Turns off automatic ticket creation for quic by @maddeleine in #4239
• Switch sig schemes from copies to references by @lrstewart in #4237
• Add new PQ TLS 1.3 policies by @WillChilds-Klein in #4247

Full Changelog: v1.3.54...v1.3.55

Release: v1.3.54

What's Changed

• Add an API for TLS 1.3 exporter by @Mark-Simulacrum in #4230
• ci: add ktls + asan build by @lrstewart in #4213
• ktls: forbid renegotiation by @lrstewart in #4229
• ktls: support aes256 by @lrstewart in #4227

New Contributors

• @Mark-Simulacrum made their first contribution in #4230

Full Changelog: v1.3.53...v1.3.54

Release: v1.3.53

Weekly release for October 05 2023

What's Changed

• Authorize requests to GitHub API in Run CBMC proofs workflow by @qinheping in #4223
• overwrite the random state key only if initialized by @arielb1 in #4225
• ktls: make usable outside of tests by @lrstewart in #4232

New Contributors

• @qinheping made their first contribution in #4223

Full Changelog: v1.3.52...v1.3.53

Release: v1.3.52

Weekly release for Sept 25 2023

What's Changed

• ci: Add uemu test with ktls enabled by @lrstewart in #4190
• ktls: add sendfile by @lrstewart in #4186
• ci: Upgrade asan to catch use after scope by @lrstewart in #4192
• ci: run duvet when commits are merged into main branch by @toidiu in #4197
• ktls: self-talk tests for send by @lrstewart in #4189
• Reduce allocs in ktls app data send by @lrstewart in #4181
• ktls: recv alerts by @lrstewart in #4199
• bindings: release 0.0.38 by @goatgoose in #4196
• docs: add citations for alert behavior by @toidiu in #4198
• ktls: receive app data by @lrstewart in #4201
• Add asan support to cmake/nix by @lrstewart in #4194
• build: use feature probes for CLOEXEC by @camshaft in #4206
• docs: add rfc citations by @toidiu in #4202
• ktls: fix flaky test by @lrstewart in #4214
• Generalize io handling + add ktls EINTR handling by @lrstewart in #4203
• ktls: clean up enable by @lrstewart in #4212
• feat: send psk_ke_modes ext in first flight by @jmayclin in #4177
• feat: add s2n_strerror_source API by @camshaft in #4209
• docs: generate citations meta data by @toidiu in #4205
• Add API to retrieve parsed supported groups by @goatgoose in #4216
• ktls: release APIs as unstable by @lrstewart in #4217

Full Changelog: v1.3.51...v1.3.52

Release: v1.3.51

Weekly release for September 11 2023

What's Changed

• bindings: release 0.0.37 by @goatgoose in #4172
• feat(benchmarks): add session resumption support by @jmayclin in #4173
• api :Add S2N_EXTENSION_SUPPORTED_VERSIONS as s2n_tls_extension_type by @raycoll in #4160
• Small sendv doc fix by @lrstewart in #4178
• ktls: send app data by @lrstewart in #4174
• Add testlib to track memory allocations by @lrstewart in #4180
• ci: buildspec for qemu ktls test by @dougch in #4175
• Allow CI to build with default libcrypto by @lrstewart in #4179
• ktls: send alerts by @lrstewart in #4185
• Commit buildspec for s2nGeneralBatch by @lrstewart in #4188
• Add API to disable certificate validity period validation by @goatgoose in #4183

Full Changelog: v1.3.50...v1.3.51

Release: v1.3.50

Weekly release for August 25 2023

What's Changed

• Adds resumption functions to Rust bindings by @maddeleine in #4114
• Make invalid chains available via get_client_cert_chain by @lrstewart in #4134
• Update blocked status documentation by @goatgoose in #4139
• bindings: release 0.0.36 by @goatgoose in #4145
• Use client_hello.parsed as precondition for retrieving client_hello by @raycoll in #4144
• Update historical benching graphs and readme by @tinzh in #4136
• Don't exit nix dev shell on integ test failure by @lrstewart in #4149
• kTLS: get and set control data on msghdr by @toidiu in #4146
• Call enable_session_tickets before adding a ticket key by @maddeleine in #4150
• refactor and cleanup some ktls code by @toidiu in #4152
• Fix s2n_ecdsa_secp521r1_sha512 + improve integ ECDSA coverage by @lrstewart in #4148
• kTLS: implement sendmsg by @toidiu in #4147
• Add cert validation callback by @goatgoose in #4156
• Fix clippy warnings by @goatgoose in #4166
• kTLS: implement recvmsg by @toidiu in #4154
• Publish cert validation callback APIs and add documentation by @goatgoose in #4161

Full Changelog: v1.3.49...v1.3.50

Release: v1.3.49

Weekly release for August 14 2023

What's Changed

• Refactor benching harness to separate out client and server connections by @tinzh in #4113
• bindings: release 0.0.35 by @goatgoose in #4122
• Change PR template formatting to be more consistent by @tinzh in #4116
• Move around and update scripts in bench crate by @tinzh in #4115
• Feature cleanup for bench crate by @tinzh in #4120
• ktls: self talk inet socket test by @toidiu in #4075
• Unnest loops over parameters in handshake bench by @tinzh in #4129
• Fix throughput bench issues and add documentation by @tinzh in #4130
• Add new Kyber768+ KEMs and security policy by @WillChilds-Klein in #4034
• Add flamegraph generation and reuse configs to benchmarks by @tinzh in #4128
• Add different parameters for memory benching by @tinzh in #4125
• Update build documentation by @goatgoose in #4126
• Prevent get_peer_cert_chain from modifying existing cert chain by @lrstewart in #4135
• Add additional Kyber768 tests by @WillChilds-Klein in #4089
• test: ensure s2n_recv blocked status behavior doesn't change by @camshaft in #4127
• ktls: mock send/recvmsg IO by @toidiu in #4109

Full Changelog: v1.3.48...v1.3.49

Release: v1.3.48

Weekly release for July 28 2023

What's Changed

• bindings: release 0.0.34 by @maddeleine in #4096
• nix: pin corretto version by @dougch in #4103
• Add historical performance benchmark by @tinzh in #4083
• Add memory bench with valgrind/massif by @tinzh in #4081
• Add different certificate signature algorithms to benchmarks by @tinzh in #4080
• fix: get_session behavior for TLS 1.3 by @jmayclin in #4104
• Trying to use an invalid ticket should not mutate state by @lrstewart in #4110
• ktls: set keys on socket and enable ktls by @toidiu in #4071
• Print error for 32bit test by @lrstewart in #4107

Full Changelog: v1.3.47...v1.3.48

Release: v1.3.47

Weekly release for July 14 2023

What's Changed

• Add KeyUpdate threading test by @lrstewart in #4059
• Add new CRT policies by @maddeleine in #4072
• nix: Skip the sslyze test on arm by @dougch in #4050
• fix: Add implicit gcc flag to all feature probes by @goatgoose in #4074
• Add openssl handshake to benchmarking by @tinzh in #4069
• bindings: release 0.0.33 by @goatgoose in #4076
• Fix openssl-1.0.2k x509 validator test failure by @lrstewart in #4084
• feat: introduce s2n_key_material for handling key material info by @toidiu in #4047
• Fix pthread key cleanup with musl libc by @lrstewart in #4085
• Add mTLS to benchmarks by @tinzh in #4079
• Add throughput benchmark by @tinzh in #4077
• ktls: config socket ULP by @toidiu in #4066
• Enable -wsign-compare check by @aditishri18 in #4061
• Generify Kyber files + functions over security parameters by @WillChilds-Klein in #4087
• Fix clippy warnings by @WillChilds-Klein in #4093
• Fix try_compile bug on gcc 4 by @maddeleine in #4091

Full Changelog: v1.3.46...v1.3.47

Release: v1.3.46

Weekly release for June 23 2023

What's Changed

• build: make feature flags consistent by @camshaft in #3921
• Fixes dynamic loading bug by @maddeleine in #4024
• bindings(rust): release 0.0.32 by @camshaft in #4032
• Refactor alerts to make behavior clear by @lrstewart in #4019
• ci: typos config file by @dougch in #4021
• Add pre-TLS13 libcrypto PRF implementation by @goatgoose in #4020
• fix: ossl3 legacy provider mem leak by @jmayclin in #4033
• nix devShell with aws-lc by @dougch in #4028
• Never send KeyUpdate message if <TLS1.3 by @lrstewart in #4038
• ci: allow running multiple integ tests at once in nix devshell by @dougch in #4029
• Add libcrypto HKDF implementation by @goatgoose in #4035
• Fixes pthread leak by @maddeleine in #4037
• Fix usage guide examples + enable testing of examples by @lrstewart in #4044
• feat: add checked return values diagnostic by @camshaft in #3798
• Add ThreadSanitizer by @lrstewart in #4046
• Update nix corretto; make it platform aware. by @dougch in #4043
• Fix TSAN s2n_shutdown failures by @lrstewart in #4055
• feat(bindings/s2n-tls): add ja-3 apis by @jmayclin in #4009
• s2n-tls handshake benchmark by @tinzh in #4053
• Validate PRK output size in the libcrypto HKDF implementation by @goatgoose in #4057
• remove kTLS feature probe by @toidiu in #4064
• Add rustls handshake to benchmarks by @tinzh in #4063
• Disable build flag for openssl102 nix aarch64-linux by @dougch in #4045
• Fixes broken link by @maddeleine in #4060
• bindings: do not enable OCSP when calling trust_location() by @WesleyRosenblum in #4016
• Create new KMS TLS Policy with TLSv1.2 Minimum by @alexw91 in #4068

Full Changelog: v1.3.45...v1.3.46