8 Tarball uses vendoring, instead of @env{GOPATH} overriding.
9 As minimal Go version is 1.12 for a long time, it supports modules.
11 @anchor{Release 5.1.0}
13 @code{gost3410/KEK*} functions do not alter @code{ukm} argument.
14 It is safe to reuse now.
16 @anchor{Release 5.0.0}
18 Backward incompatible remove of excess misleading @code{gost3410.Mode}
19 from all related functions. Point/key sizes are determined by
20 looking at curve's parameters size.
22 @anchor{Release 4.3.0}
24 @strong{Fixed} nasty bug with Edwards curves using in 34.10-VKO
25 functions: curve's cofactor has not been used.
27 @anchor{Release 4.2.4}
29 @code{gost3410.PrivateKeyReverseDigest} reversed digests and
30 @code{PrivateKeyReverseDigestAndSignature} with also reversed signatures
31 signers appeared for convenience.
33 @anchor{Release 4.2.3}
35 Panic on all possible hash @code{Write} errors.
37 @anchor{Release 4.2.2}
39 More 34.10-2012 test vectors.
41 @anchor{Release 4.2.1}
43 Dummy release. More nicer tarballs.
45 @anchor{Release 4.2.0}
48 @item @code{PRF_IPSEC_PRFPLUS_GOSTR3411_2012_@{256,512@}} implementation
49 @item Generic @code{prf+} function (taken from IKEv2
50 (@url{https://tools.ietf.org/html/rfc5831.html, RFC 7296}))
53 @anchor{Release 4.1.0}
56 @item @code{ESPTREE}/@code{IKETREE} implementation
57 @item @code{CurveIdtc26gost34102012256paramSetB},
58 @code{CurveIdtc26gost34102012256paramSetC},
59 @code{CurveIdtc26gost34102012256paramSetD} curve aliases
60 @item Forbid any later GNU GPL version autousage
61 (project's licence now is GNU GPLv3 only)
62 @item Project now is @command{go get}-able and uses
63 @code{go.cypherpunks.ru} namespace:
64 @command{go get go.cypherpunks.ru/gogost},
65 @command{go get go.cypherpunks.ru/gogost/cmd/streebog@{256,512@}}
71 @item Backward incompatible change: all keys passing to encryption
72 functions are slices now, not the fixed arrays. That heavily
73 simplifies the library usage
74 @item Fix bug with overwriting IVs memory in @code{gost28147.CFB*crypter}
75 @item @code{TLSTREE}, used in TLS 1.[23], implementation
76 @item @code{gost3410.KEK2012*} can be used with any curves, not only 512-bit ones
77 @item @code{gost3410.PrivateKey} satisfies @code{crypto.Signer} interface
78 @item @code{gost34112012*} hashes satisfy @code{encoding.Binary(Un)Marshaler}
79 @item Streebog256 HKDF test vectors
85 @item Multilinear Galois Mode (MGM) block cipher mode for
86 64 and 128 bit ciphers
87 @item @code{KDF_GOSTR3411_2012_256} KDF
88 @item 34.12-2015 64-bit block cipher Магма (Magma)
89 @item Additional EAC 28147-89 Sbox
90 @item 34.10-2012 TC26 twisted Edwards curve related parameters
91 @item Coordinates conversion from twisted Edwards to Weierstrass
93 @item Fixed @code{gost3410.PrivateKey}'s length validation
94 @item Backward incompatible change: @code{gost3410.NewCurve} takes
95 @code{big.Int}, instead of encoded integers
96 @item Backward incompatible Sbox and curves parameters renaming, to
97 comply with OIDs identifying them:
99 Gost2814789_TestParamSet -> SboxIdGost2814789TestParamSet
100 Gost28147_CryptoProParamSetA -> SboxIdGost2814789CryptoProAParamSet
101 Gost28147_CryptoProParamSetB -> SboxIdGost2814789CryptoProBParamSet
102 Gost28147_CryptoProParamSetC -> SboxIdGost2814789CryptoProCParamSet
103 Gost28147_CryptoProParamSetD -> SboxIdGost2814789CryptoProDParamSet
104 GostR3411_94_TestParamSet -> SboxIdGostR341194TestParamSet
105 Gost28147_tc26_ParamZ -> SboxIdtc26gost28147paramZ
106 GostR3411_94_CryptoProParamSet -> SboxIdGostR341194CryptoProParamSet
107 EACParamSet -> SboxEACParamSet
109 CurveParamsGostR34102001cc -> CurveGostR34102001ParamSetcc
110 CurveParamsGostR34102001Test -> CurveIdGostR34102001TestParamSet
111 CurveParamsGostR34102001CryptoProA -> CurveIdGostR34102001CryptoProAParamSet
112 CurveParamsGostR34102001CryptoProB -> CurveIdGostR34102001CryptoProBParamSet
113 CurveParamsGostR34102001CryptoProC -> CurveIdGostR34102001CryptoProCParamSet
114 CurveParamsGostR34102001CryptoProXchA -> CurveIdGostR34102001CryptoProXchAParamSet
115 CurveParamsGostR34102001CryptoProXchB -> CurveIdGostR34102001CryptoProXchBParamSet
116 CurveParamsGostR34102012TC26ParamSetA -> CurveIdtc26gost341012512paramSetA
117 CurveParamsGostR34102012TC26ParamSetB -> CurveIdtc26gost341012512paramSetB
119 @item Various additional test vectors
120 @item go modules friendliness
126 @item 34.11-2012 is split on two different modules:
127 @code{gost34112012256} and @code{gost34112012512}
128 @item 34.11-94's digest is reversed. Now it is compatible with TC26's
129 HMAC and PBKDF2 test vectors
130 @item @code{gogost-streebog} is split to @code{streebog256} and
131 @code{streebog512} correspondingly by analogy with sha* utilities
132 @item added VKO 34.10-2012 support with corresponding test vectors
133 @item @code{gost3410.DigestSizeX} is renamed to
134 @code{gost3410.ModeX} because it is not related to digest size,
135 but parameters and key sizes
136 @item KEK functions take @code{big.Int} UKM value. Use @code{NewUKM}
137 to unmarshal raw binary UKM
143 @item gogost-streebog is able to use either 256 or 512 bits digest size
144 @item 34.13-2015 padding methods
145 @item 28147-89 CBC mode of operation