GNU Transport Layer Security Library

This is an update to the current stable branch with several optimizations, including faster Diffie-Hellman and elliptic curve Diffie-Hellman key exchange.

This release fixes an issue in ECDSA key generation and reduces timing information provided to an adversary in DTLS.

This release fixes several issues on the elliptic curve cipher suites and a possible security issue in the session resumption code.

This stable release fixes bugs and adds new features. Support for VIA PadLock processors is enabled by default. Support for external signing was added in the abstract interface. TLS compression and TLS 1.2 signing with external callback were fixed.

This release fixes memory leaks in elliptic curves code and certificate handling. The RSA-EXPORT ciphersuite functionality is deprecated. Support has been added for generating keys in a PKCS #11 token. Support has been added for AES acceleration in VIA processors.