Skip to content

Release v4.6.3
Compare
Choose a tag to compare
@cipherboy cipherboy released this 12 Feb 22:36
· 742 commits to master since this release
v4.6.3
8cab3e0
This commit was signed with the committer’s verified signature. The key has expired.
cipherboy Alexander Scheel
GPG key ID: C0D6C737D0003143
Expired
Learn about vigilant mode.

This version of JSS has a few enhancements over v4.6.2:

  • Support for NIST SP800-108 KBKDF
  • Various enhancements towards a SSLEngine implementation
  • Modernized exception constructors
  • Various reductions in memory leaks (with thanks to Code42)
  • Introduce jss.crypto.Policy to reflect local system crypto-policies.
    This allows callers of JSS to inquiry about, e.g., minimum RSA key
    sizes independent of platform.
  • Various enhancements to the build system

Note that this version of JSS is incompatible with NSS versions between
v3.47 and v3.50 inclusive. This is because moz-bz#1570501 introduced a
bug that wasn't caught and fixed until moz-bz#1611209. NSS versions
v3.46 and earlier will work but lack CMAC and KBKDF support, and NSS
versions v3.51 and later will work and have CMAC and KBKDF support.

Note that this means the value of PKCS11Constants.CKM_AES_CMAC and
CKM_AES_CMAC_GENERAL have also changed and thus differ from v4.6.2.
This also means that JSS v4.6.2 may not be compatible with NSS versions
after v3.50.

Thanks to everyone who contributed to this release!

Assets 2
Loading