SecApi-3.4.0

What's Changed

Major Features

• RFC for TA Key Provisioning by @mhabrat in #100
• Issue 105: Add support for sa_key_provision_ta() by @riwoh in #109
• Issue 117: Update RFC 0009 status codes returned by the sa_key_provis… by @mhabrat in #118

Bug Fixes

• Issue 95: Fix bug in process_common_encryption client layer by @ericeberry in #96
• Fix code compile issues. by @riwoh in #106
• Issue_119: Resolve OpenSSL 3.x.x unit test discrepancies. by @riwoh in #120

Minor Changes

• Issue 93: Add soc_key_container version 5 by @ericeberry in #94
• Added BUILD_TESTS option by @StefanBossbaly in #99
• Update SecAPI version number to prepare for 3.4.0 release by @riwoh in #121

New Contributors

• @StefanBossbaly made their first contribution in #99
• @mhabrat made their first contribution in #100

Full Changelog: SecApi-3.3.0...SecApi-3.4.0

SecApi-3.3.0

What's Changed

• Issue 86: 3.2.1 Code Cleanup by @ericeberry in #89
• Issue 87: Better support for hosts that are 64 bit and TAs that are … by @ericeberry in #90
• Issue 88: Create client slot per application instead of thread by @ericeberry in #91
• Prepare for 3.3.0 release by @ericeberry in #92

Full Changelog: SecApi-3.2.0...SecApi-3.3.0

SecApi-3.2.0

What's Changed

• Issue 36: Add client thread test by @ericeberry in #38
• Issue 35: Misc formatting fixes by @ericeberry in #39
• Issue 37: Disallow SVP input to crypto operations by @ericeberry in #40
• Issue 41: Add sa_import_parameters_soc parameter by @ericeberry in #42
• Issue 43: Better support for 64 bit architecture by @ericeberry in #44
• Issue 45: Fix copyright headers by @ericeberry in #46
• Issue 47: Fix integration with OpenSSL Engine by @ericeberry in #48
• Issue 58: Disable ENCRYPT and DECRYPT right from HMAC SocKeyContainer… by @ericeberry in #59
• Issue 51: Add RSA key generation as an optional feature by @ericeberry in #53
• Issue 54: Add support for SA_KDF_ALGORITHM_COMMON_ROOT_KEY_LADDER by @ericeberry in #55
• Issue 56: Fix sa_crypto_cipher_process_last processing by @ericeberry in #57
• Issue 15: Implement an OpenSSL 3 Provider by @ericeberry in #61
• Issue 60: Clean up new clang-tidy issues and fix doxygen output by @ericeberry in #62
• Issue 68: Add Github actions by @ericeberry in #69
• RFC 0004-isolate_integrator_modifications_via_porting_interfaces by @bsimondi in #63
• RFC 0005-integer_overflow_systematic_checks by @bsimondi in #64
• RFC 0006-hardening-against-toctou by @bsimondi in #65
• RFC 0008-ree_tee_boundary_simplification_and_hardening by @bsimondi in #67
• RFC 0007-hardening-memory-operations by @bsimondi in #66
• Issue 81: Reorganize RFC directory by @ericeberry in #82
• Issue 73: Implement RFC 0006-hardening-against-toctou by @ericeberry in #78
• Issue 71: Implement RFC 0004-isolate_integrator_modifications_via_porting_interfaces by @ericeberry in #76
• Issue 72: Implement RFC 0005-integer_overflow_systematic_checks by @ericeberry in #77
• Issue 74: Implement RFC 0007-hardening-memory-operations by @ericeberry in #79
• Issue 75: Implement RFC 0008-ree_tee_boundary_simplification_and_hardening by @ericeberry in #80
• Issue 15: Implement an OpenSSL 3 Provider by @ericeberry in #84
• Issue 60: Clean up new clang-tidy issues and fix doxygen output by @ericeberry in #85
• Issue 70: Provide standardized HAL documentation by @ericeberry in #83

New Contributors

• @bsimondi made their first contribution in #63

Full Changelog: SecApi-3.1.1...SecApi-3.2.0

SecApi-3.1.1

What's Changed

• Issue 22: Change internal interface to return sa_status instead of bool by @ericeberry in #23
• Issue 24: Update tests to check all keys for SA_STATUS_OPERATION_NOT_SUPPORTED by @ericeberry in #25
• Issue_26: Fix SOC KeyContainer and TypeJ KeyContainer Base64URLEncoding by @ericeberry in #28
• Issue 27: Process Common Encryption tests should execute in under 10 ms by @ericeberry in #29
• Issue 30: Update El Gamal unwrap test to vary offset by @ericeberry in #31
• Issue 30: Update El Gamal unwrap test to vary offset by @ericeberry in #32
• Issue 33: fix error with svp_copy by @ericeberry in #34

Full Changelog: SecApi-3.1.0...SecApi-3.1.1

SecApi-3.1.0

What's Changed

• Issue 2: Implement an engine to allow OpenSSL to invoke SecApi3 by @ericeberry in #7
• Issue 3: Fix TypeJ CMGSA right conversion by @ericeberry in #8
• Issue 4: Encapsulate root key in a PKCS12 container by @ericeberry in #10
• Issue 5: Add support for P-192 and P-224 curves by @ericeberry in #11
• Issue 6: Allow setting of digest and label for OAEP encryption and add CHACHA20 unwrap by @ericeberry in #12
• Issue 9: Standardize all private keys to OneAssymetricKey format and public keys to SubjectPublicKeyInfo format by @ericeberry in #14
• Issue 17: Allow setting of MGF1 digest for RSA PSS by @ericeberry in #19
• Issue 16: Modify sa_svp_buffer_copy and sa_svp_buffer_write to support multiple offsets by @ericeberry in #18
• Issue 20: Fix cipher when bytes_to_process is 0 by @ericeberry in #21

Full Changelog: https://github.com/rdkcentral/tasecureapi/commits/SecApi-3.1.0