1.3.0-RC0

1.3.0 - 2020-06-29

• C_CreateObject: Support for CKO_DATA objects only with CKA_PRIVATE set to CK_TRUE.
  Token defaults to CK_TRUE.
• Fix Tests against simulator that support RSA 3072 keys

1.1.1

1.1.1 - 2020-06-19

• test/pkcs-get-mechanism: allow a maximum key size of 3072 bits.

1.0.3

1.0.3 - 2020-06-15

• test/pkcs-get-mechanism: allow a maximum key size of 3072 bits.

1.1.1-RC0

1.1.1-RC0 - 2020-06-09

• test/pkcs-get-mechanism: allow a maximum key size of 3072 bits.

1.0.3-RC0

1.0.3-RC0 - 2020-06-09

• test/pkcs-get-mechanism: allow a maximum key size of 3072 bits.

1.0.2

1.0.2 - 2020-06-09

• Fix build issue about unused variable config. Notably fixes gcc10 builds.

1.0.2-RC0

1.0.2-RC0 - 2020-06-02

• Fix build issue about unused variable config. Notably fixes gcc10 builds.

1.2.0

1.2.0 - 2020-03-30

• Fix PSS signatures. Non-FIPS mode TPMs produce PSS signatures with a
  max salt len that poses interoperability issues with verifying clients,
  notably TLS in OpenSSL.
• Handle Esys_LoadExternal() API change where the hierarchy handle switches to an
  ESYS_TR rather than a TPM2_RH_.

1.2.0-RC0

1.2.0-RC0 - 2020-02-24

• Fix PSS signatures. Non-FIPS mode TPMs produce PSS signatures with a
  max salt len that poses interoperability issues with verifying clients,
  notably TLS in OpenSSL.
• Handle Esys_LoadExternal() API change where the hierarchy handle switches to an
  ESYS_TR rather than a TPM2_RH_.

1.1.0

1.1.0 - 2020-03-09

• DB Schema Change from 1 to 3.
  • Backup your DB before upgrading
• Support C_InitToken interface.
• Add Java PKCS11 Keystore support for RSA/ECB/RSAPKCS1.5
  via public encrypt and private decrypt.
• Decouple handles from db primary keys. Key handles are
  no longer stable between runs.
• tpm2_ptool objmod:
  • Support adding an attribute.
  • Fix bug in variable name vtype over type.
• C_Sign: support mechanism CKM_RSA_X_509.
• C_GetTokenInfo: add missing mechanism CKM_SHA512_RSA_PKCS.
• Fix store search logic to fail when TPM2_PKCS11_STORE cannot be accessed.
• Fix potential double free in token_free() logic.
• Fix -Werror=format-truncation with GCC >= 7 #415
• Fix unitialized variable warnings #416
• test: use release tarball vs source code.
• build: clean leftover file in make clean.
• release: add missing tests to tarball no matter configure options.
• test: fix invalid flags on CKM_SHA512_RSA_PKCS causing test failures.
• Switch OASIS pkcs11 headers to FSF Unlimited License Headers.