XML Security Library
XML Security Library is a C library based on
LibXML2.
The library supports major XML security standards:
XML Security Library is released under the
MIT Licence
see the Copyright file in the distribution for details.
News
- April 29 2010
Changes in XML Security Library 1.2.15 release:
- xmlsec-mscrypto: Added HMAC with MD5, SHA1, SHA256/384/512;
RSA with MD5, SHA256/384/512 support.
- xmlsec-mscrypto: Converted to Unicode (the non-Unicode builds are still available as compile time option).
- xmsec-nss: Added MD5 and SHA256/384/512 support for digest, HMAC
and RSA (the new minimum required version for NSS library is 3.9).
- xmlsec-gnutls: Added SHA256/384/512 for digest and HMAC;
MD5 and RIPEMD160 digests support (the new minimum required version for
GnuTLS library is 2.8.0).
- Fixed typo: "Copyrigth" should be "Copyright".
- Several critical bug fixes and code cleanups.
- December 5 2009
Changes in XML Security Library 1.2.14 release:
- XMLSec library is switched from built-in LTDL library to the system
LTDL library on Linux/Unix and native calls on Windows to fix
security
issue in LTDL.
- Fixed minor bugs (see log
for complete list).
- September 12 2009
Changes in XML Security Library 1.2.13 release:
-
LibXML2 version 2.7.4 is now required
- Implemented support for C14N version 1.1
- Increase default minimum hmac size to 80 bits
- Added support for --with-libxml-src and --with-libxslt-src ./configure options
- Fixed XML dump output
- July 14 2009
The new XML Security Library 1.2.12 release
includes the following changes (see ChangeLog for the complete list of changes):
- Fixed HMAC vulnerability with small values of HMAC length
(CERT VU #466161).
- Added support for the GOST implemented by Russian Crypto Pro CSP
(patch from Dennis Prochko)
- Added an option to return the replaced node (based on the patch from Frank Gross)
- Added new function xmlSecNodeEncodeAndSetContent for encoding
special chars in the node content.
- Added configurable Base64 line length.
- Bug fixes.
|