Release Notes

Changes 5
RSA BSAFE Micro Edition Suite 4.4 Release Notes
• DH key reuse in a TLS session is disabled by default. Reuse, and the maximum
number of times a DH key can be reused, can be set using
R_SSL_CTX_set_info() and R_SSL_CTX_INFO_KEY_USE_COUNT, for an
SSL context, or
R_SSL_set_info() and R_SSL_INFO_KEY_USE_COUNT, for
an SSL object.
For more information, see the RSA BSAFE Micro Edition Suite Developers Guide.
• The following TLS cipher suites are removed:
– Anonymous DH, anonymous EC DH, static DH, or static EC DH as the key
exchange algorithm
– RC4 as the encryption algorithm
– NULL encryption.
• The default TLS cipher suite list, as specified by
R_SSL_DEFAULT_CIPHER_LIST,
is changed. For more information, see TLS Operations > Cipher Suites in the
RSA BSAFE Micro Edition Suite Developers Guide.
• The default list of signature algorithms for TLS 1.2 is updated to provide greater
security. For more information, see TLS Operations > Cipher Suites > TLS 1.2
Signature Algorithms in the RSA BSAFE Micro Edition Suite Developers Guide.
• API namespaces are updated to achieve greater consistency with the rest of the
source code. For more information, see Library and Header File Changes >
Header File and Namespace Changes in the RSA BSAFE Micro Edition Suite
Migration Guide.
• The interface for the application-defined memory allocation functions is changed
for the
realloc() function to include a new argument that accepts the length of
the original buffer. Customer-defined memory allocator implementations must be
updated to conform to the new interface.
• Certificate requests updated to use extensions with data larger than 128 bytes.
• Packages for the Windows
®
operating system now include the Visual Studio
version used for compilation, instead of the Visual C++ version.
For example,
mes-4_4_0_0-win-x64-vs2005.pkg.
• For all packages the static library name has changed from
ccme_swprov to
mes_swprov.
• Library files for systems running an OS X or iOS operating system are provided
as ‘Fat Libraries’ instead of separate static and dynamic library files.
• An Installation Guide is no longer included in the documentation suite.
Installation instructions are incorporated into the Get started with MES section
of the RSA BSAFE Micro Edition Suite Developers Guide.
• For changes related to the usage of cryptographic primitives and the new FIPS
module, see RSA BSAFE Crypto-C Micro Edition Release Notes included with
this release.