Skip to content

Releases: MicrochipTech/cryptoauthlib

Release v3.2.3 (20200912)

14 Sep 01:21
v3.2.3
70d082c
Compare
Choose a tag to compare

Fixes

  • Security patch for USB HALs. Removed deprecated HALs and removed enumeration from the hidapi HAL. Special thanks to Ruben Santamarta of IOActive for reporting
  • Fix device matching logic to support older kits when using "auto detect" settings in the interface configuration
  • Fix SPI HAL generation errors for SAMG55 & SAM71 (flexcom) devices
  • Added a timeout for Harmony I2C calls to prevent infinite loops on peripheral failures. If a loop exists inside the peripheral library then it may still cause processor spins until a watchdog reset.

Release v3.2.2 (20200728)

29 Jul 00:45
v3.2.2
1cb00de
Compare
Choose a tag to compare

New Features

  • ATECC608B support added

Fixes

  • Consistent null pointer checks between calib & talib apis. Tracing enabled for most all status changes
  • Fix for pkcs11 ecdh with the legacy slot write mode and encrypted read to pull the read key id from the correct slot (private key slot | 0x01)
  • call the proper api from atcab_init_ext so it works with device structures that are not the global instance

Release v3.2.1 (20200629)

29 Jun 15:56
v3.2.1
ce939a9
Compare
Choose a tag to compare

Improvements

  • PKCS11 configuration option to set token label to the device serial number

Fixes

  • Fix OSX CLANG macro error
  • Add missing c++ wrapper macros to calib_basic.h
  • Ensure atcab_init_ext calls atcab_release_ext rather than atcab_release

Release v3.2.0 (20200610)

12 Jun 16:24
v3.2.0
159d8b8
Compare
Choose a tag to compare
  • Extension of the existing API to support device context retention to allow
    multiple independent contexts to be maintained. The application still needs
    to ensure concurrency protections are used in the application to guard bus
    communication.
  • PKCS11 support has been moved into the main library and will be maintained
    together.
  • TNG/TFLEX support has been added to PKCS11 so enabling a TNG part in pkcs11
    can be done by specifying the part number: device = ATECC608A-TNGTLS
  • Several cryptographic library integrations have been added to enable
    additional host/mcu side functionality. This includes replacing cryptoauthlib
    software implementations of sha1 & sha256 with your preferred library. For
    example using WolfSSL in Harmony 3 will also enable hardware acceleration of
    those cryptographic functions. Cryptographic libraries enabled: WolfSSL,
    mbedTLS, & OpenSSL
  • Changes to atcacert ("compressed" certificate processing) to enable exact
    certificate size retrival which will help with some use cases that had issues
    with the max possible size answers.
  • Consolidation of HALs into device families rather than exact processor model
    This should reduce the amount of effort required to port the library to a
    specific platform if the framework is one that is already known.

v3.1.0 (20200205)

05 Feb 22:39
102d7fc
Compare
Choose a tag to compare
  • H3 Support (now can be included in any Harmony 3 Project)
  • Added compiler support for compilers:
    • IAR-ARM from IAR
    • ARMCC/Realview from ARM
  • Standardized delay HAL api so HAL's can define delay functions
    • Provides easier integration with RTOS functions. See FreeRTOS HAL
  • Configuration can be done completely through a configuration header
    • This is now the recommended method rather than using global defines in the compile command line
    • See readme.md for atca_config.h examples and atca_config.h.in for an existing template
  • Unified versioning so it is consistent between C and Python APIs
  • Bug fixes
    • Structures will no longer throw C++ anonymous union errors
    • Fix incorrect casts in encrypted read/write functions

Release 20191122

23 Nov 00:04
eabc052
Compare
Choose a tag to compare
  • Patches for CVE-2019-16128 & CVE-2019-16129: Ensure reported packet length is valid for the packet being processed.
  • Improvement to encrypted read operations to allow supply of a host nonce (prevent replay of a read sequence to the host). Default API is changed but can be reverted by setting the option ATCA_USE_CONSTANT_HOST_NONCE
  • Added Azure compatible TNGTLS and TNGLORA certificates. Use the TNG client API to retrieve the proper certificate based on the device.
  • Misc Python updates (updated APIs for encrypted reads to match the C-API change) atcacert_cert_element_t now initializes properly.

Release 20190830

30 Aug 22:36
7b39ad2
Compare
Choose a tag to compare
  • Adds support multiple devices over kit protocol
  • Adds big endian support
  • Bug fixes