[Opensc-announce] OpenSC 0.25.0 release candidate 1

[Veronika H. <vha...@re...>]

Hello all,


You can find a release candidate for OpenSC version 0.25.0 for testing

on Github:

https://github.com/OpenSC/OpenSC/releases/tag/0.25.0-rc1



The changes include removing the time side-channel leakage related
to RSA PKCS#1 v1.5 padding removal after decryption and new configuration

option for disabling PKCS#1 v1.5 depadding on the card. We also implemented

a fix for a potential memory security issue in the AuthentIC driver
discovered by OSS-Fuzz, added support for RSA D-Trust signature cards,
and removed support for some old card drivers.



For the full changelog, please refer to the NEWS file:

https://github.com/OpenSC/OpenSC/blob/master/NEWS


We are looking forward to your feedback, which we may discuss via this

mailing list or GitHub:

https://github.com/OpenSC/OpenSC/issues/3017


Advises for systematic testing can be found here:


https://github.com/OpenSC/OpenSC/wiki/Smart-Card-Release-Testing


We would like to release the final version in a few weeks.


Regards,

Veronika Hanulíková

and the OpenSC team