Skip to content

v5.3.0-beta.3

Pre-release
Pre-release

Choose a tag to compare

@bytedreamer bytedreamer released this 12 Nov 16:42
· 0 commits to main since this release

Third beta of the browser (WebAssembly) support. It replaces v5.3.0-beta.2, which failed code inspection in CI, so its packages were never published.

Changes since v5.3.0-beta.1

Security

  • The ACU now picks a new RND.A after a failed secure channel handshake. It used to send the same RND.A in every retry, so each retry derived the same session keys. The session is now reset when osdp_CCRYPT is rejected for an invalid payload, a key type mismatch or a bad client cryptogram, and when the PD rejects the server cryptogram in osdp_RMAC_I. (#217)
  • RND.A (ACU) and RND.B (PD) now come from a cryptographic random number generator (BouncyCastle SecureRandom) instead of System.Random, which on .NET Framework is seeded from the tick count. (#217)

Fixes

  • The ACU now throws away a stale reply instead of taking it as the reply to the next command. This stops the secure channel handshake from failing after a reconnect.
  • osdpcap timestamps are now parsed with the invariant culture.
  • Trace text, line quality report timings and timestamped capture file names are now formatted with the invariant culture, so they read the same on every machine.

Build

  • Code inspection passes with ReSharper 2026.3.

This is a pre-release. To install it, use dotnet add package OSDP.Net --prerelease (or --version 5.3.0-beta.3).