3.0.39

• SSH2: fix when keep alive packets are sent (#2009)
• SSH2: fix for undefined variable when logging is enabled (#2010 / #2011)

3.0.38

• BigInteger: EvalBarrett / Barrett could sometimes slow to a crawl (#1994)
• SSH2: fix bug that prevented RC4 and ChaCha20 from ever being used
• SSH2: SSH_MSG_EXT_INFO didn't work during key re-exchange (#2001, #2002)
• SSH2: improvements to timeout handling (#2006)
• System/SSH/Agent: reset supported_private_key_algorithms for every key (#1995)
• Composer: use paragonie/constant_time_encoding (#1998)
• Crypt/EC/Formats/PKCS8: fix Ed448 keys (#2003)

3.0.37

• SSH2: don't set stream timeout if timeout is 0 (#1986)

3.0.36

• BigInteger: put guardrails on isPrime() and randomPrime() (CVE-2024-27354)
• ASN1: limit OID length (CVE-2024-27355)
• EC: when using openssl to do signing use unencrypted key (#1979)
• SSH2: add different options to isConnected() (#1983)

2.0.47

• BigInteger: add getLength() and getLengthInBytes() methods
• BigInteger: put guardrails on isPrime() and randomPrime() (CVE-2024-27354)
• ASN1: limit OID length (CVE-2024-27355)

1.0.23

• BigInteger: add getLength() and getLengthInBytes() methods
• BigInteger: put guardrails on isPrime() and randomPrime() (CVE-2024-27354)
• ASN1: limit OID length (CVE-2024-27355)

3.0.35

• SSH2: implement terrapin attack countermeasures (#1972)
• SSH2: only capture login info once (#1970)
• Crypt/AsymmetricKey: loading hidden custom key plugins didn't work (#1971)

2.0.46

• SSH2: implement terrapin attack countermeasures (#1972)
• SSH2: only capture login info once (#1970)
• SSH2: add support for RFC8308 (#1960)
• Rijndael: fix for PHP 8.3+ compatability (#1944)
• Crypt/Base: improve ARM detection code (#1949)
• X509: fix for weird characters in subjaltname (#1943)

1.0.22

• SFTP: fix issue with get() downloading to files / streams (#1934)
• SFTP: fix SFTPv2 errors when logging errors (#1933)
• SSH2: implement terrapin attack countermeasures (#1972)
• SSH2: only capture login info once (#1970)
• SSH2: add support for RFC8308 (#1960)
• Rijndael: fix for PHP 8.3+ compatability (#1944)
• Crypt/Base: improve ARM detection code (#1949)
• X509: fix for weird characters in subjaltname (#1943)
• ASN1: fix string conversion code for 32-bit PHP installs (#1931)

3.0.34

• SSH2: add support for RFC8308 (#1960)
• SSH2: don't use AES GCM for TurboFTP Server (#1957)
• SSH2: reset more internal variables when connection is reset (#1961)
• PKCS8: PBES1 / RC2 and PBES2 / DES keys didn't work (#1958)
• EC/Signature/Format: add new IEEE format (#1956)
• Math/BigInteger/Engines/PHP: PHP 8.2.13+ fixes Windows JIT issue
• Math/BinaryField: fix for excessively large degrees (CVE-2023-49316)
• Math/PrimeField: fix occasional error with squareRoot method