update the version to 0.6.0-alpha3

README

@@ -5,16 +5,26 @@ It can use pycrypto, m2crypto and gmp for acceleration of cryptographic
 operations but is not dependant upon them.
 
 Functionality implemented include:
- - RC4, 3DES-CBC, AES-CBC and AES-GCM ciphers
- - MD5, SHA1, SHA256 and SHA384 HMACs as well as AEAD mode of operation
- - RSA and DHE_RSA key exchange
+ - all above mentioned protocols, including support for client certificates
+   (RFC 6101, RFC 2246, RFC 4346, RFC 5246)
+ - RC4, 3DES-CBC, AES-CBC, AES-GCM and ChaCha20 ciphers (RFC 5246, RFC 6347,
+   RFC 4492, RFC 5288, RFC 5289, RFC 7539)
+ - MD5, SHA1, SHA256 and SHA384 HMACs as well as AEAD mode of operation in GCM
+   or Poly1305 authenticator
+ - RSA, DHE_RSA and ECDHE_RSA key exchange
+ - full set of signature hashes (md5, sha1, sha224, sha256, sha384 and sha512)
+   for ServerKeyExchange and CertfificateVerify in TLS v1.2
+ - secp256r1, secp384r1, secp521r1, secp256k1, secp224r1 and secp192r1 curves
+   for ECDHE_RSA key exchange (support for last two depends on the version
+   of ecdsa library used)
  - anonymous DHE key exchange
+ - anonymous ECDH key exchange in client
  - NULL encryption ciphersuites
- - FALLBACK_SCSV
- - encrypt-then-MAC mode of operation for CBC ciphersuites
+ - FALLBACK_SCSV (RFC 7507)
+ - encrypt-then-MAC mode of operation for CBC ciphersuites (RFC 7366)
  - client certificates
  - TACK certificate pinning
- - SRP_SHA_RSA ciphersuites
+ - SRP_SHA_RSA and SRP_SHA ciphersuites (RFC 5054)
 
 tlslite-ng aims to be a drop-in replacement for tlslite while providing more
 comprehensive set of features and more secure defautls.

README.md

@@ -1,5 +1,5 @@
 ```
-tlslite-ng version 0.6.0-alpha2                                    2015-11-12
+tlslite-ng version 0.6.0-alpha3                                    2015-11-27
 Hubert Kario <hkario at redhat.com>
 https://github.com/tomato42/tlslite-ng/
 ```
@@ -523,6 +523,12 @@ encrypt-then-MAC mode for CBC ciphers.
 ===========
 
 0.6.0 - WIP
+ - abitlity to perform reverse lookups on many of the TLS type enumerations
+ - added ECDHE_RSA key exchange together with associated ciphersuites
+ - refactor key exchange code to remove duplication and make adding new methods
+   easier
+ - add support for all hashes for ServerKeyExchange and CertificateVerify
+   messages in TLS 1.2
  - mark library as compatible with Python 3.5 (it was previously, but now
    it is verified with Continous Integration)
  - small cleanups and more documentation

setup.py

@@ -8,7 +8,7 @@
 
 
 setup(name="tlslite-ng",
-      version="0.6.0-alpha2",
+      version="0.6.0-alpha3",
       author="Hubert Kario",
       author_email="hkario@redhat.com",
       url="https://github.com/tomato42/tlslite-ng",

tlslite/__init__.py

@@ -21,7 +21,7 @@
 Then use the L{tlslite.TLSConnection.TLSConnection} class with a socket.
 (Or, use one of the integration classes in L{tlslite.integration}).
 
-@version: 0.6.0-alpha2
+@version: 0.6.0-alpha3
 """
 
 from tlslite.api import *

tlslite/api.py

@@ -1,7 +1,7 @@
 # Author: Trevor Perrin
 # See the LICENSE file for legal information regarding use of this file.
 
-__version__ = "0.6.0-alpha2"
+__version__ = "0.6.0-alpha3"
 from .constants import AlertLevel, AlertDescription, Fault
 from .errors import *
 from .checker import Checker