diff --git a/ChangeLog.md b/ChangeLog.md index 37b13768e..b9c869f42 100644 --- a/ChangeLog.md +++ b/ChangeLog.md @@ -1,3 +1,30 @@ +# wolfHSM Release v1.3.0 (October 24, 2025) + +Due to NDA restrictions, access to the Infineon, ST Micro, TI, and Renesas ports is limited. Please contact [support@wolfssl.com](mailto:support@wolfssl.com) for access. + +## New Feature Additions +* Introduced key wrap client/server APIs with demos and tests in https://github.com/wolfSSL/wolfHSM/pull/157 and https://github.com/wolfSSL/wolfHSM/pull/185 +* Added HKDF key derivation with cached-key reuse support in https://github.com/wolfSSL/wolfHSM/pull/204 and https://github.com/wolfSSL/wolfHSM/pull/211 +* Added image manager module for authenticated firmware handling in https://github.com/wolfSSL/wolfHSM/pull/129 +* Added non-exportable object support and basic NVM access controls in https://github.com/wolfSSL/wolfHSM/pull/147 +* Added flash-log based NVM backend for large write granularities in https://github.com/wolfSSL/wolfHSM/pull/179 +* Added SHA-224/384/512 crypto support across client and server in https://github.com/wolfSSL/wolfHSM/pull/144 +* Expanded DMA coverage to AES-GCM, RNG seeding, and shared-memory offset transfers in https://github.com/wolfSSL/wolfHSM/pull/158, https://github.com/wolfSSL/wolfHSM/pull/213, and https://github.com/wolfSSL/wolfHSM/commit/36862ce7e6829c3f996345cad880fdfe516d751f + +## Bug Fixes +* Enforced NVM object boundaries during reads in https://github.com/wolfSSL/wolfHSM/pull/182 +* Prevented stale data reads from erased flash pages in https://github.com/wolfSSL/wolfHSM/pull/181 +* Corrected NVM flash state handling when recovery is required in https://github.com/wolfSSL/wolfHSM/pull/175 +* Fixed AES-CTR temporary buffer sizing in https://github.com/wolfSSL/wolfHSM/pull/183 +* Restored AES-GCM DMA post-write callbacks and optional output handling in https://github.com/wolfSSL/wolfHSM/pull/215 and https://github.com/wolfSSL/wolfHSM/pull/221 +* Fixed POSIX TCP socket error handling in https://github.com/wolfSSL/wolfHSM/pull/203 + +## Enhancements and Optimizations +* Added GitHub Action based code coverage reporting in https://github.com/wolfSSL/wolfHSM/pull/201 +* Added clang-format and clang-tidy automation in https://github.com/wolfSSL/wolfHSM/pull/176 and https://github.com/wolfSSL/wolfHSM/pull/167 +* Added ASAN configuration to example builds and CI workflows in https://github.com/wolfSSL/wolfHSM/pull/218 +* Improved benchmark tooling and shared memory transport configurability in https://github.com/wolfSSL/wolfHSM/pull/158 + # wolfHSM Release v1.2.0 (June 27, 2025) Due to NDA restrictions, access to the Infineon, ST Micro, and Renesas ports is limited. Please contact [support@wolfssl.com](mailto:support@wolfssl.com) for access. @@ -64,4 +91,3 @@ Initial release after internal and early evaluator testing. Due to NDA restricti ## Enhancements and Optimizations * Reduction in static server memory requirements * Hardware offload for AURIX and ST C3 modules -