3.0.42

• X509: CRL version number wasn't correctly being saved (#2037)
• Hash: significantly speed up umac algorithms
• SSH2: fix possible infinite loop on packet timeout (#2031)
• SSH2: logging enhancements
• SSH2: identification strings > 255 bytes didnt get parsed correctly
• SSH2: if string is passed to setPreferredAlgorithms() treat it as array
• SSH2: update error message for people not connecting to SSH servers
• SFTP: add getSupportedExtensions(), statvfs() and posix_rename() methods (#2024)

3.0.41

• SFTP: fix deprecation warning (#2027)

3.0.40

• SSH2: fix for setTimeout(0) (#2023)
• SSH2: fix possible infinite loop on packet timeout
• SSH2/Agent: make it so identities include key comments (#2022)
• SSH2/Agent: add findIdentityByPublicKey() (#2022)
• EC: fix for IEEE signatures (#2019)
• BigInteger/BCMath: bitwise_or() was doing XOR (#2025)

3.0.39

• SSH2: fix when keep alive packets are sent (#2009)
• SSH2: fix for undefined variable when logging is enabled (#2010 / #2011)

3.0.38

• BigInteger: EvalBarrett / Barrett could sometimes slow to a crawl (#1994)
• SSH2: fix bug that prevented RC4 and ChaCha20 from ever being used
• SSH2: SSH_MSG_EXT_INFO didn't work during key re-exchange (#2001, #2002)
• SSH2: improvements to timeout handling (#2006)
• System/SSH/Agent: reset supported_private_key_algorithms for every key (#1995)
• Composer: use paragonie/constant_time_encoding (#1998)
• Crypt/EC/Formats/PKCS8: fix Ed448 keys (#2003)

3.0.37

• SSH2: don't set stream timeout if timeout is 0 (#1986)

3.0.36

• BigInteger: put guardrails on isPrime() and randomPrime() (CVE-2024-27354)
• ASN1: limit OID length (CVE-2024-27355)
• EC: when using openssl to do signing use unencrypted key (#1979)
• SSH2: add different options to isConnected() (#1983)

2.0.47

• BigInteger: add getLength() and getLengthInBytes() methods
• BigInteger: put guardrails on isPrime() and randomPrime() (CVE-2024-27354)
• ASN1: limit OID length (CVE-2024-27355)

1.0.23

• BigInteger: add getLength() and getLengthInBytes() methods
• BigInteger: put guardrails on isPrime() and randomPrime() (CVE-2024-27354)
• ASN1: limit OID length (CVE-2024-27355)

3.0.35

• SSH2: implement terrapin attack countermeasures (#1972)
• SSH2: only capture login info once (#1970)
• Crypt/AsymmetricKey: loading hidden custom key plugins didn't work (#1971)