Version 4.6.1

New Features:

Exposed more authenticated encryption modes (CCM, OCB, SIV).
Added "Set Key Derivation" to symetric API to allow the user to define custom derivations parameters.
Added "Set Tag Length" to symetric API to allow custom tag lengths.

Bug Fixes:

Bug Fix: Fixed crash when non AEAD algorithms selected and Tag or AEAD text supplied.
Bug Fix: Fixed some VI descriptions.

Changes:

Changes: Updated Example Symmetric AEAD to enable user to choose algorithm.
Changes: Default symmetric derivation algorithm changed from SHA1 to SHA3-512 for improved security.

Version 4.6.0

New Features:

Added new "Socket" API to enable users' custom protocols without encryption. See examples.
Added authenticated encryption and example.
Added a "Reference" to HTTP POST/GET and Socket READ/WRITE so that requests can be matched with responses in events.
Added "Get Peer Certificate Chain" to view the list of certificates sent by the peer (if any) and updated Example HTTP Certificate Inspector.vi.
Added "SHAKE.vi" to HASH API. SHAKE.VI caters for variable length outputs. The standard SHAKE128 and SHAKE256 list in SHA output 16 and 32 bytes respectively to be backwards compatible.
Added "Set XOF Length.vi" to Incremental Hash API. Allows variable length hashes for SHAKE algorithms. NOP for other algorithms.
Added Encoder and decoder for Base64 URL.
Added "Example En-Decrypt Events.vi" to demonstrate using events with symmetric encryption.
Added RSA function Set Public Key[HEX].vi.
Der2PEM, PEM2Der now supports X.509 certificate conversion.
OpenSSL PEM to OpenSSH PEM conversion.

Bug Fixes:

Fixed SFTP example not creating and deleting Symlinks.
Fixed Get Session's Remote Connection IP address not being populated when using IPv6 address.

Changes:

"Follow Redirects" in the HTTP API: The default value is now TRUE instead of FALSE.
EC and ED Signatures now no longer hash the data before creating a signature to increase interoperability with other languages. To reproduce old behaviour, hash the data before signing.
Follow Redirects for HTTP functions is now part of a cluster (with Reference) which will break backward compatability.
Renamed "TLS version" to "Protocol Version" and made the control a typedef.
Added ASCII Hex string indicator to RandBytes and set the default number of bytes to 16 (NIST target for secure number of bytes).
Updated documentation to include Coordinated Vulnerability Disclosure statements.
Updated OpenSSL binaries to 3.6.1.
Updated OpenSSH binary to 11.3

Version 4.5.1

Bug Fixes:

Fixed crash when the TLS "Close.vi" is called multiple times on the same connection when session wire is split.
Fixed CFLN parameter misconfiguration in WSA Format Message.vi
Fixed Symetric encryption returning error -15000 (Null CTX) when encrypting large files.

Version 4.5.0

New Features:

Added CoAP protocol support.
Added LabVIEW Timestamps to x509 function "Get Cert Dates.vi".
Added "Set Local Address.vi" so that a specific adapter can be defined for multi-adapter systems.

Bug Fixes:

"Error 1556 occurred at Delete Data Value Reference" when using unencrypted (HTTP) connections.
Hash function Free.vi changed to re-entrant.
64 bit srsslinit.dll windows file information was showing 32 bit details.
Now follows HTTP 307 redirect when redirect is enabled.
Fixed some numeric sign mismatches in socket API.
Fixed VIPM uninstall error.

Changes:

Can now use coap[s] and mqtt[s] resource locations in URL's.
Re-issued example certificates and increased expiry date. LVS-Tools Websocket test server will no longer accept the old certificates.
MQTT wire colour changed to green to match icon palette (no functional change).
Up issued OpenSSL binaries to 3.3.0

Version 4.4.0

New Features:

Added DTLS protocol support and updated Client/Server examples to demonstrate.
Added PSK support and examples to demonstrate.
Added utility function (Get Enabled ciphers.vi) to get the ciphers that are enabled for a session.
Added utility function (Get client Connection.vi) to get a clients address and port number.

Bug Fixes:

Fixed VI descriptions on Certificate Inspector examples (file and HTTP).
Fixed "Get Connection Info" giving erroneous results and incorrect description.

Changes:

Removed Depricated "New.vi" from SSL library.
Up issued OpenSSL binaries to 3.1.1

Version 4.3.0

New Features:

Added MQTT protocol support and examples.

Changes:

Up issued OpenSSL binaries to 3.1.0

Version 4.2.0

New Features:

Added HTTP events and updated examples to demonstrate.
Added Ping (ICMP Echo) functionality.

Bug Fixes:

Fixed incorrect calling convention in two setsockopt functions.

Changes:

Increased buffer size for symetric encryption to significantly increase performance.
Applied FASTLOOPBACK to TCP for improved localhost performance.
Up issued OpenSSL binaries to 3.0.7

Version 4.1.1

New Features:

Exposed the Owner ID and Group ID in SFTP Stat and updated SFTP Example.

Bug Fixes:

Fixed HTTP hanging when retrieving web page with large headers.
Fixed repeated HTTP messages in Raw Response indicator.
Fixed HTTP URL being coerced to lowercase which affected sites that had mixed or uppercase chars.
Removed additional chars "\r\n" causing connection problems using HTTP Proxy.
Added missing Exmple Iterative Hash from palette.
HTTP Read Timeout was not being set for HTTP proxies (was fixed at 60000);

Changes:

Now uses non-blocking "connect" for improved performance.
Up issued libssh binary to 0.10.4
Up issued OpenSSL binaries to 3.0.5

Version 4.1.0

New Features:

Added ED25519 and ED448 support and examples.
Added incremental hashing API and example.
Added X509 "V3 Set Netscape Comment". Sets a certificates "Netscape Comment" property.
Added X509 "V3 Set Basic Constraints". Sets a certificates "Basic constraints" (CA, Pathlen) property.
Added X509 "V3 Set SAN". Sets a certificates "Subject Alternative Name" property.
Added X509 "V3 Set Key Usage". Sets a certificates "key usage" property (Key Encipherment, Digital Signing etc).
Added X509 "V3 Set Extended Key Usage". Sets a certificates "extended key usage" property (TLS Web Server Authentication, TLS Web Client Authentication etc).
Added X509 "V3 Get Flags.vi".
Added X509 "V3 Get SAN.vi".
Added X509 "V3 Get Authority Key ID.vi".
Added X509 "V3 Get Subject Key ID.vi"
Added X509 "V3 Get Netscape Comment".
Added X509 "Set Certificate[DER]". Applies a DER encoded certifcate to the X509 object.
Added X509 "Set Certificate[PEM]". Applies a PEM encoded certifcate to the X509 object.
Added X509 "Get Cert Signature Info". Retrieves the security bits, cipher and hash used for signing.
Added X509 "Set Hash Method.vi". Signing can now accomplished while generating the keys without having to retrieve the PEM keys and sign separately.
Exposed SSH read timeout.

Bug Fixes:

SFTP Abort error terminals were not available on the compane.
Example SFTP client opens when dropped, inline with the other examples.
RSA, DSA and ECSA Sign functions no longer have trailing null char in the string hex returned.
Fixed a couple of small memory leakes.

Changes:

SFTP Example Client download/upload rate calculation set to 0.5secs instead of zero.
Changed the explanation text in [Websocket] Example Remote Client.vi to accurately reflect the process.
Windows Certificate store now includes CA as well as ROOT subsystems.
Increased the default SSH connect timeout from 10 seconds to 30 seconds for slow DNS.
Migrated OpenSSL binaries to OpenSSL-3 from OpenSSL-1.1.1 (released with 3.0.3).
Up-issued LibSSH binary to 0.9.6

Version 4.0.0

New Features:

Added SFTP support and examples.
Added Websocket support and examples.
Added IPv6 support.
Added SSH Is Connected?.
Added the ability to use certificates from the Windows Certificate Store.

Bug Fixes:

Fixed memory leak in X509 signing.
Fixed SSL read not terminating on requested number of bytes when in Standard mode-was returning all bytes.
Fixed duplicate content-length in header for POST.

Changes:

Changed SSL Icons to TLS since SSL is deprecated.
Listener address is now dictated by an address string rather than a cluster. This is an interface breaking change to include IPv6.
All API polymorphic names are now uppercase and functions for returning information end with a question mark. This has no impact on the interface.

Version 3.1.0

New Features:

Added HTTP POST Multi-part.
Added URL Encode and Decode for percent encoding.
Added the ability to retrieve the compressed and hybrid forms of public EC hex keys.
Added CMAC hash support.
Added Set URL so that connections can be reused for different locations.

Bug Fixes:

Fixed HTTP functions not truncating to content-length.
Fixed various errors in HTML help.

Changes:

Change: Up-issued OpenSSL binaries to 1.1.1k.
Change: Up-issued LibSSH binary to 0.9.5.

Version 3.0.2

New Features:

Added Get Private Key[HEX].vi.

Bug Fixes:

Fixed crash when generating RSA certificates.
Fixed Blake Hash producing MD4 hash when generating certificates.
Fixed various help documentation issues.

Changes:

Up-issued OpenSSL binaries to 1.1.1i

Version 3.0.1

Bug Fixes:

Fixed incorrect binary location when installed for LabVIEW 2020 32 bit.

Version 3.0.0

New Features:

Added RSA encryption and decryption.
Added RSA enrypt/decrypt example.
Added HTTP GET, POST support.
Added "Example SSL HTTP Client GET" and "Example SSL HTTP Client POST" examples.
Added SHA3 support (includes Shake and Blake algorithms).
Added support for TLS1.3.

Bug Fixes:

Fixed failure when encrypting large (>2G) files.

Changes:

Added explicit error for when trying to encrypt a file with zero length.
Up issued OpenSSH binary to 0.9.3
"DH and ECDH parameters" on "New" now only accepts an underscore as a separator for DH keysize.
No longer dependent on National Instruments OpenSSL binaries. Distributed with OpenSSL 1.1.1g binaries.
"EDCA New" default (unwired) curve changed to prime256v1 from secp256k1.
Proxy connections now adds cache and keep-alive headers.
Cipher List for "New" is now comprised of two fields. One for TLS1.3 and one for the lower versions.

Version 2.2.1

Bug Fixes:

Fixed small memory leak after closing a connection (Issue #44).
Fixed error in SSH Cmd that would cause excessive CPU usage when no text returned from server (Issue #43).

Version 2.2.0

New Features:

Removed the 80 character line limitation to the Base64 Encode.
Added LAN Manager authentication hashes (LM, LM2, NT, NTLMv2) to the Hash polymorphic VI.
Added NTLMv2 HTTP proxy authentication to SSL library.

Bug Fixes:

Fixed broken link to Rand page in the help

Changes:

Hash Vis changed from subroutines to normal re-entrant for easier user debugging.
Hash Vi string inputs now "required" instead of "recommended".

Version 2.1.0

New Features:

Added a connection status indicator to "Get Connection Info" of the SSL library.
Added "Get Connection Status" to the SSL library as the corollory to that in SSH.
Added SSH Write Event.
Added SSH forward tunneling capabilities.
Added SSH forward tunneling example.
Added HTTPS CONNECT proxy support to SSL (Basic Authentication only).
Added SOCKS5 proxy support to SSL (only username/password authentication currently supported - methods "0" and "2").
Added a "Custom Proxy" method that allows control over proxy connections before TLS handshaking.
Added "Set Nagle Algorithm" to enable and disable the connection Nagle algorithm.
Added "Set Keep Alive" to enable and disable the connection Keep Alive features.
Added "Bytes in buffer" indicator to the SSL Read.vi.

Bug Fixes:

Changed Read.vi description to reflect the mode features and no longer limited to 16KB chunks.
Fixed some documentation errors in the help.

Changes:

Changes: Updated the "Example SSL HTTP Client" to add proxy parameters.
Changes: Updated the HTTP examples' text strings to comply with more formal HTTP headers.

Version 2.0.0

New Features:

Added SSH client capabilities. (Shell and Command Execute)
Added SSH Execute Command example.
Added SSH Simple Terminal example.

Bug Fixes:

Fixed x509 signing fails with #218906840 INVALID OBJECT ENCODING (Issue #36).

Changes:

Removed support for Mac OS X due to lack of demand.
Swapped BTC Private Key2WIF.vi with its polymorphic instance in Example BTC Vanity Address.
Changed button text "OK" to "STOP" in Example BTC Vanity Address.
Changed "Example SSL HTTP Client.vi" detection of the string to use "Match Regular Expression" instead of "Match Pattern".
SSL performance improved.

Version 1.1.0

New Features:

Added "Timeout", "Bytes To Read" and "Method" to the SSL Read.vi which now emulates the native labview TCPIP primitive.
Added ECDHE and DHE ephemeral key echanges.
Added EC and DSA certificate generation.
Added verson information to srsslinit binaries.

Bug Fixes:

Fixed intermittent crash when multiple simultanious data clients/servers are run in parallel.
Removed X509_Add_Ext.vi from palettes

Version 1.0.3

Bug Fixes:

Issue #31. ECL crashes LabVIEW after aborting and deleting a VI from the diagram.

Version 1.0.2

Bug Fixes:

Issue #30. Generating RSA, DSA and ECDSA certificates fails if no password is applied.

Version 1.0.1

Initial Release.

LVS Tools

Version 4.6.1