OQS-BoringSSL snapshot 2020-08

open-quantum-safe · Aug 12, 2020 · 1a39df9 · 1a39df9
1 parent 0faf9b0
commit 1a39df9
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 4 deletions.
diff --git a/RELEASE.md b/RELEASE.md
@@ -1,4 +1,4 @@
-OQS-BoringSSL snapshot 2020-07
+OQS-BoringSSL snapshot 2020-08
 ==============================
 
 About
@@ -13,9 +13,16 @@ The **Open Quantum Safe (OQS) project** has the goal of developing and prototypi
 Release notes
 =============
 
-This is the 2020-07 snapshot release of OQS-OpenSSL, released on July 10, 2020. Its release page on GitHub is https://github.com/open-quantum-safe/boring/releases/tag/OQS-BoringSSL-snapshot-2020-07. This release is intended to be used with liboqs version 0.3.0.
+This is the 2020-08 snapshot release of OQS-BoringSSL, released on August 11, 2020. Its release page on GitHub is https://github.com/open-quantum-safe/boringssl/releases/tag/OQS-BoringSSL-snapshot-2020-08. This release is intended to be used with liboqs version 0.4.0.
 
 What's New
 ----------
 
-This is the first snapshot release of OQS-BoringSSL.  It is based on BoringSSL commit [78b3337a10a7f7b3495b6cb8140a74e265290898](https://github.com/google/boringssl/commit/78b3337).
+This is the second snapshot release of OQS-BoringSSL.  It is based on BoringSSL commit [78b3337a10a7f7b3495b6cb8140a74e265290898](https://github.com/google/boringssl/commit/78b3337).
+
+- Uses the updated NIST Round 2 submissions added to liboqs 0.4.0, as described in the [liboqs release notes](https://github.com/open-quantum-safe/liboqs/blob/master/RELEASE.md).
+
+Deprecations
+------------
+
+As a result of NIST's announcement of Round 3 of the Post-Quantum Cryptography Standardization Project, this is the last release of OQS-BoringSSL that contain algorithms from Round 2 that are not Round 3 finalists or alternate candidates. Those algorithms will be removed in the next release. The algorithms in question are: NewHope, ThreeBears, MQDSS, and qTesla. These algorithms are considered deprecated within OQS-BoringSSL will receive no updates after this release.
diff --git a/include/openssl/crypto.h b/include/openssl/crypto.h
@@ -76,7 +76,7 @@ OPENSSL_EXPORT void CRYPTO_pre_sandbox_init(void);
 
 // OPENSSL_VERSION_TEXT contains a string the identifies the version of
 // “OpenSSL”. node.js requires a version number in this text.
-#define OPENSSL_VERSION_TEXT "OpenSSL 1.1.0 (compatible; BoringSSL; Open Quantum Safe snapshot 2020-07)"
+#define OPENSSL_VERSION_TEXT "OpenSSL 1.1.0 (compatible; BoringSSL; Open Quantum Safe snapshot 2020-08)"
 
 #define OPENSSL_VERSION 0
 #define OPENSSL_CFLAGS 1