===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/56.html,v
retrieving revision 1.38
retrieving revision 1.39
diff -u -r1.38 -r1.39
--- www/56.html 2014/10/04 20:58:00 1.38
+++ www/56.html 2014/10/05 17:58:49 1.39
@@ -231,7 +231,29 @@
LibreSSL
- - ...
+
- No support for legacy MacOS, Netware, OS/2, VMS and Windows platforms,
+ as well as antique compilers.
+
- Removal of the IBM 4758, Broadcom ubsec, Sureware, Nuron, GOST, GMP,
+ CSwift, CHIL, CAPI, Atalla and AEP engines, either because the hardware is
+ irrelevant, or because they require external non-free libraries to work.
+
- No support for FIPS-140 compliance.
+
- No EBCDIC support.
+
- Use standard routines from the C library (malloc, strdup, snprintf...)
+ instead of rolling our own, sometimes badly.
+
- Remove the old OpenSSL PRNG, and rely upon arc4random_buf from libc for
+ all the entropy needs.
+
- Remove the MD2 and SEED algorithms.
+
- Remove J-PAKE, PSK and SRP (mis)features.
+
- Aggressive cleaning of BN memory when no longer used.
+
- No support for Kerberos.
+
- No support for SSLv2.
+
- No support for the questionable DTLS heartbeat extension.
+
- No support for TLS compression.
+
- No support for US-Export SSL ciphers.
+
- Do not use the current time as a random seed in libssl.
+
- Support for ChaCha and Poly1305 algorithm.
+
- Support for Brainpool and ANSSI elliptic curves.
+
- Support for AES-GCM and ChaCha20-Poly1305 AEAD modes.