Skip to main content
Version: Next

Release Notes

This page describes changes, fixes, and known issues for NoxTLS Rust 0.2.20.

For source artifacts and release tags, see Releases on GitHub.

Use the version dropdown in the navbar to view docs and notes for other versions.

0.2.20​

Release date: 2026-06-15

Changes​

  • Workspace and published crates bumped to 0.2.20, including the in-tree crate dependency pins used for local development and release validation.
  • TLS 1.2 DHE/ECDHE ServerKeyExchange signature verification on the client (security audit hardening).
  • Downgrade protection: reject ServerHello cipher suites not offered in ClientHello and detect TLS_FALLBACK_SCSV.
  • TLS 1.2 CBC record decryption hardened against Lucky13-style padding oracles (constant-time padding check, unified MAC error).
  • TLS 1.3 server-role handshake and negotiation API improvements.
  • New noxtls_apply_client_hello_offer_from_wire for ClientHello offer synchronization from wire bytes.
  • Export noxtls_encode_dtls12_handshake_fragments for DTLS 1.2 handshake fragmentation.

Fixed / Resolved​

  • TLS 1.2 client accepted unsigned or wrongly signed ServerKeyExchange messages.
  • Client and TLS 1.3 server role could accept cipher-suite downgrades.
  • FALLBACK_SCSV was not recorded when parsing ClientHello from wire.

Known issues / Open​

  • (None recorded.)