# Intel(R) EPID SDK ChangeLog                                   {#ChangeLog}

## [6.0.1] - 2018-05-04

### Changed

- Updated Intel(R) IPP Cryptography library to version 2018 (Update
  2.1).

### Fixed

- The member library now includes the tpm2 subcomponent when built
  using SCons, instead of requiring a separate member.tpm2 library.

### Known Issues

- Only the SHA-256 hash algorithm is supported when using the SDK with
  the IBM TPM simulator due to a defect in version 532 of the
  simulator.

- Basenames are limited to 124 bytes in TPM mode.

- Scons build will not work natively on ARM. You can still build using
  `make` or cross compile.

## [6.0.0] - 2017-12-15

### Added

- The member can now be built with a substantially reduced code size
  using a compilation option.

- New context lifetime management APIs have been added to member to
  give callers more control of memory allocation.

- New member API `EpidClearRegisteredBasenames` has been added to
  clear registered basenames without recreating the member.

### Changed

- `EpidRegisterBaseName` was renamed to `EpidRegisterBasename` because
  basename is a single word.

- Command-line parsing library used by samples and tools has been
  replaced by Argtable3.


### Deprecated

- `EpidMemberCreate` has been deprecated. This API has been superseded
  by `EpidMemberGetSize` and `EpidMemberInit`.

- `EpidMemberDelete` has been deprecated. This API has been superseded
  by `EpidMemberDeinit`.

### Removed

- `size_optimized_release` build configuration has been removed.
  Use the compilation option to build member with reduced code size.

### Known Issues

- Only the SHA-256 hash algorithm is supported when using the SDK with
  the IBM TPM simulator due to a defect in version 532 of the
  simulator.

- Basenames are limited to 124 bytes in TPM mode.

- Scons build will not work natively on ARM. You can still build using
  `make` or cross compile.


## [5.0.0] - 2017-09-15

### Added

- The member implementation now has the option to support signing
  using a TPM, using the ECDAA capabilities of TPM 2.0.


### Changed

- Member API updated to unify HW and SW use cases.
    - Added
        - `ProvisionKey`
        - `ProvisionCompressed`
        - `ProvisionCredential`
        - `Startup`
    - Parameters changed
        - `MemberCreate`
        - `RequestJoin`
    - Removed or made private
        - `WritePrecomp`
        - `SignBasic`
        - `NrProve`
        - `AssemblePrivKey`

- `EpidRequestJoin` was renamed to `EpidCreateJoinRequest` to make it
  clear that it is not directly communicating with the issuer.


### Fixed

- `EpidCreateJoinRequest` creates valid join requests. This fixes a
  regression in `EpidRequestJoin` introduced in 4.0.0.


### Known Issues

- Only the SHA-256 hash algorithm is supported when using the
  SDK with the IBM TPM simulator due to a defect in version
  532 of the simulator.

- Basenames are limited to 124 bytes in TPM mode.


## [4.0.0] - 2017-04-25

### Added

- The member implementation now provides an internal interface that
  gives guidance on partitioning member operations between highly
  sensitive ones that use f value of the private key, and less
  sensitive operations that can be performed in a host environment.

- New member API `EpidAssemblePrivKey` was added to help assemble and
  validate the new member private key that is created when a member
  either joins a group (using the join protocol) or switches to a new
  group (as the result of a performance rekey).


### Changed

- Updated Intel(R) IPP Cryptography library to version 2017 (Update 2).

- The mechanism to set the signature based revocation list (SigRL)
  used for signing was changed. `EpidMemberSetSigRl` must be used to
  set the SigRL. The SigRL is no longer a parameter to `EpidSign`.
  This better models typical use case where a device stores a
  revocation list and updates it independently of signing operations.


### Removed

- Removed `EpidWritePreSigs` API. Serialization of pre-computed
  signatures is a risky capability to provide, and simply expanding
  the internal pool via `EpidAddPreSigs` still provides most of the
  optimization benefits.

- The `EpidIsPrivKeyInGroup` API is no longer exposed to clients. It
  is no longer needed because the new member API `EpidAssemblePrivKey`
  performs this check.


### Fixed

- When building with commercial version of the Intel(R) IPP
  Cryptography library, optimized functions are now properly invoked,
  making signing and verification operations ~2 times faster

- SHA-512/256 hash algorithm is now supported.

- README for compressed data now correctly documents the number of
  entries in revocation lists.

- The `verifysig` sample now reports a more clear error message for
  mismatched SigRLs.

- The default scons build will now build for a 32-bit target on a
  32-bit platform.


### Known Issues

- Scons build will not work natively on ARM. You can still build using
  `make` or cross compile.


## [3.0.0] - 2016-11-22

### Added

- Support for verification of Intel(R) EPID 1.1 members.

- Make-based build system support.

- Sample material includes compressed keys.

- Enhanced documentation, including step-by-step walkthroughs of
  example applications.

- Validated on additional IoT platforms.

  - Ostro Linux

  - Snappy Ubuntu Core


### Changes

- A new verifier API has been added to set the basename to be used for
  verification. Verifier APIs that used to accept basenames now use
  the basename set via `EpidVerifierSetBasename`.

- The verifier pre-computation structure has been changed to include
  the group ID to allow detection of errors that result from providing
  a pre-computation blob from a different group to
  `EpidVerifierCreate`.


### Fixes

- The kEpidxxxRevoked enums have been renamed to be consistent with
  other result return values.


### Known Issues

- SHA-512/256 hash algorithm is not supported.


## [2.0.0] - 2016-07-20

### Added

- Signed binary issuer material support.

  - Binary issuer material validation APIs.

  - Updated sample issuer material.

  - Updated samples that parse signed binary issuer material.

- Compressed member private key support.

- Validated on additional IoT platforms.

  - Windows 10 IoT Core

  - WindRiver IDP


### Changed

- The default hash algorithm has changed. It is now SHA-512.

- Functions that returned `EpidNullPtrErr` now return `EpidBadArgErr`
  instead.


### Fixed

- Updated build flags to work around GCC 4.8.5 defect.


## [1.0.0] - 2016-03-03

### Added

- Basic sign and verify functionality

- Dynamic join support for member

- Apache 2.0 License