Release notes: ============== Date : 06.10.2021   Version : 4.2.0 Revision : 7987 DigiSign Client changes: ======================== 4.2.0b: ======= - Local web server crash fix if TLS credentials can't be read or local port openings fails - FINEID applet selection fix 4.2.0: ====== - Card personalization fixes; ATOS CardOS 5.3, 5.3DI and Thales IDPrime 940 - Cryptoki enhancements and bug fixes; - - Event handling crash fix - - Key import fix - - Additional initialization parameters - - Verify with RSASSA-PSS fix - - WaitForSlotEvent SlotId response value fix - Cryptoki enhancements - - Added C_DeriveKey() implementation for ECDH key. Derived key material is stored into generated object's CKA_VALUE - - Added OAEP support for encrypt and decrypt functions - Display remaining PIN counter in GUI - DSApp; CertificateLoader; Add correct keySpecs for ECC keys - Minidriver; CRYPT_NOHASHOID fix - Toolkit; Added AuthenticateEx() to be able to get PIN usage counters - Added warning dialog if remaining PIN counter value is running low (lest than 1000) - If AutoLogin is enabled, verify pin against cache - MacOS build generates intel and apple architecture code - Toolkit; Added KeyExchange() and SelectCertificateEx() functions - Added support to compose PKCS#7 / CMS signatures with RSA-PSS padding - Toolkit; Added ComputeSignatureEx and VerifySignatureEx functions to be able to define hash and key algorithms better - More describing error messages to .pdf signature. - Allow to select multiple documents for signing. - Rename DVV package names from vrk to dvv. - Error message in installed DigiSign application for explorermenuhandler linking to 381 ordinal number. - DigiSign_Toolkit.h version number taken from project version number - Toolkit: IsSmartCardPresent() fix to return true if card is empty - SCS broker logic fixes - TLS 1.3 session resumption (0-RTT) - Socket status query and timeout fix - Padding fix if CARD_SIGNING_INFO version is "1" - certObject.classAttributes.authority fix - keyObject.classAttributes.flags fix - Minidriver OAEP and ECDH support - Toolkit enhancements; - - Added old DS3 ImportPKCS12() - - Set correct lastError value if function is not implemented - - ComputeSignature() keyword can be either certificate digest or keyId - - Added EncryptEx and DecryptEx functions to be able to tell used algorithm - - SelectSmartCardReader() fix if contactless reader is used - - Return public key when AddKeyPair() is called and key is generated inside smart card - MacOS Smart Card pairing fix; CryptoTokenKit modified to be able to encrypt RSA-OAEP padded blocks - Windows installer; If SCPnP is disabled, register minidriver directly - Fix error DSCLIENT-434 4.1.2 .msi installer didn't remove DS-4.0.9 - Document version numbers updated to 4.1.4 - The size of DS-Application window made smaller - Additional fix for DSCLIENT-435 Start DSApp after .msi install. - Fix issue DSCLIENT-435 Start DSApp after .msi instal. - Implementation DSCLIENT-431. Update English text. - Implementation DSCLIENT-431 Start .pdf validator from taskbar menu - PKCS#11/cryptoki: ECC signature fix - Drop authentication after PIN change - Cryptoki crash fix while trying to set empty buffer into return value