Source code
Revision control
Copy as Markdown
Other Tools
.. _mozilla_projects_nss_nss_3_50_release_notes:
NSS 3.50 release notes
======================
`Introduction <#introduction>`__
--------------------------------
.. container::
The NSS team has released Network Security Services (NSS) 3.50 on **7 February 2020**, which is a
minor release.
`Distribution Information <#distribution_information>`__
--------------------------------------------------------
.. container::
The HG tag is NSS_3_50_RTM. NSS 3.50 requires NSPR 4.25 or newer.
NSS 3.50 source distributions are available on ftp.mozilla.org for secure HTTPS download:
- Source tarballs:
Other releases are available :ref:`mozilla_projects_nss_nss_releases`.
.. _notable_changes_in_nss_3.50:
`Notable Changes in NSS 3.50 <#notable_changes_in_nss_3.50>`__
--------------------------------------------------------------
.. container::
- Verified primitives from HACL\* were updated, bringing performance improvements for several
platforms.
- Note that Intel processors with SSE4 but without AVX are currently unable to use the
improved ChaCha20/Poly1305 due to a build issue; such platforms will fall-back to less
.. _bugs_fixed_in_nss_3.50:
`Bugs fixed in NSS 3.50 <#bugs_fixed_in_nss_3.50>`__
----------------------------------------------------
.. container::
implementation to Draft-30
build failure due to lack of zlib include dir if external
- PKCS#11 implementation
recent PBKDF1 password hash, to speed up repeated SDR operations, important with the increased
KDF iteration counts. NSS 3.49.1 sped up PBKDF2 operations, though PBKDF1 operations are also
relevant for older NSS databases (also included in NSS 3.49.2)
taskcluster broken by Setuptools v45.0.0 (for lacking Python3)
verified implementations of ChaCha20, Poly1305, and 64-bit Curve25519
NEON-specific code in freebl
features on FreeBSD
configuration
vectors
vectors
of an mp_digit when clamping in Windows assembly/mp_comba
vectors and add support for CBC, P256-ECDH, and CMAC tests
non-GCM AES ciphers on platforms with no assembly-optimized implementation, such as macOS.
1.2.11
CPU features on FreeBSD
FreeBSD/powerpc\*
NSS_DISABLE_ALTIVEC
is compiled without libnssdbm support, but the nssdbm shared object is available anyway.
This Bugzilla query returns all the bugs fixed in NSS 3.50:
`Compatibility <#compatibility>`__
----------------------------------
.. container::
NSS 3.50 shared libraries are backward compatible with all older NSS 3.x shared libraries. A
program linked with older NSS 3.x shared libraries will work with NSS 3.50 shared libraries
without recompiling or relinking. Furthermore, applications that restrict their use of NSS APIs
to the functions listed in NSS Public Functions will remain compatible with future versions of
the NSS shared libraries.
`Feedback <#feedback>`__
------------------------
.. container::
Bugs discovered should be reported by filing a bug report with