diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2019-12-20 16:33:54 +1300 |
|---|---|---|
| committer | Ralph Boehme <slow@samba.org> | 2019-12-20 10:09:34 +0000 |
| commit | 49197368d4dc6925ce7713d46d8adb93c51da433 (patch) | |
| tree | bfc8a68d7cf31026607ae985141959d37af6e005 /WHATSNEW.txt | |
| parent | 30cbc5b90e4951a0ea924c204ff73e15c9750ace (diff) | |
| download | samba-49197368d4dc6925ce7713d46d8adb93c51da433.tar.gz | |
WHATSNEW: Celebrate the end of smbdes and the almost-end of in-tree AES
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
Diffstat (limited to 'WHATSNEW.txt')
| -rw-r--r-- | WHATSNEW.txt | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 3a7e90afee2..0faf69e030f 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -27,8 +27,8 @@ we test with in our CI infrastructure. (Build time support for the file server with Python 2.6 has not changed) -GnuTLS 3.4.7 required ---------------------- +Removing in-tree cryptography: GnuTLS 3.4.7 required +---------------------------------------------------- Samba is making efforts to remove in-tree cryptographic functionality, and to instead rely on externally maintained libraries. To this end, @@ -38,6 +38,11 @@ Samba now requires GnuTLS 3.4.7 to be installed (including development headers at build time) for all configurations, not just the Samba AD DC. +Thanks to this work Samba no longer ships an in-tree DES +implementation and on GnuTLS 3.6.5 or later Samba will include no +in-tree cryptography other than the MD4 hash and that +implemented in our copy of Heimdal. + Using GnuTLS for SMB3 encryption you will notice huge performance and copy speed improvements. Tests with the CIFS Kernel client from Linux Kernel 5.3 show a 3x speed improvement for writing and a 2.5x speed improvement for reads! |