2003-04-21  Stef Hoeben <stef.hoeben@zetes.com>

	* changes for Mac OS X (reader-pcsc.c, libpkcs11.c pkcs11-tool.c)
	* reader-pcsc.c: fix for card removal/insertion
	* pkcs11-global.c: in C_GetSlotInfo(), have a per-reader delay
	  instead of a global delay
	* moved win32/readme.txt to README.Win32, and updated this file

2003-04-21  Juha Yrjl <juha.yrjola@iki.fi>

	* card-flex.c: fixed CHV changing with a CryptoFlex
	* updated NEWS entry for 0.8.0

2003-04-17  Olaf Kirch <okir@suse.de>

	* pkcs15-init: implemented --split-key feature to accomodate CardOS
	* All over the place various additions to cope with private keys
	  with identical IDs but different usage.
	* pam/scam: when no specific reader is required, just select the first
	  one that holds a card
	* pam/scam: when computing RSA signatures, don't assume the card
	  supports raw RSA
	* build fix from Andreas for sslengine
	* pkcs11-tool: added tests for key unwrap

2003-04-16  Olaf Kirch <okir@suse.de>

	* pkcs15-init: when storing a key from a pkcs12 file,
	  store all CA certs along with the user certificates.
	  Use the X509 subject name as the pkcs15 label
	* pkcs11: better debugging output for CK_ATTRIBUTE data
	* backed out AM_LDFLAGS patch
	* Added StarCOS card driver from Nils Larsch (trustcenter.de)
	* Added sslengine by Kevin Stefanik <kstef@mtppi.org>
	* asn1.c: try to fix Endianness problem with BIT STRINGs represented
	  as unsigned int flags variables internally.

2003-04-15  Olaf Kirch <okir@suse.de>

	* Fixes for usbtoken and cardos-info from Andreas

2003-04-14  Olaf Kirch <okir@suse.de>

	* opensc-explorer: fixed unblock command when puk given
	  in hex notation
	* libopensc, pkcs15-tool: support for pkcs15 unblock (Andreas)
	* make cardos pkcs11 signing work

2003-04-11  Olaf Kirch <okir@suse.de>

	* several pkcs11 fixes (Stef)
	* getopt cleanup in src/tools (Andreas)
	* compile fix for newer flex versions (Andreas)
	* added src/libopensc/reader-openct.c (Olaf)
	* configure switches for usbtoken and openct (Olaf)
	* fixed a bug in pkcs15-init (incorrect PIN type/length
	  stored in pkcs15 pin info field) (Olaf)
	* new lifecycle cardctl, and implementation for cardos (Andreas)
	* various build and automake fixes (Andreas)
	* new tool cardosinfo (Andreas)

2003-04-02  Olaf Kirch <okir@suse.de>

	* Added starcos card driver from Nils Larsch
	* Added usbtoken code from Andreas Jellinghaus
	* Patches by Chaskiel M Grundman <cg2v@andrew.cmu.edu>
	  to enable 2048 bit keys on CryptoFlex cards

2003-03-11  Olaf Kirch <okir@suse.de>

	* Lots of pkcs11 fixes by Stef and Olaf
	* Build fixes by Andreas Jellinghaus

2003-02-17  Olaf Kirch <okir@suse.de>

	* Introduced locks around all pkcs11 operations in case
	  the caller is multithreaded and tells us he needs mutual
	  exclusion (C_Initialize).

2003-01-20  Olaf Kirch <okir@suse.de>

	* ASN.1: never encode 0-length objects. If something has
	  no length, it should be optional (then we can leave it out),
	  or it's a bug.
	* merged misc fixes from Stef
	* eToken: new ATR, pkcs15init profile wasn't installed

2003-01-19  Olaf Kirch <okir@suse.de>

	* Some patches to add support for card removal in pkcs11

2003-01-16  Olaf Kirch <okir@suse.de>

	* Patches from Stef implementing PKCS11 RNG related functions

2003-01-06  Olaf Kirch

	* Pin pad changes for pkcs11/pkcs15 from Stef

2003-01-03  Olaf Kirch <okir@suse.de>

	* Merged patch from Stef that allows turning off the sc_lock
	  call in C_Login (new config option pkcs11.lock_login)
	* Added new run-time option that allows turnig off pin caching
	  in pkcs11 (pkcs11.cache_pins, default true)
	* Try to fix pkcs11.hide_empty_slots
	* Added scconf_parse_string that allows to parse a compiled-in
	  option string (for the windows folks :)
	* In process_config_file, if there's no config file but
	  there's an OPENSC_CONFIG_STRING, parse that one instead.
	* In reader-pcsc.c, set apdu_fix=1 on win32
	* pkcs11: fix from Stef to make C_Digest* return CKR_OK
	  for output buffer size inquiries
	* pkcs11: fixed corresponding problem in C_Sign
	* pkcs11-tool: merged large patch from Stef, implementing --test
	  option (this should possibly go to tests/p11test)
	* merged (and rewrote) patch from Stef to implement sc_wait_for_event
	* tools/* added support function to use new sc_wait_for_event code

2003-01-02  Olaf Kirch <okir@suse.de>

	* Minor win32 compile fixes for the new pin pad code (Stef)
	* Minor pkcs11 fix from Stef

2002-12-23  Olaf Kirch <okir@suse.de>

	* Implemented new PIN verify/change/unblock framework. All PIN
	  operations are routed through sc_pin_cmd(), which builds the
	  APDU and either passes it to the card directly, or to the
	  card reader along with a request to read the PIN(s) from the
	  reader's keypad.

	  Currently, entering PINs in the standard way (i.e. via the
	  application) should still work - I have verified GPK and
	  eToken; Cryptoflex verify should work as well. Anything else
	  needs additional testing, and support for keypad input in
	  particular (I cannot test this at the moment for lack of a
	  suitable reader).
	* eToken: pkcs15-init would set the wrong access conditions on
 	  the PIN objects it created, causing CHANGE REFERENCE DATA to
	  always fail.
	* Various minor fixes

2002-12-22  Olaf Kirch <okir@suse.de>

	* pkcs11: make number of slots used by one card configurable;
	  allow to hide empty slots (based on patch from Stef)
	* pkcs11-tool: new option --hash to hash data; print error codes
	  as strings (patch by Stef)

2002-12-19  Olaf Kirch <okir@suse.de>

	* Small fixes to make ripemd160 work in pkcs11 (bug report from Stef).
	* opensc-explorer: implemented unblock command

2002-12-18  Olaf Kirch <okir@suse.de>

	* Merged patches from Danny De Cock <godot@ulyssis.org>
	  that implement pkcs15 data objects.
	* pkcs11: attributes CKA_SIGN etc now return values based
	  on the pkcs15 key usage rather than fixed true/false values.

2002-12-17  Olaf Kirch <okir@suse.de>

	* Massive changes in pkcs11:
	   -	list of supported mechanisms now dynamic
	   -	if we have OpenSSL, we support MD5, SHA1 and RIPEMD160
	   -	we now support hash+sign mechanisms by combining
	   	the card's native signature ops with digest
		mechanisms provided by OpenSSL
	   -	Report only those mechanisms we actually support
	* New utility library libpkcs11 for loading/unloading
	  modules
	* New tool: pkcs11-tool (work in progress)

2002-12-10  Olaf Kirch <okir@suse.de>

	* Win32 fixes from Stef Hoeben
	* PKCS11 CKM_RSA_X_509 support from Stef

2002-12-10  Juha Yrjl  <juha.yrjola@iki.fi>

	* Added Assuan and an ugly skeleton of openscd.

2002-12-04  Olaf Kirch <okir@suse.de>

	* Better handling of default transport keys (cflex and gpk):
	  Get the "right" key from the driver directly (using
	  the new GET_DEFAULT_KEY cardctl). Then present the key
	  to the user, and let him accept the default or type a
	  different key.
	* Make sure we don't use the same pkcs15 ID more than once.
	  If the user doesn't specify an ID on the command line,
	  try to choose one.
	* pkcs11: CKM_SHA1_RSA_PKCS now hashes the data before sending
	  it to the card (in accordance with the spec).
	* Small changes to pkcs15init to properly pass --label argument
	  when creating the pkcs15 app structure.
	* Parsing pkcs15 IDs and paths with an odd number of bytes would
	  scan past the end of the string. Made sc_hex_to_bin more
	  robust and change various place to use it rather than doing
	  it on their own with scanf(%02x)

2002-12-02  Olaf Kirch <okir@suse.de>

	* PKCS11: Do not crash if we cannot parse a certificate.
	  Simply do not show it.
	* When handling certificates and public keys, parse and
	  use the index/length fields of the PKCS15 Path object.

2002-11-29  Olaf Kirch <okir@suse.de>

	* PKCS11: Do not crash if application tries to log into token
	  w/o PIN

2002-11-28  Olaf Kirch <okir@suse.de>

	* Some more patches by Joe Phillips, and
	  lots of new manpages!
	* Another win32 patch from Stef Hoeben

2002-11-27  Olaf Kirch <okir@suse.de>

	* Fix from Stef Hoeben to get the eid-cache
	  working on win32.

2002-11-12  Antti Tapaninen <aet@cc.hut.fi>

	* Added new functions to sconf:
	  scconf_put_{str,int,bool}
	  scconf_write_entries
	  scconf_block_{add,copy}
	  scconf_item_{add,copy,destroy}
	  scconf_list_copy

2002-11-08  Olaf Kirch <okir@suse.de>

	* Several PKCS#11 fixes as suggested by
	  Stef Hoeben <Hoeben.S@BE.Zetes.com>
	  and Dmitri Bogutski <diman@tradenet.ee>

2002-11-08  Olaf Kirch <okir@suse.de>

	* Various minor bugfixes
	* Made the GPK driver recognize the GemSafe
	  application directory (0200 - but returns a
	  custom answer to select)
	* test applications now understand command line
	  options -d(ebug), -r(eader), -c(ard driver).
	* pkcs15-init now errors out when it detects
	  the card is already personalized (happens with
	  the GemSafe)
	* When trying to generate a key for devices that
	  do not support keys for sign _and_ encrypt,
	  print a verbose error message (pkcs15init)

2002-10-02  Olaf Kirch <okir@suse.de>

	* Implemented decryption for eToken
	* Fixed decipher code in iso7816.c
	* pkcs15-init: when entering new PINs via stdin,
	  make the user re-types the PIN to prevent typos.
	* pkcs15-init: added command line options --reader,
	  --key-usage

2002-08-21  Juha Yrjl  <juha.yrjola@iki.fi>

	* Renamed read_tag to sc_asn1_read_tag and made it a
          non-static function
	* Added some new error codes to sc_iso7816_check_sw()
	  (patch by Werner Koch)
	* Added support for GENERALIZEDTIME parsing in asn1.c (W.K.)
	* Added MICARDO 2 driver (W.K.)

2002-08-20  Olaf Kirch <okir@suse.de>

	* Merged GPK patches from Steve Henson (Gemplus)
	  that fix the GPK8K case
	* Merged ATR parsing patch and misc GPK16K fixes from
	  Joe Pihllips (innovationsw.com).

2002-06-18  Olaf Kirch <okir@lst.de>

	* Fixed compute_signature on the GPK8K
	* Implemented generic erase_card via recursive file removal.
	* Implemented erase_card for the cryptoflex

2002-06-17  Olaf Kirch <okir@lst.de>

	* Private key download and on-board key generation now
	  works on the eToken PRO. Digital signing works as well.
	* Added some more tests to src/tests/regression
	* PKCS1 padding for sha1 was still broken
	* Fixed pkcs15init for GPK 8000 (thanks to Matthias Bruestle
	  for the card!). Signing does not work yet.

2002-06-14  Timo Ters  <timo.teras@iki.fi>

	* Initial (minimal) support for Win32
        * Now compiles and the following tests and tools
          are tested: opensc-tool, opensc-explorer, pkcs15-crypt,
          pkcs15-tool, p15dump, pintest

2002-06-11  Olaf Kirch <okir@lst.de>

	* More code for the eToken. Still not functional but
	  closer to actually computing a signature.

2002-06-06  Olaf Kirch <okir@lst.de>

	* Started to work on eToken on-board key generation.
	  It seems the easiest way to find out exactly how to store
	  keys if you let the card do it - the docs are a bit poor.
	  Does not quite work yet, so it might not be the easiest
	  way after all :-)
	* --erase for eToken now also nukes EF(DIR)

2002-06-05  Olaf Kirch <okir@lst.de>

	* More eToken patches: pkcs15-init can now store
	  user pins, and --erase works (except for 2f00)

2002-06-04  Antti Tapaninen <aet@cc.hut.fi>

	* LDAP detection fix, require ldap.h.

2002-06-04  Olaf Kirch <okir@lst.de>

	* Some eToken patches; you can now init the pkcs15
	  structure with pkcs15-init and set the SO pin.
	  Be careful with this code, people :)

2002-06-03  Juha Yrjl  <juha.yrjola@iki.fi>

	* Bumped up version number to 0.7.0

2002-06-03  Antti Tapaninen <aet@cc.hut.fi>

	* Preliminary MacOS X build support, untested so far.

2002-06-03  Juha Yrjl  <juha.yrjola@iki.fi>

	* Preparation for version 0.7.0
	* iso7816_set_security_env now has correct values for P1
	* Improved detection of SetCOS cards
	* Changed the default CLA byte in card-setcos.c to 0x80

2002-06-03  Antti Tapaninen <aet@cc.hut.fi>

	* Upgraded openssh/README
	* Disable pkcs15-ldap for the PAM module
	  until I have time to get it working.

2002-05-26  Juha Yrjl  <juha.yrjola@iki.fi>

	* Several patches to fix behaviour on 64-bit architectures (by
	  Jochen Friedrich)
	* Fixed one bug in sc_copy_asn1_entry(), one in
	  sc_pkcs15init_add_object() and one in pkcs15-crypt
	  (patches also by Jochen)

2002-05-21  Juha Yrjl  <juha.yrjola@iki.fi>

	* Fixed parsing of AUT keys in pkcs15init (patch by Jochen
	  Friedrich <jochen@scram.de>)

2002-05-09  Juha Yrjl  <juha.yrjola@iki.fi>

	* Applied a patch by Werner Koch that brings the TCOS driver
	  up-to-speed

2002-05-09  Juha Yrjl  <juha.yrjola@iki.fi>

	* Applied a patch by Matthias Bruestle <m@mbsks.franken.de>:
	* Changed the case of GET RESPONSE in card-default.c to 2 short
	* Added ATRs to Flex, GPK and TCOS drivers
	* Changed value of maximum Lc in card.c to be 255

2002-05-07  Antti Tapaninen  <aet@cc.hut.fi>

	* opensc-ssh is now obsolete, use OpenSSH ssh-keygen
	  instead.
	* Updated src/openssh/README.

2002-05-06  Antti Tapaninen  <aet@cc.hut.fi>

	* Reworked scrandom ugliness, no longer builds a shared
	  library nor seeds OpenSSL internally, if available.

2002-04-23  Olaf Kirch <okir@lst.de>

	* sc_pkcs15_decipher now takes a flags argument,
	  and knows how to strip pkcs1 padding
	* started to add regression test files in tests/regression

2002-04-23  Juha Yrjl  <juha.yrjola@iki.fi>

	* Applied a patch to card-etoken.c that gives
	  ACL support; patch by Markus Frield

2002-04-22  Olaf Kirch  <okir@lst.de>

	* Fixed an old bug in pkcs1 padding for RSA-MD5
	  signatures. pkcs15-crypt -s --pkcs1 --md5 should
	  work now :)

2002-04-21  Antti Tapaninen  <aet@cc.hut.fi>

	* Extract certificate crlDistributionPoints and store
	  it in sc_pkcs15_cert.
	* Lots of minor source cleanups to allow OpenSC
	  to compile cleanly with C++ compilers.

2004-04-19  Juha Yrjl  <juha.yrjola@iki.fi>

	* PKCS #15 objects and DFs are now stored with linked lists
	  in struct sc_pkcs15_card; this way we can have 'floating'
	  objects that don't belong in any DF, for e.g. generating
	  public key objects from certificates
	* Removed some unused function prototypes
	* Added 'force_card_driver' option

2004-04-17  Olaf Kirch  <okir@lst.de>

	* Added lots of code to support non-native keys in
	  libopensc.
	* Applied eToken patches from Markus Friedl

2004-04-15  Olaf Kirch  <okir@lst.de>

	* pkcs15-init does not require openssl anymore
	  (except when the caller passes in an RSA key without
	  CRT coefficients, which is exactly what happens if you
	  store a key via pkcs11's C_CreateObject)
	* Modified all sorts of tools etc to reflect these changes
	* Added some code to pkcs15-pubkey.c to encode public RSA
	  and DSA keys.

2002-04-13  Olaf Kirch  <okir@lst.de>

	* pkcs11: C_CreateObject supports X509 certificates
	  (untested so far).

2002-04-11  Olaf Kirch  <okir@lst.de>

	* pkcs11: support C_CreateObject for private and
	  public keys. Coming soon: certificates.

2002-04-11  Juha Yrjl <jyrjola@cc.hut.fi>

	* Added support for Aladdin eToken PRO; patch by
	  Andreas Jellinghaus <aj@dungeon.inka.de>

2002-04-09  Antti Tapaninen <aet@cc.hut.fi>

	* Updated src/openssh/README
	* Removed obsolete patch for openssh-3.0.2p1

2002-04-08  Olaf Kirch  <okir@lst.de>

	* Some cleanup wrt SO PIN handling in pkcs15init
	* You can now do C_InitPIN through PKCS11

2002-04-07  Juha Yrjl  <juha.yrjola@iki.fi>

	* Added support for user-defined serial numbers in
	  pkcs15-init and PIN flags in profiles

2002-04-06  Juha Yrjl  <juha.yrjola@iki.fi>

	* Divided errors into different groups, added new ones 
	  and renamed some
	* Moved sc_strerror() to errors.c
	* Added a 'sensitive' flag to struct sc_apdu
	* Added PKCS #15 ASN.1 module to directory docs/

2002-04-05  Olaf Kirch  <okir@lst.de>

	* First steps towards token initialization through
	  pkcs11 module

2002-04-05  Antti Tapaninen <aet@cc.hut.fi>

	* Install all headers to ${prefix}/include/opensc
	* Remove opensc- and sc- prefixes from headers
	* Symlink all public headers to src/include/opensc

2002-04-05  Juha Yrjl <juha.yrjola@iki.fi>

	* Fixed pkcs15init Cryptoflex driver
	* Added SC_ERROR_FILE_ALREADY_EXISTS
	* Changed call convention for reader finish()
	* CT-API driver now frees its resources correctly
	* Added year 2002 to some of the copyright statements
	* sc_pkcs15_decipher() and sc_pkcs15_compute_signature()
	  now select only the parent DF of the private key file

2002-04-04  Juha Yrjl <juha.yrjola@iki.fi>

	* Added partial support for PKCS #15 generation
	  on MioCOS cards

2002-04-04  Antti Tapaninen <aet@cc.hut.fi>

	* Merge in opensc-signer

2002-04-03  Olaf Kirch  <okir@lst.de>

	* Changed pkcs15-init profile parser to Antti's scconf

2002-04-02  Olaf Kirch  <okir@lst.de>

	* Rewrote pkcs15-init, moved most of the stuff to a
	  separate library. Broke miocos and cryptoflex
	  support in the process.

2002-04-02  Antti Tapaninen <aet@cc.hut.fi>

	* Add maintainer-clean patch by
	  Andreas Jellinghaus <aj@dungeon.inka.de>

2002-03-31  Antti Tapaninen <aet@cc.hut.fi>

	* Improved scconf alot. Now has ASN.1 decoder
	  alike function that helps getting configuration
	  values in the user code.

2002-03-28  Antti Tapaninen <aet@cc.hut.fi>

	* Added sanity check for sc_establish_context.
	  If no readers are found, fail and return
	  SC_ERROR_NO_READERS_FOUND.

2002-03-26  Juha Yrjl  <juha.yrjola@iki.fi>

	* Added support for CT-API
	* Improved config file loading
	* Implemented ATR parsing

2002-03-25  Juha Yrjl  <juha.yrjola@iki.fi>

	* Moved functions from sc.c to ctx.c
	* Card and reader drivers are now configurable

2002-03-24  Juha Yrjl  <juha.yrjola@iki.fi>

	* Started to add configuration file support to
	  libopensc
	* Added typedefs for some basic structs (e.g.
	  struct sc_card --> sc_card_t)
	* Added a second argument to sc_establish_context()
	  to identify the calling application
	* Renamed sc_destroy_context() to sc_release_context()

2002-03-24  Antti Tapaninen  <aet@cc.hut.fi>

	* Make sure everything compiles even if we don't have
	  an LDAP implementation and/or OpenSSL library.

2002-03-23  Antti Tapaninen  <aet@cc.hut.fi>

	* Merge complete. The new pam module works but
	  pkcs15-ldap code currently lacks support for
	  actual ldap based authentication.

2002-03-21  Antti Tapaninen  <aet@cc.hut.fi>

	* Started to merge various sources (pam, sia, ldap, conf, etc.)
	  from project SCIDI - Smart Card IDentification Infrastructure
	  by Helsinki University of Technology.

2002-03-20  Juha Yrjl  <juha.yrjola@iki.fi>

	* Bumped up version number to 0.6.1
	* Wrote a NEWS entry

2002-03-20  Olaf Kirch  <okir@lst.de>

	* Added subject  field to sc_pkcs15_cert
	* Added CKA_SUBJECT support in pkcs11/framework-pkcs15.c
	  Mozilla 0.9.9 wants to extract the subject from the card, or
	  it won't recognize the certificate.
	* Implemented C_ChangePIN in pkcs11 module

2002-03-19  Juha Yrjl  <juha.yrjola@iki.fi>

	* Fixed a couple of memory leaks
	* Fixed a bug in decoding EF(TokenInfo)

2002-03-18  Olaf Kirch  <okir@lst.de>

	* Added issuer field to sc_pkcs15_cert
	* pkcs11 module now supports C_UnwrapKey; mail decryption
	  with netscape works now!

2002-03-15  Juha Yrjl  <juha.yrjola@iki.fi>

	* Added support for big serial numbers in certificates
	* Merged a patch from Werner Koch that improves various
	  things in opensc-explorer

2002-03-15  Olaf Kirch  <okir@lst.de>

	* Moved code from sc_decipher (sec.c) to iso7816.c
	* Added decipher support to card-gpk.c
	* Added --list-public-keys and --read-public-key to pkcs15-tool
	* Added --md5 option to pkcs15-crypt
	* Fixed a typo in pkcs15.c that caused sc_pkcs15_obj's
	  not to be initialized correctly, triggering segfaults
	  in other places (as noticed by Antti :-)
	* pkcs11 module: changed pkcs15_prkey_sign so that mail
	  signing works from netscape.
	* pkcs11 module: first attempt at C_UnwrapKey support

2002-03-13  Olaf Kirch  <okir@lst.de>

	* Fixed certificate download in pkcs15-init

2002-03-13  Juha Yrjl  <juha.yrjola@iki.fi>

	* Preparation for release 0.6.0

2002-03-12  Olaf Kirch  <okir@lst.de>

	* Added a few manual pages in docs/
	  First stab at real documentation :)

2002-03-12  Olaf Kirch  <okir@lst.de>

	* pkcs11: added support for public key objects
	* pkcs11: make sure we keep the card locked while
	  we're logged in. Perform a logout when the last
	  session for a given slot is closed.
	* pkcs15-init: you can now read key+cert from pkcs12 files
	  and store them on the card in ones pass.

2003-03-12  Juha Yrjl  <juha.yrjola@iki.fi>

	* Fixed PKCS #15 structure generation on Cryptoflex cards
	  and implemented a default profile
	* Cryptoflex now reports its supported PK algorithms
	  correctly
	* Various pkcs15-init fixes

2002-03-12  Olaf Kirch  <okir@lst.de>

	* Implemented download of public keys and X509 certificates
	  in pkcs15-tool

2002-03-11  Olaf Kirch  <okir@lst.de>

	* Some fixes in card-gpk.c to make signatures work
	* Added Parent/FileID stuff to pkcs15-init profiles to
	  help Juha with the Cryptoflex
	* In pkcs15-init, when storing a private key, always create
	  an EF with the public key as well.
	* pkcs15-init now creates/updates EF(DIR) with minimum information

2002-03-09  Juha Yrjl  <juha.yrjola@iki.fi>

	* Improved support for MioCOS cards
	* Removed PKCS #15 creation from cryptoflex-tool
	* Added PIN pad character option to profile.c

2002-03-08  Antti Tapaninen  <aet@cc.hut.fi>

	* Fixed opensc-ssh to work with recent p15 API changes

2002-03-08  Juha Yrjl  <juha.yrjola@iki.fi>
	
	* Added X.509 algorithm id decoding and encoding to asn1.c
	* Implemented a generic ATR matching helper function
	* Made signing much smarter (should even work now)
	* Added info about supported crypto algorithms to struct sc_card

2002-03-07  Olaf Kirch  <okir@lst.de>

	* Fixed memory corruption problem in pkcs15-init
	* Fixed pintest to work with recent p15 API changes
	* Moved common printing stuff to new file tests/print.c

2002-03-07  Timo Ters  <timo.teras@iki.fi>

	* Patch from Olaf Kirch to implement of RSA exponent
	  and modulus retrievel in pkcs11 code

	* Fixed the checking of PIN length in pkcs11 login

2002-03-06  Olaf Kirch  <okir@lst.de>

	* Rewrote large parts of pkcs15-init for greater flexibility,
	  and with an eye towards separating some of the stuff into a
	  library that can be used by pkcs11.

	* Fixed to buffer overflows in sc_pkcs15_bind

2002-03-04  Timo Ters  <timo.teras@iki.fi>

	* Fixed buffer overflow in C_FindObjectsInit
	  (patch from Olaf Kirch <okir@caldera.de>)

2002-03-03  Timo Ters  <timo.teras@iki.fi>

	* Fixed PKCS #11 module to use the new PKCS #15 API

2002-03-03  Juha Yrjl  <juha.yrjola@iki.fi>

	* Reworked PKCS #15 structure a bit (MANY THINGS
	  WILL BREAK)
	* Added untested support for public key DFs

2002-02-26  Olaf Kirch <okir@lst.de>

	* First stab at getting RSA signing to work with GPK
	* Implemented change/unblock PIN for GPK

2002-02-26  Juha Yrjl  <juha.yrjola@iki.fi>

	* added a driver for MioCOS cards by Miotec
	* implemented EF(DIR) updating
	* added Olaf Kirch to AUTHORS

2002-02-24  Antti Tapaninen  <aet@cc.hut.fi>

	* Added support for checking libreadline
	  and use it for opensc-explorer if one
	  is found.

2002-02-24  Juha Yrjl  <juha.yrjola@iki.fi>

	* implemented reader abstraction layer; now it's easier to
	  add support for e.g. CT-API
	* renamed ops_data field to drv_data in struct sc_card
	* copied coding style document from Linux kernel

2002-02-23  Juha Yrjl  <juha.yrjola@iki.fi>

	* another monster patch from Olaf Kirch <okir@caldera.de>
	* implemented RSA and DSA key downloading to GPK cards

2002-02-21  Juha Yrjl  <juha.yrjola@iki.fi>
	
	* added sc_update_binary(), sc_append_binary() and
	  sc_write_binary() with their corresponding ISO 7816-4
	  reference functions

2002-02-21  Juha Yrjl  <juha.yrjola@iki.fi>

	* merged a big patch by Olaf Kirch <okir@caldera.de>
	* added ATR for RSA SecurID 3100
	* exported pkcs15_encode_* functions
	* minor modification to sc_file_add_acl_entry()
	* boosted up opensc-explorer
	* added error(), warn() and fatal()
	* implemented a generic PKCS #15 structure generation tool

2002-02-20  Antti Tapaninen  <aet@cc.hut.fi>

	* Fix memory leak for sc_establish_context

2002-02-20  Juha Yrjl  <juha.yrjola@iki.fi>

	* all instances struct sc_file should now be
	  dynamically allocated with sc_file_new() and released
	  with sc_file_free()
	* improved ACL's
	* moved struct sc_card_error to opensc.h
	* moved EF(DIR) parsing and encoding to dir.c
	  (encoding is not working yet)
	* removed hst-test.c and filetest.c

2002-02-17  Antti Tapaninen  <aet@cc.hut.fi>

	* Bugfix for sc_destroy_context, pcsc_ctx
	  was never released

2002-02-16  Juha Yrjl  <juha.yrjola@iki.fi>

	* added error reporting for several new SWs
	* added check_sw function to sc_card_operations

2002-02-11  Juha Yrjl  <juha.yrjola@iki.fi>

	* added partial support for TCOS 2.0 cards
	* default card driver now tries to do a GET RESPONSE
	  instead of SELECT FILE to detect the correct
	  CLA byte
	* moved security attribute parsing from iso7816.c to card-setec.c
	* added some more sanity checking to sc_check_apdu
	* added 'debug' command line option to opensc-explorer

2002-02-10  Juha Yrjl  <juha.yrjola@iki.fi>

	* added partial support for GPK 4000; patch by Olaf
	  Kirch <okir@caldera.de>
	* made line parsing in opensc-explorer saner; patch by
	  Olaf Kirch <okir@caldera.de>
	* moved change_reference_data and reset_retry_counter to
	  iso7816.c, where they belong
	* added partial libreadline support to opensc-explorer

2002-01-28  Juha Yrjl  <juha.yrjola@iki.fi>

	* added support for T=1 protocol; patch by Andreas
	  Jellinghaus <aj@dungeon.inka.de>

2002-01-26  Juha Yrjl  <juha.yrjola@iki.fi>

	* added opensc-config; patch by Werner Koch <wk@gnupg.org>
	* added ATR string for Cryptoflex 8k

2002-01-24  Timo Ters  <timo.teras@iki.fi>

	* many bug fixes in pkcs #11 module
	* pkcs #11 module now creates public key objects too

2002-01-24  Juha Yrjl  <juha.yrjola@iki.fi>

	* bumped up version number in preparation of the new release
	* unified PKCS #15 DF decoding
	* added PKCS #15 file caching

2002-01-22  Timo Ters  <timo.teras@iki.fi>

	* many bugfixes in pkcs11 module
	* memory corruption fix in pkcs15 framework
	* pool node deletion fixed in misc.c
	* now detects smartcards in C_GetSlotInfo too

2002-01-21  Juha Yrjl  <juha.yrjola@iki.fi>
	
	* improved file selection on Cryptoflex cards
	* fixed an incompatibility in PKCS #11 module
	* added PKCS #15 structure generation to cryptoflex-tool

2002-01-20  Juha Yrjl  <juha.yrjola@iki.fi>

	* fixed a bug with file permissions in flex_create_file()
	* added RSA signature generation with Cryptoflex cards
	* improved security environment handling
	* implemented cryptoflex-tool

2002-01-18  Juha Yrjl  <juha.yrjola@iki.fi>

	* PKCS #15 generation is now in a semi-working state
	* started coding crypto support for Cryptoflexes
	
2002-01-17  Juha Yrjl  <juha.yrjola@iki.fi>

	* continued to improve PKCS #15 generation
	* fixed a few problems in sc_set_security_env
	* started to implement Better (tm) object handling for
	  PKCS #15 objects

2002-01-17  Timo Ters  <timo.teras@iki.fi>

	* new pkcs#11 module codebase

2002-01-14  Juha Yrjl  <juha.yrjola@iki.fi>

	* pretty much finished the DER encoder
	* added delete and create file support for 'flex cards
	* PKCS #15 DF's are now stored more flexibly; this makes
	  adding new types of DF's (such as PuKDF's) easier
	* added 'get' and 'put' commands to opensc-explorer

2002-01-10  Juha Yrjl  <juha.yrjola@iki.fi>

	* added preliminary ASN.1 encoding support
	* modified ASN.1 decoding to make it easier to
	  port decoder structures to the encoder
	* fixed a recently introduced bug in card driver handling
	* opensc-explorer will now allow only DF's to be cd'd into
	* added PIN verification, file creation and file deletion to
	  opensc-explorer
	* documented the core API a bit using doxygen

2002-01-09  Juha Yrjl  <juha.yrjola@iki.fi>

	* created opensc-explorer tool
	* increased support for Cryptoflex cards

2002-01-08  Juha Yrjl  <juha.yrjola@iki.fi>

	* added preliminary CryptoFlex 16k support
	* added short names to card drivers
	* moved various ISO 7816-9 functions to their correct places
	* added write binary support
	* renamed opensc-crypt to pkcs15-crypt
	* split a part opensc-tool to pkcs15-tool

2002-01-07  Juha Yrjl  <juha.yrjola@iki.fi>

	* removed 'sc-' prefix from miscellaneous .c files
	* renamed sc_asn1_parse to sc_asn1_decode
	* added capabilities and flags fields to struct sc_card
	* added a mutex to sc_context for future use

2002-01-01  Juha Yrjl  <juha.yrjola@iki.fi>

	* some fixes to the PKCS #11 module

2001-12-29  Juha Yrjl  <juha.yrjola@iki.fi>

	* added preliminary support for EMV cards
	* changed a few function prototypes
	* implemented access control lists to files
	* added sc_read_record() function
	* updated the NEWS file
	* ported certificate reading to new ASN.1 code

2001-12-25  Juha Yrjl  <juha.yrjola@iki.fi>

	* added default driver for unidentified cards
	* added select_file operation in Multiflex driver
	* added 'list-drivers' command to opensc-tool
	* moved stuff from opensc.h to sc-internal.h
	* improved locking behaviour

2001-12-23  Juha Yrjl  <juha.yrjola@iki.fi>

	* added card abstraction layer support
	* pretty much finished migrating to new ASN.1 code
	* changed call semantics for sc_select_file()
	* moved functions around
	* migrated apps to Autotools <aet@cc.hut.fi>

2001-12-19  Juha Yrjl  <juha.yrjola@iki.fi>

	* remembered ChangeLog
	* moved some functions from sc.c to sc-iso7816-4.c
	* added fancy colors to log output =)
	* removed global sc_debug variable, moved it to sc_context
	* fixed new ASN.1 code (possibly still unstable)

2001-11-27  Juha Yrjl  <juha.yrjola@iki.fi>

	* started migrating to GNU Autotools
	* ChangeLog file created
