Many of the core components have been updated to reflect changes in industry expectations and provide higher performance and better interoperability:
Integrated new Fortuna random number generator, which is now the default PRNG used in the library.
Added built-in support for native certificate stores on all supported platforms.
Refreshed and modernized the TLS engine.
Made enhancements in the Advanced Electronic Signatures (AdES) engine, covering all subsets including CAdES, XAdES, PAdES, and JAdES. The the following is a list of the principal changes in this release:
Added support for VRI (post-signature) timestamps in PAdES documents.
Added fault-tolerant timestamping in all signing components.
Added archival timestamp V3 support in CAdES and ASiC.
Added support for hybrid flows and HTTPS receivers in OAuth client.
Added support for external signing with ECDSA keys in all components and editions.
TLS engine has been updated to support OCSP Stapling, ALPN, and client-side global session cache.
Made a variety of interoperability and performance improvements in Mail components.