Dell BSAFE™ TLS-C 2.1 Release Advisory

Initially published on January 22, 2025

Announcement

The Dell BSAFE Product Team announces the general availability of Dell BSAFE TLS-C 2.1, using BSAFE Crypto Module for C, version 3.0.1, FIPS 140-3 software module. 

BSAFE TLS-C 2.1 includes the following new features:

• Support for TLS version 1.2 (as initial versions of BSAFE TLS-C only supported TLS v1.3), including support for
  • Encrypt-then-MAC extension
  • Extended Master Secret (EMS)
  • Renegotiation Indicator
  • Post-handshake TLS client authentication
• New X.509 certification validation purpose to validate against CA Browser Forum (CABF) baseline requirements version 2.1.2 for TLS.
• Support for X.509 Policy Mapping certificate extension
• Support for URN values in X.509 Subject Alternative Names extension using General Names
• Performance improvement for non-ephemeral Pre-Shared Key (PSK) TLS v1.3 connections 

The following changes in behavior have been done:

• DSA-based signature schemes removed from the default TLS signature schemes list.
• No more limits on the number of sockets that can be used, limited by previous usage of select(), replaced by poll()

Existing BSAFE Micro Edition Suite customers with an active maintenance contract may, if their Master License Agreement defines it, be entitled to a BSAFE TLS-C software license and allow migrating existing code base from BSAFE Micro Edition Suite and/or BSAFE Crypto-C Micro Edition to BSAFE TLS-C and BSAFE Crypto Module for C.

For additional documentation, downloads, and more, see How To Request a Dell BSAFE product download