Akira platform version 1.99.25 has been released (tagged at 1.99.25.20261031034710.75abdefe8a). This is in our series of releases made from the 1.99 development branch.

The following are release notes for Akira, Loop, and Dora 1.99.25.

Akira

Maintenance

The common source tree has received maintenance and integration cleanups alongside the Fugu library work (listed in the Loop 1.99.25 release notes).

Loop

GPU-accelerated key exchange and post-quantum cryptography

Loop's Vulkan GPU-accelerated cryptography engine now supports X25519, ECDH P-256 and P-384, and post-quantum ML-KEM-768 key exchange. These algorithms can deliver several times the throughput of CPU processing on supported GPUs. These additions extend GPU cryptographic processing beyond DNSSEC signing and verification. Benchmarks of the various algorithms can be found on the website.

TLS implementation

Loop's cryptography library named Fugu now includes scalable TLS 1.3 and TLS 1.2 implementations, with modern TLS key exchange groups and signature schemes. It implements hybrid post-quantum key exchange including X25519MLKEM768 (group 4588), and session resumption including TLS 1.3 0-RTT early data. The asynchronous implementation supports GPU-accelerated cryptography and is designed for a small established connection state of around 500 bytes per TLS connection. TLS has been integrated as a library capability in Fugu at this stage.

GPU compatibility and performance

GPU execution has been refined for devices with different subgroup sizes and driver capabilities. Driver-specific optimizations are now restricted to the NVIDIA proprietary driver, while older and vendor-specific implementation paths have been simplified. This improves compatibility of GPU acceleration with different Vulkan drivers.

With these changes, alongside the NVIDIA proprietary driver that is the main supported vendor, Loop now also works with Mesa's AMD RADV Vulkan driver. It is also expected to work with Mesa's lavapipe with a small patch to Mesa to fix stack overflow issues in it. Intel support is still broken due to its Vulkan driver issues.

Utilities

The dnssec-signzone(1) and dnssec-verify(1) manual pages have been updated. An error in the HMAC-SHA-224 support of dnsperf(1) has also been fixed.

Dora

There are no Dora-specific release notes for version 1.99.25.

Changes

Akira

• Carry out common-source maintenance ahead of the TLS merge. [RT2498]
• Merge TLS 1.2 and TLS 1.3 library support to Fugu. [RT2499]

Loop

• Add GPU acceleration support for P-256 and P-384 ECDH and X25519 key exchange. [RT2502, RT2503]
• Add GPU acceleration support for ML-KEM-768 and extend shared-library ML-KEM-768 decapsulation support. [RT2504, RT2505]
• Merge TLS 1.2 and TLS 1.3 library support to Fugu. [RT2499]
• Improve GPU compatibility and performance behavior across different devices and drivers. [RT2494, RT2495, RT2500, RT2501]
• Update DNSSEC utility documentation and usage information. [RT2493]
• Correct HMAC-SHA-224 processing in dnsperf. [RT2497]
• Perform common code and integration maintenance. [RT2498]

Some more development releases will be made from this branch until Akira 2.0 is ready to be branched.