
* 1.2.3, May 20, 2003
 - Fixed a bug that prevented DSA/NR key generation
 - Fixed a bug that prevented importing some root CA certs
 - Fixed a bug in the BER decoder when handing optional bit or byte strings
 - Fixed the encoding of authorityKeyIdentifier in X509_CA
 - Added a sanity check in PBKDF2 for zero length passphrases
 - Added versions of X509::load_key and PKCS8::load_key that take a file name
 - X509_CA generates 128 bit serial numbers now
 - Added tests to check PK key generation
 - Added a simplistic X.509 CA example
 - Cleaned up some of the examples

* 1.2.2, May 13, 2003
 - Add checks to prevent any BigInt bugs from revealing an RSA or RW key
 - Changed the interface of Global_RNG::seed
 - Major improvements for the es_unix module
 - Added another Win32 entropy source, es_win32
 - The Win32 CryptoAPI entropy source can now poll multiple providers
 - Improved the BeOS entropy source
 - Renamed pipe_unixfd module to fd_unix
 - Fixed a file descriptor leak in the EGD module
 - Fixed a few locking bugs

* 1.2.1, May 6, 2003
 - Added ANSI X9.23 compatible CBC padding
 - Added an entropy source using Win32 CryptoAPI
 - Removed the Pipe I/O operators taking a FILE*
 - Moved the BigInt encoding/decoding functions into the BigInt class
 - Integrated several fixes for VC++ 7 (from Hany Greiss)
 - Fixed the configure.pl script for Windows builds

* 1.2.0, April 28, 2003
 - Tweaked the Karatsuba cut-off points
 - Increased the allowed keylength of HMAC and Blowfish
 - Removed the 'mpi_ia32' module, pending rewrite
 - Workaround a GCC 2.95.x bug in eme1.cpp
