OEMCrypto and OPK v18.7

CHANGELOG.md

@@ -2,6 +2,46 @@
 
 [TOC]
 
+## [Version 18.7][v18.7]
+
+This release adds new tests that provide stricter enforcement of the existing
+OEMCrypto specification.
+
+This release of OPK fixes some rare but possible null dereference bugs and
+improves on the Provisioning 3.0 support introduced in v18.6, including support
+for OP-TEE.
+
+### Tests
+
+- Added new tests to better validate the behavior of
+  `OEMCrypto_BuildInformation()`
+  - Verifies output length is set correctly
+  - Verifies content is ASCII JSON without trailing null bytes
+  - Verifies documented JSON fields: required fields are present, and optional
+    and required fields are the correct JSON types
+- Removed OEMCryptoLicenseTest.RejectCbc1API16
+- Fixed erroneous failures on devices with low TEE memory caused by sending an
+  output buffer to decrypt that was much larger than necessary
+
+### API
+
+- Added a new API for CAS: `OEMCrypto_SetSessionUsage()`
+- Clarified the expected handling of the pattern (0,0) in cbcs mode. For more
+  information, please check the [OEMCrypto v18 Delta Document][delta-18].
+
+### OPK
+
+- Fixed several potential null dereferences that could occur if the allocator
+  runs out of memory
+- Fixed incorrect behavior of `OEMCrypto_RemoveEntitledKeySession()` when the
+  session is already closed
+- Provisioning 3.0 support is now gated by a `USE_PROVISIONING_30` compiler flag
+  so that it can be excluded from builds on devices that do not use Provisioning
+  3.0
+- Added Provisioning 3.0 support on OP-TEE
+
+[delta-18]: https://developers.google.com/widevine/drm/client/oemcrypto/v18/delta
+
 ## [Version 18.6][v18.6]
 
 This patch provides provisioning 3.0 for OEMs using OPK.  Also includes bug
@@ -547,3 +587,4 @@ Public release for OEMCrypto API and ODK library version 16.4.
 [v18.4]: https://widevine-partner.googlesource.com/oemcrypto/+/refs/tags/v18.4
 [v18.5]: https://widevine-partner.googlesource.com/oemcrypto/+/refs/tags/v18.5
 [v18.6]: https://widevine-partner.googlesource.com/oemcrypto/+/refs/tags/v18.6
+[v18.7]: https://widevine-partner.googlesource.com/oemcrypto/+/refs/tags/v18.7