A second update after 3.4.9.1 to prepare for deprecation of obsolete algorithms and attributes in the upcoming 3.5, this release also also includes a general code cleanup, for example to fix typos in text error messages and to make existing error messages more descriptive based on user feedback. As with the previous stepping release, users are strongly encouraged to move to this release in preparation for 3.5.

An intermediate release to prepare for the cleanup changes in 3.5, which will remove a number of obsolete and unused algorithms and attributes. It's strongly recommended that you move to this version to prepare for the 3.5 release.

More updates to the TLS 1.3 code based on deployment experience, rewrote the TPM interface to make it more portable across different vendors' TPMs, added optional support for the X25519 and Ed25519 algorithms and corresponding cipher suites in TLS and SSH, added optional support for RFC 5997 RADIUS/EAP status messages.

Minor updates to better deal with broken TLS 1.3 implementations.