Version 0.5
- first WWW release
- AES candidate algorithms
- RedHat 6.2 and Slackware 7.0 port
- Significant change to Export controls statement
- Significant change to Copyright statement
- Option to exclude/include algorithms/transforms in make config removed
  - everything is installed - choice is now only module or static for 
    all IPsec code.
- Removed rfc1829, rfc1829, rfc1852, ah_hmacsha192, and ah_hmacmd5128 
  transforms

Version 0.4.1
- ip_output.c patch in firewall code (copy paste problem)
- sadb.c patch - missing flag initialization
- sha.c - include file problem
- Makefile - problem with static (non-module) build
- RedHat 6.0 port
- UI patch to rkey utility - changed main from int to void

Version 0.4
- xsadb - TCL/TK X11 Interface for manual KM (see xsadb.html for more info)
- Lots of changes to netlink code:
  o Bring it inline with semi-current netlink code
  o Uses 2 seperate netlink sockets /dev/ike /dev/ike2 to talk to PlutoPlus
- Lots of changes to sadb.c to support PlutoPlus
  (e.g. sadb_update, partial_SAs, additional SADBM message types)
- Key lifetimes, re-keying, and timer driven SA garbage collection
- The ability to create and use explicit one-way SAs
- Minor bug fix that was causing a compiler warning on some versions of GLIBC
- Simplification of the sadb user interface
  - only 1 key per algorithm 
  - UID field is gone
- The Linux default configuration is changed to turn on EXPERIMENTAL,
  NETLINK, NETLINK_DEV, IPsec, and all of the transforms

Version 0.3.1
- Minor bug fix to support RedHat 5.1
  o Changed sadb_ui.c so it doesn't blow up when compiled with GLIBC
- Minor bug fix to support big endian in the md5 code.
  o Change to br.h and md5.c

Version 0.3

- Added ESP-NULL transform
- Added 3DES-CBC transform
- Added recursive SA processing on inbound IPsec packets
  with multiple encapsulations
  o doesn't include policy checks on the order of inbound SAs

- Added linked SAs - allows multiple encapsulations for outbound
  packets
- In transforms, when adding an SA - if SPIs are different, inbound and
  outbound keys can be be different

Version 0.2

- ipsec.h: pad_data - forgot to subtract offset
- sadb.c: printk_sadb_dst_node - printk doesn't like returns before
                                 strings.

Version 0.1 - Initial Release
