[[!meta author="guus"]]
[[!meta date="October 14th 2012"]]

Version 1.1pre3 released.

 * New experimental protocol:
   * Uses 521 bit ECDSA keys for authentication.
   * Uses AES-256-CTR and HMAC-SHA256.
   * Always provides perfect forward secrecy.
   * Used for both meta-connections and VPN packets.
   * VPN packets are encrypted end-to-end.

 * Many improvements to tincctl:
   * "config" command shows/adds/changes configuration variables.
   * "export" and "import" commands help exchange configuration files.
   * "init" command sets up initial configuration files.
   * "info" command shows details about a node, subnet or address.
   * "log" command shows live log messages.
   * Without a command it acts as a shell, with history and TAB completion.
   * Improved starting/stopping tincd.
   * Improved graph output.

 * When trying to directly send UDP packets to a node for which multiple
   addresses are known, all of them are tried.

 * Many small fixes, code cleanups and documentation updates.