Release v2.7.2

Update the underlying crypto library

Release v2.7.1-proton

This release is 2.7.1 with support for symmetric keys and automatic forwarding, both of which are not standardized yet.

Release v2.7.1

Added

• Add mobile helpers for signature verification with contexts.

Release v2.7.0-proton

This release is 2.7.0 with support for symmetric keys and automatic forwarding, both of which are not standardized yet.

Release v2.7.0

Changed

• The SignatureVerificationError struct now has a Cause error field, which is returned by the the Unwrap function. The cause is also included in the error message.
  NB: If the caller was relying on the exact message of the error, it might break the flow.
• When a signature fails verification because of the signature context, it returns a SignatureVerificationError with
  status constants.SIGNATURE_BAD_CONTEXT instead of constants.SIGNATURE_FAILED.

Added

• Add api for signature context on streams SignDetachedStreamWithContext.
• Add API for signature context on embedded signatures.

Fixed

• When verifying detached signatures, gopenpgp sometimes needs to reattempt verification a second time to check for edge cases of signature expiration. This logic was broken because it was not rewinding the data readers.

Release v2.6.1-proton

This release is 2.6.1 with support for symmetric keys and automatic forwarding, both of which are not standardized yet

Release v2.6.1

Security fix

• Update github.com/ProtonMail/go-crypto and github.com/ProtonMail/go-mime to fix
  panic on invalid inputs.

Release 2.6.0-proton

This release is 2.6.0 with symmetric keys and forwarding support

Release version 2.6.0

Added

• API for adding context to detached signatures:

   sig, err := keyRing.SignDetachedWithContext(message, context)

• API to verify the context of detached signatures:

   err := keyRing.VerifyDetachedWithContext(message, signature, verifyTime, verificationContext)

Changed

• Update github.com/ProtonMail/go-crypto to the latest version
• More strictly verify detached signatures: reject detached signatures from revoked and expired keys.
• In GetVerifiedSignatureTimestamp, use the new VerifyDetachedSignatureAndHash function to get the verified signature, instead of parsing the signature packets manually to get the timestamp.
• Upgraded golang.org/x/crypto dependency to v0.7.0

Release version 2.5.2

Changed

• Update github.com/ProtonMail/go-crypto to the latest version