v2.2.1: Merge pull request #140 from ProtonMail/release-2.2.1

Changed

• Changed the returned SignatureVerificationError.Status when trying to verify a message with no embedded signature. It used to return constants.SIGNATURE_NO_VERIFIER and now returns constants.SIGNATURE_NOT_SIGNED.
  This change impacts :
  • func (sk *SessionKey) DecryptAndVerify(...)
  • func (msg *PlainMessageReader) VerifySignature(...)
  • func (keyRing *KeyRing) Decrypt(...)
• Improved error messages for failures in password protected message decryption

Added

• Helper to access the SignatureVerificationError explicitly when decrypting streams in mobile apps:

   func VerifySignatureExplicit(
   	reader *crypto.PlainMessageReader,
   ) (signatureVerificationError *crypto.SignatureVerificationError, err error)

Release version 2.2.0

Add streaming API

Release version 2.1.10

Removed time interpolation via monotonic clock that can cause signatures in the future

Release version 2.1.9

Upgrade the underlying go-crypto forking off from x/crypto, remove duplicate modules.

Release version 2.1.8

Added:

• Key and KeyRing methods to check if a key/keyring can Encrypt or Verify

(key *Key) CanVerify() bool
(key *Key) CanEncrypt() bool
(keyRing *KeyRing) CanVerify() bool
(keyRing *KeyRing) CanEncrypt() bool

• SessionKey methods to encrypt/decrypt and simultaneously sign/verify with an asymmetric key (embedded signature)

(sk *SessionKey) EncryptAndSign(message *PlainMessage, signKeyRing *KeyRing) ([]byte, error)
(sk *SessionKey) DecryptAndVerify(dataPacket []byte, verifyKeyRing *KeyRing, verifyTime int64) (*PlainMessage, error)

• The mobile helper DecryptSessionKeyExplicitVerify to allow using session key decryption + verification operations via gomobile

Release version 2.1.7

Add ManualAttachmentProcessor for manual memory management in attachments and add support mobile building with go 1.16

Release version 2.1.6

Update underlying crypto lib, add support for multiple embedded signatures, improve session key handling, and fix headers for public keys

Release version 2.1.5

Removed an unnecessary cloning in the attachment processor, to perform better in low memory settings

Release version 2.1.4

Add functions to directly handle encrypted detached signatures

Release version 2.1.3

This version changes the upstream library to use ProtonMail/go-crypto replacing x/crypto and improves the memory management for attachments