Releases: symbolicsoft/noiseexplorer
Releases · symbolicsoft/noiseexplorer
Release list
Noise Explorer v1.0.7
Fixed incorrect nonce in Rust rekey implementation. The rekey function was directly constructing a 12-byte nonce with all bytes set to 0xFF (0xFFFFFFFFFFFFFFFFFFFFFFFF), bypassing the encrypt helper and its prep_nonce function. Per the Noise Protocol specification, rekey must use nonce value 2^64 - 1 passed through the standard ENCRYPT function, which zero-pads the first 4 bytes to produce 0x00000000FFFFFFFFFFFFFFFF. The rekey function now calls the encrypt primitive with MAX_NONCE, consistent with the specification and with the Go implementation generated by Noise Explorer. This fix applies to both the native Rust and WebAssembly targets. (Fixes #6)
(Re-tag in order to clean up some leftover files)
Noise Explorer v1.0.6
Rust, Go, WebAssembly
- Many security fixes, detailed in GHSA-q6mw-qh5x-m2p8.
- Fix version number (version 1.0.5 implementations announced themselves as 1.0.4.)
Noise Explorer v1.0.5
Rust
- This release includes important security fixes for Noise Explorer's generated Rust implementations. Please review GHSA-6pc6-w328-gw8x for more information. Thanks to @elichai for reporting these issues.
- Updated to latest Rust edition (2024) and updated Rust dependencies.
Wasm
- Updated to latest Rust edition (2024) and updated Rust dependencies.
Noise Explorer v1.0.4
- Go:
- fix(go): Do not increment nonce on invalid message (#4).