Skip to content

Releases: symbolicsoft/noiseexplorer

Noise Explorer v1.0.7

Choose a tag to compare

@nadimkobeissi nadimkobeissi released this 07 Apr 09:18
d2abd21

Fixed incorrect nonce in Rust rekey implementation. The rekey function was directly constructing a 12-byte nonce with all bytes set to 0xFF (0xFFFFFFFFFFFFFFFFFFFFFFFF), bypassing the encrypt helper and its prep_nonce function. Per the Noise Protocol specification, rekey must use nonce value 2^64 - 1 passed through the standard ENCRYPT function, which zero-pads the first 4 bytes to produce 0x00000000FFFFFFFFFFFFFFFF. The rekey function now calls the encrypt primitive with MAX_NONCE, consistent with the specification and with the Go implementation generated by Noise Explorer. This fix applies to both the native Rust and WebAssembly targets. (Fixes #6)

(Re-tag in order to clean up some leftover files)

Noise Explorer v1.0.6

Choose a tag to compare

@nadimkobeissi nadimkobeissi released this 23 Feb 15:08
7889720

Rust, Go, WebAssembly

  • Many security fixes, detailed in GHSA-q6mw-qh5x-m2p8.
  • Fix version number (version 1.0.5 implementations announced themselves as 1.0.4.)

Noise Explorer v1.0.5

Choose a tag to compare

@nadimkobeissi nadimkobeissi released this 22 Feb 12:51
f5f1f93

Rust

  • This release includes important security fixes for Noise Explorer's generated Rust implementations. Please review GHSA-6pc6-w328-gw8x for more information. Thanks to @elichai for reporting these issues.
  • Updated to latest Rust edition (2024) and updated Rust dependencies.

Wasm

  • Updated to latest Rust edition (2024) and updated Rust dependencies.

Noise Explorer v1.0.4

Choose a tag to compare

@nadimkobeissi nadimkobeissi released this 19 Aug 11:19
  • Go:
    • fix(go): Do not increment nonce on invalid message (#4).