6.0.0 (2026-08-11)
⚠ BREAKING CHANGES
-
the rsa-oaep-mgf1p identifier fixes MGF1 to SHA-1 per
XML-Enc 1.1 section 5.5.2, and DigestMethod selects only the OAEP message
digest. Ciphertext produced by this library with keyEncryptionDigest sha256
or sha512 (v3.1.0 through v5.0.0) used MGF1 matching the digest and no
longer decrypts; it was never interoperable with compliant peers. -
fix!: emit MGF1-SHA1 ciphertext for rsa-oaep-mgf1p
-
encrypting with keyEncryptionDigest sha256 or sha512 under
rsa-oaep-mgf1p now wraps the key with MGF1-SHA1, as the identifier requires.
Peers that adapted to the previous non-compliant output must switch to the
Features
- mask generation should use sha1 for rsa-oaep-mgf1p (#140) (48f0059), closes xmlenc11#rsa-oaep xmlenc11#rsa-oaep xmlenc11#rsa-oaep xmlenc11#mgf1sha1 xmlenc#MGF1withSHA1