@brycx brycx released this Dec 22, 2018

Assets 2

Changelog:

  • Bugfix: #46.
  • Updated subtle dependency.
Dec 22, 2018
v0.11.1

@brycx brycx released this Nov 24, 2018 · 62 commits to master since this release

Assets 2

Changelog:

@brycx brycx released this Nov 23, 2018 · 66 commits to master since this release

Assets 2

Changelog:

  • New types for secret keys, nonces, tags, etc. This greatly increases misuse-reisstance, usability and safety. To read more about the types and how they are implemented, see the wiki section.

  • default API has been dropped. All high-level functionality is now accessible through these interfaces: orion::aead, orion::auth, orion::kdf and orion::pwhash.

  • AEAD interfaces in hazardous and in the high-level API (previously default::encrypt, etc.) have been renamed to seal and open to reflect the authentication and hopefully increase familiarity.

  • finalize_to_dst() has been dropped for HMAC.

  • Adaption of the #[must_use] attribute.

  • Documentation improvements.

  • HKDF and cSHAKE dropped from high-level API.

  • High-level PBKDF2 now uses 64 byte salts and 64 byte password hashes and the iteration count has been made available for users to control.

  • Argument info for HKDF and ad for AEADs are now Option.

  • util::gen_rand_key and util::compare_ct are now util::secure_rand_bytes and util::secure_cmp.

  • The password length enforcement in high-level PBKDF2 API has been removed.

  • All other public types (eg. CShake, Hmac and Poly1305) now implement Debug.

  • Using clear_on_drop to wipe memory in favor of seckey.

  • New features nightly and no_std. To use orion in a no_std context, some dependency specfications are needed. Refer to the README for these.

  • Major improvements to error propagation.

@brycx brycx released this Nov 11, 2018 · 217 commits to master since this release

Assets 2

Changelog:

  • Fix bug in double-HMAC verification in the default API
  • Documentation improvements

@brycx brycx released this Nov 4, 2018 · 224 commits to master since this release

Assets 2

Changelog:

  • Added support for HChaCha20, XChaCha20 and AEAD XChaCha20Poly1305.
  • The default API's encryption/decryption interface has been reintroduced, now offering
    authenticated encryption through the AEAD XChaCha20Poly1305 implementation.
  • Most of the library's structure has been revamped.
  • Major additions to the project wiki detailing testing and some information regarding dependencies and security.
  • Improved fuzzing targets and overall test suite.
  • Documentation improvements.

@brycx brycx released this Oct 7, 2018 · 319 commits to master since this release

Assets 2

Changelog:

  • Added AEAD ChaCha20Poly1305 from RFC 8439
  • Added keystream_block() public function to retreive a keystream from chacha20
  • Added Poly1305 from RFC 8439
  • default::encrypt and default::decrypt removed until orion offers XChaCha20 with Poly1305
  • Documentation improvement
  • Updated sha2 dependency

@brycx brycx released this Sep 27, 2018 · 362 commits to master since this release

Assets 2

Changelog:

  • Fix bug in PBKDF2 (See issue)

@brycx brycx released this Sep 26, 2018 · 367 commits to master since this release

Assets 2

Changelog:

  • Update subtle dependency

@brycx brycx released this Sep 26, 2018 · 367 commits to master since this release

Assets 2

Changelog:

  • Fuzz test improvements
  • Documentation improvements