v0.7.0

Experimental and unaudited. Do not protect real data with this release.

HIDE implements the file-format engine: HPKE X-Wing (X25519 +
ML-KEM-768) key wrapping, and authenticated 64 KiB streaming with
constant memory.

What to download

• Desktop application — HIDE_*_x64-setup.exe (Windows),
  *.dmg (macOS), *.deb / *.AppImage (Linux). Installs a
  graphical application for keys, files and messages.
• Portable — hide-portable-*. A single executable that needs
  no installation and keeps its keys in a hide-keys folder beside
  itself. Suitable for a USB stick.
• Command line — hide-*. The hide tool.

There is no identity system, no key transparency, no sender
authentication, no forward secrecy and no hardware-backed key
storage. Secret keys are sealed with a passphrase by default, but
--insecure-plaintext writes one unencrypted. See SECURITY.md.

The wire format may change while the version is 0.x.

Verify a download against SHA256SUMS before running it.

Full Changelog: v0.6.2...v0.7.0

v0.6.2

Experimental and unaudited. Do not protect real data with this release.

HIDE implements the file-format engine: HPKE X-Wing (X25519 +
ML-KEM-768) key wrapping, and authenticated 64 KiB streaming with
constant memory.

What to download

• Desktop application — HIDE_*_x64-setup.exe (Windows),
  *.dmg (macOS), *.deb / *.AppImage (Linux). Installs a
  graphical application for keys, files and messages.
• Portable — hide-portable-*. A single executable that needs
  no installation and keeps its keys in a hide-keys folder beside
  itself. Suitable for a USB stick.
• Command line — hide-*. The hide tool.

There is no identity system, no key transparency, no sender
authentication, no forward secrecy and no hardware-backed key
storage. Secret keys are sealed with a passphrase by default, but
--insecure-plaintext writes one unencrypted. See SECURITY.md.

The wire format may change while the version is 0.x.

Verify a download against SHA256SUMS before running it.

Full Changelog: v0.6.1...v0.6.2

v0.6.1

Experimental and unaudited. Do not protect real data with this release.

HIDE implements the file-format engine: HPKE X-Wing (X25519 +
ML-KEM-768) key wrapping, and authenticated 64 KiB streaming with
constant memory.

What to download

• Desktop application — HIDE_*_x64-setup.exe (Windows),
  *.dmg (macOS), *.deb / *.AppImage (Linux). Installs a
  graphical application for keys, files and messages.
• Portable — hide-portable-*. A single executable that needs
  no installation and keeps its keys in a hide-keys folder beside
  itself. Suitable for a USB stick.
• Command line — hide-*. The hide tool.

There is no identity system, no key transparency, no sender
authentication, no forward secrecy and no hardware-backed key
storage. Secret keys are sealed with a passphrase by default, but
--insecure-plaintext writes one unencrypted. See SECURITY.md.

The wire format may change while the version is 0.x.

Verify a download against SHA256SUMS before running it.

Full Changelog: v0.6.0...v0.6.1

v0.6.0

Experimental and unaudited. Do not protect real data with this release.

HIDE implements the file-format engine: HPKE X-Wing (X25519 +
ML-KEM-768) key wrapping, and authenticated 64 KiB streaming with
constant memory.

What to download

• Desktop application — HIDE_*_x64-setup.exe (Windows),
  *.dmg (macOS), *.deb / *.AppImage (Linux). Installs a
  graphical application for keys, files and messages.
• Portable — hide-portable-*. A single executable that needs
  no installation and keeps its keys in a hide-keys folder beside
  itself. Suitable for a USB stick.
• Command line — hide-*. The hide tool.

There is no identity system, no key transparency, no sender
authentication, no forward secrecy and no hardware-backed key
storage. Secret keys are sealed with a passphrase by default, but
--insecure-plaintext writes one unencrypted. See SECURITY.md.

The wire format may change while the version is 0.x.

Verify a download against SHA256SUMS before running it.

Full Changelog: v0.5.0...v0.6.0

v0.5.0

Experimental and unaudited. Do not protect real data with this release.

HIDE implements the file-format engine: HPKE X-Wing (X25519 +
ML-KEM-768) key wrapping, and authenticated 64 KiB streaming with
constant memory.

What to download

• Desktop application — HIDE_*_x64-setup.exe (Windows),
  *.dmg (macOS), *.deb / *.AppImage (Linux). Installs a
  graphical application for keys, files and messages.
• Portable — hide-portable-*. A single executable that needs
  no installation and keeps its keys in a hide-keys folder beside
  itself. Suitable for a USB stick.
• Command line — hide-*. The hide tool.

There is no identity system, no key transparency, no sender
authentication, no forward secrecy and no hardware-backed key
storage. Secret keys are sealed with a passphrase by default, but
--insecure-plaintext writes one unencrypted. See SECURITY.md.

The wire format may change while the version is 0.x.

Verify a download against SHA256SUMS before running it.

Full Changelog: v0.4.0...v0.5.0

v0.4.0

Experimental and unaudited. Do not protect real data with this release.

HIDE implements the file-format engine: HPKE X-Wing (X25519 +
ML-KEM-768) key wrapping, and authenticated 64 KiB streaming with
constant memory.

What to download

• Desktop application — HIDE_*_x64-setup.exe (Windows),
  *.dmg (macOS), *.deb / *.AppImage (Linux). Installs a
  graphical application for keys, files and messages.
• Portable — hide-portable-*. A single executable that needs
  no installation and keeps its keys in a hide-keys folder beside
  itself. Suitable for a USB stick.
• Command line — hide-*. The hide tool.

There is no identity system, no key transparency, no sender
authentication, no forward secrecy and no hardware-backed key
storage. Secret keys are sealed with a passphrase by default, but
--insecure-plaintext writes one unencrypted. See SECURITY.md.

The wire format may change while the version is 0.x.

Verify a download against SHA256SUMS before running it.

Full Changelog: v0.3.0...v0.4.0

v0.3.0

Experimental and unaudited. Do not protect real data with this release.

HIDE implements the file-format engine: HPKE X-Wing (X25519 +
ML-KEM-768) key wrapping, and authenticated 64 KiB streaming with
constant memory.

What to download

• Desktop application — HIDE_*_x64-setup.exe (Windows),
  *.dmg (macOS), *.deb / *.AppImage (Linux). Installs a
  graphical application for keys, files and messages.
• Portable — hide-portable-*. A single executable that needs
  no installation and keeps its keys in a hide-keys folder beside
  itself. Suitable for a USB stick.
• Command line — hide-*. The hide tool.

There is no identity system, no key transparency, no sender
authentication, no forward secrecy and no hardware-backed key
storage. Secret keys are sealed with a passphrase by default, but
--insecure-plaintext writes one unencrypted. See SECURITY.md.

The wire format may change while the version is 0.x.

Verify a download against SHA256SUMS before running it.

Full Changelog: v0.2.1...v0.3.0

v0.2.1

Experimental and unaudited. Do not protect real data with this release.

HIDE implements the file-format engine: HPKE X-Wing (X25519 +
ML-KEM-768) key wrapping, and authenticated 64 KiB streaming with
constant memory.

What to download

• Desktop application — HIDE_*_x64-setup.exe (Windows),
  *.dmg (macOS), *.deb / *.AppImage (Linux). Installs a
  graphical application for keys, files and messages.
• Portable — hide-portable-*. A single executable that needs
  no installation and keeps its keys in a hide-keys folder beside
  itself. Suitable for a USB stick.
• Command line — hide-*. The hide tool.

There is no identity system, no key transparency, no sender
authentication, no forward secrecy and no hardware-backed key
storage. Secret keys are sealed with a passphrase by default, but
--insecure-plaintext writes one unencrypted. See SECURITY.md.

The wire format may change while the version is 0.x.

Verify a download against SHA256SUMS before running it.

Full Changelog: v0.2.0...v0.2.1

v0.2.0

Experimental and unaudited. Do not protect real data with this release.

HIDE implements the file-format engine: HPKE X-Wing (X25519 +
ML-KEM-768) key wrapping, and authenticated 64 KiB streaming with
constant memory.

What to download

• Desktop application — HIDE_*_x64-setup.exe (Windows),
  *.dmg (macOS), *.deb / *.AppImage (Linux). Installs a
  graphical application for keys, files and messages.
• Portable — hide-portable-*. A single executable that needs
  no installation and keeps its keys in a hide-keys folder beside
  itself. Suitable for a USB stick.
• Command line — hide-*. The hide tool.

There is no identity system, no key transparency, no sender
authentication, no forward secrecy and no hardware-backed key
storage. Secret keys are sealed with a passphrase by default, but
--insecure-plaintext writes one unencrypted. See SECURITY.md.

The wire format may change while the version is 0.x.

Verify a download against SHA256SUMS before running it.

Full Changelog: v0.1.0...v0.2.0

v0.1.0

Experimental and unaudited. Do not protect real data with this release.

HIDE/0.1 implements the file-format engine only: HPKE X-Wing
(X25519 + ML-KEM-768) key wrapping, and authenticated 64 KiB
streaming with constant memory.

There is no identity system, no key transparency, no sender
authentication, no forward secrecy and no hardware-backed key
storage. hide test-keygen writes an unencrypted secret key file.
See SECURITY.md for the full list.

The wire format may change while the version is 0.x.

Verify a download against SHA256SUMS before running it.

Full Changelog: https://github.com/hide-protocol/hide/commits/v0.1.0