Release 0.6.1

• Fix PIN support for disk encryption scripts (issue #31)
• Change initcpio scripts to use ramfs instead of encrypted loopback device
• Add --passphrase-file option
• Stop dropping privileges when run under sudo (issue #35)
• Bump warrant canary to 17 January 2021

Release 0.6.0

• Add PIN support (issue #28)
• Truncate newline from the end of passphrase provided non-interactively on STDIN

Release 0.5.1

This includes a security fix where the behavior of reading passphrases non-interactively was misdescribed. If you were non-interactively providing a passphrase containing a newline character (\n or a byte with value 0x0a), the passphrase was truncated so it finished with that newline.

This behavior is preserved, but is now properly documented. In a future release, the trailing newline will be stripped.

• Bumped warrant canary to 30 October 2020
• Fix misleading section of the manual relating to reading passphrase on STDIN (issue #29)
• Add missing arguments in bash completion script
• enumerate prints devices even if they are not FIDO2-compatible (issue #23)

Release v0.5.0

• Renamed to khefin
• Added initramfs-tools scripts (issue #19)
• Prompt for authenticator if not present during boot (issue #21)
• Small bug fixes and improvements

Release v0.4.3

Adds ssh-askpass implementation

Release v0.4.2

Adds --mixin parameter for the generate subcommand

Release v0.4.1

This is the first stable release of fido2-hmac-secret.