Skip to content

v2.8.0

Latest
Latest

Choose a tag to compare

View all tags
@willinois willinois released this 11 Aug 12:57
v2.8.0
ea87143

This is Tink Go 2.8.0.

What's new

The complete list of changes since 2.7.0 can be found here.

  • Added support for JWT ML-DSA signatures.
  • RSA-SSA-PSS keys with salt length zero can't be serialized or parsed anymore. The reason for this is that these keys use PSSSaltLengthAuto from crypto/rsa, which is not compatible with Tink in other languages.
  • Fixed silent truncation vulnerability in noncebased.Reader.
  • Started rejecting (proto/json) keysets with duplicate IDs or non-ENABLED primary keys.
  • Upgraded dependencies:
    • Minimum supported Go version => 1.25.0
    • golang.org/x/crypto => v0.53.0
    • google.golang.org/protobuf => v1.36.11

Future work

To see what we're working towards, check our project roadmap.

Get started

To get started using Tink, see the setup guide.

Go tooling

go get github.com/tink-crypto/tink-go/v2@2.8.0
Assets 2
Loading