Skip to content

Releases: wultra/powerauth-crypto

Release 1.3.0

a43faef
Compare
Choose a tag to compare

This release contains following improvements:

  • Dependency updates.
  • Documentation improvements.

Release 1.2.0

1.2.0
d554f4f
Compare
Choose a tag to compare

This release contains following improvements:

  • Improved resistance against timing side-channel attacks.
  • Tests migrated to JUnit 5.
  • Dependency updates.

Release 1.1.0

71caae4
Compare
Choose a tag to compare

This release contains following improvements:

  • Improved validation of public keys during import.
  • Increased salt size for Argon2 hashes.
  • Various minor improvements of code quality.
  • Dependency updates.

Release 1.0.0

5c5cf95
Compare
Choose a tag to compare

This release contains following improvements:

  • Random generator switched to the Bouncy Castle implementation which provides better quantum attack resistance for generated keys.
  • Improved handling of unknown signature types.
  • Dependency updates.

Release 0.24.0

9e41eab
Compare
Choose a tag to compare

This release contains following improvements:

  • Crypto provider abstraction has been removed, Bouncy Castle is available as the only provider.
  • OTP_USED activation state renamed to PENDING_COMMIT.
  • Length of generated authorization OTP code can be specified.
  • Documentation updates related to the additional activation OTP feature.
  • Dependency updates.

Release 0.23.0

ea9583f
Compare
Choose a tag to compare

Changes related to PowerAuth protocol version 3.1:

  • Improved information entropy in PowerAuth online signatures using BASE64 encoding.
  • Improved protection of encrypted status blob against possible replay attacks.
  • Improved protection of payload encrypted by our ECIES scheme.
  • Improved protocol reliability by allowing the mobile client to synchronize its counter with the server.

Additional improvements and bug fixes:

  • Fix for classloader issues with Bouncy Castle library.
  • Improved error logging.
  • Dependency updates related to security advisories.

Release 0.22.0

7c2c38d
Compare
Choose a tag to compare

This release contains following improvements:

  • Cryptography support for activation recovery using recovery code and PUK
  • Hashing of recovery PUKs using the Argon2i algorithm
  • Updated Bouncy Castle dependency to version 1.61
  • Library can be deployed on Java 11

Release 0.21.0

7164143
Compare
Choose a tag to compare

Changes related to PowerAuth protocol version 3:

  • Implementation of ECIES encryption scheme
  • Introduction of hash-based counter for signatures
  • Updated encrypted status blob in activations
  • Updated fingerprint for activations
  • Support for activation codes with CRC checksum
  • Unified error handling using exceptions
  • New encryption HTTP header for PowerAuth
  • Deprecated legacy end-to-end encryption
  • Dependency updates

Release 0.19.0

Compare
Choose a tag to compare

Minor update of the SDK. The update mainly contains library updates, JavaDoc and import cleanup, and finally, the unnecessary dependency on Spring Boot parent was removed.

Release 0.18.0

77b9d9e
Compare
Choose a tag to compare

This release only contains dependency updates.