Skip to content

Latest commit

 

History

History
195 lines (118 loc) · 5.09 KB

CHANGELOG.md

File metadata and controls

195 lines (118 loc) · 5.09 KB
Raw

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[0.17.0] - 2024-11-18

Added

  • Experimental support for Balloon password hashing.

Changed

  • The minimal required Rust version is now Rust 1.67.

[0.16.0] - 2023-04-22

Changed

  • The minimal required Rust version is now Rust 1.60.
  • ⚠️ BREAKING: All Rust functions that previously returned Result<_, ErrorCode> now return Result<_, Error>

[0.15.0] - 2022-04-03

Changed

  • The minimal required Rust version is now Rust 1.57.
  • Uses the Rust 2021 edition.
  • The password and key generation API are considered stable.

[0.14.1] - 2021-04-10

Changed

  • The minimal required Rust version is now Rust 1.51.

Fixed

  • Fixed compilation issues caused by the dylib crate type.

[0.14.0] - 2020-11-14

Added

  • The HOTP/TOTP key URI feature, which requires an external dependency, can now be deactivated.
  • HOTP now support a look-ahead range.
  • The HOTP counter can be synchronized (within the look-ahead range) during validation using is_valid_sync.

Changed

  • The prototype of the libreauth_hotp_is_valid C-binding function has been changed so it is possible to specify whether or not the counter should be synchronized.

[0.13.0] - 2020-02-27

Added

  • Optional additional HMAC with an external salt before or after hashing the password.
  • The C-bindings documentation has been improved.

Changed

  • The output base for HOTP and TOTP must now be valid UTF-8.
  • LIBREAUTH_OATH_CODE_INVALID_UTF8 has been renamed LIBREAUTH_OATH_INVALID_UTF8.
  • The output_base_len parameter in the libreauth_hotp_cfg and libreauth_totp_cfg structures has been dropped.
  • The PBKDF2 hash parameter has been renamed hmac.
  • The HashFunction has been moved to a dedicated module and its C-bindings renamed accordingly.

Fixed

  • The project now compiles on Microsoft Windows.

[0.12.0] - 2019-08-27

Added

  • Internal password version number.
  • Key URI generation for HOTP and TOTP (with partial C-bindings).

Changed

  • The crate is now compiled with Rust 2018.
  • Each module has now its dedicated feature.
  • LIBREAUTH_OATH_CFG_NULL_PTR, LIBREAUTH_OATH_CODE_NULL_PTR and LIBREAUTH_OATH_KEY_NULL_PTR has been replaced by LIBREAUTH_OATH_NULL_PTR.

[0.11.0] - 2018-09-08

Added

  • In addition to the previous CeCILL license, LibreAuth can now also be used under the CeCILL-C license.
  • The build system now also builds a static library.
  • A hashing scheme can now be tagged with a version number.

Changed

  • API for the pass and oath module have slightly changed.

[0.10.0] - 2018-08-11

Changed

  • Password API has been completely rewrote.

[0.9.0] - 2018-04-22

Added

  • OATH support for sha224, sha384, sha512 trunc 224 and sha512 trunc 256.
  • OATH support for sha3-224, sha3-256, sha3-384, sha3-512, Keccak224, Keccak256, Keccak384, Keccak512.
  • NFKC normalization for Unicode passwords.

Changed

  • Identifiers for sha256 and sha512 has been changed (compatibility break).

[0.8.0] - 2018-04-08

Added

  • base64 key support

Changed

  • The key module does no more implicitly call generate() when requesting the key in a certain form.

[0.7.0] - 2018-04-04

Added

  • Random key generation module.

Changed

  • Dependencies have been updated.

[0.6.1] - 2017-12-17

Changed

  • Python test and examples have been removed;
  • small documentation improvements.

[0.6.0] - 2017-11-26

Added

  • Password authentication.

Changed

  • The rust-crypto crate has been replaced by several crates from the RustCrypto project (although the name is very similar, those are two different projects);
  • the oath module does not not expose sub-modules anymore.

[0.5.3] - 2017-04-17

Added

  • TOTP tolerance.

Changed

  • The oath module does not not expose sub-modules anymore;
  • header guards now uses "#pragma once";
  • C tests now uses C11 standard and clang.

[0.5.2] - 2016-06-26

Changed

  • The project has been renamed LibreAuth (previous name: R2FA);
  • the license has been changed to the CeCILL Free Software License Agreement v2.1;
  • the otp module has been renamed oath.

Removed

  • The otp::c (oath::c) module is not public anymore.

[0.5.1] - 2015-08-07

This release fixed a buffer overflow in the C-bindings tests. Because this issue did not influence the Rust part of the code in any way, the crate has not be updated.

[0.5.0] - 2015-08-06

Added

  • C-bindings for OTP validation.

Changed

  • Errors are now represented by an enumeration instead of strings;
  • the C unit test suite has been rewritten.

Fixed

  • An integer overflow has been fixed in code length calculation.

[0.4.2] - 2015-08-04

This release is a cleanup release. No public interface has been changed.

[0.4.1] - 2015-08-03

Added

  • C-bindings are now part of this library and therefore no longer distributed in a separated project.

[0.4.0] - 2015-08-01

Last version without a changelog.