All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
1.0.2 (2024-11-10)
- release 1.0.2 (64bcf86)
- chore: Bump golang.org/x/crypto from 0.28.0 to 0.29.0 (7d61928)
- chore: Bump golang.org/x/crypto from 0.27.0 to 0.28.0 (dbe7209)
1.0.1 (2024-09-12)
1.0.0 (2023-12-03)
- deps: bump golang.org/x/crypto from 0.13.0 to 0.16.0
- deps: bump golang.org/x/crypto from 0.13.0 to 0.16.0 (8dbc527)
- release 1.0.0 (fbe015c)
0.3.4 (2023-09-06)
- deps: updates dependencies (efcbcce)
0.3.3 (2023-07-04)
- .github/dependabot: fixes branch targets in dependabot configuration. (64ab947)
v0.3.2 - 2022-11-18
- deps: updates to
golang.org/x/[email protected]
. - .github: adjusts dependabot to file version updates against development.
v0.3.1 - 2022-11-10
- deps: updates to
golang.org/x/[email protected]
.
v0.3.0 - 2022-11-05
- .github: adds support for github actions, codeowners and dependabot.
- deps: updates to
[email protected]
andgolang.org/x/[email protected]
. - readme: update badges and remove references to travis ci.
- *: update project licensing.
- argon2: fixes grammar and comment line length.
- dep: removes support for dep.
- travis: removes travis configuration.
v0.2.1 - 2022-02-22
GPG signed release.
- tests: adds benchmarks to compare the default recommendations.
- travis: updates to test against go1.17.
- deps: updates
go.mod
to[email protected]
andx/crypto
to latest. - explicitly ignores returned error values under benchmarks (errcheck).
- argon2: updates recommended defaults as described by RFC9106.
v0.2.0 - 2022-02-22
- tests: adds benchmarks to compare the default recommendations.
- travis: updates to test against go1.17.
- deps: updates
go.mod
to[email protected]
andx/crypto
to latest. - explicitly ignores returned error values under benchmarks (errcheck).
- argon2: updates recommended defaults as described by RFC9106.
v0.1.5 - 2021-08-06
- travis: require go >= v1.9
- deps: bumps to the latest version of
golang.org/x/crypto
. - Upgrades to mitigate users importing a vulnerable version of
golang.org/x/crypto/ssh
that contains CVE-2020-9283. - Upgrades to mitigate users importing a vulnerable version of
golang.org/x/text
that contains CVE-2020-14040. - travis: updated to test against go 1.12+, migrates to go mod for dependency management.
- travis: forces use of go modules under ci.
- travis: sets
[email protected]
as the lowest supportedgo mod
version due to a change in go build.
v0.1.4 - 2021-08-06
- readme: updated.
v0.1.3 - 2021-08-06
- deps: adds support for go modules.
- travis: updates to test against
go@{1.12, 1.13, 1.14}
- deps: update
x/crypto@master
to point to latest commit.- This is mainly to mitigate users from CVEs in other
x/crypto
implementations, namely CVE-2020-7919 (cryptobyte) and CVE-2020-9283 (ssh).
- This is mainly to mitigate users from CVEs in other
- readme: adds a tl;dr, updates benchmarks.
- _example: fixes calling location of
VerifyEncoded()
- tests: removes benchmarking against native bindings to remove dependencies under go mod.
v0.1.2 - 2018-09-18
- tests: added benchmarks to compare against native argon2 bindings.
- readme: updated to include travis build badge.
- argon2: Updates SecureZeroMemory to match upstream for better performance.
- deps: Updated to support dep v0.5.0
- readme: Update with new benchmark stats due to SecureZeroMemory performance tweak.
- readme: Fixes example pathing.
v0.1.1 - 2018-06-14
- deps: unpins golang.org/x/crypto from a specific revision.
v0.1.0 - 2018-05-30
- Initial Commit
- git: Fixes repo github links
- readme: Fix example link