Releases: mnavarrocarter/fernet
Releases · mnavarrocarter/fernet
3.0.0
3.0.0 (2022-05-05)
Bug Fixes
Features
BREAKING CHANGES
- Not really. Just fixes stuff.
- Unfortunately, this release breaks BC so make all this improvements. However, public api surface of this library is so small that migration should be
effortless.
Version 2.x will still be mantained for security patches and bugfixes only.
v2.0.1
Security Fix:
- Implemented constant time comparison for the hmac hashes. This prevents timing attacks.
v2.0.0
This is a BC Break release.
- Removed
MNC\Fernet\EncoderInterface
andMNC\Fernet\DencoderInterface
interfaces. You should use theMNC\Fernet\Marshaller
interface instead. This interface combines the previous two with the same method signatures. MNC\Fernet\Marshaller
has one implementation now, theMNC\Fernet\Vx80Marshaller
. This can be created passing aMNC\Fernet\Vx80Key
.- The
MNC\Fernet\Vx80Key
is pretty much unchanged but is not under theVersion
namespace anymore. - Utility classes for encoding UrlSafe Base64 where renamed to namespaced functions instead of the old static class. Import
MNC\Fernet\UrlBase64\encode
andMNC\Fernet\UrlBase64\dencode
to use them. - Added a new
MNC\Fernet\Random\RandomSource
interface to abstract away the reading of random bytes.