Skip to content

Releases: mnavarrocarter/fernet

3.0.0

05 May 17:40
6c9c77f
Compare
Choose a tag to compare

3.0.0 (2022-05-05)

Bug Fixes

Features

BREAKING CHANGES

  • Not really. Just fixes stuff.
  • Unfortunately, this release breaks BC so make all this improvements. However, public api surface of this library is so small that migration should be
    effortless.

Version 2.x will still be mantained for security patches and bugfixes only.

v2.0.1

09 Nov 21:10
da74714
Compare
Choose a tag to compare

Security Fix:

  • Implemented constant time comparison for the hmac hashes. This prevents timing attacks.

v2.0.0

09 Nov 21:04
757e83e
Compare
Choose a tag to compare

This is a BC Break release.

  • Removed MNC\Fernet\EncoderInterface and MNC\Fernet\DencoderInterface interfaces. You should use the MNC\Fernet\Marshaller interface instead. This interface combines the previous two with the same method signatures.
  • MNC\Fernet\Marshaller has one implementation now, the MNC\Fernet\Vx80Marshaller. This can be created passing a MNC\Fernet\Vx80Key.
  • The MNC\Fernet\Vx80Key is pretty much unchanged but is not under the Version namespace anymore.
  • Utility classes for encoding UrlSafe Base64 where renamed to namespaced functions instead of the old static class. Import MNC\Fernet\UrlBase64\encode and MNC\Fernet\UrlBase64\dencode to use them.
  • Added a new MNC\Fernet\Random\RandomSource interface to abstract away the reading of random bytes.