247 lines
7.7 KiB
Markdown
247 lines
7.7 KiB
Markdown
|
# Changelog
|
||
|
|
All notable changes to this project will be documented in this file.
|
||
|
|
|
||
|
|
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
|
||
|
|
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
||
|
|
|
||
|
|
## 0.6.7 (2024-10-15)
|
||
|
|
### Fixed
|
||
|
|
- Parsing `AuthorizedKeys` with whitespace in comments ([#289])
|
||
|
|
- `mpint` decoding in ECDSA signatures ([#290], [#291])
|
||
|
|
|
||
|
|
[#289]: https://github.com/RustCrypto/SSH/pull/289
|
||
|
|
[#290]: https://github.com/RustCrypto/SSH/pull/290
|
||
|
|
[#291]: https://github.com/RustCrypto/SSH/pull/291
|
||
|
|
|
||
|
|
## 0.6.6 (2024-04-11)
|
||
|
|
### Added
|
||
|
|
- impl `decode_as` for `KeypairData` ([#211])
|
||
|
|
|
||
|
|
### Changed
|
||
|
|
- clarify SSH vs OpenSSH formats ([#206])
|
||
|
|
|
||
|
|
### Fixed
|
||
|
|
- fix `certificate::OptionsMap` encoding ([#207])
|
||
|
|
- fixup `EcdsaPrivateKey` Debug impl ([#210])
|
||
|
|
|
||
|
|
[#206]: https://github.com/RustCrypto/SSH/pull/206
|
||
|
|
[#207]: https://github.com/RustCrypto/SSH/pull/207
|
||
|
|
[#210]: https://github.com/RustCrypto/SSH/pull/210
|
||
|
|
[#211]: https://github.com/RustCrypto/SSH/pull/211
|
||
|
|
|
||
|
|
## 0.6.5 (2024-03-12)
|
||
|
|
### Added
|
||
|
|
- `Sk*` constructors ([#201], [#204])
|
||
|
|
|
||
|
|
### Changed
|
||
|
|
- Simplify DSA signature encoding ([#193])
|
||
|
|
|
||
|
|
### Fixed
|
||
|
|
- Correct erroneous signature constants ([#202])
|
||
|
|
|
||
|
|
[#193]: https://github.com/RustCrypto/SSH/pull/193
|
||
|
|
[#201]: https://github.com/RustCrypto/SSH/pull/201
|
||
|
|
[#202]: https://github.com/RustCrypto/SSH/pull/202
|
||
|
|
[#204]: https://github.com/RustCrypto/SSH/pull/204
|
||
|
|
|
||
|
|
## 0.6.4 (2024-01-11)
|
||
|
|
### Added
|
||
|
|
- `Algorithm::Other` signature support ([#189])
|
||
|
|
|
||
|
|
### Fixed
|
||
|
|
- Add newline to `PublicKey::write_openssh_file` output ([#188])
|
||
|
|
- `DsaKeypair::try_sign` format error ([#191])
|
||
|
|
|
||
|
|
[#188]: https://github.com/RustCrypto/SSH/pull/188
|
||
|
|
[#189]: https://github.com/RustCrypto/SSH/pull/189
|
||
|
|
[#191]: https://github.com/RustCrypto/SSH/pull/191
|
||
|
|
|
||
|
|
## 0.6.3 (2023-11-20)
|
||
|
|
### Added
|
||
|
|
- `SkEcdsaSha2NistP256` signature validation ([#169])
|
||
|
|
- `p521` feature ([#180])
|
||
|
|
|
||
|
|
### Changed
|
||
|
|
- Maximum certificate timestamp time is now `i64::MAX` ([#175])
|
||
|
|
|
||
|
|
### Fixed
|
||
|
|
- Handle leading zeroes in `Mpint::from_positive_bytes` ([#171])
|
||
|
|
|
||
|
|
[#169]: https://github.com/RustCrypto/SSH/pull/169
|
||
|
|
[#171]: https://github.com/RustCrypto/SSH/pull/171
|
||
|
|
[#175]: https://github.com/RustCrypto/SSH/pull/175
|
||
|
|
[#180]: https://github.com/RustCrypto/SSH/pull/180
|
||
|
|
|
||
|
|
## 0.6.2 (2023-10-15)
|
||
|
|
### Added
|
||
|
|
- `SshSig` usage examples ([#166], [#167])
|
||
|
|
|
||
|
|
[#166]: https://github.com/RustCrypto/SSH/pull/166
|
||
|
|
[#167]: https://github.com/RustCrypto/SSH/pull/167
|
||
|
|
|
||
|
|
## 0.6.1 (2023-08-15)
|
||
|
|
### Fixed
|
||
|
|
- `minimal-versions` correctness for `sec1` dependency ([#154])
|
||
|
|
|
||
|
|
[#154]: https://github.com/RustCrypto/SSH/pull/154
|
||
|
|
|
||
|
|
## 0.6.0 (2023-08-13)
|
||
|
|
### Added
|
||
|
|
- Partial support for U2F signature verification ([#44])
|
||
|
|
- Support for `aes256-gcm@openssh.com` encryption ([#75])
|
||
|
|
- "randomart" public key fingerprint visualizations ([#77])
|
||
|
|
- `PrivateKey::encrypt_with_cipher` ([#79])
|
||
|
|
- Propagate `ssh_key::Error` through `signature::Error` ([#82])
|
||
|
|
- `crypto` feature ([#83])
|
||
|
|
- Support for AES-CBC, ChaCha20Poly1305, and TDES encryption ([#118])
|
||
|
|
- Basic support for nonstandard SSH key algorithms ([#136])
|
||
|
|
- Impl `Hash` for `PublicKey` and its parts ([#145], [#149])
|
||
|
|
|
||
|
|
### Changed
|
||
|
|
- Bump `signature` crate dependency to v2 ([#58])
|
||
|
|
- Use `ssh_key::Error` as error type for `TryFrom<&[u8]>` impl on `Signature` ([#59])
|
||
|
|
- Bump elliptic curve and password hash deps; MSRV 1.65 ([#66])
|
||
|
|
- `bcrypt-pbkdf` v0.10
|
||
|
|
- `dsa` v0.6
|
||
|
|
- `p256` v0.13
|
||
|
|
- `p384` v0.13
|
||
|
|
- `sec1` v0.7
|
||
|
|
- Use `&mut impl CryptoRngCore` for RNGs ([#67])
|
||
|
|
- Make `certificate::Builder::new` fallible ([#71])
|
||
|
|
- Rename `MPInt` => `Mpint` ([#76])
|
||
|
|
- Split `AlgorithmUnknown` and `AlgorithmUnsupported` ([#81])
|
||
|
|
- Bump `rsa` dependency to v0.9 ([#107])
|
||
|
|
- Extract symmetric encryption into `ssh-cipher` crate ([#125])
|
||
|
|
- Bump `ed25519-dalek` dependency to v2 ([#146])
|
||
|
|
- Bump `ssh-encoding` dependency to v0.2 ([#147])
|
||
|
|
|
||
|
|
### Fixed
|
||
|
|
- DSA signature encoding ([#115])
|
||
|
|
- `certificate::Builder::new_with_validity_times` ([#143])
|
||
|
|
|
||
|
|
[#44]: https://github.com/RustCrypto/SSH/pull/44
|
||
|
|
[#58]: https://github.com/RustCrypto/SSH/pull/58
|
||
|
|
[#59]: https://github.com/RustCrypto/SSH/pull/59
|
||
|
|
[#66]: https://github.com/RustCrypto/SSH/pull/66
|
||
|
|
[#67]: https://github.com/RustCrypto/SSH/pull/67
|
||
|
|
[#71]: https://github.com/RustCrypto/SSH/pull/71
|
||
|
|
[#75]: https://github.com/RustCrypto/SSH/pull/75
|
||
|
|
[#76]: https://github.com/RustCrypto/SSH/pull/76
|
||
|
|
[#77]: https://github.com/RustCrypto/SSH/pull/77
|
||
|
|
[#79]: https://github.com/RustCrypto/SSH/pull/79
|
||
|
|
[#81]: https://github.com/RustCrypto/SSH/pull/81
|
||
|
|
[#82]: https://github.com/RustCrypto/SSH/pull/82
|
||
|
|
[#83]: https://github.com/RustCrypto/SSH/pull/83
|
||
|
|
[#107]: https://github.com/RustCrypto/SSH/pull/107
|
||
|
|
[#115]: https://github.com/RustCrypto/SSH/pull/115
|
||
|
|
[#118]: https://github.com/RustCrypto/SSH/pull/118
|
||
|
|
[#125]: https://github.com/RustCrypto/SSH/pull/125
|
||
|
|
[#136]: https://github.com/RustCrypto/SSH/pull/136
|
||
|
|
[#143]: https://github.com/RustCrypto/SSH/pull/143
|
||
|
|
[#145]: https://github.com/RustCrypto/SSH/pull/145
|
||
|
|
[#146]: https://github.com/RustCrypto/SSH/pull/146
|
||
|
|
[#147]: https://github.com/RustCrypto/SSH/pull/147
|
||
|
|
[#149]: https://github.com/RustCrypto/SSH/pull/149
|
||
|
|
|
||
|
|
## 0.5.1 (2022-10-25)
|
||
|
|
### Changed
|
||
|
|
- README.md improvements ([#41])
|
||
|
|
|
||
|
|
[#41]: https://github.com/RustCrypto/SSH/pull/41
|
||
|
|
|
||
|
|
## 0.5.0 (2022-10-25)
|
||
|
|
### Added
|
||
|
|
- `p384` feature ([#21])
|
||
|
|
- `dsa` feature ([#22], [#23])
|
||
|
|
- "[sshsig]" support ([#28])
|
||
|
|
|
||
|
|
### Changed
|
||
|
|
- Bump `p256` to v0.11 ([#10])
|
||
|
|
- Bump MSRV to 1.60 ([#16])
|
||
|
|
- Bump `rsa` to v0.7 ([#20])
|
||
|
|
- Use `ssh-encoding` encoding crate ([#29], [#37])
|
||
|
|
|
||
|
|
### Removed
|
||
|
|
- `fingerprint` feature removed, now always-on ([#27])
|
||
|
|
|
||
|
|
[#10]: https://github.com/RustCrypto/SSH/pull/10
|
||
|
|
[#16]: https://github.com/RustCrypto/SSH/pull/16
|
||
|
|
[#20]: https://github.com/RustCrypto/SSH/pull/20
|
||
|
|
[#21]: https://github.com/RustCrypto/SSH/pull/21
|
||
|
|
[#22]: https://github.com/RustCrypto/SSH/pull/22
|
||
|
|
[#23]: https://github.com/RustCrypto/SSH/pull/23
|
||
|
|
[#27]: https://github.com/RustCrypto/SSH/pull/27
|
||
|
|
[#28]: https://github.com/RustCrypto/SSH/pull/28
|
||
|
|
[#29]: https://github.com/RustCrypto/SSH/pull/29
|
||
|
|
[#37]: https://github.com/RustCrypto/SSH/pull/37
|
||
|
|
[sshsig]: https://cvsweb.openbsd.org/src/usr.bin/ssh/PROTOCOL.sshsig?annotate=HEAD
|
||
|
|
|
||
|
|
## 0.4.3 (2022-09-25)
|
||
|
|
### Changed
|
||
|
|
- Move source code repository to <https://github.com/RustCrypto/SSH> ([#1])
|
||
|
|
|
||
|
|
[#1]: https://github.com/RustCrypto/SSH/pull/1
|
||
|
|
|
||
|
|
## 0.4.2 (2022-05-02)
|
||
|
|
### Added
|
||
|
|
- Support for parsing keys out of the ssh known_hosts file format
|
||
|
|
- Export `RsaPrivateKey`
|
||
|
|
- `From` conversions between algorithmic-specific key types and `PublicKey`/`PrivateKey`
|
||
|
|
|
||
|
|
## 0.4.1 (2022-04-26)
|
||
|
|
### Added
|
||
|
|
- Internal `UnixTime` helper type
|
||
|
|
|
||
|
|
### Changed
|
||
|
|
- Bump `pem-rfc7468` dependency to v0.6.0
|
||
|
|
- Further restrict maximum allowed timestamps
|
||
|
|
|
||
|
|
## 0.4.0 (2022-04-12)
|
||
|
|
### Added
|
||
|
|
- Private key decryption support
|
||
|
|
- Private key encryption support
|
||
|
|
- Ed25519 keygen/sign/verify support using `ed25519-dalek`
|
||
|
|
- Private key encryption
|
||
|
|
- Certificate decoder
|
||
|
|
- Certificate encoder
|
||
|
|
- Certificate validation support
|
||
|
|
- FIDO/U2F (`sk-*`) certificate and key support
|
||
|
|
- `certificate::Builder` (i.e. SSH CA support)
|
||
|
|
- ECDSA/NIST P-256 keygen/sign/verify support using `p256` crate
|
||
|
|
- RSA keygen/sign/verify support using `rsa` crate
|
||
|
|
- SHA-512 fingerprint support
|
||
|
|
- `serde` support
|
||
|
|
|
||
|
|
### Changed
|
||
|
|
- Consolidate `KdfAlg` and `KdfOpts` into `Kdf`
|
||
|
|
- Rename `CipherAlg` => `Cipher`
|
||
|
|
|
||
|
|
### Removed
|
||
|
|
- `PrivateKey::kdf_alg`
|
||
|
|
|
||
|
|
## 0.3.0 (2022-03-16)
|
||
|
|
### Added
|
||
|
|
- `FromStr` impls for key types
|
||
|
|
- `PublicKey` encoder
|
||
|
|
- `AuthorizedKeys` parser
|
||
|
|
- `PrivateKey::public_key` and `From` conversions
|
||
|
|
- `PrivateKey` encoder
|
||
|
|
- Validate private key padding bytes
|
||
|
|
- File I/O methods for `PrivateKey` and `PublicKey`
|
||
|
|
- SHA-256 fingerprint support
|
||
|
|
|
||
|
|
### Changed
|
||
|
|
- Use `pem-rfc7468` for private key PEM parser
|
||
|
|
- Make `PublicKey`/`PrivateKey` fields private
|
||
|
|
|
||
|
|
## 0.2.0 (2021-12-29)
|
||
|
|
### Added
|
||
|
|
- OpenSSH private key decoder
|
||
|
|
- `MPInt::as_positive_bytes`
|
||
|
|
|
||
|
|
### Changed
|
||
|
|
- `MPInt` validates the correct number of leading zeroes are used
|
||
|
|
|
||
|
|
## 0.1.0 (2021-12-02)
|
||
|
|
- Initial release
|