cli/vendor/ssh-key/CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

0.6.7 (2024-10-15)

Fixed

• Parsing AuthorizedKeys with whitespace in comments (#289)
• mpint decoding in ECDSA signatures (#290, #291)

0.6.6 (2024-04-11)

Added

• impl decode_as for KeypairData (#211)

Changed

• clarify SSH vs OpenSSH formats (#206)

Fixed

• fix certificate::OptionsMap encoding (#207)
• fixup EcdsaPrivateKey Debug impl (#210)

0.6.5 (2024-03-12)

Added

• Sk* constructors (#201, #204)

Changed

• Simplify DSA signature encoding (#193)

Fixed

• Correct erroneous signature constants (#202)

0.6.4 (2024-01-11)

Added

• Algorithm::Other signature support (#189)

Fixed

• Add newline to PublicKey::write_openssh_file output (#188)
• DsaKeypair::try_sign format error (#191)

0.6.3 (2023-11-20)

Added

• SkEcdsaSha2NistP256 signature validation (#169)
• p521 feature (#180)

Changed

• Maximum certificate timestamp time is now i64::MAX (#175)

Fixed

• Handle leading zeroes in Mpint::from_positive_bytes (#171)

0.6.2 (2023-10-15)

Added

• SshSig usage examples (#166, #167)

0.6.1 (2023-08-15)

Fixed

• minimal-versions correctness for sec1 dependency (#154)

0.6.0 (2023-08-13)

Added

• Partial support for U2F signature verification (#44)
• Support for aes256-gcm@openssh.com encryption (#75)
• "randomart" public key fingerprint visualizations (#77)
• PrivateKey::encrypt_with_cipher (#79)
• Propagate ssh_key::Error through signature::Error (#82)
• crypto feature (#83)
• Support for AES-CBC, ChaCha20Poly1305, and TDES encryption (#118)
• Basic support for nonstandard SSH key algorithms (#136)
• Impl Hash for PublicKey and its parts (#145, #149)

Changed

• Bump signature crate dependency to v2 (#58)
• Use ssh_key::Error as error type for TryFrom<&[u8]> impl on Signature (#59)
• Bump elliptic curve and password hash deps; MSRV 1.65 (#66)
  • bcrypt-pbkdf v0.10
  • dsa v0.6
  • p256 v0.13
  • p384 v0.13
  • sec1 v0.7
• Use &mut impl CryptoRngCore for RNGs (#67)
• Make certificate::Builder::new fallible (#71)
• Rename MPInt => Mpint (#76)
• Split AlgorithmUnknown and AlgorithmUnsupported (#81)
• Bump rsa dependency to v0.9 (#107)
• Extract symmetric encryption into ssh-cipher crate (#125)
• Bump ed25519-dalek dependency to v2 (#146)
• Bump ssh-encoding dependency to v0.2 (#147)

Fixed

• DSA signature encoding (#115)
• certificate::Builder::new_with_validity_times (#143)

0.5.1 (2022-10-25)

Changed

• README.md improvements (#41)

0.5.0 (2022-10-25)

Added

• p384 feature (#21)
• dsa feature (#22, #23)
• "sshsig" support (#28)

Changed

• Bump p256 to v0.11 (#10)
• Bump MSRV to 1.60 (#16)
• Bump rsa to v0.7 (#20)
• Use ssh-encoding encoding crate (#29, #37)

Removed

• fingerprint feature removed, now always-on (#27)

0.4.3 (2022-09-25)

Changed

• Move source code repository to https://github.com/RustCrypto/SSH (#1)

0.4.2 (2022-05-02)

Added

• Support for parsing keys out of the ssh known_hosts file format
• Export RsaPrivateKey
• From conversions between algorithmic-specific key types and PublicKey/PrivateKey

0.4.1 (2022-04-26)

Added

• Internal UnixTime helper type

Changed

• Bump pem-rfc7468 dependency to v0.6.0
• Further restrict maximum allowed timestamps

0.4.0 (2022-04-12)

Added

• Private key decryption support
• Private key encryption support
• Ed25519 keygen/sign/verify support using ed25519-dalek
• Private key encryption
• Certificate decoder
• Certificate encoder
• Certificate validation support
• FIDO/U2F (sk-*) certificate and key support
• certificate::Builder (i.e. SSH CA support)
• ECDSA/NIST P-256 keygen/sign/verify support using p256 crate
• RSA keygen/sign/verify support using rsa crate
• SHA-512 fingerprint support
• serde support

Changed

• Consolidate KdfAlg and KdfOpts into Kdf
• Rename CipherAlg => Cipher

Removed

• PrivateKey::kdf_alg

0.3.0 (2022-03-16)

Added

• FromStr impls for key types
• PublicKey encoder
• AuthorizedKeys parser
• PrivateKey::public_key and From conversions
• PrivateKey encoder
• Validate private key padding bytes
• File I/O methods for PrivateKey and PublicKey
• SHA-256 fingerprint support

Changed

• Use pem-rfc7468 for private key PEM parser
• Make PublicKey/PrivateKey fields private

0.2.0 (2021-12-29)

Added

• OpenSSH private key decoder
• MPInt::as_positive_bytes

Changed

• MPInt validates the correct number of leading zeroes are used

0.1.0 (2021-12-02)

• Initial release