Skip to content

Latest commit

 

History

History
142 lines (89 loc) · 4.06 KB

CHANGELOG.md

File metadata and controls

142 lines (89 loc) · 4.06 KB
Raw

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

0.8.0.rc1 - 2024-12-16

Added

  • Add Ruby 3.4.0-rc1 support to the precompiled, native gems

Changed

  • Provide separate precompiled, native gems for GNU and Musl
  • Require glibc 2.29+ for x86-linux-gnu and x86_64-linux-gnu (and recommend RubyGems 3.3.22+ and Bundler 2.3.21+)

Removed

  • Drop support for Ruby versions older than 3.1 as they do not ship with a version of RubyGems new enough to handle the new Musl gems

0.7.0 - 2024-11-08

Fixed

  • Fixed verifying Argon2id encoded hashes without a version number on JRuby

Added

  • Added a new Argon2id::Password.valid_hash? API for testing if a given encoded hash is a valid Argon2id hash or not (e.g. if you want to check which hashing function was used to store a user's password)

0.6.0 - 2024-11-05

Changed

  • Move the internal API to Argon2id::Password and make it explicitly private

0.5.0 - 2024-11-02

Removed

  • No longer expose the type of an encoded hash as it must always be an Argon2id hash

0.4.1 - 2024-11-02

Changed

  • Refactor verification on JRuby to avoid parsing encoded hashes unnecessarily
  • No longer describe the gem in terms of bindings to the reference C implementation given the Bouncy Castle-based JRuby implementation
  • Only wrap IllegalStateException with Argon2id::Error on JRuby

0.4.0 - 2024-11-02

Added

  • Added support for JRuby 9.4 by adding an implementation of Argon2id hashing and verification using JRuby-OpenSSL's Bouncy Castle internals
  • Added output to Argon2id::Password instances so the actual "output" part of a password hash can be retrieved (and compared)

Changed

  • Verifying a password will now consistently raise an ArgumentError when given an invalid encoded hash rather than an Argon2id::Error

0.3.0 - 2024-11-01

Added

  • Expose all parameters of a hash through new readers on Argon2id::Password: namely, type, version, m_cost, t_cost, and parallelism

Changed

  • Remove the dependency on the base64 gem by inlining the definition of Base64.decode64 (thanks to @etiennebarrie for the tip)

0.2.1 - 2024-11-01

Added

  • Anything that can be coerced to a String can now be passed to Argon2id::Password.new

0.2.0 - 2024-11-01

Added

  • The original salt for an Argon2id::Password can now be retrieved with Argon2id::Password#salt

Changed

  • Encoded hashes are now validated when initialising an Argon2id::Password, raising an ArgumentError if they are invalid

0.1.2 - 2024-11-01

Fixed

  • Validate that the encoded hash passed to Argon2id::Password.new is a null-terminated C string, raising an ArgumentError if it contains extra null bytes

0.1.1 - 2024-11-01

Added

  • RDoc documentation for the API

Fixed

  • Saved a superfluous extra byte when allocating the buffer for the encoded hash

0.1.0 - 2024-10-31

Added

  • The initial version of the Argon2id gem, providing Ruby bindings to the reference C implementation of Argon2, the password-hashing function that won the Password Hashing Competition.