PGPainless/pgpainless
PGPainless/pgpainless
1
0
Fork 0
mirror of https://github.com/pgpainless/pgpainless.git synced 2024-12-26 12:58:02 +01:00
Code Issues Releases Wiki Activity

Update CHANGELOG

Browse source
This commit is contained in:
Paul Schaub 2022-04-22 23:06:46 +02:00
parent 9b8cf37dd1
commit 9b11b94354
Signed by: vanitasvitae
GPG key ID: 62BEE9264BF17311
1 changed files with 15 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
CHANGELOG.md
View file

@ -5,6 +5,21 @@ SPDX-License-Identifier: CC0-1.0
# PGPainless Changelog
## 1.2.1-SNAPSHOT
- Bump `sop-java` dependency to `1.2.2`
- Add experimental support for creating signatures over pre-calculated `MessageDigest` objects.
- `BcHashContextSigner.signHashContext()` can be used to create OpenPGP signatures over manually hashed data.
This allows applications to do the hashing themselves.
- Harden detection of binary/ascii armored/non-OpenPGP data
- Add `ConsumerOptions.forceNonOpenPgpData()` to force PGPainless to handle data as non-OpenPGP data
- This is a workaround for when PGPainless accidentally mistakes non-OpenPGP data for binary OpenPGP data
- Implement "smart" hash algorithm policies, which take the 'usage-date' for algorithms into account
- This allows for fine-grained signature hash algorithm policing with usage termination dates
- Switch to smart signature hash algorithm policies by default
- PGPainless now accepts SHA-1 signatures if they were made before 2013-02-01
- We also now accept RIPEMD160 signatures if they were made before 2013-02-01
- We further accept MD5 signatures made prior to 1997-02-01
## 1.2.0
- Improve exception hierarchy for key-related exceptions