Skip to content

Releases: ProtonMail/gopenpgp

Release version 2.3.0

15 Nov 15:09
eb1cf0f
Compare
Choose a tag to compare

Added Key.IsRevoked() to check the revocation status of a key and upgraded underlying crypto library to fix handling of revoked keys

Release version 2.2.5

11 Nov 16:32
420bb96
Compare
Choose a tag to compare

The global pgp variable fields is now protected with a lock and dummy keys are locked and unlocked correctly

Release version 2.2.4

29 Sep 14:57
d1b2846
Compare
Choose a tag to compare

Fixed

  • Use the provided verifyTime instead of the current time when verifying embedded signatures.

Release version 2.2.3

21 Sep 12:05
0b639a2
Compare
Choose a tag to compare

Changed

  • Keys are now generated with ZLIB as optional compression algorithm
  • Upgraded underlying crypto library

Release version 2.2.2

04 Aug 11:28
88d6696
Compare
Choose a tag to compare

Added

  • NewKeyFromEntity to create a key from an openpgp entity

Changed

  • Improved documentation for differences between text and binary messages

Deprecated

  • (key *Key) Check() (bool, error) is now deprecated, all keys are now checked upon import from x/crypto

Fixed

  • Dummy keys now show the correct locked/unlocked status

Security

  • All keys are now checked on parsing from the underlying library

v2.2.1: Merge pull request #140 from ProtonMail/release-2.2.1

27 Jul 12:35
dc08a38
Compare
Choose a tag to compare

Changed

  • Changed the returned SignatureVerificationError.Status when trying to verify a message with no embedded signature. It used to return constants.SIGNATURE_NO_VERIFIER and now returns constants.SIGNATURE_NOT_SIGNED.
    This change impacts :
    • func (sk *SessionKey) DecryptAndVerify(...)
    • func (msg *PlainMessageReader) VerifySignature(...)
    • func (keyRing *KeyRing) Decrypt(...)
  • Improved error messages for failures in password protected message decryption

Added

  • Helper to access the SignatureVerificationError explicitly when decrypting streams in mobile apps:
     func VerifySignatureExplicit(
     	reader *crypto.PlainMessageReader,
     ) (signatureVerificationError *crypto.SignatureVerificationError, err error)

Release version 2.2.0

30 Jun 15:08
cba6683
Compare
Choose a tag to compare

Add streaming API

Release version 2.1.10

16 Jun 12:07
039f757
Compare
Choose a tag to compare

Removed time interpolation via monotonic clock that can cause signatures in the future

Release version 2.1.9

12 May 08:09
0e109ca
Compare
Choose a tag to compare

Upgrade the underlying go-crypto forking off from x/crypto, remove duplicate modules.

Release version 2.1.8

27 Apr 15:41
Compare
Choose a tag to compare

Added:

  • Key and KeyRing methods to check if a key/keyring can Encrypt or Verify
(key *Key) CanVerify() bool
(key *Key) CanEncrypt() bool
(keyRing *KeyRing) CanVerify() bool
(keyRing *KeyRing) CanEncrypt() bool
  • SessionKey methods to encrypt/decrypt and simultaneously sign/verify with an asymmetric key (embedded signature)
(sk *SessionKey) EncryptAndSign(message *PlainMessage, signKeyRing *KeyRing) ([]byte, error)
(sk *SessionKey) DecryptAndVerify(dataPacket []byte, verifyKeyRing *KeyRing, verifyTime int64) (*PlainMessage, error)
  • The mobile helper DecryptSessionKeyExplicitVerify to allow using session key decryption + verification operations via gomobile