Releases: matrix-org/vodozemac
0.8.1
0.8.0
What's Changed
Features
-
Apply the const keyword to many methods (#167).
-
[BREAKING] The
Account::sign()
method now accepts animpl AsRef<[u8]>
for the message instead of a&str
. This has been streamlined to be like
most of our other methods accepting a message to be encrypted. This
change is mostly backwards compatible as the method will continue to
accept a string.
TheOlmMessage::from_parts()
andOlmMessage::to_parts()
methods now
accept and return an&[u8]
andVec<u8>
exclusively for the
ciphertext. Thebase64_encode()
andbase64_decode()
methods can be
used to achieve the previous behavior (#176). -
Add support for the libolm PkEncryption feature. This allows
Matrix clients to implement the m.megolm_backup.v1.curve25519-aes-sha2
room key backup algorithm. Please note that this algorithm contains a
critical flaw and should only be used for compatibility reasons (#171) (#180).
Refactor
0.7.0
What's Changed
Features
- Add an Elliptic Curve Integrated Encryption Scheme. This scheme can be used to establish a secure ephemeral encrypted channel, in situations for which Olm may be unsuitable due to complexity or the unavailability of long-term identity keys. There is also support for out-of-band authentication of the receiver side. The scheme was designed primarily for purposes of implementing Matrix QR code login. (#151).
Security
- Use a constant-time Base64 encoder for secret key material to mitigate side-channel attacks leaking secret key material (#156) (Low, CVE-2024-40640, GHSA-j8cm-g7r6-hfpq).