From 349329cdebf35bbb3767413ea8905aa4ababbf02 Mon Sep 17 00:00:00 2001 From: Kevin Lewi Date: Wed, 30 Jun 2021 12:14:38 -0700 Subject: [PATCH] Releasing v0.6.0 --- CHANGELOG.md | 13 +++++++++++++ Cargo.toml | 2 +- README.md | 4 ++-- src/lib.rs | 2 +- 4 files changed, 17 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index e3498d7..39d0f12 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,18 @@ # Changelog +## 0.6.0 (June 30, 2021) + +* Synced implementation with draft-irtf-cfrg-opaque-05, which changes + the envelope structure and introduces a ServerSetup object to be + maintained by the server +* Various security improvements: non-zero scalars, zeroizing on drop, + constant-time operations +* Adding serde support behind a feature +* Supporting common traits (eb59676) +* Swapping out scrypt for argon2 (535b9b8) for the slow-hash feature +* Adding support for common traits on public structs +* Updated dependencies + ## 0.5.0 (March 1, 2021) * Removed dependency on generic-bytes-derive package diff --git a/Cargo.toml b/Cargo.toml index c029b3a..68bcdef 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "opaque-ke" -version = "0.6.0-pre.1" +version = "0.6.0" repository = "https://github.com/novifinancial/opaque-ke" keywords = ["cryptography", "crypto", "opaque", "passwords", "authentication"] description = "An implementation of the OPAQUE password-authenticated key exchange protocol" diff --git a/README.md b/README.md index c8dad1e..41443d8 100644 --- a/README.md +++ b/README.md @@ -22,14 +22,14 @@ Installation Add the following line to the dependencies of your `Cargo.toml`: ``` -opaque-ke = "0.5.0" +opaque-ke = "0.6.0" ``` Resources --------- - [OPAQUE academic publication](https://eprint.iacr.org/2018/163.pdf), including formal definitions and a proof of security -- [draft-irtf-cfrg-opaque-03](https://www.ietf.org/archive/id/draft-irtf-cfrg-opaque-03.html), containing a detailed (byte-level) specification for OPAQUE +- [draft-irtf-cfrg-opaque-05](https://www.ietf.org/archive/id/draft-irtf-cfrg-opaque-05.html), containing a detailed (byte-level) specification for OPAQUE - ["Let's talk about PAKE"](https://blog.cryptographyengineering.com/2018/10/19/lets-talk-about-pake/), an introductory blog post written by Matthew Green that covers OPAQUE - [opaque-wasm](https://github.com/marucjmar/opaque-wasm), a WebAssembly package for this library diff --git a/src/lib.rs b/src/lib.rs index fe1b9ce..8857e2c 100644 --- a/src/lib.rs +++ b/src/lib.rs @@ -5,7 +5,7 @@ //! An implementation of the OPAQUE asymmetric password authentication key exchange protocol //! -//! Note: This implementation is in sync with [draft-irtf-cfrg-opaque-03](https://www.ietf.org/archive/id/draft-irtf-cfrg-opaque-03.html), +//! Note: This implementation is in sync with [draft-irtf-cfrg-opaque-05](https://www.ietf.org/archive/id/draft-irtf-cfrg-opaque-05.html), //! but this specification is subject to change, until the final version published by the IETF. //! //! # Overview