- Update
github.com/ProtonMail/go-crypto
to latest version.
- Changed API for challenge solvers to use int64 instead of uint64 for go-mobile
- Removed usage of time API that were incompatible with golang < 1.17
- New function
Argon2PreimageChallenge
to solve new hash preimage challenges.
- Update
github.com/cronokirby/saferith
dependency to v0.33.0. Adds assembly routines support for more platforms - Update
ECDLPChallenge
to the new specification. - Validate that 2 is a generator for SRP moduli
- Removed support for building with glide
- Fix the hash generation for users with SRP legacy authentication version 0.
- Add a
Version
property toAuth
struct to let the client access the version number used for authentication.
- Changed the return type of
ECDLPChallenge
from uint64 to int64 to be supported by gomobile. - Use
github.com/ProtonMail/bcrypt
directly instead of relying on replace statements forjackfan.us.kg/jameskeane/bcrypt
.
- Use the
$2y$
version ofbcrypt
internally directly instead of using a workaround with$2a$
. - Update the
github.com/cronokirby/saferith
arithmetic library to v0.32.0 to fix issues for devices with 32bits architectures.
- New function
ECDLPChallenge
to solve Elliptic Curve Discrete Logaritm Problem challenges.
- Use
github.com/cronokirby/saferith.Nat
instead ofmath/big.Int
for sensitive operations, to avoid side channel attacks. - Updated
saferith
tov0.31.0
- Deleted
srp_openpgp.go
andsrp_openpgp_test.go
as it was redundant and unused.
- Add
NewServerWithSecret
function to create a custom server instance.
- Updated ProtonMail/go-crypto to the latest version and reverted to use standard library packages in some cases.
- Changed all interfaces taking a password to use []byte instead of string
- tests
- pmapi#27 modulus pubkey and verification
- password hash functions for different versions