a-sit-plus/signum 3.16.0

3.16.0 (Supreme 0.8.0)

on GitHub

Symmetric Encryption and Major Cleanups

• Note: All debug-only kotlinx.serialization for cryptographic datatypes like certificates, public keys, etc. was removed!

  • We support robust ASN.1 encoding and mapping from/to JOSE and COSE datatypes and our ASN.1 structures support pretty printing.
  • -> There is no need for this misleading serialization support for debugging anymore.
  • @Serializable suggests deserialization from JSON, CBOR, etc. works, which was never universally true.
  • Getting native ASN.1 serialization for kotlinx-serialization is now a no-brainer given we support every primitive required.
  • Serializers like X509CertificateBase64UrlSerializer are here to stay because those are universally useful!
  • ObjectIdSerializer was renamed to ObjectIdentifierStringSerializer

• HMAC Support

  • This finally cleans up the RSAorHMAC mess, which is a breaking change
  • Introduce umbrella DataIntegrityAlgorithms, which is the parent of SignatureAlgorithm and MessageAuthenticationCode
  • JwsAlgorithm and CoseAlgorithm are now abstract, having subclasses.
  • JwsAlgorithms and CoseAlgorithms are now available under .Signature and .MAC respectively. There are no toplevel constants of predefined algorithms anymore!

• Symmetric Encryption

  • Supported Algorithms
    • AES
      • GCM
      • CBC-HMAC
      • CBC
      • ECB
      • KW
    • ChaCha-Poly1305
  • Add algorithm mappings to indispensable-josef This is a binary-incompatible change
    • ivLength and encryptionKeyLength now return BitLength instead of Int
    • text is now properly called identifier

• Move HazardousMaterials annotation from supreme to indispensable This is a breaking change

• Move SecretExposure annotation from supreme to indispensable This is a breaking change

• Expose SecureRandom as API dependency in indispensable

• Rename CoseAlgorithm.value -> CoseAlgorithm.coseValue

• Fix COSE key parsing for unordered properties

• Remove code elements deprecated in 3.15.0, related to OID4VCI and HAIP