rsa

Compatibility update for breaking changes in crypto-bigint

rsa v0.10.0-rc.15 (#651)

Includes rand_core v0.10.0-rc-6 upgrade with (Try)RngCore =>
(Try)Rng rename

v0.10.0-rc.13 (#635)

v0.10.0-rc.12 (#629)

v0.10.0-rc.11 (#622)

Fixed

• do not panic on a prime being 1 when loading a secret key (#624)

Fixed

• Support for cryptographic operations with larger keys (#594)

Added

• Doc comments to specify the rand version (#473)

Fixed

• Always validate keys in RsaPrivateKey::from_components (#459)
• Do not crash when handling tiny keys in PKCS1v15 (#459)

Added

• expose a pss::get_default_pss_signature_algo_id helper (#393)
• expose pkcs1v15::RsaSignatureAssociatedOid (#392)

Added

• Adds RsaPrivateKey::from_primes and RsaPrivateKey::from_p_q methods (#386)

Added

• Deterministic implementation of prime factors recovery (#380)

Added

• PKCS#8/SPKI decoding trait impls for pkcs1v15 keys (#346)
• hazmat feature as a replacement for expose-internals (#352)

Changed

• Bump serde dependency to 1.0.184 (#360)

Removed

• Unused dependencies (#357)

Fixed

• pkcs1v15: have fmt impls call SignatureEncoding::to_bytes (#330)

Fixed

• Left pad signatures when encoding (#325)

Added

• Function to get salt length from RSA PSS keys (#277)
• AssociatedAlgorithmIdentifier implementation (#278)
• Random key generation for pss::BlindedSigningKey (#295)
• Impl Signer for pss::SigningKey (#297)
• Impl core::hash::Hash for RsaPrivateKey (#308)
• Impl ZeroizeOnDrop for RsaPrivateKey, SigningKey, DecryptingKey (#311)
• u64_digit feature; on-by-default (#313)
• AsRef<RsaPublicKey> impl on RsaPrivateKey (#317)

Changed

• Use namespaced features for serde (#268)
• Bump pkcs1 to v0.7, pkcs8 to v0.10; MSRV 1.65 (#270)
• Rename PKCS#1v1.5 *_with_prefix methods (#290)
  • SigningKey::new => SigningKey::new_unprefixed
  • SigningKey::new_with_prefix => SigningKey::new
  • VerifyingKey::new => VerifyingKey::new_unprefixed
  • VerifyingKey::new_with_prefix => VerifyingKey::new
• Rename Pkcs1v15Sign::new_raw to Pkcs1v15Sign::new_unprefixed (#293)
• Use digest output size as default PSS salt length (#294)
• Specify salt_len when verifying PSS signatures (#294)
• Ensure signatures have the expected length and don't overflow the modulus (#306)
• Improved public key checks (#307)
• Rename CRTValue => CrtValue (#314)
• Traits under padding module now located under traits module (#315)
• PublicKeyParts/PrivateKeyParts now located under traits module (#315)

Removed

• "Unsalted" PSS support (#294)
• EncryptionPrimitive/DescriptionPrimitive traits (#300)
• PublicKey/PrivateKey traits (#300)
• Zeroize impl on RsaPrivateKey; automatically zeroized on drop (#311)
• Deref<Target=RsaPublicKey> impl on RsaPrivateKey; use AsRef instead (#317)
• expose-internals feature and public access to all functions it gated ([#304])

Added

• Encryption-related traits (#259)

Fixed

• Possible panic in internals::left_pad (#262)
• Correct PSS sign/verify when key length is multiple of 8+1 bits (#263)

Added

• sha2 feature with oid subfeature enabled (#255)

Changed

• Bump signature crate dependency to v2 (#217, #249)
• Switch to CryptoRngCore marker trait (#237)
• Make padding module private (#243)
• Refactor PaddingScheme into a trait (#244)

Fixed

• Benchmark build (#225)

Added

• Public accessor methods for PrecomputedValues (#221)
• Re-export signature crate (#223)

Added

• Documentation improvements (#216)

Changed

• Ensure PaddingScheme is Send and Sync (#215)

NOTE: when computing signatures with this release, make sure to enable the oid crate feature of the digest crate you are using when computing the signature (e.g. sha2, sha3). If the oid feature doesn't exist, make sure you're using the latest versions.

Added

• pkcs1v15 and pss modules with SigningKey/VerifyingKey types (#174, #195, #202, #207, #208)
• 4096-bit default max RsaPublicKey size (#176)
• RsaPublicKey::new_with_max_size (#176)
• RsaPublicKey::new_unchecked (#206)

Changed

• MSRV 1.57 (#162)
• Bump pkcs1 to 0.4 (#162)
• Bump pkcs8 to 0.9 (#162)
• RsaPrivateKey::from_components is now fallible (#167)
• pkcs1v15: use AssociatedOid for getting the RSA prefix (#183)

Removed

• rng member from PSS padding scheme (#173)
• Hash removed in favor of using OIDs defined in digest crates (#183)