Release version 2.4.3

Security

• Fixed incorrect MDC parsing for session key decryption

Changed

• SeparateKeyAndData is now implemented in a more generic way, by checking for the location in the bytes of the last session key packet, then splitting the binary message after that point.

Fixed

• SeparateKeyAndData now correctly parses AEAD packets.
• (ap *AttachmentProcessor) Finish() now returns encryption errors correctly.

Release version 2.4.2

Update underlying crypto library and prevent AEAD messages from being created until the specification is stable

Release version 2.4.1

Fixed bug with NewPGPSplitMessageFromArmored(armored) and PGPMessage.SeparateKeyAndData(). Those functions didn't parse AEAD encrypted messages correctly (eg messages encrypted with the latest versions of gnupg), resulting in a nil DataPacket.

Release version 2.4.0

Update underlying crypto library and add functionality to get the signature timestamp of a verified signature

Release version 2.3.1

Fix the verification of PGP/MIME message signatures:

• Improve the handling of the dual verification status so that it is considered invalid if both embedded and PGP/MIME signatures are invalid.
• start calling callback.OnVerified(status int) to communicate the status verification of the message.

Release version 2.3.0

Added Key.IsRevoked() to check the revocation status of a key and upgraded underlying crypto library to fix handling of revoked keys

Release version 2.2.5

The global pgp variable fields is now protected with a lock and dummy keys are locked and unlocked correctly

Release version 2.2.4

Fixed

• Use the provided verifyTime instead of the current time when verifying embedded signatures.

Release version 2.2.3

Changed

• Keys are now generated with ZLIB as optional compression algorithm
• Upgraded underlying crypto library

Release version 2.2.2

Added

• NewKeyFromEntity to create a key from an openpgp entity

Changed

• Improved documentation for differences between text and binary messages

Deprecated

• (key *Key) Check() (bool, error) is now deprecated, all keys are now checked upon import from x/crypto

Fixed

• Dummy keys now show the correct locked/unlocked status

Security

• All keys are now checked on parsing from the underlying library