2.3.3

• include latest WARDEN-roboto to work around upstream bug #77
• Dependency Updates:
  • Ktor 3.0.3

2.3.2

• Fix documentation issue (Android version was missing a zero in all docs)
• Dependency Updates
  • WARDEN-roboto 1.7.1 (also fixing the same documentation issue)
  • Kotlin 2.1.0
  • Signum Indispensable 3.12.0
  • Bouncy Castle 1.79

2.3.1

Behavioural Changes!

• Update to WARDEN-roboto 1.7.0
  • Android attestation statements (for SW, HW, but not Hybrid Nougat Attestation) do now verify attestation creation time!
  • Refer to the WARDEN-roboto changelog!
• Change Android verification offset calculation:
  It is now the sum of the toplevel offset and the Android-specific offset
• Change the reason for iOS attestation statement temporal invalidity:
  • It is now AttestationException.Content.iOS(cause = IosAttestationException(…, reason = IosAttestationException.Reason.STATEMENT_TIME))
    • This reason was newly introduced in this release, making it binary and source incompatible!
  • iOS attestations are now also rejected if their validity starts in the future
  • The validity time can now be configured in the same way as for Android, using the attestationStatementValiditySeconds property
  • Any configured verificationTimeOffset is NOT automatically compensated for any more. This means if you have previously used a five minutes offset, you now have to manually increase the attestationStatementValiditySeconds to 10 * 60!

2.2.0

• Introduce new attestation format

2.1.3

• Fix Parsing of iOS Build Numbers
• Dependency Updates:
  • Kotlin 2.0.20
  • Serialization 1.7.2

2.1.2

• Rebrand to WARDEN
• Rely on Signum to transcode public keys
• Add working hashCode and equals to AttestationResult and KeyAttestation
• Rework key attestation key comparison
  • Try all encodings for public keys
  • Throw exception with very detailed message when key attestation runs into a logical error
• Dependency Updates
  • Update android-attestation 1.5.2 to WARDEN-roboto 1.6.0

2.0.2

• Dependency Updates:
  • Android-Attestation 1.5.2 with HTTP Proxy support for fetching revocation info
  • Java 17
  • Kotlin 2.0.0
  • bouncycastle: 1.78.1!!
  • coroutines: 1.8.1
  • datetime: 0.6.0
  • kmmresult: 1.6.1
  • kotest: 5.9.1!!
  • kotlin: 2.0.0
  • ksp: 1.0.22
  • ktor: 2.3.11
  • napier: 2.7.1
  • nexus: 1.3.0
  • serialization: 1.7.1

2.0.1

Published maven artefacts are working again

2.0.0

Breaking changes ahead!

• Parsing of iOS Build numbers in addition to OS Versions
  • Requires changes to configuration format
  • Introduces changes to IOS Attestation result
• Update to latest android-attestation
  • Changes types of ParsedAttestationRecord's properties
  • Exposes Guava as API dependency

1.5.0

• better iOS-specific exception handling and enumerable error cases
• Kotlin 1.9.22
• Various dependency updates including BC