Release 1.1.0

This release contains following improvements:

• Improved validation of public keys during import.
• Increased salt size for Argon2 hashes.
• Various minor improvements of code quality.
• Dependency updates.

Release 1.0.0

This release contains following improvements:

• Random generator switched to the Bouncy Castle implementation which provides better quantum attack resistance for generated keys.
• Improved handling of unknown signature types.
• Dependency updates.

Release 0.24.0

This release contains following improvements:

• Crypto provider abstraction has been removed, Bouncy Castle is available as the only provider.
• OTP_USED activation state renamed to PENDING_COMMIT.
• Length of generated authorization OTP code can be specified.
• Documentation updates related to the additional activation OTP feature.
• Dependency updates.

Release 0.23.0

Changes related to PowerAuth protocol version 3.1:

• Improved information entropy in PowerAuth online signatures using BASE64 encoding.
• Improved protection of encrypted status blob against possible replay attacks.
• Improved protection of payload encrypted by our ECIES scheme.
• Improved protocol reliability by allowing the mobile client to synchronize its counter with the server.

Additional improvements and bug fixes:

• Fix for classloader issues with Bouncy Castle library.
• Improved error logging.
• Dependency updates related to security advisories.

Release 0.22.0

This release contains following improvements:

• Cryptography support for activation recovery using recovery code and PUK
• Hashing of recovery PUKs using the Argon2i algorithm
• Updated Bouncy Castle dependency to version 1.61
• Library can be deployed on Java 11

Release 0.21.0

Changes related to PowerAuth protocol version 3:

• Implementation of ECIES encryption scheme
• Introduction of hash-based counter for signatures
• Updated encrypted status blob in activations
• Updated fingerprint for activations
• Support for activation codes with CRC checksum
• Unified error handling using exceptions
• New encryption HTTP header for PowerAuth
• Deprecated legacy end-to-end encryption
• Dependency updates

Release 0.19.0

Minor update of the SDK. The update mainly contains library updates, JavaDoc and import cleanup, and finally, the unnecessary dependency on Spring Boot parent was removed.

Release 0.18.0

This release only contains dependency updates.

Release 0.17.0

This release introduces:

• Cryptography for a simple Token Based Authentication.
• Standard ECIES based encryptor.
• Fixed routine for public key fingerprint calculation.

Other minor bugfixes and improvements. See list of all fixed issues for details.

Release 0.16.1

Bugfixes and minor improvements