NEWS (1512B)
1 Noteworthy changes 0.8.0 2 ======================== 3 4 * INCOMPATIBLE CHANGE, backups made by earlier C clients cannot be 5 recovered; the cause is some incongruence between the C and 6 TypeScript implementation where the C code had the KDF wrong which 7 was now resolved. 8 9 Recovery of such a backup fails with "failed to decrypt policy document 10 with the given identity attributes". There is no way for the client to 11 tell that case apart from genuinely mistyped identity attributes, since 12 the ciphertext looks the same either way -- the message names both 13 possibilities for that reason. Using an older client should still allow 14 recovery of the older backup. 15 16 * The provider REST API is now at protocol version 2:0:1. Clients that 17 advertise protocol version 0 (i.e. anything predating the key derivation 18 change above) are refused. 19 20 * libanastasisutil breaks ABI: its soname goes from 0 to 1. The four 21 decryption wrappers (ANASTASIS_CRYPTO_recovery_document_decrypt, 22 _keyshare_decrypt, _truth_decrypt and _core_secret_recover) used to be 23 void and to abort the process on ciphertext a malicious provider could 24 choose; they now return enum GNUNET_GenericReturnValue and the caller has 25 to check it. Out-of-tree users -- notably anastasis-gtk -- must be 26 rebuilt, and their call sites adjusted. 27 28 * Providers upgrading an existing database must run anastasis-dbinit to pick 29 up the stasis-0002 migration; it replaces the challenge-code index with 30 one garbage collection can actually use. 31