anastasis

Credential backup and recovery protocol and service
Log | Files | Refs | Submodules | README | LICENSE

NEWS (1512B)


      1 Noteworthy changes 0.8.0
      2 ========================
      3 
      4 * INCOMPATIBLE CHANGE, backups made by earlier C clients cannot be
      5   recovered; the cause is some incongruence between the C and
      6   TypeScript implementation where the C code had the KDF wrong which
      7   was now resolved.
      8 
      9   Recovery of such a backup fails with "failed to decrypt policy document
     10   with the given identity attributes".  There is no way for the client to
     11   tell that case apart from genuinely mistyped identity attributes, since
     12   the ciphertext looks the same either way -- the message names both
     13   possibilities for that reason. Using an older client should still allow
     14   recovery of the older backup.
     15 
     16 * The provider REST API is now at protocol version 2:0:1.  Clients that
     17   advertise protocol version 0 (i.e. anything predating the key derivation
     18   change above) are refused.
     19 
     20 * libanastasisutil breaks ABI: its soname goes from 0 to 1.  The four
     21   decryption wrappers (ANASTASIS_CRYPTO_recovery_document_decrypt,
     22   _keyshare_decrypt, _truth_decrypt and _core_secret_recover) used to be
     23   void and to abort the process on ciphertext a malicious provider could
     24   choose; they now return enum GNUNET_GenericReturnValue and the caller has
     25   to check it.  Out-of-tree users -- notably anastasis-gtk -- must be
     26   rebuilt, and their call sites adjusted.
     27 
     28 * Providers upgrading an existing database must run anastasis-dbinit to pick
     29   up the stasis-0002 migration; it replaces the challenge-code index with
     30   one garbage collection can actually use.
     31