t_cose 1.1.2

Very minor change to correctly check QCBOR version dependency for recent QCBOR versions

t_cose 2.0 alpha 2

• Support for AES-CBC and AES-CTR modes for encryption
• Improved test coverage for decryption
• Rename "aad" in public interface to "externally supplied data"
• Improve documentation for signing
• Improve error reporting for signing
• Initialization bug fix for restartable signing with PSA crypto
• Fixes for the encoding and decoding of empty protected parameter buckets

t_cose 2.0 alpha 1

This is the first formal release of t_cose 2.0.

It is a large expansion from t_cose 1.0. The following are added:

• COSE_Sign
• Multiple signatures
• COSE_MAC0
• COSE_Encrypt0 and COSE_Encrypt
• ESDH encryption

Backwards compatibility is retained, though some error codes may be slightly different. If you care about code size, it is better to use newer APIs (e.g. t_cose_sign_sign) rather than the old ones (e.g., t_cose_sign1_sign).

There are some minor features missing like decode-only mode for decryption and AAD for HMAC. The newer features have only had basic testing. Documentation may be incomplete or missing.

The work to get t_cose 2.0 to a full release will not likely include any new feature additions. To get it to the quality level of t_cose 1.0 will take many months, probably into 2024 as there is a lot of testing and documentation work needed.

t_cose 2.0 alpha 3

Improvements to COSE_MAC

• Add ext_supp_data support
• Fix error handling for MAC header decoding
• Rework HMAC crypto layer for smaller code size (and unlimited header params).
• Add support for special (not string or integer) parameters
• Remove size limit on unprotected headers

Improvements to COSE_Encrypt

• Better error handling for decryption
• Test coverage for most invalid input

t_cose 1.1.1

The only change in this release is the addition of an option to disable the check and error failure for critical headers.

There is no need to pick up this release unless this option is of use.

t_cose 1.1

Added support for EdDSA and RSA signing algorithms.

New API to find out if an algorithm is supported. This is mostly used for automated tests.

t_cose 1.0.1

A critical bug fix for the OpenSSL crypto adapter. v.1.0 was producing incompatible signatures. Tests to make sure this doesn't happen again have also been added.

t_cose 1.0

This is the start of making formal releases of t_cose.

This 1.0 release is stable with no known issues. It is suitable for commercial deployment.

Changes in the last year have been small feature additions, improved documentation and portability improvements.

t_cose is maintained by Laurence Lundblade lgl@island-resort.com