cryptoki-0.12.0 (2026-01-22)
Implemented enhancements:
Closed issues:
Merged pull requests:
- fix(tests): check if SLH DSA can do key pair gen #348 (hug-dev)
- Remove
pastedependency #347 (bal-e) - fix: return an error if
C_GetFunctionListcouldn't be found #345 (supervacuus) - docs: update CHANGELOG #342 (hug-dev)
- Make Session Send #340 (hug-dev)
- test: Add Wycheproof-based AES-GCM tests #336 (testingapisname)
- Don't raise an error at close when it's expected #325 (EliseChouleur)
cryptoki-0.11.0 (2025-12-19)
cryptoki-sys-0.5.0 (2025-12-19)
Implemented enhancements:
- Add a way to pass a pointer for the "reserved" argument in CInitializeArgs() #321
- Support vendor defined error codes #299
Closed issues:
- Undefined behavior in CK_ATTRIBUTE::try_from or Session::get_attributes #323
- Consider opening visibility on ObjectHandle and SessionHandle #316
- Compatibility with Luna HSM's
libCryptoki2_64.so? #315 - Run tests against kryoptic main #311
- Consider wrapping C_Decapsulate #309
- Considering adding support for CKM_CONCATENATE_DATA_AND_BASE #308
- Run CI on more different architectures in some more systematic manner #285
- Upgrade Secrecy Crate #284
- Building on ix86 fails #282
- EcKdf documentation unclear #281
- Add a new constructor that does not call C_Finalize when dropped #208
- finalize() without drop()? #150
Merged pull requests:
- Don't tie Session's lifetime to the Pkcs11 object. #337 (nwalfield)
- Fix #256: docs: Fix documentation references in MechanismInfo #334 (testingapisname)
- Truncate intermediate outputs of multi-part cipher operations #332 (satoqz)
- Fix CI pipelines #331 (Jakuje)
- Add initialize flags and pReserved to CInitializeArgs #330 (placintaalexandru)
- Run tests against kryoptic main #328 (Jakuje)
- Refactor initialing/finalizing Pkcs11 and Session structures #326 (hug-dev)
- Fix handling empty AllowedMechanisms attribute #324 (Jakuje)
- Miscellaneous updates #320 (hug-dev)
- Run tests against fips kryoptic current main #318 (Jakuje)
- Add pub unsafe accessors for object/session handles and ObjectHandle new #317 (jhshannon17)
- Adjust tests for new kryoptic 1.3.1 #313 (Jakuje)
- Fix WrapKeyAuthenticated parameter type from pkcs11 header #312 (Jakuje)
- Feat: Add mechanisms for simple key derivations #310 (jacobprudhomme)
- Add SLH-DSA mechanism #307 (Jakuje)
- Add support for PKCS#11 3.2 validation objects #306 (Jakuje)
- misc: Add simple containerfile to regenerate bindings #305 (Jakuje)
- Add support for Pkcs#11 Profile objects #304 (Jakuje)
- Fixup PKCS#11 headers definition (
C_UnwrapKey) #303 (Jakuje) - Expose vendor defined error code #300 (thgoebel)
- Remove ci.sh script to run all from workflow #298 (hug-dev)
- Run tests on arm64 architecture #297 (Jakuje)
- chore: fix clippy in tests #296 (hug-dev)
- context: Avoid clippy errors #295 (Jakuje)
- Set installed toolchain as default and bump MSRV to 1.77 #294 (wiktor-k)
- Fix Windows build compatibility #293 (mematthias)
- Add more setters for EcKdf. #292 (nwalfield)
- Fix Pkcs11::new bug preventing PKCS#11 library loading #291 (mematthias)
- Fix typos in doc texts #288 (Jakuje)
- Bumped secrecy crate from 0.8.0 to 0.10.3 #287 (ptdecker)
- Build and test in a matrix #286 (wiktor-k)
- ci: Run tests also on i686 #283 (Jakuje)
- Add PKCS#11 3.2 bindings + plug them into the cryptoki #264 (Jakuje)
cryptoki-0.10.0 (2025-06-03)
cryptoki-sys-0.4.0 (2025-06-03)
Implemented enhancements:
- Consider changing get_attribute_info_map from taking a Vec to taking a slice #267
Closed issues:
- CKA_UNIQUE_ID not exposed #268
- PkcsOaepParams mis-aligned #266
- Thread Safety #260
- Suggestion: Have verification functions return
Result<bool>instead ofResult<()>#254 - Support for multi-part operations #250
- GcmParams ulIvBits being set to 0 causes issues with Thales HSMs #247
- Use GcmParams with AWS CloudHSM will cause undefined behavior #225
- Add support for C_GetInterfaceList #209
- bug:
is_fn_supported()always returnstrue#155
Merged pull requests:
- Update CI definitions #275 (wiktor-k)
- Add workspace resolver to fix a build warning #274 (wiktor-k)
- #267 Modify get_attribute_info_map to take slice instead of vec #273 (ivozeba)
- #266: Added conditional attribute to pack the PkcsOaepParams struct o… #272 (ivozeba)
- Add UniqueId Attribute #271 (Jakuje)
- Bump rust edition to 2021 #265 (Jakuje)
- tests: Be less strict in accepted interface versions #262 (Jakuje)
- Bump libloading version to 0.8.6 #261 (Jakuje)
- Feat: Add SHA key generation mechanisms #259 (jacobprudhomme)
- Remove skipping of kryoptic tests as they should work now #258 (Jakuje)
- Feat: Add NIST SP800-108 KDF mechanisms #257 (jacobprudhomme)
- Add support for message-based encryption and decryption (PKCS#11 3.0) #255 (Jakuje)
- Fixed failing tests for multi-part operations #253 (jacobprudhomme)
- Add bindings for multi-part operations #252 (jacobprudhomme)
- feat: add bindings for riscv64gc-unknown-linux-gnu target #251 (hug-dev)
- Set ulIvBits and more graceful error handling #249 (jaeparker22)
- Add support for PKCS#11 3.0 #248 (Jakuje)
- WIP: supports mutable IV in GcmParams, close #225 #226 (zkonge)
cryptoki-0.9.0 (2025-02-17)
cryptoki-sys-0.3.0 (2025-02-17)
Implemented enhancements:
Fixed bugs:
- Treat CK*_VENDOR_DEFINED correctly #54
Closed issues:
- Status access violation #240
clone()andis_initialized()#151- CKA_PUBLIC_KEY_INFO getting TypeInvalid #142
- Function name as part of errors #135
- Missing constants for x86_64-unknown-linux-gnu #134
- Session Pool Management #126
- Vendored mechanisms #105
- Remove psa_crypto dependency #100
- Improvement to unreleased open_session change? #97
- Add support for SHA-based KDFs for ECDH #92
- EDDSA contrib #87
- Document test dependencies/setup in contributor docs #71
Merged pull requests:
- feat: add support for vendor defined key types #246 (mcaneris)
- Add pack pragma for struct padding back #245 (jrozner)
- feat: revise EdDSA mechanism to support optional params #244 (mcaneris)
- chore: add dev information to the README #242 (hug-dev)
- Define CKD_SHA256_KDF transformation #239 (hug-dev)
- chore: remove dependency on psa-crypto #238 (hug-dev)
- Add support for vendor defined attributes #237 (jrozner)
- fix: fix some clippy lints #236 (hug-dev)
- chore: update CHANGELOG #234 (hug-dev)
cryptoki-0.8.0 (2024-11-14)
cryptoki-sys-0.2.0 (2024-11-14)
Closed issues:
- build issues with rust < 1.80 #221
- project won't compile under Rust 1.80 - CI broken #216
- New release? #194
- Underlying library access / vendor extensions #115
- Expose more fine-grained control over
find_objects#106 - Current
pkcs11.his not up-to-date #65
Merged pull requests:
- chore: upgrade version number before publishing #233 (hug-dev)
- feat: support vendor defined mechanisms #232 (Direktor799)
- Move crate documentation to README and add code example #231 (wiktor-k)
- Add capability to load symbols from current executable #230 (EliseChouleur)
- feat: add SHAn-HMAC #229 (Direktor799)
- Feat/pkcs11 3.0 #228 (Direktor799)
- feat: add HKDF mechanisms #227 (Direktor799)
- flip order of CI commands, to check fmt and clippy first #224 (keldonin)
- implements session object handle iterator, with caching #223 (keldonin)
- fix compilation issues with Rust 1.79 #222 (keldonin)
- Support vendor extensions for CK_USER_TYPE #220 (larper2axis)
- Add an example to
find_objects#219 (wiktor-k) - Adjust code to compile under rust 1.80 #217 (keldonin)
- Implement Session.copy_object() #215 (keldonin)
- Session.find_objects(): implement fewer calls to C_FindObjects() #214 (keldonin)
cryptoki-0.7.0 (2024-06-18)
cryptoki-sys-0.1.8 (2024-06-18)
Closed issues:
- Build of cryptoki v0.6.1 failing on Fedora 39+ #198
Merged pull requests:
- Bump crates #211 (gowthamsk-arm)
- Port 0.6 changes #210 (gowthamsk-arm)
- Expose PkcsOaepParams' message digest algorithm #207 (tgonzalezorlandoarm)
- 20240308 mechanisms #203 (Firstyear)
- Add support for
CARGO_TARGET_DIRinregenerate_bindings.sh#200 (wiktor-k) - Bump bindgen to 0.69.4 #199 (hug-dev)
- Use infallible conversion into instead of try_into #197 (gowthamsk-arm)
- Fix test for 32bit arch #193 (ionut-arm)
- nightly: Add the loongaarch64-unkown-linux-gnu target #190 (tgonzalezorlandoarm)
- ci.yml: Add a job for runnning tests on MSRV #188 (tgonzalezorlandoarm)
- Add references to RFC 4493 in comments about AesCMac. #184 (xaqq)
- Add SHA256-HMAC mechanism #183 (jippeholwerda)
- Expose AES-CMAC algorithm #181 (xaqq)
- Adding 2 new mechanisms: generic key generation and key derivation via encryption #178 (Nk185)
- Add bindings for loongarch64-linux-gnu #166 (heiher)
- Add function name to errors and logs #147 (ionut-arm)
cryptoki-0.6.2 (2024-03-08)
Closed issues:
- session.login fails on MacOS Sonoma #191
- test slot::token_info::test::debug_info fails on 32-bit architectures. #186
cryptoki-0.6.1 (2023-10-17)
Merged pull requests:
- Bump cryptoki to 0.6.1 #180 (tgonzalezorlandoarm)
- Bump psa-crypto to 0.12.0 #179 (tgonzalezorlandoarm)
cryptoki-0.6.0 (2023-10-06)
Merged pull requests:
- Update Changelog with psa-crypto bump #177 (tgonzalezorlandoarm)
- Bump psa-crypto to 0.11.0 #176 (tgonzalezorlandoarm)
- Update cryptoki crate version and add changelog #175 (tgonzalezorlandoarm)
- Update -sys crate version and add changelog #174 (tgonzalezorlandoarm)
- Fix spelling and Update Cargo.lock #172 (tgonzalezorlandoarm)
- Start tracking Cargo.lock file #171 (tgonzalezorlandoarm)
- ci: Add workflow dispatch #170 (tgonzalezorlandoarm)
- Drop unused target-lexicon crate #169 (tgonzalezorlandoarm)
- Change lints for the library and allow unknown lints #168 (tgonzalezorlandoarm)
- Bump bindgen to 0.66.1 #167 (tgonzalezorlandoarm)
- Fix RSA OKCS OAEP mechanism #165 (wiktor-k)
- elliptic_curve: Fix broken references #161 (wiktor-k)
- Make generic bindings #154 (arjennienhuis)
cryptoki-sys-0.1.7 (2023-10-06)
Closed issues:
- PKCS OAEP padding always returns: Pkcs11(ArgumentsBad) #163
cryptoki-0.5.0 (2023-08-12)
Closed issues:
- Signing and Verifying #159
- UserNotLoggedIn calling decrypt after login.... #157
- Wrapper for C_WaitForSlotEvent #145
Merged pull requests:
- Bump cryptoki to 0.5.0 #160 (ionut-arm)
- "fix" for clone-then-initialize problem #152 (arjennienhuis)
- Fix codespell action #148 (wiktor-k)
- Add wait_for_slot_event and get_slot_event #146 (arjennienhuis)
- Add AES-GCM mechanism #144 (wiktor-k)
- Add documentation check to CI test suite #141 (wiktor-k)
- Add EdDSA mechanism #140 (wiktor-k)
- Remove derivative crate #139 (a1ien)
cryptoki-sys-0.1.6 (2023-04-25)
Closed issues:
- Set homepage in GitHub project info #129
Merged pull requests:
- Cryptoki-sys 0.1.6 #138 (ionut-arm)
- Add binding for single-part digest function #132 (ellerh)
- Bump bindgen version #130 (gowthamsk-arm)
- Add new Pin type with secrecy/zeroize wrapper #128 (sbihel)
- fixup clippy errors #127 (baloo)
- Fix CI (clippy warnings) #125 (Bobo1239)
- Implement PartialEq/Eq for Attribute #124 (Bobo1239)
- Update to remove const_err lint #122 (wiktor-k)
- Simplify tests using TestResult #120 (wiktor-k)
- Implement update attributes for objects #119 (baloo)
- Split the implementation of session and pkcs11 #118 (baloo)
- Fix CI #117 (Bobo1239)
- Fix wrong mapping of AttributeType::CertificateType #116 (Bobo1239)
- Add CBC mode block ciphers #111 (jhagborgftx)
- Make RSA OAEP and ECDH1 safe using lifetime parameters #110 (jhagborgftx)
- Add several no-parameter mechanisms #108 (jhagborgftx)
cryptoki-0.3.1 (2023-03-15)
cryptoki-sys-0.1.5 (2023-03-15)
Closed issues:
cryptoki-0.4.1 (2022-09-29)
Merged pull requests:
cryptoki-0.4.0 (2022-09-07)
Merged pull requests:
- Bump version and update CHANGELOG #102 (ionut-arm)
- Make separate constructors for RO/RW sessions #101 (ionut-arm)
- Fix issues reported by clippy #98 (gowthamsk-arm)
cryptoki-sys-0.1.4 (2022-08-11)
Implemented enhancements:
Closed issues:
- How to test for supported functions? #78
- Add
is_initialized()toPkcs11#77 - Segmentation fault on parsing
Date#74
Merged pull requests:
- Prepare release of changes to bindings #96 (ionut-arm)
- Fix CI error for x86_64-pc-windows-msvc #95 (hug-dev)
- Add bindings for FreeBSD on x86-64. #94 (ximon18)
- Add script for regenerating bindings #91 (ionut-arm)
- session_management: Add ability to login with raw bytes #90 (Subject38)
- Add bindings for aarch64-darwin #89 (Subject38)
- Remove serial_test_derive from deps #86 (palfrey)
- Fix typos and add automatic check to CI #83 (wiktor-k)
- Info flags refactor #68 (vkkoskie)
cryptoki-0.2.1 (2022-02-14)
Closed issues:
cryptoki-0.3.0 (2022-01-14)
cryptoki-sys-0.1.3 (2022-01-14)
Implemented enhancements:
- PIN Handling #50
- Updates for getting attribute info - #42 #48 (mike-boquard)
- Add secret key generation and key wrapping functions #38 (wiktor-k)
Fixed bugs:
- Provide attribute type in return from
get_attribute_info#42 - Resizing/Truncating returned lists #34
- Remove unused field #53 (hug-dev)
Closed issues:
get_attributes()with AttributeType::Class fails for private key with YubiHSM2 Nano #76pkcs11.open_session_no_callbackagainst Luna Network HSM crashed with SIGSEGV #72- Solution for
Sessionlifetimes #57 - Module tree structure makes docs difficult to navigate #55
Merged pull requests:
- Version bump #79 (ionut-arm)
- Suppress null pointer deref warnings #62 (vkkoskie)
- Use rust's own bool type in abstraction crate #61 (vkkoskie)
- Switch to inclusive bindgen naming #60 (vkkoskie)
- Implemented new way of holding the context within the session #59 (mike-boquard)
- Module tree hygiene #56 (vkkoskie)
- Fixes to address #50 #52 (mike-boquard)
- Merge
develintomain#51 (hug-dev) - Added support for
C_SetPIN#49 (mike-boquard) - Simplify test code by using Results instead of unwraps #39 (wiktor-k)
- Update CHaNGELOG #37 (hug-dev)
cryptoki-0.2.0 (2021-08-03)
cryptoki-sys-0.1.2 (2021-08-03)
Implemented enhancements:
- Supported targets might not need an exact target triple check #15
- Add get_token_info #27 (wiktor-k)
- Add functions and types needed for ECDH-based decryption #24 (wiktor-k)
- Add ECC key generation #23 (ionut-arm)
- Add support for Elliptic Curves signing #22 (wiktor-k)
- Add a new way to check for supported targets #18 (hug-dev)
Fixed bugs:
- Issue with code comment #25
- Test fails on 32 bit platforms #19
- Implement
CKM_EC_KEY_PAIR_GENtoMechanismTypeconversion #32 (daxpedda)
Merged pull requests:
- Prepare the new release #36 (hug-dev)
- Added new methods to fix issue 375 - get slots with initialized token… #35 (Sven-bg)
- EC Edward and Montgomery support #33 (daxpedda)
- Slot mechanisms #31 (daxpedda)
- Removed confusing comment #30 (Kakemone)
- Add x86_64 macOS/Darwin bindings. #29 (jeamland)
- Add SHAn-RSA-PKCS mechanisms. #28 (jeamland)
- Add Object ID attribute #26 (wiktor-k)
- Update psa-crypto #21 (hug-dev)
- Add dependency on the newest (git only at the moment) psa-crypto. #20 (RobertDrazkowskiGL)
- Update CHANGELOG #17 (hug-dev)
cryptoki-0.1.1 (2021-03-31)
cryptoki-sys-0.1.1 (2021-03-31)
Implemented enhancements:
Fixed bugs:
- bindgen_test_layout_max_align_t test fails on i686 on cryptoki-sys crate #12
- Fix a bindgen test failing #13 (hug-dev)
- Remove armv7 bindings #11 (ionut-arm)
Merged pull requests:
cryptoki-0.1.0 (2021-03-18)
cryptoki-sys-0.1.0 (2021-03-18)
Implemented enhancements:
Closed issues:
- Add Parsec copyright #5
- Add some deny #4
- Add the same labels as in Parsec #2
- Add a testing infrastructure #1
Merged pull requests:
- Prepare for the 0.1.0 release #9 (hug-dev)
- Add armv7-hf to supported targets #8 (hug-dev)
- Add Parsec copyright on all files #7 (hug-dev)
- Improve general code quality #6 (hug-dev)
* This Changelog was automatically generated by github_changelog_generator