From d3468e8b8fe435f860de0976fc8ae7c132fda2c3 Mon Sep 17 00:00:00 2001 From: Stephen Lombardo Date: Fri, 30 Nov 2018 12:13:04 -0500 Subject: [PATCH] update CHANGELOG.md for 4.0.0 release --- CHANGELOG.md | 38 ++++++++++++++++++++++++++++++++++++-- 1 file changed, 36 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 8a1552ae..ddbd1476 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,7 +1,40 @@ # SQLCipher Change Log All notable changes to this project will be documented in this file. -## [Unreleased][unreleased] +## [unreleased] - [unreleased] + +## [4.0.0] - 2018-11-30 +### Changed +- Default page size for databases increased to 4096 bytes (up from 1024) * +- Default PBKDF2 iterations increased to 256,000 (up from 64,000) * +- Default KDF algorithm is now PBKDF2-HMAC-SHA512 (from PBKDF2-HMAC-SHA1) * +- Default HMAC algorithm is now HMAC-SHA512 (from HMAC-SHA1) * +- PRAGMA cipher is now disabled and no longer supported (after multi-year deprecation) * +- PRAGMA rekey_cipher is now disabled and no longer supported * +- PRAGMA rekey_kdf_iter is now disabled and no longer supported * +- By default all memory allocated internally by SQLite before the memory is wiped before it is freed +- PRAGMA cipher_memory_security: allows full memory wiping to be disabled for performance when the feature is not required +- PRAGMA cipher_kdf_algorithm, cipher_default_kdf_algorithm to control KDF algorithm selection between PBKDF2-HMAC-SHA1, PBKDF2-HMAC-SHA256 and PBKDF2-HMAC-SHA512 +- PRAGMA cipher_hmac_algorithm, cipher_default_hmac_algorithm to control HMAC algorithm selection between HMAC-SHA1, HMAC-SHA256 and PBKDF2-HMAC-SHA512 +- Based on upstream SQLite 3.25.2 +- When compiled with readline support, PRAGMA key and rekey lines will no longer be + saved to history +- Adds second optional parameter to sqlcipher_export to specify source database to + support bidirectional exports +- Fixes compatibility with LibreSSL 2.7.0+ +- Fixes compatibility with OpenSSL 1.1.x +- Simplified and improved performance for PRAGMA cipher_migrate when migrating older database versions +- Refactoring of SQLCipher tests into separate files by test type +- PRAGMA cipher_plaintext_header_size and cipher_default_plaintext_header_size: allocates a portion of the database header which will not be encrypted to allow identification as a SQLite database +- PRAGMA cipher_salt: retrieve or set the salt value for the database +- Adds Podspec for using tagged versions of SQLCipher +- Define SQLCIPHER_PROFILE_USE_FOPEN for WinXP support +- Improved error handling for cryptographic providers +- Improved memory handling for PRAGMA commands that return values +- Improved version reporting to assist with identification of distribution +- Major rewrite and simplification of internal codec and pager extension +- Fixes compilation with --disable-amalgamation +- Removes sqlcipher.xcodeproj build support ## [3.4.2] - 2017-12-21 ### Added @@ -88,7 +121,8 @@ All notable changes to this project will be documented in this file. ### Security - Change KDF iteration length from 4,000 to 64,000 -[unreleased]: https://github.com/sqlcipher/sqlcipher/compare/v3.4.2...prerelease +[unreleased]: https://github.com/sqlcipher/sqlcipher/compare/v4.0.0...prerelease +[4.0.0]: https://github.com/sqlcipher/sqlcipher/compare/v3.4.2...v4.0.0 [3.4.2]: https://github.com/sqlcipher/sqlcipher/compare/v3.4.1...v3.4.2 [3.4.1]: https://github.com/sqlcipher/sqlcipher/compare/v3.4.0...v3.4.1 [3.4.0]: https://github.com/sqlcipher/sqlcipher/compare/v3.3.1...v3.4.0