Skip to content

CHANGELOG.md

Latest commit

 

History

History
46 lines (25 loc) · 3.14 KB

CHANGELOG.md

File metadata and controls

46 lines (25 loc) · 3.14 KB
Raw

6.0.2 (2026-10-16)

Bug Fixes

6.0.1 (2026-08-24)

Bug Fixes

  • resolve XML-Enc elements by DOM traversal instead of XPath (#141) (2f9ed67)

6.0.0 (2026-08-07)

⚠ BREAKING CHANGES

  • rsa-oaep-mgf1p now emits and expects MGF1-SHA1. The http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p identifier fixes the mask generation function to MGF1-SHA1 per XML-Enc 1.1. Previously keyEncryptionDigest: 'sha256' or 'sha512' also drove MGF1, producing MGF1-SHA256/SHA512 ciphertext that is not interoperable with spec-compliant peers (Java xmlsec, .NET System.Security.Cryptography.Xml). Such ciphertext will no longer decrypt with this version. Callers who genuinely need a non-SHA-1 MGF1 must switch to the xmlenc11#rsa-oaep identifier with the new keyEncryptionMgf option.

Features

  • Support http://www.w3.org/2009/xmlenc11#rsa-oaep — The new keyEncryptionMgf option selects the MGF1 digest (sha1, sha224, sha256, sha384, sha512, or the full xmlenc11#mgf1* URI; default sha1).
  • OAEP label support — supply keyEncryptionOaepParams (a Buffer or base64 string) to set the OAEP label; it is emitted as an <xenc:OAEPparams> element and honoured on decrypt.
  • Digest/MGF1 combinations Node's crypto cannot express (MGF1 digest ≠ message digest) are computed via an EME-OAEP shim over the raw RSA primitive.

5.0.0 (2026-07-02)

⚠ BREAKING CHANGES

  • DigestMethod is not used when keyEncryptionAlgorithm is RSA 1.5 so has been removed from the encrypted payload
  • keyEncryptionDigest values of sha256 or sha512 correctly use the http://www.w3.org/2001/04/xmlenc namespace when encrypting

Bug Fixes

  • correct digest method and digest method algorithm id (#136) (586edd3)

4.0.1 (2026-06-25)

Bug Fixes

  • bump @xmldom/xmldom to 0.8.13 to address CVE-2026-34601 (#128) (5980ce6)

4.0.0 (2026-03-31)

⚠ BREAKING CHANGES