?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
update version to 4.3.0
[sqlcipher.git] / CHANGELOG.md
blob71a74a27b643796071cda445b1b712ab86875063
1 # SQLCipher Change Log
2 All notable changes to this project will be documented in this file.
3
4 ## [4.3.0] - (November 2019 - [4.3.0 changes])
5 - Updates baseline to upstream SQLite 3.30.1
6 - PRAGMA key now returns text result value "ok" after execution
7 - Adjusts backup API so that encrypted to encrypted backups are permitted
8 - Adds NSS crypto provider implementation
9 - Fixes OpenSSL provider compatibility with BoringSSL
10 - Separates memory related traces to reduce verbosity of logging
11 - Fixes output of PRAGMA cipher_integrity_check on big endian platforms
12 - Cryptograpic provider interface cleanup
13 - Resolves miscellaneous build warnings
14
15 ## [4.2.0] - (May 2019 - [4.2.0 changes])
16 - Adds PRAGMA cipher_integrity_check to perform independent verification of page HMACs
17 - Updates baseline to upstream SQLite 3.28.0
18 - Improves PRAGMA cipher_migrate to handle keys containing non-terminating zero bytes
19
20 ## [4.1.0] - (March 2019 - [4.1.0 changes])
21 - Defer reading salt from header until key derivation is triggered
22 - Clarify usage of sqlite3_rekey for plaintext databases in header
23 - Normalize attach behavior when key is not yet derived
24 - Adds PRAGMA cipher_settings to query current database codec settings
25 - Adds PRAGMA cipher_default_settings to query current default SQLCipher options
26 - PRAGMA cipher_hmac_pgno is now deprecated
27 - PRAGMA cipher_hmac_salt_mask is now deprecated
28 - PRAGMA fast_kdf_iter is now deprecated
29 - Improve sqlcipher_export routine and restore all database flags
30 - Clear codec data buffers if a crypographic provider operation fails
31 - Disable backup API for encrypted databases (this was previously documented as not-working and non-supported, but will now explicitly error out on initialization)
32 - Updates baseline to upstream SQLite 3.27.2
33
34 ## [4.0.1] - (December 2018 - [4.0.1 changes])
35 - Based on upstream SQLite 3.26.0 (addresses SQLite “Magellan” issue)
36 - Adds PRAGMA cipher_compatibility and cipher_default_compatibility which take automatcially configure appropriate compatibility settings for the specified SQLCipher major version number
37 - Filters attach statements with KEY parameters from readline history
38 - Fixes crash in command line shell with empty input (i.e. ^D)
39 - Fixes warnings when compiled with strict-prototypes
40
41 ## [4.0.0] - (November 2018 - [4.0.0 changes])
42 ### Changed
43 - Default page size for databases increased to 4096 bytes (up from 1024) *
44 - Default PBKDF2 iterations increased to 256,000 (up from 64,000) *
45 - Default KDF algorithm is now PBKDF2-HMAC-SHA512 (from PBKDF2-HMAC-SHA1) *
46 - Default HMAC algorithm is now HMAC-SHA512 (from HMAC-SHA1) *
47 - PRAGMA cipher is now disabled and no longer supported (after multi-year deprecation) *
48 - PRAGMA rekey_cipher is now disabled and no longer supported *
49 - PRAGMA rekey_kdf_iter is now disabled and no longer supported *
50 - By default all memory allocated internally by SQLite before the memory is wiped before it is freed 
51 - PRAGMA cipher_memory_security: allows full memory wiping to be disabled for performance when the feature is not required
52 - PRAGMA cipher_kdf_algorithm, cipher_default_kdf_algorithm to control KDF algorithm selection between PBKDF2-HMAC-SHA1, PBKDF2-HMAC-SHA256 and PBKDF2-HMAC-SHA512
53 - PRAGMA cipher_hmac_algorithm, cipher_default_hmac_algorithm to control HMAC algorithm selection between HMAC-SHA1, HMAC-SHA256 and PBKDF2-HMAC-SHA512
54 - Based on upstream SQLite 3.25.2
55 - When compiled with readline support, PRAGMA key and rekey lines will no longer be
56   saved to history
57 - Adds second optional parameter to sqlcipher_export to specify source database to
58   support bidirectional exports
59 - Fixes compatibility with LibreSSL 2.7.0+
60 - Fixes compatibility with OpenSSL 1.1.x
61 - Simplified and improved performance for PRAGMA cipher_migrate when migrating older database versions
62 - Refactoring of SQLCipher tests into separate files by test type
63 - PRAGMA cipher_plaintext_header_size and cipher_default_plaintext_header_size: allocates a portion of the database header which will not be encrypted to allow identification as a SQLite database
64 - PRAGMA cipher_salt: retrieve or set the salt value for the database
65 - Adds Podspec for using tagged versions of SQLCipher
66 - Define SQLCIPHER_PROFILE_USE_FOPEN for WinXP support
67 - Improved error handling for cryptographic providers
68 - Improved memory handling for PRAGMA commands that return values
69 - Improved version reporting to assist with identification of distribution
70 - Major rewrite and simplification of internal codec and pager extension
71 - Fixes compilation with --disable-amalgamation
72 - Removes sqlcipher.xcodeproj build support
73
74 ## [3.4.2] - (December 2017 - [3.4.2 changes])
75 ### Added
76 - Added support for building with LibreSSL
77
78 ### Changed
79 - Merge upstream SQLite 3.20.1
80 - Text strings for `SQLITE_ERROR` and `SQLITE_NOTADB` changed to match upstream SQLite
81 - Remove static modifier for codec password functions
82 - Page alignment for `mlock`
83 - Fix segfault in `sqlcipher_cipher_ctx_cmp` during rekey operation
84 - Fix `sqlcipher_export` and `cipher_migrate` when tracing API in use
85 - Validate codec page size when setting
86 - Guard OpenSSL initialization and cleanup routines
87 - Allow additional linker options to be passed via command line for Windows platforms
88
89 ## [3.4.1] - (December 2016 - [3.4.1 changes])
90 ### Added
91 - Added support for OpenSSL 1.1.0
92
93 ### Changed
94 - Merged upstream SQLite 3.15.2
95
96 ## [3.4.0] - (April 2016 - [3.4.0 changes])
97 ### Added
98 - Added `PRAGMA cipher_provider_version`
99
100 ### Changed
101 - Merged upstream SQLite 3.11.0
102
103 ### Deprecated
104 - Deprecated `PRAGMA cipher` command
105
106 ## [3.3.1] - (July 2015 - [3.3.1 changes])
107 ### Changed
108 - Merge upstream SQLite 3.8.10.2
109 - Fixed segfault when provided an invalid cipher name
110 - Check for codec context when performing `PRAGMA cipher_store_pass`
111 - Remove extraneous null check in `PRAGMA cipher_migrate`
112
113 ## [3.3.0] - (March 2015 - [3.3.0 changes])
114 ### Added
115 - Added FIPS API calls within the OpenSSL crypto provider
116 - `PRAGMA cipher_default_page_size` - support for attaching non-default page sizes
117
118 ### Changed
119 - Merged upstream SQLite 3.8.8.3
120
121 ## [3.2.0] - (September 2014 - [3.2.0 changes])
122 ### Added
123 - Added `PRAGMA cipher_store_pass`
124
125 ### Changed
126 - Merged upstream SQLite 3.8.6
127 - Renmed README to README.md
128
129 ## [3.1.0] - (April 2014 - [3.1.0 changes])
130 ### Added
131 - Added `PRAGMA cipher_profile`
132
133 ### Changed
134 - Merged upstream SQLite 3.8.4.3
135
136 ## [3.0.1] - (December 2013 - [3.0.1 changes])
137 ### Added
138 - Added `PRAGMA cipher_add_random` to source external entropy
139
140 ### Changed
141 - Fix `PRAGMA cipher_migrate` to handle passphrases longer than 64 characters & raw keys
142 - Improvements to the libtomcrypt provider
143
144 ## [3.0.0] - (November 2013 - [3.0.0 changes])
145 ### Added
146 - Added `PRAGMA cipher_migrate` to migrate older database file formats
147
148 ### Changed
149 - Merged upstream SQLite 3.8.0.2
150 - Remove usage of VirtualLock/Unlock on WinRT and Windows Phone
151 - Ignore HMAC read during Btree file copy
152 - Fix lib naming for pkg-config
153 - Use _v2 version of `sqlite3_key` and `sqlite3_rekey`
154 - Update xcodeproj file
155
156 ### Security
157 - Change KDF iteration length from 4,000 to 64,000
158
159 [unreleased]: https://github.com/sqlcipher/sqlcipher/compare/v4.3.0...prerelease
160 [4.3.0]: https://github.com/sqlcipher/sqlcipher/tree/v4.3.0
161 [4.3.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v4.2.0...v4.3.0
162 [4.2.0]: https://github.com/sqlcipher/sqlcipher/tree/v4.2.0
163 [4.2.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v4.1.0...v4.2.0
164 [4.1.0]: https://github.com/sqlcipher/sqlcipher/tree/v4.1.0
165 [4.1.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v4.0.1...v4.1.0
166 [4.0.1]: https://github.com/sqlcipher/sqlcipher/tree/v4.0.1
167 [4.0.1 changes]: https://github.com/sqlcipher/sqlcipher/compare/v4.0.0...v4.0.1
168 [4.0.0]: https://github.com/sqlcipher/sqlcipher/tree/v4.0.0
169 [4.0.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v3.4.2...v4.0.0
170 [3.4.2]: https://github.com/sqlcipher/sqlcipher/tree/v3.4.2
171 [3.4.2 changes]: https://github.com/sqlcipher/sqlcipher/compare/v3.4.1...v3.4.2
172 [3.4.1]: https://github.com/sqlcipher/sqlcipher/tree/v3.4.1
173 [3.4.1 changes]: https://github.com/sqlcipher/sqlcipher/compare/v3.4.0...v3.4.1
174 [3.4.0]: https://github.com/sqlcipher/sqlcipher/tree/v3.4.0
175 [3.4.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v3.3.1...v3.4.0
176 [3.3.1]: https://github.com/sqlcipher/sqlcipher/tree/v3.3.1
177 [3.3.1 changes]: https://github.com/sqlcipher/sqlcipher/compare/v3.3.0...v3.3.1
178 [3.3.0]: https://github.com/sqlcipher/sqlcipher/tree/v3.3.0
179 [3.3.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v3.2.0...v3.3.0
180 [3.2.0]: https://github.com/sqlcipher/sqlcipher/tree/v3.2.0
181 [3.2.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v3.1.0...v3.2.0
182 [3.1.0]: https://github.com/sqlcipher/sqlcipher/tree/v3.1.0
183 [3.1.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v3.0.1...v3.1.0
184 [3.0.1]: https://github.com/sqlcipher/sqlcipher/tree/v3.0.1
185 [3.0.1 changes]: https://github.com/sqlcipher/sqlcipher/compare/v3.0.0...v3.0.1
186 [3.0.0]: https://github.com/sqlcipher/sqlcipher/tree/v3.0.0
187 [3.0.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v2.2.0...v3.0.0
188 [2.2.0]: https://github.com/sqlcipher/sqlcipher/tree/v2.2.0
189 [2.2.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v2.1.1...v2.2.0
190 [2.1.1]: https://github.com/sqlcipher/sqlcipher/tree/v2.1.1
191 [2.1.1 changes]: https://github.com/sqlcipher/sqlcipher/compare/v2.1.0...v2.1.1
192 [2.1.0]: https://github.com/sqlcipher/sqlcipher/tree/v2.1.0
193 [2.1.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v2.0.6...v2.1.0
194 [2.0.6]: https://github.com/sqlcipher/sqlcipher/tree/v2.0.6
195 [2.0.6 changes]: https://github.com/sqlcipher/sqlcipher/compare/v2.0.5...v2.0.6
196 [2.0.5]: https://github.com/sqlcipher/sqlcipher/tree/v2.0.5
197 [2.0.5 changes]: https://github.com/sqlcipher/sqlcipher/compare/v2.0.3...v2.0.5
198 [2.0.3]: https://github.com/sqlcipher/sqlcipher/tree/v2.0.3
199 [2.0.3 changes]: https://github.com/sqlcipher/sqlcipher/compare/v2.0.0...v2.0.3
200 [2.0.0]: https://github.com/sqlcipher/sqlcipher/tree/v2.0.0
201 [2.0.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.10...v2.0.0
202 [1.1.10]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.10
203 [1.1.10 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.9...v1.1.10
204 [1.1.9]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.9
205 [1.1.9 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.8...v1.1.9
206 [1.1.8]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.8
207 [1.1.8 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.7...v1.1.8
208 [1.1.7]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.7
209 [1.1.7 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.6...v1.1.7
210 [1.1.6]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.6
211 [1.1.6 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.5...v1.1.6
212 [1.1.5]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.5
213 [1.1.5 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.4...v1.1.5
214 [1.1.4]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.4
215 [1.1.4 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.3...v1.1.4
216 [1.1.3]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.3
217 [1.1.3 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.2...v1.1.3
218 [1.1.2]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.2
219 [1.1.2 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.1...v1.1.1
220 [1.1.1]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.1
221 [1.1.1 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.0...v1.1.1
222 [1.1.0]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.0
223 [1.1.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/617ed01...v1.1.0
SQLCipher is an SQLite extension that provides 256 bit AES encryption of database files.