CHANGELOG.md

   1 # SQLCipher Change Log
   2 All notable changes to this project will be documented in this file.
   3
   4 ## [4.4.1] - (unreleased - [4.4.1 changes])
   5 - Updates baseline to upstream SQLite 3.32.1
   6
   7 ## [4.4.0] - (May 2020 - [4.4.0 changes])
   8 - Updates baseline to upstream SQLite 3.31.0
   9 - Adjusts shell to report SQLCipher version alongside SQLite version
  10 - Fixes various build warnings under several compilers
  11 - Removes unused id and status functions from provider interface
  12
  13 ## [4.3.0] - (November 2019 - [4.3.0 changes])
  14 - Updates baseline to upstream SQLite 3.30.1
  15 - PRAGMA key now returns text result value "ok" after execution
  16 - Adjusts backup API so that encrypted to encrypted backups are permitted
  17 - Adds NSS crypto provider implementation
  18 - Fixes OpenSSL provider compatibility with BoringSSL
  19 - Separates memory related traces to reduce verbosity of logging
  20 - Fixes output of PRAGMA cipher_integrity_check on big endian platforms
  21 - Cryptograpic provider interface cleanup
  22 - Rework of mutex allocation and management
  23 - Resolves miscellaneous build warnings
  24 - Force error state at database pager level if SQLCipher initialization fails
  25
  26 ## [4.2.0] - (May 2019 - [4.2.0 changes])
  27 - Adds PRAGMA cipher_integrity_check to perform independent verification of page HMACs
  28 - Updates baseline to upstream SQLite 3.28.0
  29 - Improves PRAGMA cipher_migrate to handle keys containing non-terminating zero bytes
  30
  31 ## [4.1.0] - (March 2019 - [4.1.0 changes])
  32 - Defer reading salt from header until key derivation is triggered
  33 - Clarify usage of sqlite3_rekey for plaintext databases in header
  34 - Normalize attach behavior when key is not yet derived
  35 - Adds PRAGMA cipher_settings to query current database codec settings
  36 - Adds PRAGMA cipher_default_settings to query current default SQLCipher options
  37 - PRAGMA cipher_hmac_pgno is now deprecated
  38 - PRAGMA cipher_hmac_salt_mask is now deprecated
  39 - PRAGMA fast_kdf_iter is now deprecated
  40 - Improve sqlcipher_export routine and restore all database flags
  41 - Clear codec data buffers if a crypographic provider operation fails
  42 - Disable backup API for encrypted databases (this was previously documented as not-working and non-supported, but will now explicitly error out on initialization)
  43 - Updates baseline to upstream SQLite 3.27.2
  44
  45 ## [4.0.1] - (December 2018 - [4.0.1 changes])
  46 - Based on upstream SQLite 3.26.0 (addresses SQLite “Magellan” issue)
  47 - Adds PRAGMA cipher_compatibility and cipher_default_compatibility which take automatcially configure appropriate compatibility settings for the specified SQLCipher major version number
  48 - Filters attach statements with KEY parameters from readline history
  49 - Fixes crash in command line shell with empty input (i.e. ^D)
  50 - Fixes warnings when compiled with strict-prototypes
  51
  52 ## [4.0.0] - (November 2018 - [4.0.0 changes])
  53 ### Changed
  54 - Default page size for databases increased to 4096 bytes (up from 1024) *
  55 - Default PBKDF2 iterations increased to 256,000 (up from 64,000) *
  56 - Default KDF algorithm is now PBKDF2-HMAC-SHA512 (from PBKDF2-HMAC-SHA1) *
  57 - Default HMAC algorithm is now HMAC-SHA512 (from HMAC-SHA1) *
  58 - PRAGMA cipher is now disabled and no longer supported (after multi-year deprecation) *
  59 - PRAGMA rekey_cipher is now disabled and no longer supported *
  60 - PRAGMA rekey_kdf_iter is now disabled and no longer supported *
  61 - By default all memory allocated internally by SQLite before the memory is wiped before it is freed
  62 - PRAGMA cipher_memory_security: allows full memory wiping to be disabled for performance when the feature is not required
  63 - PRAGMA cipher_kdf_algorithm, cipher_default_kdf_algorithm to control KDF algorithm selection between PBKDF2-HMAC-SHA1, PBKDF2-HMAC-SHA256 and PBKDF2-HMAC-SHA512
  64 - PRAGMA cipher_hmac_algorithm, cipher_default_hmac_algorithm to control HMAC algorithm selection between HMAC-SHA1, HMAC-SHA256 and PBKDF2-HMAC-SHA512
  65 - Based on upstream SQLite 3.25.2
  66 - When compiled with readline support, PRAGMA key and rekey lines will no longer be
  67   saved to history
  68 - Adds second optional parameter to sqlcipher_export to specify source database to
  69   support bidirectional exports
  70 - Fixes compatibility with LibreSSL 2.7.0+
  71 - Fixes compatibility with OpenSSL 1.1.x
  72 - Simplified and improved performance for PRAGMA cipher_migrate when migrating older database versions
  73 - Refactoring of SQLCipher tests into separate files by test type
  74 - PRAGMA cipher_plaintext_header_size and cipher_default_plaintext_header_size: allocates a portion of the database header which will not be encrypted to allow identification as a SQLite database
  75 - PRAGMA cipher_salt: retrieve or set the salt value for the database
  76 - Adds Podspec for using tagged versions of SQLCipher
  77 - Define SQLCIPHER_PROFILE_USE_FOPEN for WinXP support
  78 - Improved error handling for cryptographic providers
  79 - Improved memory handling for PRAGMA commands that return values
  80 - Improved version reporting to assist with identification of distribution
  81 - Major rewrite and simplification of internal codec and pager extension
  82 - Fixes compilation with --disable-amalgamation
  83 - Removes sqlcipher.xcodeproj build support
  84
  85 ## [3.4.2] - (December 2017 - [3.4.2 changes])
  86 ### Added
  87 - Added support for building with LibreSSL
  88
  89 ### Changed
  90 - Merge upstream SQLite 3.20.1
  91 - Text strings for `SQLITE_ERROR` and `SQLITE_NOTADB` changed to match upstream SQLite
  92 - Remove static modifier for codec password functions
  93 - Page alignment for `mlock`
  94 - Fix segfault in `sqlcipher_cipher_ctx_cmp` during rekey operation
  95 - Fix `sqlcipher_export` and `cipher_migrate` when tracing API in use
  96 - Validate codec page size when setting
  97 - Guard OpenSSL initialization and cleanup routines
  98 - Allow additional linker options to be passed via command line for Windows platforms
  99
 100 ## [3.4.1] - (December 2016 - [3.4.1 changes])
 101 ### Added
 102 - Added support for OpenSSL 1.1.0
 103
 104 ### Changed
 105 - Merged upstream SQLite 3.15.2
 106
 107 ## [3.4.0] - (April 2016 - [3.4.0 changes])
 108 ### Added
 109 - Added `PRAGMA cipher_provider_version`
 110
 111 ### Changed
 112 - Merged upstream SQLite 3.11.0
 113
 114 ### Deprecated
 115 - Deprecated `PRAGMA cipher` command
 116
 117 ## [3.3.1] - (July 2015 - [3.3.1 changes])
 118 ### Changed
 119 - Merge upstream SQLite 3.8.10.2
 120 - Fixed segfault when provided an invalid cipher name
 121 - Check for codec context when performing `PRAGMA cipher_store_pass`
 122 - Remove extraneous null check in `PRAGMA cipher_migrate`
 123
 124 ## [3.3.0] - (March 2015 - [3.3.0 changes])
 125 ### Added
 126 - Added FIPS API calls within the OpenSSL crypto provider
 127 - `PRAGMA cipher_default_page_size` - support for attaching non-default page sizes
 128
 129 ### Changed
 130 - Merged upstream SQLite 3.8.8.3
 131
 132 ## [3.2.0] - (September 2014 - [3.2.0 changes])
 133 ### Added
 134 - Added `PRAGMA cipher_store_pass`
 135
 136 ### Changed
 137 - Merged upstream SQLite 3.8.6
 138 - Renmed README to README.md
 139
 140 ## [3.1.0] - (April 2014 - [3.1.0 changes])
 141 ### Added
 142 - Added `PRAGMA cipher_profile`
 143
 144 ### Changed
 145 - Merged upstream SQLite 3.8.4.3
 146
 147 ## [3.0.1] - (December 2013 - [3.0.1 changes])
 148 ### Added
 149 - Added `PRAGMA cipher_add_random` to source external entropy
 150
 151 ### Changed
 152 - Fix `PRAGMA cipher_migrate` to handle passphrases longer than 64 characters & raw keys
 153 - Improvements to the libtomcrypt provider
 154
 155 ## [3.0.0] - (November 2013 - [3.0.0 changes])
 156 ### Added
 157 - Added `PRAGMA cipher_migrate` to migrate older database file formats
 158
 159 ### Changed
 160 - Merged upstream SQLite 3.8.0.2
 161 - Remove usage of VirtualLock/Unlock on WinRT and Windows Phone
 162 - Ignore HMAC read during Btree file copy
 163 - Fix lib naming for pkg-config
 164 - Use _v2 version of `sqlite3_key` and `sqlite3_rekey`
 165 - Update xcodeproj file
 166
 167 ### Security
 168 - Change KDF iteration length from 4,000 to 64,000
 169
 170 [unreleased]: https://github.com/sqlcipher/sqlcipher/compare/v4.4.0...prerelease
 171 [4.4.0]: https://github.com/sqlcipher/sqlcipher/tree/v4.4.0
 172 [4.4.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v4.3.0...v4.4.0
 173 [4.3.0]: https://github.com/sqlcipher/sqlcipher/tree/v4.3.0
 174 [4.3.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v4.2.0...v4.3.0
 175 [4.2.0]: https://github.com/sqlcipher/sqlcipher/tree/v4.2.0
 176 [4.2.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v4.1.0...v4.2.0
 177 [4.1.0]: https://github.com/sqlcipher/sqlcipher/tree/v4.1.0
 178 [4.1.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v4.0.1...v4.1.0
 179 [4.0.1]: https://github.com/sqlcipher/sqlcipher/tree/v4.0.1
 180 [4.0.1 changes]: https://github.com/sqlcipher/sqlcipher/compare/v4.0.0...v4.0.1
 181 [4.0.0]: https://github.com/sqlcipher/sqlcipher/tree/v4.0.0
 182 [4.0.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v3.4.2...v4.0.0
 183 [3.4.2]: https://github.com/sqlcipher/sqlcipher/tree/v3.4.2
 184 [3.4.2 changes]: https://github.com/sqlcipher/sqlcipher/compare/v3.4.1...v3.4.2
 185 [3.4.1]: https://github.com/sqlcipher/sqlcipher/tree/v3.4.1
 186 [3.4.1 changes]: https://github.com/sqlcipher/sqlcipher/compare/v3.4.0...v3.4.1
 187 [3.4.0]: https://github.com/sqlcipher/sqlcipher/tree/v3.4.0
 188 [3.4.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v3.3.1...v3.4.0
 189 [3.3.1]: https://github.com/sqlcipher/sqlcipher/tree/v3.3.1
 190 [3.3.1 changes]: https://github.com/sqlcipher/sqlcipher/compare/v3.3.0...v3.3.1
 191 [3.3.0]: https://github.com/sqlcipher/sqlcipher/tree/v3.3.0
 192 [3.3.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v3.2.0...v3.3.0
 193 [3.2.0]: https://github.com/sqlcipher/sqlcipher/tree/v3.2.0
 194 [3.2.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v3.1.0...v3.2.0
 195 [3.1.0]: https://github.com/sqlcipher/sqlcipher/tree/v3.1.0
 196 [3.1.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v3.0.1...v3.1.0
 197 [3.0.1]: https://github.com/sqlcipher/sqlcipher/tree/v3.0.1
 198 [3.0.1 changes]: https://github.com/sqlcipher/sqlcipher/compare/v3.0.0...v3.0.1
 199 [3.0.0]: https://github.com/sqlcipher/sqlcipher/tree/v3.0.0
 200 [3.0.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v2.2.0...v3.0.0
 201 [2.2.0]: https://github.com/sqlcipher/sqlcipher/tree/v2.2.0
 202 [2.2.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v2.1.1...v2.2.0
 203 [2.1.1]: https://github.com/sqlcipher/sqlcipher/tree/v2.1.1
 204 [2.1.1 changes]: https://github.com/sqlcipher/sqlcipher/compare/v2.1.0...v2.1.1
 205 [2.1.0]: https://github.com/sqlcipher/sqlcipher/tree/v2.1.0
 206 [2.1.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v2.0.6...v2.1.0
 207 [2.0.6]: https://github.com/sqlcipher/sqlcipher/tree/v2.0.6
 208 [2.0.6 changes]: https://github.com/sqlcipher/sqlcipher/compare/v2.0.5...v2.0.6
 209 [2.0.5]: https://github.com/sqlcipher/sqlcipher/tree/v2.0.5
 210 [2.0.5 changes]: https://github.com/sqlcipher/sqlcipher/compare/v2.0.3...v2.0.5
 211 [2.0.3]: https://github.com/sqlcipher/sqlcipher/tree/v2.0.3
 212 [2.0.3 changes]: https://github.com/sqlcipher/sqlcipher/compare/v2.0.0...v2.0.3
 213 [2.0.0]: https://github.com/sqlcipher/sqlcipher/tree/v2.0.0
 214 [2.0.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.10...v2.0.0
 215 [1.1.10]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.10
 216 [1.1.10 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.9...v1.1.10
 217 [1.1.9]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.9
 218 [1.1.9 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.8...v1.1.9
 219 [1.1.8]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.8
 220 [1.1.8 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.7...v1.1.8
 221 [1.1.7]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.7
 222 [1.1.7 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.6...v1.1.7
 223 [1.1.6]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.6
 224 [1.1.6 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.5...v1.1.6
 225 [1.1.5]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.5
 226 [1.1.5 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.4...v1.1.5
 227 [1.1.4]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.4
 228 [1.1.4 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.3...v1.1.4
 229 [1.1.3]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.3
 230 [1.1.3 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.2...v1.1.3
 231 [1.1.2]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.2
 232 [1.1.2 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.1...v1.1.1
 233 [1.1.1]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.1
 234 [1.1.1 changes]: https://github.com/sqlcipher/sqlcipher/compare/v1.1.0...v1.1.1
 235 [1.1.0]: https://github.com/sqlcipher/sqlcipher/tree/v1.1.0
 236 [1.1.0 changes]: https://github.com/sqlcipher/sqlcipher/compare/617ed01...v1.1.0