# Changelog

## 0.2.0 - 2026-09-02

- Added strict PBES2/PBKDF2 encrypted PKCS #8 inspection and password-gated WebCrypto decryption for supported AES profiles.
- Added explicit-input certificate path analysis without trust claims.
- Added bounded PKCS #12 AuthenticatedSafe/SafeContents and bag inventory, supported MacData verification, and password-gated PBES2/PBKDF2/AES decryption for encrypted content and shrouded PKCS #8 keys.
- Wipe standalone decrypted PKCS #8 buffers after inspection and WebCrypto
  operational imports, and enforce a sequential, aggregate PBKDF2 work budget
  across multi-object PEM and PKCS #12 inspection.
- Added fixed-profile WebCrypto sign/verify and authenticated/limited encrypt/decrypt workspaces.

## 0.1.0 - 2026-09-01

- Added the initial local-first Crypto Tools workbench.
- Added Toolbox integration, bounded input handling, offline shell and deterministic release packaging.