crypto-tools/CHANGELOG.md

Changelog

0.2.0 - 2026-09-02

• Added strict PBES2/PBKDF2 encrypted PKCS #8 inspection and password-gated WebCrypto decryption for supported AES profiles.
• Added explicit-input certificate path analysis without trust claims.
• Added bounded PKCS #12 AuthenticatedSafe/SafeContents and bag inventory, supported MacData verification, and password-gated PBES2/PBKDF2/AES decryption for encrypted content and shrouded PKCS #8 keys.
• Wipe standalone decrypted PKCS #8 buffers after inspection and WebCrypto operational imports, and enforce a sequential, aggregate PBKDF2 work budget across multi-object PEM and PKCS #12 inspection.
• Added fixed-profile WebCrypto sign/verify and authenticated/limited encrypt/decrypt workspaces.

0.1.0 - 2026-09-01

• Added the initial local-first Crypto Tools workbench.
• Added Toolbox integration, bounded input handling, offline shell and deterministic release packaging.