8000 Tags · mjec/khefin · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Tags: mjec/khefin

Tags

v0.6.1

Toggle v0.6.1's commit message

Verified

This tag was signed with the committer’s verified signature.
mjec Emjek Cordover
GPG key ID: FD1D670D31F82A81
Verified
Learn about vigilant mode 
Release 0.6.1

* Fix PIN support for disk encryption scripts (issue #31)
* Change initcpio scripts to use ramfs instead of encrypted loopback device
* Add --passphrase-file option
* Stop dropping privileges when run under sudo (issue #35)
* Bump warrant canary to 17 January 2021

v0.6.0

Toggle v0.6.0's commit message

Verified

This tag was signed with the committer’s verified signature.
mjec Emjek Cordover
GPG key ID: FD1D670D31F82A81
Verified
Learn about vigilant mode 
Release 0.6.0

* Add PIN support (issue #28)
* Truncate newline from the end of passphrase provided non-interactively on STDIN

v0.5.1

Toggle v0.5.1's commit message

Verified

This tag was signed with the committer’s verified signature.
mjec Emjek Cordover
GPG key ID: FD1D670D31F82A81
Verified
Learn about vigilant mode 
Release 0.5.1

* Bumped warrant canary to 30 October 2020
* Fix misleading section of the manual relating to reading passphrase on STDIN (issue #29)
* Add missing arguments in bash completion script
* `enumerate` prints devices even if they are not FIDO2-compatible (issue #23)

v0.5.0

Toggle v0.5.0's commit message

Verified

This tag was signed with the committer’s verified signature.
mjec Emjek Cordover
GPG key ID: FD1D670D31F82A81
Verified
Learn about vigilant mode 
Release 0.5.0

* Renamed to khefin
* Added initramfs-tools scripts (issue #19)
* Prompt for authenticator if not present during boot (issue #21)
* Small bug fixes and improvements

v0.4.3

Toggle v0.4.3's commit message

Unverified

This tag is not signed, but one or more authors requires that any tag attributed to them is signed.
Learn about vigilant mode 
Release v0.4.2

Adds ssh-askpass implementation

v0.4.2

Toggle v0.4.2's commit message

Unverified

This tag is not signed, but one or more authors requires that any tag attributed to them is signed.
Learn about vigilant mode 
Add --mixin parameter to generate

v0.4.1

Toggle v0.4.1's commit message

Unverified

This tag is not signed, but one or more authors requires that any tag attributed to them is signed.
Learn about vigilant mode 
Stable release

* Refactor code to make it possible to compile with GCC without warnings
* Update CI to run make against gcc as well as clang

v0.4.0

Toggle v0.4.0's commit message

Unverified

This tag is not signed, but one or more authors requires that any tag attributed to them is signed.
Learn about vigilant mode 
Stable release

* Make passphrase prompt output on STDERR instead of STDOUT
* Add fido2-hmac-secret-add-luks-key script (issue #1)
* Add setcap cap_ipc_lock+ep in install target, SETCAP_BINARY install flag (defaults to on), and remove setuid (issue #3)
* Change ALWAYS_SILENCE_MEMORY_LOCK_ERRORS to WARN_ON_MEMORY_LOCK_ERRORS and have it default to on
* Remove FIDO2_HMAC_SECRET_SILENCE_MEMLOCK_ERRORS environment variable
* Move bash-completion script from docs/ to scripts/
* Do not generate bash-completion script by default
* Include reasons for setuid root in README, and add ALWAYS_SILENCE_MEMORY_LOCK_ERRORS compile option (issue #3)
* Permit passphrase to be supplied on STDIN, if not a tty (issue #2)

v0.3.0

Toggle v0.3.0's commit message

Unverified

This tag is not signed, but one or more authors requires that any tag attributed to them is signed.
Learn about vigilant mode 
mkinitcpio hooks and bug fixes

* Add mkinitcpio hooks for using this with encrypted root device on Arch Linux
* Change "password" to "passphrase" everywhere
* Change `get_secret_consuming_authenticator_params` to stop consuming params, thus avoiding double-free
* Fix bug where providing an invalid subcommand did not print usage and exit with EXIT_BAD_INVOCATION
* Improve bash completion, removing invalid options for `generate`
52FD

v0.2.0

Toggle v0.2.0's commit message

Unverified

This tag is not signed, but one or more authors requires that any tag attributed to them is signed.
Learn about vigilant mode 
Change file format

* Remove use of device vendor & product ID, replace with AAGUID
* Fix double free bugs when the wrong authenticator device is used
* Fix reference to algorithm as uint32 in serialzie.c
* Add escaping for `-` in manpage.m4
* Convert spaces to tabs in bash-completion.m4
0