xref: /aosp_15_r20/external/fsverity-utils/NEWS.md (revision b13c0e4024008a1f948ee8189745cb3371f4ac04)
1*b13c0e40SEric Biggers# fsverity-utils release notes
2*b13c0e40SEric Biggers
3*b13c0e40SEric Biggers## Version 1.6
4*b13c0e40SEric Biggers
5*b13c0e40SEric Biggers* Eliminated the dependency on `pandoc` for installing the manual page.
6*b13c0e40SEric Biggers
7*b13c0e40SEric Biggers* Updated the documentation to reflect recent kernel changes, including the
8*b13c0e40SEric Biggers  kernel adding support for more Merkle tree block sizes, IMA adding support for
9*b13c0e40SEric Biggers  fs-verity, and btrfs adding support for fs-verity.
10*b13c0e40SEric Biggers
11*b13c0e40SEric Biggers* Updated the documentation to refer to the new fsverity mailing list.
12*b13c0e40SEric Biggers
13*b13c0e40SEric Biggers* Fixed a C++ compatibility issue in `libfsverity.h`.
14*b13c0e40SEric Biggers
15*b13c0e40SEric Biggers* `fsverity measure` now follows standard command line syntax for arguments
16*b13c0e40SEric Biggers  beginning with hyphens.  I.e., `fsverity measure --foo` now treats `--foo` as
17*b13c0e40SEric Biggers  an (unsupported) option, not a filename.  To operate on a file actually named
18*b13c0e40SEric Biggers  `--foo`, use `fsverity measure -- --foo`.
19*b13c0e40SEric Biggers
20*b13c0e40SEric Biggers## Version 1.5
21*b13c0e40SEric Biggers
22*b13c0e40SEric Biggers* Made the `fsverity sign` command and the `libfsverity_sign_digest()` function
23*b13c0e40SEric Biggers  support PKCS#11 tokens.
24*b13c0e40SEric Biggers
25*b13c0e40SEric Biggers* Avoided a compiler error when building with musl libc.
26*b13c0e40SEric Biggers
27*b13c0e40SEric Biggers* Avoided compiler warnings when building with OpenSSL 3.0.
28*b13c0e40SEric Biggers
29*b13c0e40SEric Biggers* Improved documentation and test scripts.
30*b13c0e40SEric Biggers
31*b13c0e40SEric Biggers## Version 1.4
32*b13c0e40SEric Biggers
33*b13c0e40SEric Biggers* Added a manual page for the `fsverity` utility.
34*b13c0e40SEric Biggers
35*b13c0e40SEric Biggers* Added the `fsverity dump_metadata` subcommand.
36*b13c0e40SEric Biggers
37*b13c0e40SEric Biggers* Added the `--out-merkle-tree` and `--out-descriptor` options to
38*b13c0e40SEric Biggers  `fsverity digest` and `fsverity sign`.
39*b13c0e40SEric Biggers
40*b13c0e40SEric Biggers* Added metadata callbacks support to `libfsverity_compute_digest()`.
41*b13c0e40SEric Biggers
42*b13c0e40SEric Biggers## Version 1.3
43*b13c0e40SEric Biggers
44*b13c0e40SEric Biggers* Added a `fsverity digest` subcommand.
45*b13c0e40SEric Biggers
46*b13c0e40SEric Biggers* Added `libfsverity_enable()` and `libfsverity_enable_with_sig()`.
47*b13c0e40SEric Biggers
48*b13c0e40SEric Biggers* Added basic support for Windows builds of `fsverity` using MinGW.
49*b13c0e40SEric Biggers
50*b13c0e40SEric Biggers* `fsverity` now defaults to 4096-byte blocks on all platforms.
51*b13c0e40SEric Biggers
52*b13c0e40SEric Biggers* libfsverity now will use SHA-256 with 4096-byte blocks if the
53*b13c0e40SEric Biggers  `hash_algorithm` and `block_size` fields are left 0.
54*b13c0e40SEric Biggers
55*b13c0e40SEric Biggers* `make install` now installs a pkg-config file for libfsverity.
56*b13c0e40SEric Biggers
57*b13c0e40SEric Biggers* The Makefile now uses pkg-config to get the libcrypto build flags.
58*b13c0e40SEric Biggers
59*b13c0e40SEric Biggers* Fixed `make check` with `USE_SHARED_LIB=1`.
60*b13c0e40SEric Biggers
61*b13c0e40SEric Biggers## Version 1.2
62*b13c0e40SEric Biggers
63*b13c0e40SEric Biggers* Changed license from GPL to MIT.
64*b13c0e40SEric Biggers
65*b13c0e40SEric Biggers* Fixed build error when /bin/sh is dash.
66*b13c0e40SEric Biggers
67*b13c0e40SEric Biggers## Version 1.1
68*b13c0e40SEric Biggers
69*b13c0e40SEric Biggers* Split the file digest computation and signing functionality of the
70*b13c0e40SEric Biggers  `fsverity` program into a library `libfsverity`.  See `README.md`
71*b13c0e40SEric Biggers  and `Makefile` for more details.
72*b13c0e40SEric Biggers
73*b13c0e40SEric Biggers* Improved the Makefile.
74*b13c0e40SEric Biggers
75*b13c0e40SEric Biggers* Added some tests.  They can be run using `make check`.  Also added
76*b13c0e40SEric Biggers  `scripts/run-tests.sh` which does more extensive prerelease tests.
77*b13c0e40SEric Biggers
78*b13c0e40SEric Biggers* Lots of cleanups and other small improvements.
79*b13c0e40SEric Biggers
80*b13c0e40SEric Biggers## Version 1.0
81*b13c0e40SEric Biggers
82*b13c0e40SEric Biggers* First official release of fsverity-utils.
83