piv-authenticator/CHANGELOG.md

Changelog

Unreleased

v0.6.0 (2026-03-25)

• Replace trussed-rsa-alloc dependency with trussed-rsa-types for most use cases. (Only the virt feature still requires trussed-rsa-alloc.)
• Update dependencies:
  • apdu-app v0.2
  • cbor-smol v0.5
  • flexiber v0.2
  • heapless v0.9
  • heapless-bytes v0.5
  • iso7816 v0.2
  • trussed-chunked v0.3
  • trussed-core v0.2
  • trussed-hpke v0.3
  • trussed-wrap-key-to-file v0.3

v0.5.3 (2025-07-31)

Changed

• Update trussed-rsa-alloc dependency to v0.3.

v0.5.2 (2025-07-31)

Changed

• Fix missing clear calls on UseValidKey (#30)
• Improve PIN validation speed (#28)

v0.5.1 (2025-05-12)

• Fix PUK validation
• Fix key history object

v0.5.0 (2025-02-26)

• Add support for RSA 3072, 4096 and nist P-384

v0.3.9 (2025-02-11)

• Fix admin authentication

Security

• Fix CVE-2025-25201

v0.3.8 (2024-10-17)

• Encrypt data on external flash (#57)

v0.3.7 (2024-04-21)

• Bump rsa backend version (#53)

v0.3.6 (2024-04-20)

• RSA key import (#51)
• Fix spec compliance issues (#52)
• Fix retired key 20 usage causing the device to panic (#52)

v0.3.5 (2024-04-03)

• Fix default card capabilities value (#46)
• Fix storage location for just-initialized PIV (#47)
• Update trussed-auth, trussed-staging and make trussed-staging optional (#48)
• Allow generating retired keys (#44)

v0.3.4 (2024-01-02)

• Fix error when changing the PUK (#40)

v0.3.3 (2023-12-08)

• Reject NFC requests (#39)
• Put RSA feature behind a feature flag

v0.3.2 (2023-06-13)

• Fix P-256 signature (#33)

v0.3.1 (2023-06-02)

• Add setter to the options builder for the UUID (#32)

v0.3.0 (2023-05-31)

• Fix reset not checking that the key is locked (#29)
• Make GUID configurable (#30)

v0.2.0 (2023-04-27)

• Use upstream trussed and trussed-staging (#24)

v0.1.2 (2023-04-24)

• Use RsaPublicParts::deserialize instead of trussed::postcard_deserialize for compatibility with recent Trussed changes.

v0.1.1 (2023-04-17)

• Fix dependency on trussed-rsa-alloc to use the git tag in the [patch.crates-io] section to avoid duplicate downstream dependencies

v0.1.0 (2023-04-13)

This initial release contains support for the basic PIV card functionality. It supports basic card administration, key generation and authentication.

Supported algorithms are P-256 and RSA 2048.