Changelog

Copy Markdown

0.4.1 — 2026-07-27

Changed

  • Added the GitHub repository to the Hex package metadata.
  • Removed unrelated project-history references from the PBKDF2 documentation and tests while retaining generic malformed-alphabet coverage.
  • Corrected the copyright holder in LICENSE.

0.4.0 — 2026-07-27

Changed

  • Replaced pbkdf2_elixir with OTP :crypto.pbkdf2_hmac/5. Existing canonical $pbkdf2-sha256$ hashes with non-empty salts, 32-byte digests, and costs within the configured verification budget remain verifiable.
  • Removed the Digestif.PBKDF2 :backend option. PBKDF2 now has one implementation and requires no optional dependency.
  • Made PBKDF2 stored encodings canonical: salt and digest segments reject padding, non-adapted alphabet characters, and non-zero trailing Base64 bits; round counts reject leading zeroes.
  • Missing users and malformed PBKDF2 hashes now derive dummy work from the supplied password through OTP :crypto.

Earlier releases predate this changelog. Their source history and tags remain the authoritative record.