All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[0.4.1] - 2026-07-09

  • packaging: Download PKCS#11 header files as part of Makefile.
  • packaging: Include Makefile in Hex package files.

[0.4.0] - 2026-06-12

Added

  • p11ex: Add function P11ex.Session.session_handle/1 to get session handle for a P11ex.Session server.
  • p11ex: Add support for EdDSA key generation and signing (Ed25519, Ed448).
  • p11ex: Add P11ex.Session.generate_key_pair/5 with explicit timeout parameter.
  • p11ex_cli: Log error messages and warnings to stderr.
  • p11ex_cli: Add command export-pubk to export public keys.
  • p11ex_cli: Add command sign to sign data with RSA, EC, or EdDSA algorithms.
  • p11ex_cli: Support exporting EdDSA public keys via export-pubk command.

Changed

  • p11ex_cli: Improve documentation for ECDSA and EdDSA signatures.
  • ci: Migrate from GitHub to Codeberg, adapt release workflow accordingly.
  • ci: Restrict Renovate to run Tue, Thu, and Sat at 02:00 UTC.

Fixed

  • p11ex_cli: Correct invalid Erlang version strings in CI workflow.
  • ci: Fix version calculation in build process.
  • ci: Fix trailing whitespace in workflow files.

[0.3.1] - 2025-10-27

Added

  • p11ex_cli: Add sub command bench-aes-encrypt-block.
  • p11ex_cli: Also read token label from environment variable P11EX_TOKEN_LABEL.

Fixed

  • p11ex: Make search for slot by label more robust.
  • p11ex_cli: Fix error message if AES key generation is not supported.
  • p11ex_cli: Fix error messages in case slot can't be found.
  • p11ex_cli: Read attributes carefully, increase compatibility.

[0.3.0] - 2025-10-25

Added

  • Add key-wrap and key-unwrap commands to p11ex_cli.
  • Add kcv-gen command to p11ex_cli to compute the fingerprint of secret keys .