Hi Folks, a new release of <Signum> is ready! It ...

# feed

[Bernd Prünster]

Hi Folks,

a new release of Signum is ready! It introduces the last building blocks for baseline feature completeness: RSA encryption and KDF/KSF. Certificates now support arbitrary signature algorithms, and we also revamped the ASN.1 engine's decoding API. Since this release is based on kotlinx.datetime 0.7.1, there were some API changes that go along with this migration. We used this opportunity to also rework Known OIDs, so update your imports.

Last time, I teased that we were approaching feature completeness and that we wanted feedback. Sometimes you get what you ask for: there is apparently more demand for extensibility beyond the algorithms shipped with Signum than we anticipated (even on mobile targets). Hence, we will allow future Signum versions to be extended with arbitrary algorithms and the provider will support more targets. It comes with a caveat, though: there is no way to do this without invasive changes (from enums to open classes; from hardwired sets of signature algorithms to enabling full cryptographic agility). Hence, we will be dedicating our resources to rewiring lots of parts over the next few months, and we'll migrate to new coordinates and a new versioning scheme to indicate this fundamental change. The only part where we expect minimal changes is the ASN.1 engine, since this part really is battle-tested after serving millions in production. Some new functionality is still expected to hit the current incarnation of Signum until then, but nothing major.