Releases: dolutech/cryptnote-php
Releases · dolutech/cryptnote-php
v0.2.0
[0.2.0] - 2026-01-11
Added
- AES-256-GCM (AEAD) as default encryption method for both
CryptNoteandCryptNoteStandalone - Encryption versioning (
encryption_version):v2(GCM AEAD) andv1(legacy CBC+HMAC) - Password policy enforcement:
password_min_length(default: 12 characters) - Custom password validator:
password_validatorcallable option - Require password option:
require_passwordto force all notes to have a password - Key wrapping:
enable_key_wrappingandwrapping_keyoptions to protect per-note keys - Privacy mode:
privacy_modeoption to hide status details for missing/expired/invalid tokens - Secure deletion:
secure_deleteoption for SQLite secure_delete pragma + DELETE journal mode - HMAC authentication for v1 CBC payloads (integrity verification)
- Backward compatibility for legacy encrypted data without version prefix
Changed
- Default
encryption_methodchanged fromAES-256-CBCtoAES-256-GCM - Default
password_min_lengthincreased to 12 characters (was 8) CryptNoteStandalonenow uses versioned encryption format (v2:orv1:prefix)- Encrypted data format now includes version prefix for format identification
- Improved documentation with security best practices
Security
- GCM mode provides authenticated encryption (AEAD) - detects tampering
- HMAC-SHA256 added for v1 CBC mode integrity verification
- Stronger default password requirements
- Optional key wrapping for defense in depth
v0.1.0
🔐 CryptNote PHP Library v0.1.0 - Initial Release
Welcome to the first public release of CryptNote PHP Library!
✨ What's New
This is the inaugural release of CryptNote, a powerful PHP library for creating encrypted, self-destructing messages with view limits and optional password protection.
Core Features
- 🔐 AES-256-CBC Encryption - Military-grade encryption for your messages
- 🔑 Password Protection - Optional PBKDF2 key derivation (100,000 iterations)
- 👁️ View Limits - Messages self-destruct after 1-100 views
- ⏰ Time Expiration - Set messages to expire up to 7 days
- 📝 Markdown/HTML Support - Store and retrieve formatted content
- 🗄️ SQLite Storage - Zero-configuration database included
- 🧹 Auto Cleanup - Automatic removal of old, unviewed messages
- 🔒 Secure Deletion - Data is overwritten before deletion
What's Included
- ✅ Full-featured
CryptNoteclass with SQLite storage - ✅
CryptNoteStandaloneclass for custom storage implementations - ✅ Comprehensive documentation (API Reference, Configuration, Security Guide)
- ✅ Working examples (basic usage, standalone encryption, web interface)
- ✅ Complete PHPUnit test suite
- ✅ Production-ready code with security best practices
Requirements
- PHP 8.0 or higher
- OpenSSL extension
- PDO extension with SQLite driver