Key points
- Files are now verified before decryption instead of after. This should provide better security by not outputting unverified data.
This also means that if the file authentication fails, the program will stop executing before it starts the decryption process, resulting in earlier feedback to the user, e.g. in case of an incorrect password.
- A constant time compare function is now used for MAC tag verification (file authentication).
- Output files are now written to the folder where the input files are located instead of the current working directory, unless the output flag is provided (bugfix).
core
is now a separate package.
Full changelog
1e073fb
4fc4f1a
8c733e1
add462f
a3c6f90
0983705