Maintenance
- Bump maven-gpg-plugin from 1.6 to 3.0.1 (#259)
- chore(deps): bump aws-java-sdk from 1.11.704 to 1.12.26 (#284) (#281) (#280) (#278)
- Bump maven-javadoc-plugin from 3.0.1 to 3.3.0 (#267)
- chore: Bump maven-compiler-plugin from 3.8.0 to 3.8.1 (#276)
- chore: Bump fmt-maven-plugin from 2.10 to 2.11 (#275)
- chore: Bump junit-vintage-engine from 5.7.1 to 5.7.2 (#268)
- chore: Bump mockito-core from 3.8.0 to 3.11.2 (#270)
- chore: Add support policy (#274)
Patches
- fix: read project properties from package's own ClassLoader (#269)
Features
-
AWS KMS multi-Region Key support (#254)
Added new the master key AwsKmsMrkAwareMasterKey
and the new master key provider AwsKmsMrkAwareMasterKeyProvider
that support AWS KMS multi-Region Keys.See https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html
for more details about AWS KMS multi-Region Keys.
See https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/configure.html#config-mrks
for more details about how the AWS Encryption SDK interoperates
with AWS KMS multi-Region keys.
Features
- Updates to the AWS Encryption SDK.
BREAKING CHANGES
- AWS KMS KeyIDs must be specified explicitly or Discovery mode explicitly chosen.
Key committing suites are now default. CommitmentPolicy requires commitment by default.
See: https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/migration.html
Features
- Updates to the AWS Encryption SDK.
See migration guide: https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/migration.html
Patches
- Validate final frame length does not exceed the frame size in the message header PR #166
- Validate entire ciphertext has been processed before returning PR #191
Maintenance
Deprecation Warnings
-
Deprecated
AwsCrypto.encryptString()andAwsCrypto.decryptString().
Replace your calls to these methods with calls to AwsCrypto.encryptData() and AwsCrypto.decryptData().
Unlike the deprecated methods, these methods don't perform any Base64 encoding or decoding, so they are fully compatible with other language implementations of the AWS Encryption SDK.If you need Base64 encoding or decoding for your application, you can add it outside of the AWS Encryption SDK. PR #120
Patches
Maintenance
Minor Changes
- Remove dependency on Apache Commons Codec 1.12.
- Use Base64 encoder from Bouncy Castle.
- Introduce and use utility methods for Base64 encoding/decoding so that
switching the codec provider needs to be done only in one place next time.
