This version modifies the API to prevent timing side channel attacks. The user model creation will now fail silently if the user does not exist. It will instead raise an error when the user wants to login. This will be discussed in more detail in the documentation, https://docs.krptn.dev/, which will be updated soon.
0.5.6
Not secure
Fix a bug that may be triggered when dealocating user objects.
0.5.5
Not secure
This is a pre-release, please download and test! This release fixes a security issue missed in previous releases.
0.5.4
Not secure
This release adds some type assertions to avoid some of the worst effects of misusing the API (e.g.: locking the database session of a user object). We have only added the necessary assertions to avoid the negative impact on performance.
0.5.3
Not secure
This release fixes a bug that prevented the CLI from cleaning the database. You can now invoke `python -m krypton --clean` and it will work.
It also re-adds support for ARM64 on Windows.
This release was created multiple times on GitHub due to an accidental bug - it is now cleaned up.
0.5.2
Not secure
This is a development release. It updates the default iteration count above the OWASP recommended value.