v3.1.1

v3.1.1 - Security & Type Safety Improvements

🔒 Security

• Memory sanitization: Sensitive cryptographic data is now securely cleared from memory
• Buffer safety: Fixed potential overflow in base32 decoding

🛠️ Improvements

• Type safety: Migrated to unsigned integers for crypto operations
• Performance: Optimized base32 length calculations and removed redundant calls
• Code quality: Simplified token formatting and enhanced error handling

✅ Compatibility

• No breaking changes - existing code continues to work unchanged.
• Recommended: Update immediately for security improvements.

sha256: 9b5778b8e38d9b0c33d6331ec980094b0035bf53e6064bbcc2ed988b0d4b3d13

v3.1.0

This release brings the following changes:

• add support for mbedtls (#69, thanks to @Rockyshen123)
• add support for big endian archs (#68)

sha256: a48bbfd95b7ec12d23e4e2c4a017f8acddecc14bf10541ff144563cee044b39c

v3.0.0

This release supersedes v2.1.0 and brings a new feature and some small code improvements:

• Add support for OpenSSL (#52), by @mchalain
• Fix base32 encoding and decoding of bytes array (#54)
• make is_string_valid_b32 public
• improve code readability

sha256: ff0b9ce208c4c6542a0f1e739cf31978fbf28848c573837c671a6cb7b56b2c12

v2.1.0

⚠️ due to the internal API change, any software using libcotp will need to be recompiled after the 2.1.0 update.

⚠️ because of the above reason, this release has been recalled and will be published as 3.0 together with some other small changes.

• Fix base32 encoding and decoding of bytes array (#54)
• Add support for OpenSSL (#52), by @mchalain

sha256: 170fd3ee5270cc2bf78e76950dc64f400143da849942763abeb07e6c40c69325

v2.0.2

• Improved CMakeLists (#49 , @redstrate thank you!)
• Drop link_options, leave it up to every distro

sha256: c5357af4b3f6b3c5ad91e7f6cc6866a6139d0f89e780a057be34b31d4620caec

v2.0.1

If execution runs fine:

• set err_code to NO_ERROR in get_totp_at (thanks @Abeja27)
• set err_code to NO_ERROR in get_steam_totp_at
• set err_code to NO_ERROR in otp_to_int

sha256: b111d528bbde7c1a0a392f49293b25ae33e6e78fbcbe378e0cf8bc6d59743d11

v2.0.0

This release brings some changes and improvements.
In particular, libbaseencode has been merged with libcotp, so now users can call base32 functions by just including cotp.h

BREAKING CHANGES:

• totp_verify has been removed
• hotp_verify has been removed
• base64_encode has been removed
• base64_decode has been removed

ADDED:

• new API otp_to_int
• base32 encoding and decoding functions from libbaseencode
• new tests for libcotp

CHANGES:

• the soversion is now set only from the $major version (e.g. 2), and not from $major$minor (e.g. 12) like it used to be.

sha256: 9391244cdcbe5a871230bd9da434b415c25e3ed49fd53f482ef6c0721a12d405

v1.2.8

This release fixes a regression brought with v1.2.7. Users must either update to this release or rollback to v1.2.6. (#33)

Thanks @teapot9 for the fix 😄

sha256: 78dab6a2ee08e73f1d052dcb7c1ad069cc37fdf600f3f660d8e6299e11218f0b

v1.2.7

• check return value for gcrypt functions

sha256: 35b9bdb94dd80a95433db0c78d0d0fe98039a20bbd29105383fea5c6fedb51ac

v1.2.6

• fix #32 for good :)

sha256: f0e75c8bd27a16e808e0af7768dc100872f26dd7c64534ce971c407374386d4a