Skip to content

v1.0.0

Latest

Choose a tag to compare

@yllada yllada released this 02 Jan 23:28
a043394

πŸ”’ Banking-Grade Encryption Release

This release upgrades the package to AES-256-GCM with authenticated encryption, meeting modern security standards for financial applications.

πŸš€ Major Features

  • AES-256-GCM with authenticated encryption (AEAD)
  • Random IV generation per encryption (prevents pattern analysis)
  • PBKDF2-SHA256 with 210,000 iterations (OWASP 2023 recommendation)
  • Tamper detection via authentication tags
  • 16+ character password requirement

πŸ›‘οΈ Security Improvements

  • Upgraded from AES-128-CBC to AES-256-GCM
  • Random 32-byte salt per operation
  • SHA-256 instead of SHA-1
  • No manual padding required (GCM handles it)

βœ… Testing

  • 13 comprehensive security tests
  • Validates encryption, decryption, tamper detection
  • Ensures random IV functionality