v0.15.0

• Allow Blake (blake2s and blake2b) hashing algorithms (#218)
• new features
  • Add nistp384 signature verification support (#228)
  • Allow callers to provide a default keyid in format_metadata_to_key, rather than using the default keyid value of a hash of the canonical JSON of the key metadata (#225)
  • Implement files and directories abstraction as an abstract base class; StorageBackendInterface, with a concrete implementation for local filesystems; FilesystemBackend (#232). This enables users, such as tuf, to support non-local/non-traditional filesystems, so long as they provide an object implementing securesystemslib.storage.StorageBackendInterface. All functions which take a StorageBackendInterface default to creating a filesystemBackend object for local filesystem interaction when an object isn't provided. This means that behaviour remains the same as in prior (0.14.x) releases of securesystemslib, only instead of throwing exceptions rom the Python standard library a custom, generic, error is thrown: securesystemslib.exceptions.StorageError
• removed features
  • Remove support for gzipped files in load_json_file (#230)

Secure Systems Lib v0.14.2

• Re-enable OpenPGP signature verification without GnuPG (#215)

Secure Systems Lib v0.14.1

• Improve logging (#212, #211)
• Fix dependency monitoring and revise requirements files (#209)
• Further improve optional dependency handling (#206)
• Update release metadata (#205)

Secure Systems Lib v0.14.0

• behavior change
  • Default to pure Python ed25519 signature verification when nacl is unavailable (#200)
  • Fix settings.SUBPROCESS_TIMEOUT access in process module (#202)
• Improve schema-related error message (#199)
• Generally improve optional dependency handling (#200)
• Enhance test configuration, fix typos and remove unused code (#201)
• Fix improper identity check (#203)

Secure Systems Lib v0.13.1

• Fix MANIFEST.in to include all test data in source release (#196)

Secure Systems Lib v0.13.0

• Add support for OpenPGP EdDSA/ed25519 keys and signatures (#188)

Secure Systems Lib v0.12.2

• Remove unnecessary python-dateutil==2.8.0 version pinning to not cause downstream dependency conflicts (#192)

Secure Systems Lib v0.12.1

• Fix stream duplication race conditions in subprocess interface (#186)

Secure Systems Lib v0.12.0

• backwards incompatible
  • Remove data serialization in create_signature and verify_signature (#162)
  • Replace mostly obsolete TempFile utility with single helper function (#181)
  • Remove TUF-specific code and comments (#165)
• new features
  • Add support for pkcs1v15 RSA signature scheme and additional hash algorithms (#173, #175)
  • Add basic OpenPGP support, transferred from in-toto (#174, #176, #185)
• miscellaneous
  • Fix publishing of code coverage and enhance test configuration (#171)
  • Make colorama a strict dependency (#178)
  • Enhance source distribution metadata (#168)
  • Update downstream Debian metadata (#177)

Secure Systems Lib v0.11.3

securesystemslib v0.11.3

• Provide option to normalize line endings (\r\n -> \n, \r -> \n) when
  calculating the hash of a file (default: do not normalize).
• Update developer dependencies (dev-requirements.txt):
  • cryptography 2.2.2 to 2.3.1
  • tox 3.0.0 to 3.2.1