Skip to content

Commit cb56504

Browse files
chore(release): Bump ESDK version, add changelog (#710)
1 parent c14f7fe commit cb56504

File tree

2 files changed

+28
-1
lines changed

2 files changed

+28
-1
lines changed

CHANGELOG.rst

+27
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,33 @@
22
Changelog
33
*********
44

5+
4.0.0 -- 2024-10-29
6+
===================
7+
8+
Features
9+
--------
10+
* Add support for constructs from the `AWS Cryptographic Material Providers Library (MPL) <https://github.com/aws/aws-cryptographic-material-providers-library>`_.
11+
The MPL contains new constructs for encrypting and decrypting your data.
12+
We highly recommend installing the MPL. See `Installing <https://github.com/aws/aws-encryption-sdk-python/tree/master?tab=readme-ov-file#installation>`_ for instructions.
13+
14+
Breaking Changes
15+
^^^^^^^^^^^^^^^^
16+
* The MPL introduces the Required Encryption Context Cryptographic Materials Manager
17+
("required EC CMM") as a new construct for protecting your data.
18+
On encrypt, the required EC CMM will use specific configured
19+
encryption context key-value pairs to calculate the message signature,
20+
but will not store those pairs in the ESDK message.
21+
On decrypt, decryptors must supply these same pairs that were used when encrypting the message.
22+
All messages that have been encrypted with versions of the ESDK <4.0.0 are forward compatible with this change.
23+
However, messages that are constructed with the required EC CMM are not backward compatible with ESDK <4.0.0,
24+
as no version of ESDK <4.0.0 supports reading messages encrypted with the required EC CMM.
25+
A message that is encrypted with the required EC CMM from the MPL must be decrypted with a CMM from the MPL.
26+
27+
Fixes
28+
-----------
29+
* fix: MKPs attempt to decrypt with remaining keys if a preceding raw RSA key failed to decrypt
30+
`#707 <https://github.com/aws/aws-encryption-sdk-python/pull/707>`_
31+
532
3.3.0 -- 2024-05-20
633
===================
734

src/aws_encryption_sdk/identifiers.py

+1-1
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@
1717
# We only actually need these imports when running the mypy checks
1818
pass
1919

20-
__version__ = "3.3.0"
20+
__version__ = "4.0.0"
2121
USER_AGENT_SUFFIX = "AwsEncryptionSdkPython/{}".format(__version__)
2222

2323

0 commit comments

Comments
 (0)