This is a pre-release following the large refactor to allow CharArray instead of String for passphrases. Also, note that from this release the signing GPG key changes to abae2592cb68c1a23b967d757e13d544ee703984.

See the commit history for a summary of changes. They will be summarized in the full release version 0.4.0 once ready.

This can be considered the first version that is ready for evaluation in production-like environments.

Changelog:

• The method HiddenSloth#decryptFromStorageWithCachedSecrets now correctly throws SlothDecryptionFailed instead of AEADBadTagException if decryption fails.
• Removed obsolete code from HiddenSlothImpl#computeCachedSecrets
• Upgraded dependencies

Note that this is a pre-release and the API is subject to change before we reach 1.0.0. This is a pre-release and not fit for production.

Changelog:

• The minimum SDK has been changed from API 28 to API 26.
• The SlothLib.getLongSlothInstance and SlothLib.getHiddenSlothInstance methods now take a SlothStorage parameter so that the caller does not need to pass it to their methods individually.
• HiddenSlothImpl and LongSlothImpl classes are now marked as @VisibleForTesting. They should not be used directly.
• A new SlothLib.benchmarkParameter method can be used to practically determine the L parameter for LongSloth given a target duration
• The ensureStorage method in HiddenSloth is renamed to onAppStart and was also introduced for LongSloth
• The HiddenSlothCachedSecrets can now also be used for repeated encryptions. The cached secrets are compatible for both encryption and decryption as long as the passphrase does not change.

Also now available on Maven Central: https://repo1.maven.org/maven2/com/lambdapioneer/sloth/.

Note that this is a pre-release and the API is subject to change before we reach 1.0.0.

This is a pre-release and not fit for production.