v4.0.0

4.0.0 (2026-03-31)

Features

• moving AES-128-CBC AES-256-CBC to the list of insecure algorithms (#123) (b03887a)

BREAKING CHANGES

• CBC algorithms are now marked insecure

v3.1.0

Add support for sha256/512 encryption key OAEP digest methods (#115)

v2.0.0

• BREAKING CHANGE: Drops support for Node 8
• Replaces node-forge with native crypto functions

v1.3.0

[SEC] Bumps xmldom minor version.
[SEC] Bumps glob-parent patch version

v1.2.3

Updated the xmldom dependency due to a vulnerability (CVE-2021-21366) in earlier versions.

v1.2.2

• Dev
  Remove test files to prevent false positive from SAST checks.

V1.2.0

fix: Moved sinon to devDependency to reduce prod dependency weight.

v1.1.0

Enhancements:

• feat: Add support for AES-GCM family (#67)
• feat: Add warning when insecure algorithm is used. (#68)

v1.0.0

💥Breaking changes:

• typo fix: options.keyEncryptionAlgorighm -> options.keyEncryptionAlgorithm
• Deprecate support for node 4/6

Enhancements:

• Remove ejs dependencies to use native literals
• Move to inline templates to allow webpack
• Added option to fail encryption and decryption for non-recommended algorithms (3DES and rsa1.5)

v0.13.0

• Added support to fail on insecure algorithms.