v1.07

March 10, 2026 · View on GitHub

Fix 8x over-allocation in cipher_text malloc (sizeof unsigned char* -> unsigned char), remove stray double semicolon. No security issue.
ruby MiniTest is now Minitest. Add i_suck_and_my_tests_are_order_dependent! in the class to force test orders. Tests use generated files from one test to another so call order is important.
Add OpenSSL 3.x support via EVP_MAC API, fix HMAC/cipher context memory leaks. Clean key material on exit.
Code cleanup to remove compiler warnings.
Move docs from AsciiDoc to Markdown format. I used the instruction in this page AsciiDoc to Markdown. Didn't need much cleanup.

(Mar-07-2026)

v1.06

Support OpenSSL 1.1 (tested with OpenSSL 1.1.1d) and LibreSSL (tested with LibreSSL 3.0.2). Fixes issue #4.

(Jan-06-2020)

Fix a custom kdf_iter that was not handled correctly when decrypting. Thanks to Vincent <vincentxueios at gmail.com> (Feb-15-2019)

memcmp() typically does not execute in constant time. Hence timing attack can be performed while comparing hmacs. Thanks to Scott Arciszewski for pointing it out. Fixes issue #1

(Jan-25-2016)

(Jun-01-2015)

Implemented function rncryptorc_encrypt_data_with_password_with_salts_and_iv() so that caller can pass encryption salt, hmac salt and iv.
Implemented function rncryptorc_encrypt_data_with_key_iv() so that caller can pass IV.
Implemented unit tests for testing all of the RNCryptor’s v3 test vectors.

(May-31-2015)