6.0.0 (2026-08-11)

⚠ BREAKING CHANGES

• the rsa-oaep-mgf1p identifier fixes MGF1 to SHA-1 per
  XML-Enc 1.1 section 5.5.2, and DigestMethod selects only the OAEP message
  digest. Ciphertext produced by this library with keyEncryptionDigest sha256
  or sha512 (v3.1.0 through v5.0.0) used MGF1 matching the digest and no
  longer decrypts; it was never interoperable with compliant peers.

• fix!: emit MGF1-SHA1 ciphertext for rsa-oaep-mgf1p

• encrypting with keyEncryptionDigest sha256 or sha512 under
  rsa-oaep-mgf1p now wraps the key with MGF1-SHA1, as the identifier requires.
  Peers that adapted to the previous non-compliant output must switch to the

Features

• mask generation should use sha1 for rsa-oaep-mgf1p (#140) (48f0059), closes xmlenc11#rsa-oaep xmlenc11#rsa-oaep xmlenc11#rsa-oaep xmlenc11#mgf1sha1 xmlenc#MGF1withSHA1

5.0.0 (2026-07-02)

⚠ BREAKING CHANGES

• DigestMethod is not used when keyEncryptionAlgorithm is RSA 1.5 so has been removed from the encrypted payload
• keyEncryptionDigest values of sha256 or sha512 correctly use the http://www.w3.org/2001/04/xmlenc namespace when encrypting

Bug Fixes

• correct digest method and digest method algorithm id (#136) (586edd3)

4.0.1 (2026-06-25)

Bug Fixes

• bump @xmldom/xmldom to 0.8.13 to address CVE-2026-34601 (#128) (5980ce6)

4.0.0 (2026-03-31)

Features

• moving AES-128-CBC AES-256-CBC to the list of insecure algorithms (#123) (b03887a)

BREAKING CHANGES

• CBC algorithms are now marked insecure

Add support for sha256/512 encryption key OAEP digest methods (#115)

• BREAKING CHANGE: Drops support for Node 8
• Replaces node-forge with native crypto functions

[SEC] Bumps xmldom minor version.
[SEC] Bumps glob-parent patch version

Updated the xmldom dependency due to a vulnerability (CVE-2021-21366) in earlier versions.

• Dev
  Remove test files to prevent false positive from SAST checks.

fix: Moved sinon to devDependency to reduce prod dependency weight.