Recent commits to derivepassphrase.git (0003d4596d632d41c7c03ff8145c152c9d0e4531)

Merge topic branch 'ssh-agent-socket-providers' into master

2025-08-04T21:41:47+02:00

* ssh-agent-socket-providers:
  Add a changelog entry for the SSH agent socket provider feature
  Make all command/format/feature enums self-testing
  Document the new level of support for SSH agents (also in `--version` output)
  Update the "SSH key" feature flag in `--version` output
  Support looking up a socket provider, even if merely registered
  Add tests for the SSH agent socket provider machinery
  Introduce a stubbed SSH agent, for testing
  Introduce SSH agent socket providers
  Turn the `ssh_agent` submodule into a subpackage
  Generalize the error message for missing SSH agent support
</pre>

Add a changelog entry for the SSH agent socket provider feature

2025-08-04T21:37:03+02:00

Also include a changelog entry for the self-testing feature flags.
</pre>

Update wishlist to post-v0.5.2

2025-08-03T21:57:58+02:00

</pre>

Release 0.5.2

2025-08-03T21:47:37+02:00

</pre>

Merge topic branch 'fix-version-number' into master

2025-08-03T20:45:36+02:00

* fix-version-number:
  Fix the automatic version increment in `__init__.py`
</pre>

Fix the automatic version increment in `init.py`

2025-08-03T20:45:21+02:00

Despite using software (`bump-my-version`) to automatically update all
version number references throughout the project, I forgot to include
a rule to update the version recorded in the code itself:
`derivepassphrase/__init__.py:__version__`.  Thus, version 0.5 and
version 0.5.1 have been released while both claiming to be version "0.5
alpha 1 (development build 1)".  Oops.
</pre>

Merge topic branch 'pageant-068-080-keys' into master

2025-08-03T20:20:55+02:00

* pageant-068-080-keys:
  Add a script to query test key signatures and derived passphrases from an agent
  Add Pageant 0.68–0.80 signatures and derived passphrases for DSA keys
  Harmonize syntax for the test key definitions
</pre>

Add a script to query test key signatures and derived passphrases from an agent

2025-08-03T20:07:56+02:00

The script attempts to upload each test key to the running SSH agent,
then queries the agent for the signature of the `vault` UUID and
computes the derived passphrase.  If that works, then it prints the test
key, augmented by the new signature and new derived passphrase, in
a `repr`-compatible representation that could principally directly be
included into the `tests` module.

(The real code in the `tests` module basically only differs in
whitespace: the hex codes that make up the signatures and the key data
are wrapped manually, in a manner that highlights their structure but
which is difficult/tedious to produce automatically.)

The script has only been tested on UNIX, and because it imports the
`tests` module directly, it should be run in a compatible environment,
e.g., the `hatch-static-analysis` environment.
</pre>

Add Pageant 0.68–0.80 signatures and derived passphrases for DSA keys

2025-08-03T19:59:19+02:00

I generated these signatures and derived passphrases against a manually
compiled instance of Pageant 0.80.  (Because, as already hinted at in
d2bb555fd898d63b413b37dc2bd1374d82daeffe, it is somewhat hard to obtain
pre-compiled versions of Pageant with a known security hole.  It turned
out to be much easier to compile Pageant ourselves than to find an
unpatched PuTTY distribution.)

(These test vectors are not actually in active use yet.)
</pre>

Harmonize syntax for the test key definitions

2025-08-03T19:35:25+02:00

No functional change.  But harmonizing the syntax makes it easier to
compare machine-generated output with the recorded test vectors for the
test keys.
</pre>