1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
|
3.1.22 Mar 18 2026
- [CVE-2026-33306] Fix integer overflow in Java extension
3.1.21 Dec 31 2025
- Use constant time comparisons
- Mark as Ractor safe
3.1.20 Nov 17 2023
- Limit packaged files -- decrease gem filesize by ~28% [GH #272 by @pusewicz]
3.1.19 June 22 2023
- Deprecate passing the third argument to `BCrypt::Engine.hash_secret` [GH #207 by @sergey-alekseev]
- Add GC guards so the C compiler won't optimize out references [GH #270]
3.1.18 May 16 2022
- Unlock GVL when calculating hashes and salts [GH #260]
- Fix compilation warnings in `ext/mri/bcrypt_ext.c` [GH #261]
3.1.17 Mar 14 2022
- Fix regex in validators to use \A and \z instead of ^ and $ [GH #121]
- Truncate secrets greater than 72 bytes in hash_secret [GH #255]
- Assorted test and doc improvements
3.1.16 Sep 3 2020
- Fix compilation on FreeBSD. [GH #234]
3.1.15 July 21 2020
- Remove GVL optimization. Apparently it breaks things [GH #230]
3.1.14 July 21 2020
- Start calibration from the minimum cost supported by the algorithm [GH #206 by @sergey-alekseev]
3.1.13 May 31 2019
- No longer include compiled binaries for Windows. See GH #173.
- Update C and Java implementations to latest versions [GH #182 by @fonica]
- Bump default cost to 12 [GH #181 by @bdewater]
- Remove explicit support for Rubies 1.8 and 1.9
- Define SKIP_GNU token when building extension (Fixes FreeBSD >= 12) [GH #189 by @adam12]
3.1.12 May 16 2018
- Add support for Ruby 2.3, 2.4, and 2.5 in compiled Windows binaries
- Fix compatibility with libxcrypt - Fixes hash errors in Fedora 28 and Ubuntu 20 [GH #164 by @besser82]
3.1.11 Mar 06 2016
- Add support for Ruby 2.2 in compiled Windows binaries
3.1.10 Jan 28 2015
- Fix issue with dumping a BCrypt::Password instance to YAML in Ruby 2.2 [GH #107 by @mattwildig]
3.1.9 Oct 23 2014
- Rebuild corrupt binaries
3.1.8 Oct 23 2014
- Add support for Ruby 2.1 in compiled Windows binaries [GH #102]
3.1.7 Feb 24 2014
- Rebuild corrupt Java binary version of gem [GH #90]
- The 2.1 support for Windows binaries alleged in 3.1.3 was a lie -- documentation removed
3.1.6 Feb 21 2014
- Dummy version of "bcrypt-ruby" needed a couple version bumps to fix some
bugs. It felt wrong to have that at a higher version than the real gem, so
the real gem is getting bumped to 3.1.6.
3.1.3 Feb 21 2014
- Add support for Ruby 2.1 in compiled Windows binaries
- Rename gem from "bcrypt-ruby" to just "bcrypt". [GH #86 by @sferik]
3.1.2 Aug 26 2013
- Add support for Ruby 1.8 and 2.0 (in addition to 1.9) in compiled Windows binaries
- Add support for 64-bit Windows
3.1.1 Jul 10 2013
- Remove support for Ruby 1.8 in compiled win32 binaries
3.1.0 May 07 2013
- Add BCrypt::Password.valid_hash?(str) to check if a string is a valid bcrypt password hash
- BCrypt::Password cost should be set to DEFAULT_COST if nil
- Add BCrypt::Engine.cost attribute for getting/setting a default cost externally
3.0.1 Sep 12 2011
- create raises an exception if the cost is higher than 31. GH #27
3.0.0 Aug 24 2011
- Bcrypt C implementation replaced with a public domain implementation.
- License changed to MIT
2.1.2 Sep 16 2009
- Fixed support for Solaris, OpenSolaris.
2.1.1 Aug 14 2009
- JVM 1.4/1.5 compatibility [Hongli Lai]
2.1.0 Aug 12 2009
- Improved code coverage, unit tests, and build chain. [Hongli Lai]
- Ruby 1.9 compatibility fixes. [Hongli Lai]
- JRuby support, using Damien Miller's jBCrypt. [Hongli Lai]
- Ruby 1.9 GIL releasing for high-cost hashes. [Hongli Lai]
2.0.5 Mar 11 2009
- Fixed Ruby 1.8.5 compatibility. [Mike Pomraning]
2.0.4 Mar 09 2009
- Added Ruby 1.9 compatibility. [Genki Takiuchi]
- Fixed segfaults on some different types of empty strings. [Mike Pomraning]
2.0.3 May 07 2008
- Made exception classes descend from StandardError, not Exception [Dan42]
- Changed BCrypt::Engine.hash to BCrypt::Engine.hash_secret to avoid Merb
sorting issues. [Lee Pope]
2.0.2 Jun 06 2007
- Fixed example code in the README [Winson]
- Fixed Solaris compatibility [Jeremy LaTrasse, Twitter crew]
2.0.1 Mar 09 2007
- Fixed load path issues
- Fixed crashes when hashing weird values (e.g., false, etc.)
2.0.0 Mar 07 2007
- Removed BCrypt::Password#exactly_equals -- use BCrypt::Password#eql? instead.
- Added BCrypt::Password#is_password?.
- Refactored out BCrypt::Internals into more useful BCrypt::Engine.
- Added validation of secrets -- nil is not healthy.
1.0.0 Feb 27 2007
- Initial release.
|
