2.4.0 -- 2023-04-04

• feat: Add support for AWS-LC build in ESDK (#750)
• fix(default_cmm): track unset default alg separately (#687)
• fix: out-of-bounds constant in default_cmm.c (#752)
• docs(SupportPolicy): Mark 1.x End-of-Support (#756)
• fix: initialize buffer in cipher_openssl.c (#751)
• docs: Add missing library to compilation example (#697)
• docs(examples): adjust discovery example wording (#738)
• docs: Use recommended RSA padding mode (#522)
• feat(examples): add DiscoveryFilter example (#737)

Maintenance

• feat: Add CBMC proof-running GitHub Action (#763)
• fix: return type of aws_default_allocator stub in CBMC proofs (#760)
• feat: use latest aws-cpp-sdk (#761)
• fix: kms delay (#758)
• chore: Update CBMC starter kit (#753)
• ci(CodeBuild): run ubuntu latest in series (#747)
• chore: bump openssl (#746)
• chore: Update submodules (#725)
• chore: Remove CBMC CI configuration (#741)
• chore: Bump Litani version to 1.16.0 (#740)
• chore: Upgrade CBMC templates submodule (#739)
• chore: Add CODEOWNERS file (#733)

What's Changed

• chore: Add CODEOWNERS file (1.x) by @farleyb-amazon in #732
• fix: v1 deprecation by @ajewellamz in #755
• docs(SupportPolicy): Mark 1.x End-of-Support by @texastony in #757

Full Changelog: v1.9.1...v1.9.2

Maintenance

• Add support policy
• CBMC CI upgrades (#709, #710, #711, #722, #726)
• Simplify / update build instructions (#713)
• Remove OOM test, as OOM is no longer possible from aws allocators (#728)
• Pin newer aws-sdk-cpp in macOS CI builds (#729)

Maintenance

• Mark high-memory proofs expensive (#710)
• Simplify / update build instructions (#713)
• Update submodules (#726)
• Remove OOM test, as OOM is no longer possible from aws allocators (#728)
• Pin newer aws-sdk-cpp in macOS CI builds (#729)

• Add support policy. (#720)
• Fix missing include in kms_mrk_keyring.h that could result in compilation failure. (#723)

Features

• AWS KMS multi-Region Key support (#715)

  Added the new keyring KmsMrkAwareSymmetricKeyring that support AWS KMS multi-Region keys.
  Added the helper MultiKeyringBuilder that compose multiple KmsMrkAwareSymmetricKeyrings together to handle multiple CMKs.

  See https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html for more details about AWS KMS multi-Region Keys.
  See https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/configure.html#config-mrks for more details about how the AWS Encryption SDK interoperates with AWS KMS multi-Region keys.

Features

• Improvements to the message decryption process (#708).
  See GHSA-r8cc-xhh9-rg65.

Features

• Improvements to the message decryption process (#707).
  See GHSA-r8cc-xhh9-rg65.

Features

• Updates to the AWS Encryption SDK.

  See migration guide: https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/migration.html

  BREAKING CHANGE: AWS KMS KeyIDs must be specified explicitly or Discovery mode explicitly chosen. Key committing suites are now default. CommitmentPolicy requires commitment by default.

Features

• Updates to the AWS Encryption SDK. cbed43b

  See migration guide: https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/migration.html