python-pyhsm (1.0.4f-1) unstable; urgency=low

  [ Dain Nilsson ]
  * New upstream release.
    - Support URLs in device field, for more info see:
      http://pyserial.sourceforge.net/pyserial_api.html#serial.serial_for_url
    - Added yhsm-daemon.

 -- Simon Josefsson <simon@yubico.com>  Tue, 16 Apr 2013 14:58:00 +0200

python-pyhsm (1.0.4e-1) unstable; urgency=low

  * New upstream release.
  * Bump compat level to 9.
  * Fix dh invocation for python.
  * Update standards version to 3.9.4.
  * Remove obsolete 'DM-Upload-Allowed'.
  * Drop Fredrik as uploader, add Klas and Dain.
  * Use machine readable copyright file.
  * Update Homepage URL.

 -- Simon Josefsson <simon@yubico.com>  Sat, 06 Apr 2013 07:03:06 +0200

python-pyhsm (1.0.4d-1) unstable; urgency=low

  [ Klas Lindfors ]
  * New upstream release.
    - Make yhsm-yubikey-ksm work with the old fileformat

 -- Klas Lindfors <klas@yubico.com>  Mon, 18 Mar 2013 15:18:55 +0100

python-pyhsm (1.0.4c-1) unstable; urgency=low

  [ Klas Lindfors ]
  * New upstream release.
    - Let the OTP validation work with nonce in aead file
    - add --random-nonce to yhsm-generate-keys and yhsm-import-keys

 -- Klas Lindfors <klas@yubico.com>  Mon, 18 Mar 2013 13:46:23 +0100

python-pyhsm (1.0.4b-1) unstable; urgency=low

  [ Dain Nilsson ]
  * New upstream release.
    - yhsm-import-keys: Support soft HSM AEAD generation.
    - yhsm-import-keys: Ignore lines starting with #.
    - yhsm-import-keys: Block all-zero (ccc...c) keys.
    - yhsm-decrypt-keys: Support generating AEADs.
    - yhsm-decrypt-keys: Ignores non-modhex files in AEAD directory trees.
    - yhsm-generate-keys: Bugfix that caused AEAD generation to fail.
    - yhsm-generate-keys: Bugfix that caused wrong nonce to be used.
    - yhsm-generate-keys: Prevent generating all-zero (ccc...c) keys.

 -- Dain Nilsson <dain@yubico.com>  Mon, 11 Feb 2013 16:55:24 +0100

python-pyhsm (1.0.4a-1) unstable; urgency=low

  [ Fredrik Thulin ]
  * New upstream release.
    - Enable IPv6 --addr for network servers.
    - Verifies communication with YubiHSM on initialization.

 -- Simon Josefsson <simon@josefsson.org>  Wed, 22 Aug 2012 12:47:53 +0200

python-pyhsm (1.0.4-1) unstable; urgency=low

  [ Fredrik Thulin ]
  * New upstream release matching firmware 1.0.4.
    - Firmware adds flag YSM_USER_NONCE to address security problem
      for some usages where AEADs could be decrypted by an attacker
      capable of generating new AEADs.
  * New file format for stored AEADs (code loading AEADs is backwards
    compatible), including key handle and nonce.
  * AES CCM implementation compatible with YubiHSM in software, for
    transparency and to enable willfull decryption of AEADs.
  * Tools to generate YubiKey secrets into AEADs as well as decrypt
    them to enable provisioning YubiKeys with the secrets.

  [ Simon Josefsson ]
  * Bump to Debian Policy version 3.9.3.

 -- Simon Josefsson <simon@josefsson.org>  Sun, 24 Jun 2012 21:27:20 +0200

python-pyhsm (1.0.3c-2) unstable; urgency=low

  [ Fredrik Thulin ]
  * Fix package policy violations. Closes: #656205

  [ Simon Josefsson ]
  * Add yhsm-docs.doc-base.

 -- Simon Josefsson <simon@josefsson.org>  Wed, 18 Jan 2012 20:23:42 +0100

python-pyhsm (1.0.3c-1) unstable; urgency=low

  * Initial release.

 -- Fredrik Thulin <fredrik@yubico.com>  Thu, 05 Jan 2012 20:08:43 +0100
