Packages

message_signatures

0.1.0
0.1.0

RFC 9421 HTTP Message Signatures for Elixir: create and verify signatures over HTTP message components with strict signature-base canonicalization.

HexDocs

Current section

Files

Jump to
Readme
1 Version
3 Dependencies
Dependants
Files
Activity
message_signatures CHANGELOG.md
Raw

CHANGELOG.md 

# Changelog



## v0.1.0 (2026-07-22)



### Added



- RFC 9421 HTTP Message Signatures for request and response message

  components, including strict signature-base canonicalization, signing,

  verification, key-resolution, nonce-checking, and optional Req and Plug

  integrations.

- Support for `hmac-sha256`, `ed25519`, `ecdsa-p256-sha256`,

  `ecdsa-p384-sha384`, `rsa-pss-sha512`, and `rsa-v1_5-sha256`.

- All RFC 9421 Appendix B vectors asserted byte-exact on signature-base

  construction; B.2.5/B.2.6 byte-exact on signing.

- A Python differential check against pyauth/http-message-signatures 0.5.0

  produced 50/50 HMAC-SHA256 agreement across varied methods,

  component subsets, paths, and queries.