Download Kestrel

Release v1.0.2

Changes

Add fallback to use stdin if a tty cannot be opened.
Upgrade to underlying curve25519 library that fixes a timing attack. Note that the security of this application is not directly affected by this.

Download

Release v1.0.1

13 May 24

Changes

Performance improvements. Remove extraneous x25519 operation.

Download

Release v1.0.0

28 Dec 23

Changes

The file format is now stable. All Kestrel files encrypted with this version will be able to be decrypted with future Kestrel versions. Kestrel is ready for production.
Output files are no longer overwritten during a failed decryption attempt.
Improved error messages when decrypting unsupported files.
Added check to ensure the input and output file locations differ.

Download

Homebrew

brew tap finfet/kestrel
brew install kestrel-cli

Arch Linux

AUR

Release v0.11.0

25 Sep 23

Changes

Added the abilility to input and output data using unix pipes.
Changed the format of private keys. The private key format's salt value has been increase from 16 to 32 bytes in order to give encrypted private keys the same security properties as password encrypted files.
Changed the file format of key encrypted files. The noise handshake hash is now bound to the payload key for improved security.

Note:

THIS IS A BREAKING RELEASE

All files that were encrypted with versions prior to this will no longer decrypt. You must decrypt any files with the previous version and then re-encrypt them with the new version. All private keys must also be regenerated.

No changes to the file formats are expected after the 1.0.0 release.

Download

Homebrew

brew tap finfet/kestrel
brew install kestrel-cli

Arch Linux

AUR

Release v0.10.1

20 Jan 23

Changes

Fixed a crash when running kestrel key
Improved cli error message output

Download

Homebrew

brew tap finfet/kestrel
brew install kestrel-cli

Arch Linux

AUR

Release v0.10.0

08 Aug 22

Changes

Native .deb, .rpm and homebrew packages.
Bash completion and man pages for Linux and macOS.
A warning is displayed if an empty password is used.
Updated cryptography depdendency version.