--------------------------------------------------------------------------------
This release

- Adds decryption support for Gmail end-to-end encrypted messages exported in
  the MBOX format from Google Vault and Google Takeout. Decryption of Gmail
  CSE messages now requires that the user executing the decrypter utility has
  authorized access to two endpoints of the key ACL service (KACLS):

  - privilegedprivatekeydecrypt: Used for decryption of messages protected by
    S/MIME key pairs (asymmetric encryption).

  - privilegedunwrap: Used for decryption of messages protected by the end-to-
    end encryption variant without S/MIME key pairs (symmetric encryption).

  Decrypter utility users should work with their KACLS administrator to ensure
  they have been granted access to these KACLS endpoints.

- Log messages are now written in a structured format.

- Linux and macOS releases are now available.


--------------------------------------------------------------------------------
Version 24.35.0.0

- Sets the last modified time ("mtime") of decrypted files to match the mtime of
  the corresponding encrypted file.


--------------------------------------------------------------------------------
Version 23.17.0.0

- Adds human-readable display of GCSE metadata. Execute via the command-line:
    > decrypter -action info -input <filename.gcse>

- Updates output of MBOX files containing decrypted mail messages to
  additionally pass-through cleartext messages unchanged from input to output.


--------------------------------------------------------------------------------
Version 23.6.0.1

- Adds decryption support for Gmail CSE exports in MBOX, EML, and MSG formats.
  Adds the "-credential" command-line flag to allow S/MIME certificate retrieval
  from the Gmail API.


--------------------------------------------------------------------------------
Version 22.40.1.1

- Adds decryption support for Calendar CSE exports in the GCSE format.

- Adds support for differently-named KACLS "privileged unwrap" endpoints. The
  decrypter will now query the /status endpoint of the KACLS to learn the name
  of the privileged unwrap endpoint, and will fallback to polling known possible
  endpoint names if the /status result is inconclusive.

- Changes version numbering to a dotted quad of short integers.


--------------------------------------------------------------------------------
Version 2

- Adds the "-port" command-line flag.

- Prints the download URI.


--------------------------------------------------------------------------------
Version 1

- Initial public release. Support for Drive CSE exports in the GCSE format.
