0.2.0

Headlines

• 0.2.0 introduces a public API for general-purpose cryptography use, see the documentation.
• Performance improvements in ECDSA verification.
• Performance improvement in SHA512 for small inputs (eg, HMAC in TLS).
• Performance improvement of AES-GCM on ARM.
• XChaCha20Poly1305 now supported, thanks to @conradludgate.
• On ARM, neon registers are zeroised on return in secret functions.

What's Changed

• Document unsafe blocks by @ctz in #11
• ecdsa: add rejection sampling test vector by @ctz in #12
• try codspeed by @ctz in #13
• Introduce documented public API by @ctz in #14
• Add LICENSE file by @ctz in #16
• Update deps by @ctz in #17
• Use CAVP test vectors by @ctz in #18
• Use neon impls for squaring/multiplication mod p256/p384 by @ctz in #19
• aarch64: marginally improve performance of the aes-ctr part of aes-gcm by @ctz in #20
• Prepare 0.2.0 by @ctz in #21
• Implement XChaCha20Poly1305 by @conradludgate in #24
• Update dependencies by @ctz in #28
• Assorted asm generation improvements by @ctz in #27
• Improve ECDSA verification speed by @ctz in #26
• README: update aarch64 gcm details by @ctz in #30
• Add ticketer using xchacha20poly1305 by @ctz in #29
• hash: fix output length for SHA384 by @ctz in #31
• Take latest rustls by @ctz in #32
• Measure coverage by @ctz in #34
• coverage: also build main by @ctz in #35
• Reduce use of magic numbers by @ctz in #33
• Add basic exercising of rustls-graviola by @ctz in #36
• Fix and check DER integer rules by @ctz in #37
• Prepare 0.2.0-alpha.2 by @ctz in #38
• README improvements by @ctz in #39
• rustls-graviola: bump graviola version by @ctz in #40
• rustls-graviola: fix asterisk version by @ctz in #41
• Improve SHA512 small input performance by @ctz in #42
• rustfmt imports by @ctz in #43
• Support static DH by @ctz in #44
• fix zizmor warnings by @ctz in #45
• hash::Sha512: should be Clone by @ctz in #48
• x25519: check shared secret for zero by @ctz in #47
• Basic differential fuzzing by @ctz in #46
• Update dependencies by @ctz in #49
• Misc benchmarking alterations by @ctz in #50
• Micro-optimise HMAC by @ctz in #51
• aarch64: zero neon registers by @ctz in #52
• Improve test coverage by @ctz in #53
• Support encoding ECDSA private keys by @ctz in #54
• Fix aarch64 warnings by @ctz in #55
• Support encoding RSA keys by @ctz in #56
• Check constant-time data flows ala ctgrind by @ctz in #58
• Drop dependency on rustls-webpki by @ctz in #59
• Heuristic to avoid Q!("single string") noise by @ctz in #60
• Eliminate optimise_barrier by @ctz in #61
• Add logo revision by @ctz in #62
• cut 0.2.0 by @ctz in #63

New Contributors

• @conradludgate made their first contribution in #24

Full Changelog: v/0.1.1...v/0.2.0