## Changed
- Improve performance by sampling NTT coefficients block-wise from the
  XOF (#387)

## Fixed
- Redact secret key material from `Debug` output (#394)
- Harden equality testing (#414)
- Harden zeroization (#415)

## Security
- Bump `ctutils` to v0.4.5; MSRV 1.87 (#405)
- Harden reduction using newly-hardened `ctutils` (#409)
- Bump `module-lattice` to v0.2.4 (#413)