- feat: DPoP mint and validation
- feat: at_hash and c_hash calculation and verification
- fix: Bleichenbacher Padding Oracle mitigation
- fix: SD-JWT disclosure overriding plain claims
- fix: No system root check of certificates on Linux
- fix: JWS verifiying all candidates instead of first JWKS
- fix: Rejecting SDJWT unknown algorithm
- fix: Maximum PBES2 iteration to 10m to avoid DDoS
- fix: JWK EC raw format parsing
- fix: JWE decryption perfomance
- !fix: ConcatKDF argument is bits not bytes
- fix: resolve Tuist build issue for iOS projects (by @omidgolparvar)
- chore: Expose JSONWebMLDSAPublic(Private)Key as public
Contributors
omidgolparvar