CIRCL v1.6.4

What's Changed

• Fix typo: it's to its by @04cb in #588
• ci: Bump Go version to 1.26 by @armfazh in #591
• tss/rsa: polynomial evaluation using Horner's method by @armfazh in #590
• zk/qndleq: Ensure large security parameter by @armfazh in #592
• sign/bls: rejects aggregated signatures built with duplicated messages. by @armfazh in #595
• Bump golang.org/x/crypto from 0.30.0 to 0.45.0 by @dependabot[bot] in #585
• tss/rsa: avoiding overflow in lambda calculation with big.Int by @armfazh in #598
• deps: Update CIRCL version in code generators. by @armfazh in #599
• ci: add Semgrep OSS scanning workflow by @hrushikeshdeshpande in #601
• zk/qndleq: Fixes challenge calculation by @armfazh in #596
• sign/bls: Check that signature cannot be the identity point by @armfazh in #603
• ml-dsa: Don't use tr pointer by @bwesterb in #606
• ecc/bls12381: affinize must handle identity elements. by @armfazh in #604
• pki: check pem.Decode returned nil block. by @z9z in #607
• abe/cpabe/tkn20: fix AND-gate secret sharing. by @cjpatton in #610
• hpke: fix verifyPSKInputs() to match spec. by @cjpatton in #612
• hpke: Warn about nonce misuse during marshaling by @cjpatton in #613
• hpke: don't panic when parsing on hybrid keys/ciphertexts. by @cjpatton in #614
• blindsign/blindrsa: reject non-canonical signatures. by @cjpatton in #615
• blindsign/blindrsa: reject message unless co-prime with modulus by @cjpatton in #616
• oprf: reject identity element as public key. by @cjpatton in #619
• Add AGENTS.md and REVIEW.md for contributor and AI agent guidance by @dotjs in #620
• ecc/bls12381: check input length for infinity encoding in SetBytes. by @bwesterb in #618
• abe/cpabe/tkn20: bound recursion depth when parsing policies. by @cjpatton in #622
• abe/cpabe/tkn20: reject ciphertexts with trailing data. by @cjpatton in #621
• abe/cpabe/tkn20: handle short ciphertexts as errors. by @cjpatton in #611
• abe/cpabe/tkn20: enforce wire count matches policy. by @cjpatton in #624
• abe/cpabe/tkn20: handle malformed ciphertext header. by @cjpatton in #623
• abe/cpabe/tkn20: reject circuits with invalid topologies. by @cjpatton in #625
• Release CIRCL v1.6.4 by @cjpatton in #626

New Contributors

• @04cb made their first contribution in #588
• @z9z made their first contribution in #607
• @dotjs made their first contribution in #620

Full Changelog: v1.6.3...v1.6.4