v0.7.1-cw.6

Changelog

Features

• f1c6ba7: feat(spqr): validate supported serialized state (@MeKo-Christian)

Bug fixes

• 789f58d: fix(spqr): reject invalid active keys and scalar overflow (@MeKo-Christian)

v0.7.1-cw.5

Changelog

Bug fixes

• d6f6f74: fix(crypto): check the PKCS#7 pad range in constant time (@MeKo-Christian)
• 8e218f0: fix(crypto): clear the CBC plaintext when the padding is rejected (@MeKo-Christian)
• 478422d: fix(mlkem768incr): repair the SPQR encaps state in constant time (@MeKo-Christian)
• e52619e: fix(spqr): reject stored decoders that yield short header or ct2 (@MeKo-Christian)

Others

• 6afea22: docs(constant-time): record the two open findings (@MeKo-Christian)
• e3aa3bf: docs(gcmsiv): qualify the AES timing claim (@MeKo-Christian)
• 50dce8f: style(sealedsender): gofmt known_certs.go (@MeKo-Christian)

v0.7.1-cw.4

Changelog

Features

• 277f1e9: feat(attest/dcap): SGX quote v3, PCK chains and CRL checks (@MeKo-Christian)
• 7eed573: feat(attest/dcap): endorsements, TCB policy and remote attestation (@MeKo-Christian)
• 2df1e37: feat(attest/dcap): test-only acceptance of TCB evaluation data number 12 (@MeKo-Christian)
• ae07c98: feat(attest/enclave): SGX Noise handshake and CDS2 client state (@MeKo-Christian)
• 981059a: feat(attest/hsmenclave): HSM enclave client (@MeKo-Christian)
• 07f8c1c: feat(devicetransfer): device transfer key and certificate (@MeKo-Christian)
• 526388c: feat(noise): NK and NKhfs handshakes for enclave channels (@MeKo-Christian)
• f1669cb: feat(zkcredential): port generic credentials and endorsements (@MeKo-Christian)
• 6db41ad: feat(zkgroup): group send endorsements and tokens (@MeKo-Christian)
• 00dd2ed: feat(zkgroup): port UID and profile-key crypto primitives (@MeKo-Christian)
• 1c82bfe: feat(zkgroup): port legacy credentials and proof flows (@MeKo-Christian)
• 46cea87: feat(zkgroup): versioned group and profile API (@MeKo-Christian)

Others

• b9b3d85: refactor(attest/dcap): move the evaluation number 12 exception to attest/internal/testhook (@MeKo-Christian)
• eef58c8: test(attest/dcap): upstream's recorded attestation blobs as vectors (@MeKo-Christian)
• 460a03a: test(compat): snow Noise vectors and live interop (@MeKo-Christian)

v0.7.1-cw.3

Changelog

Bug fixes

• 0a8cfc8: fix(proto): own package name for service.proto (@MeKo-Christian)

v0.7.1-cw.2

Changelog

Features

• 5c3c0fa: feat(session): client session API for libsignalgo (@MeKo-Christian)
• b0f6fd7: feat: libsignalgo support beyond the session API (@MeKo-Christian)

v0.7.1-cw.1

Changelog

Others

• 59913d4: build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (GoCodeAlone#29) (@dependabot[bot])
• 05f391c: chore(compat): re-pin the harness to libsignal v0.102.2 (@MeKo-Christian)
• bf2273d: docs(decisions): fork tag scheme (@MeKo-Christian)