v0.9.0

Experimental and unaudited. Do not protect real data with this release.

HIDE implements the file-format engine: HPKE X-Wing (X25519 +
ML-KEM-768) key wrapping, and authenticated 64 KiB streaming with
constant memory.

What to download

• Desktop application — HIDE_*_x64-setup.exe (Windows),
  *.dmg (macOS), *.deb / *.AppImage (Linux). Installs a
  graphical application for keys, files and messages.
• Portable — hide-portable-*. A single executable that needs
  no installation and keeps its keys in a hide-keys folder beside
  itself. Suitable for a USB stick.
• Command line — hide-*. The hide tool.

There is no identity system, no key transparency, no sender
authentication, no forward secrecy and no hardware-backed key
storage. Secret keys are sealed with a passphrase by default, but
--insecure-plaintext writes one unencrypted. See SECURITY.md.

The wire format may change while the version is 0.x.

Verify a download against SHA256SUMS before running it.
Every asset also carries a GitHub build-provenance attestation:
gh attestation verify <file> --repo hide-protocol/hide
proves it was built by this repository's release workflow at
this tag's commit. It does not prove the code is correct.

Full Changelog: v0.8.0...v0.9.0