4.0.2.8

2026 Jun 1

• Addressed Issue #18
  • Added x25519() function exposing the raw X25519 shared secret primitive.
  • Added x25519_public_key() function to compute X25519 public keys.
  • Added chacha20_h() function exposing HChacha20 for key derivation.
  • Deprecated key_exchange() — use x25519() with a KDF instead.
  • Deprecated compute_key_exchange_public_key() — use x25519_public_key() instead.
  • Deprecated generate_key_exchange_key_pair() — use generate_key() and x25519_public_key() instead.
• Added parameter validation to prevent possible heap buffer overflow in argon2i_32.
  • Thank you Haris (hextheshadow) for the vulnerability report & fix.
• Added Python 3.14 to setup.py
• Bumped GitHub actions versions.
• Fixed debian package build to run after python release.