rscrypto v0.4.0

0.4.0 - 2026-06-09

🏗️ Build

• add light and full push preflight commands ci: harden BINSEC solver setup and CT diagnostics (5a8c2eb)

👷 CI

• load BINSEC proof relocation sections (6421da9)
• build BINSEC proof harnesses as non-PIE (783eac4)
• preinstall BINSEC solver system packages (df71e54)
• harden manual CT DudeCT filters (55ca702)
• add s390x AES AEAD DudeCT trace cases (53812a5)
• add AES-GCM-SIV DudeCT trace cases (5e6a24f)
• add DudeCT filters for targeted CT runs (fcc326e)
• scope RSA CT evidence and pass BINSEC SMT timeout auth: harden RSA modular import fixed-width output (c93dc79)

📦 Other Changes

• workspace: refresh release package metadata, ignore rules, and lockfile pins ci: bump action pins and harden check, coverage, and fuzz scripts docs: align release docs, CT policy, examples, and module snippets with 0.3.1 benchmarks: refresh 2026-06-09 overview and README perf chart (147c747)
• aead: align aegis256 AES helper cfgs on POWER and s390x ci: repair CT asm heuristic parsing and RISC-V BINSEC policy docs: narrow RISC-V CT evidence claims (7dbf097)
• crypto: harden asm dispatch and backend equivalence gates (643dd44)
• aead: batch s390x AES-GCM-SIV CTR keystream blocks ci: route AES AEAD CT evidence through secret-only probes (e9676b7)
• hashes: fix Blake2b diag multiblock oracle (053c810)
• auth: clear CT helper slice lints hashes: clear Blake2b diagnostic slice lints (32f0e12)
• auth: align RSA keygen with FIPS 186-5 A.1.3 (5ceb703)