Intel DCAP-based attestation is now fully implemented for CDS2! The
"NOT_FOR_PRODUCTION" static methods on CdsiClient have been replaced
by normal constructors in Java and Swift and a plain 'new' method in
TypeScript.
Additional changes:
- attest and device-transfer now depend on the 'boring' crate, which
wraps BoringSSL. This may complicate cross-compilation; only
Signal's supported platforms have been tested, plus light testing
of Arm64 Windows and Linux.
- Node: Expose missing IdentityKeyPair.deserialize().
- zkgroup: the generate-server-params binary target allows updating
your private server parameters in a backwards-compatible way. Only
useful if you run your own group server.
- Rust: in libsignal-protocol, device IDs and pre-key IDs now use
strongly-typed wrapper structs rather than plain integers.
