Skip to content

v0.1.11

Choose a tag to compare

View all tags
@sw-release-bot sw-release-bot released this 13 Aug 00:45
· 213 commits to main since this release
v0.1.11
eadbd4c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • (xmldsig) complete Merlin interop

Fixed

  • (xmldsig) enforce verification invariants
  • (x509) enforce issuer key contracts
  • (xmldsig) address review invariants

Changed

  • (xmldsig) rename the curve-specific ECDSA SignatureAlgorithm variants to
    EcdsaSha256 and EcdsaSha384; add legacy DsaSha1 and HmacSha1 variants
  • (xmldsig) add SignedInfo::hmac_output_length_bits and make
    SignatureAlgorithm and SignedInfo non-exhaustive
  • (xmldsig) enforce operation key-strength policy consistently for direct and
    resolver-produced built-in verification keys
  • (crypto) use the hardened pure-Rust sad-rsa backend for RSA private operations
Assets 2
Loading