base64-ng 1.0.3

[eldryoth]

base64-ng v1.0.3

Highlights

• Continued the source-layout cleanup by splitting more internals out of lib.rs.
• Added and hardened a dedicated macOS verification script for Apple Silicon and Intel Darwin targets.
• Improved cleanup hardening around secret buffer clearing and vector spare-capacity wiping.
• Removed an unsafe UTF-8 conversion path from secret string handling.
• Tightened release evidence checks for constant-time assembly symbols after the module split.
• Added clearer documentation for streaming decoder timing posture, RISC-V CT gate limitations, wrapped in-place decode behavior, and unsafe boundary policy.

Security and Assurance

• SecretBuffer::clear() now wipes before logically clearing the vector.
• wipe_vec_spare_capacity() now uses Vec::spare_capacity_mut() for a cleaner MaybeUninit-aware implementation.
• Secret string conversion now stays panic-free and avoids unchecked UTF-8.
• The unsafe boundary checker was updated to reflect the reduced unsafe surface.
• wasm32 wipe policy continues to fail closed by default unless allow-wasm32-best-effort-wipe is explicitly enabled.

Validation

Passed the project release checks, including tests, clippy, doctests, panic policy, unsafe boundary policy, wasm wipe policy, constant-time policy, and CT assembly evidence generation.

---

This discussion was created from the release base64-ng 1.0.3.