Skip to content

base64-ng 1.0.7

Choose a tag to compare

View all tags
@eldryoth eldryoth released this 07 Jun 13:49
· 2 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.0.7
This tag was signed with the committer’s verified signature.
eldryoth
SSH Key Fingerprint: EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4
Verified
Learn about vigilant mode.
a2b0b20
This commit was signed with the committer’s verified signature.
eldryoth
SSH Key Fingerprint: EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4
Verified
Learn about vigilant mode.

base64-ng 1.0.7

Highlights

  • Enables the current bounded Kani proof gate on Rust 1.90.0 with cargo-kani 0.67.0.
  • Confirms 17 no-default-features Kani harnesses pass with 0 failures.
  • Strengthens constant-time-oriented byte accumulation through a non-inlined volatile helper.
  • Documents the new CT accumulator in the reviewed unsafe-boundary inventory.
  • Adds AArch64 CSDB attestation posture reporting through explicit --cfg base64_ng_aarch64_csdb_attested.
  • Keeps AArch64 attestation out of Cargo features, so --all-features cannot enable it accidentally.
  • Adds runtime memory-locking posture reporting for deployment audits.
  • Improves macOS CI verification by routing macOS runners through the dedicated macOS check script.
  • Expands documentation around Kani scope, CT posture, AArch64 attestation, and streaming decoder partial-output semantics.

Notes

base64-ng remains scalar-only in 1.0.7. The Kani evidence is scoped bounded proof coverage, not whole-crate formal verification or a formal cryptographic constant-time claim.

Assets 3
Loading
0 Join discussion