cloudflare/circl

📋 What's Changed

• Fix typo: it's to its by @04cb in https://github.com/cloudflare/circl/pull/588
• ci: Bump Go version to 1.26 by @armfazh in https://github.com/cloudflare/circl/pull/591
• tss/rsa: polynomial evaluation using Horner's method by @armfazh in https://github.com/cloudflare/circl/pull/590
• zk/qndleq: Ensure large security parameter by @armfazh in https://github.com/cloudflare/circl/pull/592
• sign/bls: rejects aggregated signatures built with duplicated messages. by @armfazh in https://github.com/cloudflare/circl/pull/595
• Bump golang.org/x/crypto from 0.30.0 to 0.45.0 by @dependabot[bot] in https://github.com/cloudflare/circl/pull/585
• tss/rsa: avoiding overflow in lambda calculation with big.Int by @armfazh in https://github.com/cloudflare/circl/pull/598
• deps: Update CIRCL version in code generators. by @armfazh in https://github.com/cloudflare/circl/pull/599
• + 22 more

✨ New Contributors

• @04cb made their first contribution in https://github.com/cloudflare/circl/pull/588
• @z9z made their first contribution in https://github.com/cloudflare/circl/pull/607
• @dotjs made their first contribution in https://github.com/cloudflare/circl/pull/620
• Full Changelog: https://github.com/cloudflare/circl/compare/v1.6.3...v1.6.4

📦 CIRCL v1.6.3

• Fix a bug on ecc/p384 scalar multiplication.

📋 What's Changed

• sign/mldsa: Check opts for nil value by @armfazh in https://github.com/cloudflare/circl/pull/582
• ecc/p384: Point addition must handle point doubling case. by @armfazh in https://github.com/cloudflare/circl/pull/583
• Release CIRCL v1.6.3 by @armfazh in https://github.com/cloudflare/circl/pull/584
• Full Changelog: https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3

📦 CIRCL v1.6.2

• New SLH-DSA, improvements in ML-DSA for arm64.
• Tested compilation on WASM.

📋 What's Changed

• Optimize pairing product computation by moving exponentiations to G1. by @dfaranha in https://github.com/cloudflare/circl/pull/547
• sign: Adding SLH-DSA signature by @armfazh in https://github.com/cloudflare/circl/pull/512
• Update code generators to CIRCL v1.6.1. by @armfazh in https://github.com/cloudflare/circl/pull/548
• ML-DSA: Add preliminary Wycheproof test vectors by @bwesterb in https://github.com/cloudflare/circl/pull/552
• go fmt by @bwesterb in https://github.com/cloudflare/circl/pull/554
• gz-compressing test vectors, use of HexBytes and ReadGzip functions. by @armfazh in https://github.com/cloudflare/circl/pull/555
• group: Removes use of elliptic Marshal and Unmarshal functions. by @armfazh in https://github.com/cloudflare/circl/pull/556
• Support encoding/decoding ML-DSA private keys (as long as they contain seeds) by @bwesterb in https://github.com/cloudflare/circl/pull/559
• + 13 more

✨ New Contributors

• @dfaranha made their first contribution in https://github.com/cloudflare/circl/pull/547
• @elementrics made their first contribution in https://github.com/cloudflare/circl/pull/562
• @harshiniwho made their first contribution in https://github.com/cloudflare/circl/pull/578
• Full Changelog: https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2

📦 CIRCL v1.6.1

• Fixes some point checks on the FourQ curve.
• Hybrid KEM fails on low-order points.

📋 What's Changed

• kem/hybrid: ensure X25519 hybrids fails with low order points by @Lekensteyn in https://github.com/cloudflare/circl/pull/541
• .github: Use native ARM64 builders instead of QEMU by @Lekensteyn in https://github.com/cloudflare/circl/pull/542
• Fixes several errors on twisted Edwards curves. by @armfazh in https://github.com/cloudflare/circl/pull/545
• Release v1.6.1 by @armfazh in https://github.com/cloudflare/circl/pull/546
• Full Changelog: https://github.com/cloudflare/circl/compare/v1.6.0...v1.6.1

✨ New!

• [Prio3](https://github.com/cloudflare/circl/blob/main/vdaf/prio3) Verifiable Distributed Aggregation Function ([draft-irtf-cfrg-vdaf](https://datatracker.ietf.org/doc/draft-irtf-cfrg-vdaf/)).
• [X-Wing](https://github.com/cloudflare/circl/blob/main/kem/xwing): general-purpose hybrid post-quantum KEM ([draft-connolly-cfrg-xwing-kem](https://datatracker.ietf.org/doc/draft-connolly-cfrg-xwing-kem/))

📋 What's Changed

• Add OIDs to ML-DSA by @bwesterb in https://github.com/cloudflare/circl/pull/519
• Adds Prio3 a set of verifiable distributed aggregation functions. by @armfazh in https://github.com/cloudflare/circl/pull/522
• Run semgrep cronjob only in upstream repository. by @armfazh in https://github.com/cloudflare/circl/pull/526
• X-Wing PQ/T hybrid by @bwesterb in https://github.com/cloudflare/circl/pull/471
• ckem: move crypto/elliptic to crypto/ecdh by @MingLLuo in https://github.com/cloudflare/circl/pull/529
• hpke: Update HPKE code to use ecdh stdlib package. by @armfazh in https://github.com/cloudflare/circl/pull/530
• prio3: Adds polynomial multiplication using NTT by @armfazh in https://github.com/cloudflare/circl/pull/532
• Add Prio3 in readme. by @armfazh in https://github.com/cloudflare/circl/pull/527

✨ New Contributors

• @MingLLuo made their first contribution in https://github.com/cloudflare/circl/pull/529
• Full Changelog: https://github.com/cloudflare/circl/compare/v1.5.0...v1.6.0

📋 What's Changed

• kem: add X25519MLKEM768 TLS hybrid KEM by @bwesterb in https://github.com/cloudflare/circl/pull/510
• Create semgrep.yml by @hrushikeshdeshpande in https://github.com/cloudflare/circl/pull/514
• repo: Some fixes reported by CodeQL by @armfazh in https://github.com/cloudflare/circl/pull/515
• Add ML-DSA (FIPS204) by @bwesterb in https://github.com/cloudflare/circl/pull/480
• sign/mldsa: Add test for ML-DSA signature verification. by @armfazh in https://github.com/cloudflare/circl/pull/517
• Release v1.5.0 by @armfazh in https://github.com/cloudflare/circl/pull/518

✨ New Contributors

• @hrushikeshdeshpande made their first contribution in https://github.com/cloudflare/circl/pull/514
• Full Changelog: https://github.com/cloudflare/circl/compare/v1.4.0...v1.5.0

📋 Changes

• New: ML-KEM compatible with FIPS-203.

📦 Commit History

• eddilithium3: fix typos by @bwesterb in https://github.com/cloudflare/circl/pull/503
• Add ML-KEM (FIPS 203). by @bwesterb in https://github.com/cloudflare/circl/pull/470
• Add ML-KEM decapsulation key check. by @bwesterb in https://github.com/cloudflare/circl/pull/507
• Preparing for release v1.4.0 by @armfazh in https://github.com/cloudflare/circl/pull/508
• Full Changelog: https://github.com/cloudflare/circl/compare/v1.3.9...v1.4.0

📋 Changes:

• Fix bug on BLS12381 decoding elements.

📦 Commit History

• dilithium: fix typo by @bwesterb in https://github.com/cloudflare/circl/pull/498
• bls12381: Detects invalid prefix in G1 and G2 serialized elements by @armfazh in https://github.com/cloudflare/circl/pull/500
• Preparing CIRCL release v1.3.9 by @armfazh in https://github.com/cloudflare/circl/pull/501
• Full Changelog: https://github.com/cloudflare/circl/compare/v1.3.8...v1.3.9

✨ New

• BLS Signatures on top of BLS12-381.
• Adopt faster squaring in pairings.
• BlindRSA compliant with RFC9474.
• (Verifiable) Secret Sharing compatible with the Group interface (elliptic curves).

📦 Notice

• Update on cpabe/tkn20 ciphertexts, read more at https://github.com/cloudflare/circl/wiki/tkn20-Ciphertext-Format-(v1.3.8)

📋 What's Changed

• Implement Granger-Scott faster squaring in the cyclotomic subgroup. by @armfazh in https://github.com/cloudflare/circl/pull/449
• Updates avo and CIRCL's own dependency. by @armfazh in https://github.com/cloudflare/circl/pull/474
• Updating documentation for OPRF package. by @armfazh in https://github.com/cloudflare/circl/pull/475
• group: removes order method from group interface by @armfazh in https://github.com/cloudflare/circl/pull/356
• zk/dleq: Adding DLEQ proofs for Qn, the subgroup of squares in (Z/nZ)* by @armfazh in https://github.com/cloudflare/circl/pull/451
• Reduce x/crypto and x/sys versions to match Go 1.21 by @Lekensteyn in https://github.com/cloudflare/circl/pull/476
• Bump GitHub Actions versions and use Go 1.22 and 1.21 by @Lekensteyn in https://github.com/cloudflare/circl/pull/477
• Adding rule for constant values by @armfazh in https://github.com/cloudflare/circl/pull/478
• + 8 more

✨ New Contributors

• @mattyclarkson made their first contribution in https://github.com/cloudflare/circl/pull/492
• Full Changelog: https://github.com/cloudflare/circl/compare/v1.3.7...v1.3.8

📋 What's Changed

• build(deps): bump golang.org/x/crypto from 0.3.1-0.20221117191849-2c476679df9a to 0.17.0 by @dependabot in https://github.com/cloudflare/circl/pull/467
• kyber: remove division by q in ciphertext compression by @bwesterb in https://github.com/cloudflare/circl/pull/468
• Releasing CIRCL v1.3.7 by @armfazh in https://github.com/cloudflare/circl/pull/469

✨ New Contributors

• @dependabot made their first contribution in https://github.com/cloudflare/circl/pull/467
• Full Changelog: https://github.com/cloudflare/circl/compare/v1.3.6...v1.3.7

📋 What's Changed

• internal: add TurboShake{128,256} by @bwesterb in https://github.com/cloudflare/circl/pull/430
• Kangaroo12 draft -10 by @bwesterb in https://github.com/cloudflare/circl/pull/431
• Add K12 as XOF by @bwesterb in https://github.com/cloudflare/circl/pull/437
• xof/k12: Fix a typo in the package documentation by @cjpatton in https://github.com/cloudflare/circl/pull/438
• Set CIRCL version for generated assembler code. by @armfazh in https://github.com/cloudflare/circl/pull/440
• Add tkn20 benchmarks by @tanyav2 in https://github.com/cloudflare/circl/pull/442
• Add partially blind RSA implementation by @chris-wood in https://github.com/cloudflare/circl/pull/445
• Update doc.go by @nadimkobeissi in https://github.com/cloudflare/circl/pull/447
• + 5 more

✨ New Contributors

• @nadimkobeissi made their first contribution in https://github.com/cloudflare/circl/pull/447
• @jsoref made their first contribution in https://github.com/cloudflare/circl/pull/456
• Full Changelog: https://github.com/cloudflare/circl/compare/v1.3.3...v1.3.6

✨ New Features

• [ASCON](https://ascon.iaik.tugraz.at/) light-weight authenticated encryption.
• Hybrid KEM for HPKE based on Kyber and X25519.
• CIRCL can be compiled both as static and dynamic linking modes.

🔒 Security

• Fixes error-handling on rand readers.

📋 What's Changed

• Use untyped consts for Kyber params by @tmthrgd in https://github.com/cloudflare/circl/pull/398
• zk/dl: adds prefixed labels and updates nomenclature. by @armfazh in https://github.com/cloudflare/circl/pull/396
• Bumping Go version. by @armfazh in https://github.com/cloudflare/circl/pull/399
• kem: add P-256 + Kyber768Draft00 hybrid by @bwesterb in https://github.com/cloudflare/circl/pull/402
• ckem: pass xof to elliptic.GenerateKey directly by @bwesterb in https://github.com/cloudflare/circl/pull/403
• Adding Ascon, an AEAD lightweight cipher. by @armfazh in https://github.com/cloudflare/circl/pull/400
• Add Ascon-80pq to cipher\ascon by @dhcgn in https://github.com/cloudflare/circl/pull/404
• ascon: update formulas and check for API compatibility by @armfazh in https://github.com/cloudflare/circl/pull/406
• + 17 more

✨ New Contributors

• @tmthrgd made their first contribution in https://github.com/cloudflare/circl/pull/398
• @dhcgn made their first contribution in https://github.com/cloudflare/circl/pull/404
• @Lekensteyn made their first contribution in https://github.com/cloudflare/circl/pull/414
• @enj made their first contribution in https://github.com/cloudflare/circl/pull/416
• Full Changelog: https://github.com/cloudflare/circl/compare/v1.3.2...v1.3.3

📋 What's Changed

• oprf: Updating test vectors for VOPRF rc-rfc. by @armfazh in https://github.com/cloudflare/circl/pull/388
• abe: Make golden files for cpabe. by @armfazh in https://github.com/cloudflare/circl/pull/392
• abe: Improve test clarity by @tanyav2 in https://github.com/cloudflare/circl/pull/393
• tkn20: change seed size for MAC key from 128->448 bits in accordance … by @tanyav2 in https://github.com/cloudflare/circl/pull/394
• tss/rsa: Fixes RSA signature size. by @armfazh in https://github.com/cloudflare/circl/pull/395
• Releasing v1.3.2 by @armfazh in https://github.com/cloudflare/circl/pull/397
• Full Changelog: https://github.com/cloudflare/circl/compare/v1.3.1...v1.3.2

📋 What's Changed

• tkn20: Don't build outdated source file by @bwesterb in https://github.com/cloudflare/circl/pull/386
• Full Changelog: https://github.com/cloudflare/circl/compare/v1.3.0...v1.3.1

✨ New Features

• CPABE: A ciphertext-policy attribute-based encryption based on [TKN19](https://eprint.iacr.org/2019/966) paper.
• Blind RSA signatures.
• Schnorr and DLEQ proofs of knowledge on elliptic curve groups.

🔒 Security

• SIDH/SIKE was deprecated. This applies to dh and kem packages.

📋 What's Changed

• kem/hybrid: Remove restriction on seed sizes by @bwesterb in https://github.com/cloudflare/circl/pull/342
• Updates OPRF test vectors to draft v10. by @armfazh in https://github.com/cloudflare/circl/pull/344
• kem: add Kyber768X25519 by @bwesterb in https://github.com/cloudflare/circl/pull/346
• kyber/ntt: fix documentation typos by @bwesterb in https://github.com/cloudflare/circl/pull/347
• Use plain X{25519,448} for PQ hybrids instead of HPKE by @bwesterb in https://github.com/cloudflare/circl/pull/351
• Add benchmarks for all OPRF suites (including a new Ristretto255 suite) by @chris-wood in https://github.com/cloudflare/circl/pull/350
• chore: bump macos runner version by @renbaoshuo in https://github.com/cloudflare/circl/pull/352
• group: adds a method to retrieve the group. by @armfazh in https://github.com/cloudflare/circl/pull/354
• + 17 more

✨ New Contributors

• @renbaoshuo made their first contribution in https://github.com/cloudflare/circl/pull/352
• @jbis9051 made their first contribution in https://github.com/cloudflare/circl/pull/364
• @tanyav2 made their first contribution in https://github.com/cloudflare/circl/pull/381
• Full Changelog: https://github.com/cloudflare/circl/compare/v1.2.0...v1.3.0

🔒 Security

• Included countermeasures against [Hertzbleed](https://www.hertzbleed.com/herzbleed.pdf) attack.

📋 What's Changed

• group: add SetUint64 method to Group.Scalar. by @armfazh in https://github.com/cloudflare/circl/pull/301
• group/ristretto255: use SetUint64 instead of SetBigInt by @bwesterb in https://github.com/cloudflare/circl/pull/302
• oprf: updates test vectors to draft voprf-v8 by @armfazh in https://github.com/cloudflare/circl/pull/300
• Move expander out of the group package. by @armfazh in https://github.com/cloudflare/circl/pull/304
• group: adds a function for sampling non-zero scalars. by @armfazh in https://github.com/cloudflare/circl/pull/305
• Add blind RSA protocol support by @chris-wood in https://github.com/cloudflare/circl/pull/308
• Verify the signatures for sanity's sake by @chris-wood in https://github.com/cloudflare/circl/pull/309
• bls12: Adding hashing to G2 by @armfazh in https://github.com/cloudflare/circl/pull/299
• + 22 more

✨ New Contributors

• @xvzcf made their first contribution in https://github.com/cloudflare/circl/pull/311
• @zhdllwyc made their first contribution in https://github.com/cloudflare/circl/pull/336
• Full Changelog: https://github.com/cloudflare/circl/compare/v1.1.0...v1.2.0

✨ New algorithms

• P-256, P-384, P-521, [FIPS 186-4](https://doi.org/10.6028/NIST.FIPS.186-4)
• [Ristretto](https://datatracker.ietf.org/doc/draft-irtf-cfrg-ristretto255-decaf448/01/)
• [Hash to Curve](https://datatracker.ietf.org/doc/draft-irtf-cfrg-hash-to-curve/)
• Bilinear pairings with [BLS12-381](https://electriccoin.co/blog/new-snark-curve/).
• [HPKE](https://datatracker.ietf.org/doc/draft-irtf-cfrg-hpke/): Hybrid Public-Key Encryption
• [VOPRF](https://datatracker.ietf.org/doc/draft-irtf-cfrg-voprf/): Verifiable Oblivious Pseudorandom function.
• [SIDH/SIKE](https://sike.org/): Supersingular Key Encapsulation with rimes p434, p503, p751
• [CSIDH](https://csidh.isogeny.org/): Post-Quantum Commutative Group Action
• + 9 more

✨ New Contributors

• @claucece made their first contribution in https://github.com/cloudflare/circl/pull/79
• @bwesterb made their first contribution in https://github.com/cloudflare/circl/pull/86
• @dougnukem made their first contribution in https://github.com/cloudflare/circl/pull/88
• @jbampton made their first contribution in https://github.com/cloudflare/circl/pull/127
• @chris-wood made their first contribution in https://github.com/cloudflare/circl/pull/181
• @mkocikowski made their first contribution in https://github.com/cloudflare/circl/pull/209
• Full Changelog: https://github.com/cloudflare/circl/compare/v1.0.0...v1.1.0