aes-gcm

The initial .0 releases of these crates still used subtle
exclusively for the tag comparison and ctutils for everything else.

This cuts new releases with #879, a PR which switched from subtle to
ctutils.

Releases the following:

• aes-gcm v0.11.1
• aes-gcm-siv v0.12.1
• ascon-aead128 v0.1.1
• belt-dwp v0.1.1
• ccm v0.6.1
• deoxys v0.2.1
• eax v0.6.1

Changed

• Replace subtle with ctutils (#879)

Added

• bytes feature passthrough (#631)
• Support for 32-bit and 64-bit tags under hazmat feature (#777)

Changed

• Edition changed to 2024 and MSRV bumped to 1.85 (#662)
• Relax MSRV policy and allow MSRV bumps in patch releases
• Migrate to AeadInOut (#665)
• Bump cipher to v0.5 (#793)
• Bump aes to v0.9 (#821)
• Bump polyval to v0.7 (#821)
• Bump aead to v0.6 (#831)

Fixed

• P_MAX and A_MAX constants; plaintext and AAD length checks (#762)

Removed

• std and stream features (#662)
• C_MAX constant (#762)

Security

• Avoid exposing plaintext on tag verification failure (#551)

Added

• rand_core feature to all crates (#467)
• Support for partial tag sizes (#501)
• ArrayVec support (#503)

Fixed

• rustdoc typos and formatting (#461, #462)

Added

• getrandom feature (#446)

Changed

• Bump aes dependency to v0.8 ([#430])
• Rust 2021 edition upgrade; MSRV 1.56+ (#435)
• Bump aead dependency to v0.5 (#444)
• Bump ghash dependency to v0.5 (#454)

Changed

• Relax subtle and zeroize requirements (#360)

Changed

• Pin zeroize dependency to v1.3 and subtle to v2.4 (#349)

Added

• Nightly-only armv8 feature (#318)

Added

• force-soft feature (#305)

Added

• Wycheproof test vectors (#274)

Changed

• Bump aead crate dependency to v0.4 (#270)
• Bump aes crate dependency to v0.7; MSRV 1.49+ (#283)
• Bump ctr crate dependency to v0.7 (#283)
• Bump ghash crate dependency to v0.4 (#284)

Changed

• Replace block-cipher/stream-cipher with cipher crate (#229)
• Bump aes dependency to v0.6 (#229)
• Use ctr::Ctr32BE (#227)

Added

• Optional std feature; disabled by default (#217)

Changed

• Renamed generic parameters to Aes and NonceSize (#166)
• Upgrade aes to v0.5; block-cipher to v0.8 (#209)

Changed

• Bump aead crate dependency to v0.3.0; MSRV 1.41+ (#140)

Added

• Support for non-96-bit nonces (#126)

Changed

• AesGcm type is now generic around nonce size (#126)

Fixed

• Off-by-one error in debug_assert for BlockCipher::ParBlocks (#104)

Added

• Support instantiation from an existing cipher instance (#101)

Added

• aes cargo feature; 3rd-party AES crate support (#96)

Changed

• Make generic around BlockCipher::ParBlocks (#97)

Fixed

• Wording in documentation about security audit (#84)

Added

• Notes about NCC audit to documentation (#80)

Added

• heapless feature (#51)

Added

• Document in-place API (#49)

Changed

• Upgrade aead crate to v0.2; alloc now optional (#43)

Changed

• Upgrade zeroize to 1.0 (#36)

• Initial release