• Implement PartialEq and Eq in SigningKey and VerificationKey (#102)
• Add alloc feature by @nazar-pc in (#161, #174)
• Add helper methods by @conradoplg in (#179)

Note: to use Rust older than 1.85, you will need to downgrade the base64ct
crate:

cargo update base64ct --precise 1.6.0

• Update curve25519-dalek to 4.1.0

• Update curve25519-dalek to 4.0.0

• Fix no-std build with serde activated (#87)
• Update curve25519-dalek to 4.0.0-rc.3

• upgrade curve25519-dalek to 4.0.0-rc.2

• clippy fixes

• activate ed25519/pem only when needed

• bump to 4.0.0; bump MSRV to 1.65; fix no_std support; test MSRV and no_std in CI

• use rust-toolchain instead of TOML to work with (unmaitained) actions-rs/toolchain

Add no_std support by @pvdrz in #57

ed25519-zebra 3.0.0 upgrades rand to 0.8 and rand_core to 0.6. Since they are specified in the signing API, this is a backwards-incompatible API change, thus the major version bump.

Plus:

What's Changed

• Fix typo by @rex4539 in #32
• Add Zeroize impl for SigningKey by @kim in #34
• Add JNI code for ed25519-zebra by @droark in #37
• Update rand_core to 0.6 and rand to 0.8 by @dconnolly in #44
• dependencies: update zeroize to 1.2 by @FintanH in #52

New Contributors

• @rex4539 made their first contribution in #32
• @kim made their first contribution in #34
• @droark made their first contribution in #37
• @jsdanielh made their first contribution in #51
• @FintanH made their first contribution in #52

Full Changelog: 2.2.0...3.0.0

• Add PartialOrd, Ord implementations for VerificationKeyBytes. While the derived ordering is not cryptographically meaningful, deriving these traits is useful because it allows, e.g., using VerificationKeyBytes as the key to a BTreeMap (contributed by @cloudhead).

• Updates sha2 version to 0.9 and curve25519-dalek version to 3.

• Add a missing multiplication by the cofactor in batch verification and test that individual and batch verification agree. This corrects an omission that should have been included in 2.0.0.

• Implements Clone + Debug for batch::Item and provides batch::Item::verify_single to perform fallback verification in case of batch failure.

• Implements ZIP 215, so that batched and individual verification agree on whether signatures are valid.

• Adds impl TryFrom<&[u8]> for all types.

• Add a note about versioning to handle ZIP 215.

• Change docs.rs configuration in Cargo.toml to not refer to the removed batch feature so that the docs render correctly on docs.rs.

• The sync batch verification api is changed to remove a dependence on the message lifetime that made it difficult to use in async contexts.

• Change terminology from secret and public keys to signing and verification keys.
• Remove async batch verification in favor of a sync api; the async approach is to be developed in another crate.

• The previous implementation exactly matched the behavior of libsodium 1.0.15 with the ED25519_COMPAT configuration, but this configuration wasn't used by zcashd. This commit changes the validation rules to exactly match without ED25519_COMPAT, and highlights the remaining inconsistencies with the Zcash specification that were not addressed in the previous spec fix.

• Adds impl AsRef<[u8]> for PublicKey.
• Adds impl AsRef<[u8]> for SecretKey.

• Adds impl AsRef<[u8]> for PublicKeyBytes.

• Adds experimental futures-based batch verification API, gated by the batch feature.

Initial release, attempting to match the actual zcashd behavior.