elliptic-curve

Added

• BatchInvert::batch_invert_in_place_vartime (#2468)
• BatchNormalize::batch_normalize_vartime (#2468)

Added

• BatchInvert::batch_invert_in_place_vartime (#2468)
• BatchNormalize::batch_normalize_vartime (#2468)

Added

• Implement PartialEq + Eq for NonIdentity and NonZeroScalar (#1834)
• Implement Zeroize for NonIdentity (#1832)
• NonIdentity::mul_by_generator() (#1833)
• Implement Mul<&NonZeroScalar> for NonIdentity (#1852)
• Implement Mul<NonIdentity> for NonZeroScalar (#1855)
• Expose AffineCoordinates::y (#1891)
• Scalar macros originall from primeorder (#1894)
• Implement BatchNormalize for NonIdentity (#1896)
• Re-export group::Curve as CurveGroup (#1902)
• NonIdentity/NonZeroScalar casting methods (#1903)
• AffineCoordinates::from_coordinates (#1996)
• getrandom feature (#2085)
• ctutils traits to arithmetic bounds (#2166)
• Retrieve bound for C::Scalar (#2169)
• crypto_common::Generate support (#2173, #2208)
• Implement crypto_common::TryKeyInit for SecretKey<C> (#2174)
• dev::bench_projective! macro (#2177)
• Provide Sec1Point::from/to_sec1_bytes (#2221)
• Implement From<SecretKey<C>> for PublicKey<C> (#2247)
• SecretKey::diffie_hellman (#2248)
• LinearCombination::lincomb_vartime method (#2286)
• ops::MulVartime trait and bound Scalar (#2379)
• ops::MulByGeneratorVartime trait ([#2381])
• SecretKey::from_pem (#2387)
• SecretKey::from_der (#2408)
• hazmat module with FieldArithmetic trait (#2458)
• Double::double_in_place (#2464)

Changed

• Migrate from generic-array to hybrid-array (#1462)
• Rename LinearCombinationExt => LinearCombination; replacing old
  trait (#1501)
• Edition changed to 2024 and MSRV bumped to 1.85 (#1759)
• Make SecretKey::new fallible (#1804)
• Replace ops::Invert trait with crypto_bigint::Invert (#1839)
• Rename SecretKey::new => ::from_scalar (#1893)
• Replace Reduce trait with crypto_bigint::Reduce (#1949)
• Bump serdect dependency to v0.4 (#1978)
• Use crypto_bigint::Odd to represent Curve::ORDER (#2006)
• Bound Curve::Uint on Unsigned (#2007)
• Rename ScalarPrimitive => ScalarValue (#2008)
• Accept mixed-case hex-encoded strings in FromStr impl for
  ScalarValue (#2037)
• Deprecate SecretKey::random (#2086)
• Move MockCurve to dev::mock_curve (#2176)
• Bump rand_core to v0.10 (#2250)
• Rename EncodedPoint => Sec1Point (#2264)
• Bump crypto-bigint to v0.7 (#2330)
• Bump digest to v0.11 (#2331)
• Bump sec1 to v0.8 (#2339)
• Bump hkdf dependency to v0.13 (#2349)
• Use *Vartime as a suffix in names (#2378)
• Bump pkcs8 to v0.11 (#2397)
• Bump ff and group to v0.14 (#2430, #2431)
• Simplify BatchInvert trait (#2455)
• Replace FieldBytesEncoding trait with C::FIELD_ENDIANNESS (#2457)
• Move Double to ops module (#2465)

Removed

• hazmat feature (#1599)
• hash2curve and oprf modules: moved to same-name crates (#1929)
• PKCS#8 blanket impls for SEC1 private key traits (#1930)
• ShrAssign bound on Scalars (#1938)
• JWK support: migrated to jose-jwk crate (#1963)
• weierstrass module (#2005)
• bits feature (#2417)

Fixed

• Include curve OID in SEC1 private keys (#1707, #1933)

Added

• Implement PartialEq + Eq for NonIdentity and NonZeroScalar (#1834)
• Implement Zeroize for NonIdentity (#1832)
• NonIdentity::mul_by_generator() (#1833)
• Implement Mul<&NonZeroScalar> for NonIdentity (#1852)
• Implement Mul<NonIdentity> for NonZeroScalar (#1855)
• Expose AffineCoordinates::y (#1891)
• Scalar macros originally from primeorder (#1894)
• Implement BatchNormalize for NonIdentity (#1896)
• Re-export group::Curve as CurveGroup (#1902)
• NonIdentity/NonZeroScalar casting methods (#1903)
• AffineCoordinates::from_coordinates (#1996)
• getrandom feature (#2085)
• ctutils traits to arithmetic bounds (#2166)
• Retrieve bound for C::Scalar (#2169)
• crypto_common::Generate support (#2173, #2208)
• Implement crypto_common::TryKeyInit for SecretKey<C> (#2174)
• dev::bench_projective! macro (#2177)
• Provide Sec1Point::from/to_sec1_bytes (#2221)
• Implement From<SecretKey<C>> for PublicKey<C> (#2247)
• SecretKey::diffie_hellman (#2248)
• LinearCombination::lincomb_vartime method (#2286)
• ops::MulVartime trait and bound Scalar (#2379)
• ops::MulByGeneratorVartime trait (#2381)
• SecretKey::from_pem (#2387)
• SecretKey::from_der (#2408)
• hazmat module with FieldArithmetic trait (#2458)
• Double::double_in_place (#2464)

Changed

• Migrate from generic-array to hybrid-array (#1462)
• Rename LinearCombinationExt => LinearCombination; replacing old trait (#1501)
• Edition changed to 2024 and MSRV bumped to 1.85 (#1759)
• Make SecretKey::new fallible (#1804)
• Replace ops::Invert trait with crypto_bigint::Invert (#1839)
• Rename SecretKey::new => ::from_scalar (#1893)
• Replace Reduce trait with crypto_bigint::Reduce (#1949)
• Bump serdect dependency to v0.4 (#1978)
• Use crypto_bigint::Odd to represent Curve::ORDER (#2006)
• Bound Curve::Uint on Unsigned (#2007)
• Rename ScalarPrimitive => ScalarValue (#2008)
• Accept mixed-case hex-encoded strings in FromStr impl for ScalarValue (#2037)
• Deprecate SecretKey::random (#2086)
• Move MockCurve to dev::mock_curve (#2176)
• Bump rand_core to v0.10 (#2250)
• Rename EncodedPoint => Sec1Point (#2264)
• Bump crypto-bigint to v0.7 (#2330)
• Bump digest to v0.11 (#2331)
• Bump sec1 to v0.8 (#2339)
• Bump hkdf dependency to v0.13 (#2349)
• Use *Vartime as a suffix in names (#2378)
• Bump pkcs8 to v0.11 (#2397)
• Bump ff and group to v0.14 (#2430, #2431)
• Simplify BatchInvert trait (#2455)
• Replace FieldBytesEncoding trait with C::FIELD_ENDIANNESS constant (#2457)
• Move Double to ops (#2465)

Removed

• hazmat feature (#1599)
• hash2curve and oprf modules: these are now their own crates (#1929)
• PKCS#8 blanket impls for SEC1 private key traits (#1930)
• ShrAssign bound on Scalars (#1938)
• JWK support - migrated to jose-jwk crate (#1963)
• weierstrass module (#2005)
• bits feature (#2417)

Fixed

• Include curve OID in SEC1 private keys (#1707, #1933)

May it be the one that is truly a "release candidate", after thirty some
other failed attempts

This removes the basepoint-table and wnaf features, shrinking the
API surface, and ideally getting us to a true release candidate (I'd
hope so after 35 "release candidates"!)

This release uses the w-NAF implementation from the wnaf crate

This includes updates to upstream ff and group v0.14.0

Changed

• SecretKey::from_slice now allows >=24-bytes (#1412)

Added

• BatchInvert and BatchNormalize traits (#1376)
• LinearCombinationExt trait (#1405)

Fixed

• Minimum supported hkdf version is v0.12.1 (#1353)
• Minimum supported serde_json version for jwk feature is v1.0.47 (#1354)
• Minimum supported tap version for bits feature is v1.0.1 (#1355)

Changed

• Faster PublicKey::from_encoded_point (#1310)

Fixed

• alloc+arithmetic features w/o sec1 feature (#1301)

Changed

• Bump hex-literal to v0.4 (#1295)

Fixed

• NonZeroScalar::from_slice (#1296)
• ScalarPrimitive::from_slice (#1296)

Added

• Impl AssociatedAlgorithmIdentifier for SecretKey and PublicKey (#1286)

Changed

• Update OSSWU code (#1157)
• Bump pkcs8 to v0.10.2 (#1291)

Fixed

• FieldBytesEncoding provided impl (#1287)

Added

• Weakly activate pkcs8?/std (#1263)
• More PublicKey <-> SEC1 conversions (#1272)

Added

• SecretKey::from_slice short input support (#1256)

Added

• PublicKey::to_sec1_bytes (#1102)
• Forward std feature to sec1 dependency (#1131)
• NonIdentity wrapper type (#1176)
• Impl serde traits for NonZeroScalar (#1178)
• MulByGenerator trait (#1198)
• NonZeroScalar::invert_vartime (#1207)
• BlindedScalar type (#1208)
• point::Double trait (#1218)
• FieldBytesEncoding trait (#1235)
• Invert::invert_vartime (#1239)

Changed

• Allow bigger c1 constant in OsswuMapParams (#1024)
• Rename Curve::UInt => Curve::Uint (#1191)
• Use weak feature activation (#1192, #1194)
• Consolidate CurveArithmetic trait (#1196)
• Rename SecretKey::to_pem => ::to_sec1_pem (#1202)
• Rename ScalarCore to ScalarPrimitive (#1203)
• Use CryptoRngCore trait (#1206)
• Refactor field element decoding/encoding (#1220)
• Update VOPRF identifier type (#1175)
• Rename SecretKey::as_scalar_core => ::as_scalar_primitive (#1228)
• Rename Reduce::from_bytes_reduced => ::reduce_bytes (#1225, #1229)
• Consolidate AffineCoordinates trait (#1237)
• Allow multiple dsts in the hash2curve API (#1238)
• Have serde feature activate pkcs8 (#1245)
• Dependency upgrades:
  • base16ct (#1254)
  • crypto-bigint v0.5 (#1251)
  • ff and group v0.13 (#1166)
  • pem-rfc7468 v0.7 (#1251)
  • pkcs8 v0.10 (#1251)
  • sec1 v0.7 (#1251)
  • serdect v0.2 (#1251)

Removed

• impl_field_element! macro (#1165)
• Direct der crate dependency (#1195)
• AffineArithmetic, ProjectiveArithmetic, ScalarArithmetic traits (#1196)
• Toplevel re-exports except for AffinePoint, ProjectivePoint, and Scalar (#1223)
• Reduce methods (#1225)
• Blanket impl for Invert (#1242)