k256

k256 v0.14.0 (#1900)

Added

• Support for non-32-byte BIP340 signatures (#1041)
• Implement From<NonZeroScalar> for Scalar (#1188)
• Implement From<NonIdentity> for Projective/AffinePoint (#1190)
• Implement MultipartSigner/Verifier (#1221)
• Support hash2curve crate (#[1286])
• Implement FromUniformBytes<64> for Scalar (#1379)
• Implement CofactorGroup for ProjectivePoint (#1394)
• Implement AffineCoordinates::from_coordinates (#1405)
• getrandom feature (#1521)
• Conversions to/from U256 for field elements (#1552)
• Implement crypto_common::Generate trait (#1586)

Changed

• Edition changed to 2024 and MSRV bumped to 1.85 (#1125)
• Relax MSRV policy and allow MSRV bumps in patch releases
• Expose AffineCoordinates::y (#1230)
• Use rejection sampling for random point generation (#1344)
• Use new Reduce trait (#1359)
• Update Curve::ORDER to be Odd (#1416)
• Factor apart Schnorr from_bytes/from_slice methods (#1429)
• Use crypto-bigint to implement inversions (#1554, #1573)
• Bump sha2 dependency to v0.11 (#1712)
• Variable-time scalar multiplication support (#1714, #1715, #1728, #1730, #1745, #1812, #1816, #1819, #1823, #1884)
• Bump signature dependency to v3 (#1756)
• Bump elliptic-curve dependency to v0.14 (#1849)
• Bump ecdsa to v0.17 (#1883)

Removed

• bits feature (#1766)
• expose-field feature in favor of FieldArithmetic trait (#1834)

Fixed

• Use normalizes_to_zero in batch normalization (#1029)
• Panics when parsing malformed Schnorr signatures (#1056)
• BatchInvert impl for FieldElement could compute non-normalized results (#1862)
• Have Schnorr signing reduce k mod n (#1898)

Added

• More inlines for better efficiency (#999)

Added

• #[inline] annotations on conditional_select (#942)
• BatchInvert and BatchNormalize impls (#971)
• Optimized implementation of LinearCombinationExt trait (#974)

Changed

• Use generic signing implementation from ecdsa crate (#911)
• Simplify internal helper functions in the scalar arithmetic (#917)
• Bump elliptic-curve to v0.13.7 (#979)

Fixed

• Reject signatures which aren't low-S normalized (#914)
• Check for R being the identity point on Schnorr verification (#916)

Fixed

• Correct product definition for empty iterators (#802)

Added

• FieldBytesEncoding trait impls (#732)
• Fast invert_vartime using Stein's algorithm (#743)
• serde support for schnorr types (#748)

Changed

• AffineCoordinates trait (#734)
• Bump elliptic-curve dependency to v0.13 (#770)
• Bump ecdsa to v0.16 (#770)

Added

• alloc feature (#670)
• Impl FromOkm for Scalar (#673)
• Impl Prehash* and KeypairRef for Schnorr keys (#689)
• schnorr::SigningKey::as_nonzero_scalar (#690)
• Impl From<NonZeroScalar> for schnorr::SigningKey (#703)
• Impl From<SecretKey> for schnorr::SigningKey (#704)
• precomputed-tables feature (#697, #705, #707)
• Constructors for Scalar from u128 (#709)

Changed

• Use weak feature activation; MSRV 1.60 (#701)
• Bump ecdsa dependency to v0.15 (#713)

Removed

• ecdsa::recoverable module; see documentation for replacements (#675)

Added

• ecdsa::recoverable::Signature::from_digest_bytes_trial_recovery (#660)

Changed

• Make ProjectivePoint equality and is_identity faster (#650)

Added

• Impl PrehashSigner and PrehashVerifier traits for ECDSA keys (#653)
• Impl Keypair for SigningKey (#654)

Added

• Impl ZeroizeOnDrop for ecdsa::SigningKey and schnorr::SigningKey (#630)

Changed

• Get rid of eager computation in mul_shift_vartime() (#638)
• Bump the precision of precomputed division for the scalar decomposition (#639)

Changed

• Relax DigestSigner trait bounds (#613)
• Bump elliptic-curve to v0.12.2 (#616)

Changed

• Enable schnorr feature by default (#561)

Added

• Taproot Schnorr as defined in BIP 340 (#554, #557, #558)
• Re-export low-level diffie_hellman function (#556)

Changed

• Use SHA-256 for computing RFC6979 for recoverable::Signature (#552)

Changed

• Bump digest to v0.10 (#515)
• Make AffinePoint to VerifyingKey conversion fallible (#535)
• Rename recover_verify_key => recover_verifying_key (#537)
• Rename recover_verify_key_from_digest => recover_verifying_key_from_digest (#537)
• Have pkcs8 feature activate ecdsa/pkcs8 (#538)
• Bump elliptic-curve to v0.12 (#544)
• Bump ecdsa to v0.14 (#544)

Fixed

• hash2curve crate feature (#519)

Fixed

• Normalize before calling is_odd() in sng0() (#533)

Fixed

• Do not normalize the argument in FieldElementImpl::is_odd() (#530)

Added

• hash2curve support: impl GroupDigest for Secp256k1 (#503)
• IDENTITY and GENERATOR point constants (#511)

Added

• Impl ff::Field trait for FieldElement (#498)
• Impl ReduceNonZero<U256> for Scalar (#501)

Added

• Implement Scalar::sqrt (#400)
• Impl PrimeCurveArithmetic (#415)
• Impl Reduce<U256> for Scalar (#436)
• Impl Drop for ecdsa::SigningKey (#449)
• serde feature (#463, #464)
• Impl Reduce<U512> for Scalar (#472)
• Impl ReduceNonZero<U512> for Scalar (#474)
• Impl LinearCombination trait (#476)

Changed

• Make ecdsa::Signature::normalize_s non-mutating (#405)
• Use PrimeCurve trait (#413)
• Use sec1 crate for EncodedPoint type (#435)
• Replace ecdsa::hazmat::FromDigest with Reduce (#438)
• Make FromEncodedPoint return a CtOption (#445)
• Rust 2021 edition upgrade; MSRV 1.56+ (#453)
• Bump elliptic-curve crate dependency to v0.11 (#466)
• Bump ecdsa crate dependency to v0.13 (#467)

Fixed

• Handle identity point in GroupEncoding (#446)

Removed

• force-32-bit feature (#399)
• field-montgomery feature (#404)
• Scalar::conditional_add_bit (#431)
• Deprecated SigningKey::verify_key method (#461)

Added

• Wycheproof test vectors (#384)

Fixed

• Edge case in Scalar::is_high (#385)
• Bug in overflow check during 32-bit multiplication (#388)

Changed

• Optimize ECDSA using linear combination of points (#380)

Added

• Derive Clone for ecdsa::SigningKey (#374)

Added

• ecdsa::SigningKey::verifying_key() method (#363)

Changed

• Deprecate SigningKey::verify_key() - use verifying_key instead (#363)
• Bump elliptic-curve dependency to v0.10.3 (#371)

Added

• Debug impl for ecdsa::SigningKey (#358)
• ConstantTimeEq/Eq/PartialEq impls for ecdsa::SigningKey (#359)

Added

• Copy impl for ecdsa::VerifyingKey (#355)

Added

• Derive Ord on ecdsa::VerifyingKey (#343)
• AffineArithmetic trait impl (#347)
• PrimeCurve trait impls (#350)

Changed

• Bump elliptic-curve to v0.10; MSRV 1.51+ (#349)
• Bump ecdsa to v0.12 (#349)

Fixed

• Mixed coordinate addition with the point at infinity (#337)

Added

• jwk feature (#295)
• Order constant (#328)

Changed

• Rename ecdsa::Asn1Signature to ::DerSignature (#288)
• Migrate to FromDigest trait from ecdsa crate (#292)
• Bump elliptic-curve to v0.9.2 (#296)
• Bump pkcs8 to v0.6 (#319)
• Bump ecdsa crate dependency to v0.11 (#330)

Fixed

• DigestPrimitive feature gating (#324)