What's Changed
- Implement ML-KEM, ML-DSA, and SLH-DSA in https://github.com/ProtonMail/go-crypto/pull/316
- Bump github.com/cloudflare/circl to 1.6.3 in https://github.com/ProtonMail/go-crypto/pull/302
- Ensure generated RSA key primes satisfy P < Q constraint in https://github.com/ProtonMail/go-crypto/pull/305
- Add
Signature.IssuerKeyVersionfield in https://github.com/ProtonMail/go-crypto/pull/310 - Fix RSA precompute after prime swap in https://github.com/ProtonMail/go-crypto/pull/317
- openpgp: prevent panic when candidate identity has no self-signature in https://github.com/ProtonMail/go-crypto/pull/313
- guard nil issuer key id when checking trailing signature in https://github.com/ProtonMail/go-crypto/pull/320
- guard nil issuer key id on v2 message read path in https://github.com/ProtonMail/go-crypto/pull/319
- Don't panic on unknown AEAD mode in v5/v6 SKESK packets in https://github.com/ProtonMail/go-crypto/pull/322
- restrict embedding to embeddable signature types in https://github.com/ProtonMail/go-crypto/pull/325
- fix: Malformed session key decoding in PKESK in https://github.com/ProtonMail/go-crypto/pull/330
- fix: Do not accept malformed ecdh sk input in https://github.com/ProtonMail/go-crypto/pull/329
- fix: Reduce risk of invalid slice access in https://github.com/ProtonMail/go-crypto/pull/331
Full Changelog: https://github.com/ProtonMail/go-crypto/compare/v1.4.1...v1.5.0