What's Changed
- ascon: don't output plaintext if authentication fails by @bwesterb in https://github.com/cloudflare/circl/pull/631
- Dilithium: don't accept signatures with trailing data by @bwesterb in https://github.com/cloudflare/circl/pull/632
- Fix HPKE/KEM exact-length key unmarshaling by @drmikecrypto in https://github.com/cloudflare/circl/pull/627
- Bump x/crypto and golangci-lint by @bwesterb in https://github.com/cloudflare/circl/pull/637
- ecc/bls12381: reject trailing data in G1/G2 SetBytes by @bwesterb in https://github.com/cloudflare/circl/pull/636
- eddilithium: fail verification if signature is wrong length by @bwesterb in https://github.com/cloudflare/circl/pull/633
- tss/rsa: fix length check to prevent runtime out-of-bounds panic by @bwesterb in https://github.com/cloudflare/circl/pull/640
- dleq: verify: return false instead of panic()ing on nil parameters by @bwesterb in https://github.com/cloudflare/circl/pull/641
- ed448: document verification behaviour by @bwesterb in https://github.com/cloudflare/circl/pull/642
- ed448: reject non-canonical point encodings by @bwesterb in https://github.com/cloudflare/circl/pull/635
- slhdsa: ensure full reads when rand source is provided by @bwesterb in https://github.com/cloudflare/circl/pull/634
- ed{25519,448}: don't accept trailing data for keys by @bwesterb in https://github.com/cloudflare/circl/pull/643
- frodo: pack: fix accidental zero buffer assumption by @bwesterb in https://github.com/cloudflare/circl/pull/645
- secretsharing: check that share ID is not zero. by @bwesterb in https://github.com/cloudflare/circl/pull/644
- kyber: document pk isn't checked like ML-KEM by @bwesterb in https://github.com/cloudflare/circl/pull/648
- zk/dleq: Don't accept trailing data on proof by @bwesterb in https://github.com/cloudflare/circl/pull/649
- slhdsa: don't panic if prehash-hash is out of range by @bwesterb in https://github.com/cloudflare/circl/pull/647
- goldilocks: don't panic when unmarshalling invalid point by @bwesterb in https://github.com/cloudflare/circl/pull/646
- hpke: don't panic when unmarshalling opener/sealer from empty buffer by @bwesterb in https://github.com/cloudflare/circl/pull/656
- ot/simot: don't panic on mismatched ciphertext lengths by @bwesterb in https://github.com/cloudflare/circl/pull/655
- fourq: document point decoding is lenient by @bwesterb in https://github.com/cloudflare/circl/pull/654
- oprf: add note on multiple Point encodings by @bwesterb in https://github.com/cloudflare/circl/pull/653
- tss/rsa: don't panic when combining empty list of shares by @bwesterb in https://github.com/cloudflare/circl/pull/652
- ecc/p384: document that package is not fully constant time by @bwesterb in https://github.com/cloudflare/circl/pull/651
- ristretto: reject non-canonical scalars by @bwesterb in https://github.com/cloudflare/circl/pull/650
- Add more explicit constant time warnings by @bwesterb in https://github.com/cloudflare/circl/pull/638
- mlsbset: make Encode() constant time by @bwesterb in https://github.com/cloudflare/circl/pull/639
- mlsbset: fix stray index in Encode comment by @lukevalenta in https://github.com/cloudflare/circl/pull/658
- removeLen32Prefixed: check for possible data overflow by @mdosch in https://github.com/cloudflare/circl/pull/629
- expander: panic if requested output length overflows DST. by @cjpatton in https://github.com/cloudflare/circl/pull/664
- zk/dleq: add base point
ato challenge derivation. by @cjpatton in https://github.com/cloudflare/circl/pull/663 - dh/sidh: document Import() side-effect for kem/sike. by @cjpatton in https://github.com/cloudflare/circl/pull/662
- ecc/fourq: improve constant-timeness of fpSgn, fqSqrt. by @cjpatton in https://github.com/cloudflare/circl/pull/666
- blinsign/blindrsa/partiallyblindrsa: reject malformed moduli. by @cjpatton in https://github.com/cloudflare/circl/pull/665
- blindsign/blindrsa: align PSSZERO behavior with RFC 9474. by @cjpatton in https://github.com/cloudflare/circl/pull/660
- ecc/fourq: fix fqSqr arithmetic error on amd64 by @cjpatton in https://github.com/cloudflare/circl/pull/659
- README: warn that not all packages are constant time by @frangelbarrera in https://github.com/cloudflare/circl/pull/668
- internal/test: unify ACVP test vector parsing by @ihopenre-eng in https://github.com/cloudflare/circl/pull/667
- blindrsa: fix interface documentation by @bwesterb in https://github.com/cloudflare/circl/pull/672
- ecc/fourq: fix legacy (non-BMI2) GF(p^2) multiplication on amd64 by @bwesterb in https://github.com/cloudflare/circl/pull/669
- p384: document assumed reductions by @bwesterb in https://github.com/cloudflare/circl/pull/670
- ed25519: document another divergence with crypto/ed25519 by @bwesterb in https://github.com/cloudflare/circl/pull/671
- prio3/histogram: don't panic on measurement equal to the bucket count by @bwesterb in https://github.com/cloudflare/circl/pull/673
- zk/qndleq: document Qn membership precondition by @bwesterb in https://github.com/cloudflare/circl/pull/675
- vdaf/prio3: require all prep shares by @bwesterb in https://github.com/cloudflare/circl/pull/676
- vdaf/prio3: document prep sequencing requirement by @bwesterb in https://github.com/cloudflare/circl/pull/677
- zk/dl: reject identity proof inputs by @bwesterb in https://github.com/cloudflare/circl/pull/678
- tss/rsa: document trusted modulus requirement by @bwesterb in https://github.com/cloudflare/circl/pull/680
- dh/csidh: harden key imports by @bwesterb in https://github.com/cloudflare/circl/pull/689
- zk/dleq: validate batch shape by @bwesterb in https://github.com/cloudflare/circl/pull/684
- ot/simot: make sender sessions one-shot by @bwesterb in https://github.com/cloudflare/circl/pull/679
- vdaf/prio3/sum: reject unsafe measurement bounds by @bwesterb in https://github.com/cloudflare/circl/pull/682
- tss/rsa: validate sign share protocol parameters by @bwesterb in https://github.com/cloudflare/circl/pull/674
- vdaf/prio3/sum: reject aggregate field overflow by @bwesterb in https://github.com/cloudflare/circl/pull/681
- vdaf/prio3: validate preparation inputs by @bwesterb in https://github.com/cloudflare/circl/pull/683
- oprf: reject invalid deterministic blinds by @bwesterb in https://github.com/cloudflare/circl/pull/688
- vdaf/prio3: reject degenerate parameters by @bwesterb in https://github.com/cloudflare/circl/pull/685
- oprf: validate finalize state by @bwesterb in https://github.com/cloudflare/circl/pull/687
New Contributors
- @drmikecrypto made their first contribution in https://github.com/cloudflare/circl/pull/627
- @lukevalenta made their first contribution in https://github.com/cloudflare/circl/pull/658
- @mdosch made their first contribution in https://github.com/cloudflare/circl/pull/629
- @frangelbarrera made their first contribution in https://github.com/cloudflare/circl/pull/668
- @ihopenre-eng made their first contribution in https://github.com/cloudflare/circl/pull/667
Full Changelog: https://github.com/cloudflare/circl/compare/v1.6.4...v1.6.5