Changelog
View Source3.0.0 (2026-10-25)
- Library Support
- Ristretto255 and Decaf448 group arithmetic.
- cSHAKE128, cSHAKE256, KMAC128, KMAC256, KMACXOF128, KMACXOF256, TupleHash128, TupleHash256, TupleHashXOF128, TupleHashXOF256, ParallelHash128, ParallelHash256, ParallelHashXOF128, and ParallelHashXOF256 from SP 800-185r1.
- TurboSHAKE, KangarooTwelve (KT128/KT256), and HopMAC from RFC 9861, plus original Keccak XOFs.
- 3GPP TUAK authentication and key generation.
- Enhancements
- High-level ECDH, EdDSA, Hash, and XOF APIs, including streaming Ed25519ph/Ed448ph signatures and parallel hashing.
- Automatically seeded
libdecaf:strong_rand_bytes/1. - Runtime-selected XKCP/K12 acceleration for ARM64 and x86-64.
- Modern Erlang documentation, typespecs, ExDoc, formatting, type checks, and sanitizer coverage. CI targets OTP 28 and 29.
- Preserve historical APIs with deprecation guidance; see Migrating to 3.0.
- Fixes
- Update ed448goldilocks to v1.0.5 with platform detection, empty-input, and native build fixes.
- Clean up temporary key material on errors and recover from parallel worker startup failures.
2.1.1 (2022-08-31)
- Fixes
- Include
Makefilein hex.pm package so it works correctly with erlang.mk
- Include
2.1.0 (2022-08-28)
- Fixes
- Security fix for Misuse of public apis can result in private key exposure #13 (see report here).
- Library Support
- Enhancements
- New Keypair API for Ed25519 and Ed448 operations (see #13).
- Add legacy Keccak support #15 (see also #12.)
- Upstream update to
ed448goldilocksversionfeatures-20220828(vendored as part oflibdecafapp).
2.0.0 (2022-01-25)
- Fixes
- Remove
xnif_slicerelated code and refactor to use regular timeslice reduction bumping (see #7). - Compilation problems on macOS and Erlang/OTP 23+ compatibility.
- Remove
- Enhancements
- Upstream update to
ed448goldilocksversionfeatures-20220121(now vendored as part oflibdecafapp). - Added tests for timeslice checking with large input and/or large output.
- Switch from Travis CI to GitHub Actions.
- Relicense library under MIT license.
- Upstream update to
1.0.0 (2018-11-30)
- Upstream update to
ed448goldilocksversion 1.0 - Library Support
- SPONGERNG
- Verious improvements to the build system (more appropriate usage of dirty schedulers and time slices).
- Added Ed25519 to X25519 and Ed448 to X448 conversion functions.
0.0.4 (2016-09-02)
Upstream version features-20160902 which adds support for Ed25519ctx according to draft 08 of EdDSA.
Library Support
0.0.3 (2016-03-10)
Upstream version features-20160629
Fixes
- Support for modern versions of FreeBSD, NetBSD, and DragonflyBSD.
0.0.2 (2016-03-10)
Upstream version f29b338f3788f052441478bb03b5d9e6fdd3eb28
Library Support
- ECDH
- EdDSA
Fixes
- Include
stdint.hto hopefully fix build issues on Linux.
- Include
0.0.1 (2016-03-01)
Initial Release
Publish to hex.pm.
Library Support
- ECDH
- EdDSA
- SHA-2
- SHA-3
libdecaf:sha3_224/1libdecaf:sha3_256/1libdecaf:sha3_384/1libdecaf:sha3_512/1libdecaf:shake128/2libdecaf:shake256/2- Streaming support
libdecaf:sha3_224_init/0,libdecaf:sha3_224_update/2,libdecaf:sha3_224_final/1libdecaf:sha3_256_init/0,libdecaf:sha3_256_update/2,libdecaf:sha3_256_final/1libdecaf:sha3_384_init/0,libdecaf:sha3_384_update/2,libdecaf:sha3_384_final/1libdecaf:sha3_512_init/0,libdecaf:sha3_512_update/2,libdecaf:sha3_512_final/1libdecaf:shake128_init/0,libdecaf:shake128_update/2,libdecaf:shake128_final/2libdecaf:shake256_init/0,libdecaf:shake256_update/2,libdecaf:shake256_final/2
Basic Tests based on the draft-irtf-cfrg-eddsa, FIPS 180-4, FIPS 202, and RFC 7748 test vectors.