Changelog

Copy Markdown View Source

v0.5.0 (2026-06-25)

  • MetamorphicCrypto.Hybrid now surfaces the Cat-1 (ML-KEM-512 + X25519) tier, completing the full standardized ML-KEM range (NIST categories 1/3/5):
    • generate_keypair/1 accepts :cat1 (832-byte public key, 32-byte seed); generate_keypair_512/0 is the convenience alias.
    • seal/3 and seal_raw/3 accept :cat1; seal_512/2 and seal_raw_512/2 are convenience aliases. Cat-1 ciphertexts carry version tag 0x01 (0x01 || ML-KEM-512 ct (768 B) || X25519 eph pk (32 B) || nonce (24 B) || secretbox ct).
    • open/2 auto-detects Cat-1/Cat-3/Cat-5 from the version tag — no API change. hybrid_ciphertext?/1 is length-aware, so short legacy ciphertexts that happen to begin with 0x01 are not misdetected as Cat-1.
  • MetamorphicCrypto.Seal.seal_for_user/3 (and seal_for_user_raw/3) now accept level: :cat1, mirroring the existing :cat3/:cat5 options, so the unified seal/unseal API spans the full standardized ML-KEM range. unseal_from_user/4 is unchanged — it already auto-detects the level from the version tag.
  • Honesty note (NIST defines ML-KEM only at categories 1/3/5): there is no Cat-2/Cat-4 KEM. The classical half is always X25519 (~Cat-1 classical), the floor at every tier; the post-quantum half grows Cat-1 → Cat-3 → Cat-5. Wire version tags are scoped per artifact type: on the KEM side 0x01 = Cat-1 (ML-KEM-512), whereas on the signature side 0x01 = Cat-2 (ML-DSA-44).
  • Sync the native crate dependency to metamorphic-crypto 0.6.0, which adds the Cat-1 KEM API. No change to existing encryption, hashing, signature, or wire formats.

v0.4.0 (2026-06-24)

  • Add MetamorphicCrypto.Sign — hybrid post-quantum signatures combining ML-DSA (FIPS 204) + Ed25519 in a composite, strict-AND verified scheme:
    • generate_signing_keypair/0 (default :cat3) and generate_signing_keypair/1 (:cat2 / :cat3 / :cat5) returning %{public_key, secret_key} (base64 strings).
    • sign/3 (raw message binary + UTF-8 context + base64 secret key → base64 signature) and verify/4 (→ boolean, both components must verify).
    • derive_public_key/1 deterministically re-derives the base64 verifying key from a secret key — so a key recovered from backup regenerates byte-identically (no false key-change alert for TOFU-pinned keys).
    • sign_context_v1/0 exposes the recommended "metamorphic/sign/v1" context label; plus derive_public_key!/1 and sign!/3 raising variants.
    • Convenience facade: MetamorphicCrypto.generate_signing_keypair/0,1, sign/3, verify/4, and derive_public_key/1.
  • ML-DSA uses the hedged (randomized) FIPS 204 variant, so signature bytes are non-reproducible (both-valid); the wire format — version tags, byte layout, domain-separation framing (I2OSP(len(context), 8) || context || message), and public-key derivation — is fully deterministic and pinnable across native Rust, WASM, and this NIF.
  • Sync the native crate dependency to metamorphic-crypto 0.5.0, which exposes the composite signature API. No change to existing encryption, hashing, or wire formats.

v0.3.0 (2026-06-22)

  • Add MetamorphicCrypto.Hash — SHA-3 / SHA-2 hashing for public data (key fingerprints, safety numbers, key-transparency-log entries):
    • sha3_512/1 (recommended default, Cat-5), sha3_256/1, sha256/1, sha512/1, and the domain-separated sha3_512_with_context/2 — plus ! raising variants.
    • Base64 in, base64 out, matching the rest of the package and the WASM wire format, so a digest computed in Elixir is byte-for-byte identical to one computed in the browser/native (verified by a locked parity vector).
    • MetamorphicCrypto.sha3_512/1 and MetamorphicCrypto.sha3_512_with_context/2 added to the top-level convenience facade.
  • These digests are for public data only and intentionally add no zeroize/constant-time ceremony; do not hash secrets with them (use MetamorphicCrypto.KDF.derive_session_key/2 for secret material).
  • Sync the native crate dependency to metamorphic-crypto 0.4.0, which exposes the public hashing API. No change to existing encryption behavior or wire formats.

v0.2.2 (2026-06-10)

  • No functional or API changes; encryption output is unchanged.
  • Sync the native crate dependency to metamorphic-crypto 0.3.7, deduping the sha3/keccak tree for a cleaner SBOM.
  • Supply-chain hardening of the release pipeline: SHA-pinned actions, build-provenance attestation of each precompiled NIF, cargo audit gate, grouped Dependabot, and a SECURITY.md.
  • Packaging: exclude the maintainer-only release task from the published package.

v0.2.1 (2026-05-23)

v0.2.0 (2026-05-13)

v0.1.2 (2026-05-12)

  • Add explicit targets list to RustlerPrecompiled config
    • Prevents download attempts for unsupported platforms (e.g. arm-unknown-linux-gnueabihf)
    • mix rustler_precompiled.download --all now only fetches the 5 supported targets

v0.1.1 (2026-05-12)

  • Fix precompiled NIF loading on macOS and Windows
    • Binary inside tar archive was named incorrectly (libmetamorphic_crypto_nif.dylib instead of the versioned .so name that RustlerPrecompiled expects)
    • Users without Rust installed would get nif_not_loaded errors

v0.1.0 (2026-05-11)