4.5.2

What's Changed

SemVer Patch

• Compute RSA key size from the modulus bit length by @simonjbeaumont in #466
• Enforce a 2048-bit minimum on RSA raw number initializers by @simonjbeaumont in #467

Other Changes

• Update contributing guidelines by @simonjbeaumont in #464
• Match the documented parameter names to the signatures by @darkdi in #463
• Reapply swift-format to fixup PR CI by @simonjbeaumont in #465

New Contributors

• @darkdi made their first contribution in #463

Full Changelog: 4.5.1...4.5.2

5.0.0-beta.6

What's Changed

SemVer Patch

• [5.x] Remove bindMemory(to:) calls and the CCryptoBoringSSLShims target by @simonjbeaumont in #455
• [5.x] Remove duplicate imports from gyb-generated MLDSA backend code by @simonjbeaumont in #458
• [5.x] Remove unused internal code path: ECDSASignature.derBytes by @simonjbeaumont in #457
• [5.x] Mark some class types as final by @simonjbeaumont in #456

Other Changes

• [5.x] Remove native SwiftPM build-system workaround in CI by @simonjbeaumont in #461
• [5.x] Align with CryptoKit from Xcode 27 beta 6 by @simonjbeaumont in #462

Full Changelog: 5.0.0-beta.4...5.0.0-beta.6

5.0.0-beta.4

What's Changed

SemVer Major

• [5.x] Align with CryptoKit APIs from Xcode 27 beta 4 by @simonjbeaumont in #453

SemVer Patch

• [5.x] Adopt CheckImplementationOnly and CI with -warnings-as-errors by @simonjbeaumont in #454

Full Changelog: 5.0.0-beta.2...5.0.0-beta.4

4.5.1

What's Changed

SemVer Patch

• Back AES-CBC with BoringSSL and constant-time PKCS#7 unpadding by @simonjbeaumont in #448
• Fix double-free when RSA key init from bytes fails by @simonjbeaumont in 47d3869

Other Changes

• Update cross-platform dependencies in README by @simonjbeaumont in #446

Full Changelog: 4.5.0...4.5.1

5.0.0-beta.2

What's Changed

SemVer Major

• [5.x] Align with CryptoKit APIs from Xcode 27 beta 2 by @simonjbeaumont in #444
• All public, non-frozen enums are now marked @nonexhaustive

Notes

• Development of the non-Darwin backend must now be done using the target platform as a development environment

Full Changelog: 5.0.0-beta.1...5.0.0-beta.2

5.0.0-beta.1

What's Changed

SemVer Major

• [5.x] Align with CryptoKit APIs from Xcode 27 beta 1 by @simonjbeaumont in #442

Full Changelog: 4.5.0...5.0.0-beta.1

4.5.0

What's Changed

SemVer Minor

• Add support for SHA-512/256 by @bauer-andreas in #432

SemVer Patch

• Adopt FoundationEssentials instead of Foundation where available by @t089 in #317
• Add module anchor to fix empty dynamic framework on Xcode 26 by @mrcararia in #436

New Contributors

• @bauer-andreas made their first contribution in #432
• @t089 made their first contribution in #317
• @mrcararia made their first contribution in #436

Full Changelog: 4.4.0...4.5.0

4.4.0

What's Changed

SemVer Minor

• Drop Swift 6.0 by @rnro in #434

Other Changes

• Enable Swift 6.3 jobs in CI by @rnro in #433

Full Changelog: 4.3.1...4.4.0

Swift Crypto 4.3.1

Security Fixes

This version contains a fix for CVE-2026-28815: X-Wing HPKE Decapsulation Accepts Malformed Ciphertext Length. The X-Wing decapsulation path accepts attacker-controlled encapsulated ciphertext bytes without enforcing the required fixed ciphertext length. For more details see the advisory. We recommend updating to this release as soon as possible. (commit)

What's Changed

SemVer Patch

• Add missing input validation in X-Wing HPKE decapsulation by @josephnoir in bb4ba81

Full Changelog: 4.3.0...4.3.1

Swift Crypto 4.3.0

What's Changed

SemVer Minor

• Add support for encrypted PEM keys via BoringSSL by @fpseverino in #428

Other Changes

• switch from main to 0.0.7 for swiftlang workflows by @rnro in #430
• update actions/checkout from v4 to v6 by @rnro in #431

Full Changelog: 4.2.0...4.3.0