aws-lc-rs v1.14.0

What's Changed

• MSRV bumped to 1.70.0 by @justsmth in #822
• aws-lc-sys v0.31.0 aligned with AWS-LC v1.59.0 by @justsmth in #867
  • Performance improvements for ML-KEM:
    • x86-64: aws/aws-lc#2631
    • arm64: aws/aws-lc#2498
• Support for sign/verify on digests by @justsmth in #826
• Support for decrypting ANSI X9.23 / ISO 10126-padded AES by @tstenner in #847
• Support SIV in RandomizedNonceKey by @justsmth in #846
• Support verification of P256/P384+SHA512 signatures by @ctz in #857
• RsaSignatureEncoding type is public by @soundofspace in #864
• ParsedPublicKey for signature operations by @justsmth in #863
• ParsedPublicKey for agreement operations by @justsmth in #862

Build Improvements

• Allow prebuilt-NASM w/ Cmake toolchain by @justsmth in #852
• Add support for Apple tvOS builds by @matszczygiel in #848

Issues Being Resolved

• Feature Request: RandomizedNonceKey for AES-GCM-SIV -- #842
• Add way to pre-parse signature keys (i.e. turn signature::UnparsedPublicKey to PublicKey) -- #849
• Build failed for x86_64-pc-windows-gnu target regardless of AWS_LC_SYS_PREBUILT_NASM=1 -- #850

Other Merged PRs

• Exclude CI jobs for invalid param combinations by @justsmth in #866
• Prepare aws-lc-rs v1.14.0 by @justsmth in #876
• Fix + refactor "ios-simulator-runner.sh" by @justsmth in #868
• Support CPU Jitter Entropy from upstream RAGDOLL by @torben-hansen in #865
• Avoid doctests in cross-compile CI by @justsmth in #855
• Consolidate agreement functions into LcPtr<EVP_PKEY> by @justsmth in #854
• Fix unexpected +1.70.0 compiler error by @justsmth in #861

New Contributors

• @tstenner made their first contribution in #847
• @matszczygiel made their first contribution in #848

Full Changelog: v1.13.3...v1.14.0

aws-lc-rs v1.13.3

What's Changed

• Rename ML-DSA by @justsmth in #844

Other Merged PRs

• Skip aws-lc-rs "publish dryrun" job when -sys crates not published by @justsmth in #840

Full Changelog: v1.13.2...v1.13.3

aws-lc-rs v1.13.2

What's Changed

• aws-lc-sys v0.30.0 is aligned w/ AWS-LC v1.55.0 by @justsmth in #838
• expose algorithm used to create ecdsa keypair by @soundofspace in #834
• Change 'try_sign' to pub in ED25519 module by @theswiftfox in #832

Build improvements

• Fix target-specific env variable usage by @justsmth in #810
• Improved support for msys2 and "prebuilt-nasm" by @justsmth in #830

Issues Being Resolved

• Failed to Build aws-lc-sys 0.29.0 on Windows with target x86_64-pc-windows-gnu -- #835
• Failed to Build aws-lc-sys 0.29.0 on Windows -- #833
• MSYS2 - "No rule to make target" for libaws_lc_0_29_0_crypto.a -- #814

Other Merged PRs

• Disallow external bindgen when AWS_LC_SYS_EXTERNAL_BINDGEN=0 by @justsmth in #808
• Test w/ CMake 4.0 release by @justsmth in #756
• Fix CI for i686-pc-windows-gnu by @justsmth in #809
• Fix spelling errors by @atouchet in #817
• Ensure ConstPointers don't outlive parent by @justsmth in #693
• Fix CI for riscv64gc-unknown-linux-gnu by @justsmth in #816
• Prepare aws-lc-fips-sys v0.13.7 by @justsmth in #823
• Fix CI by @justsmth in #825
• Prepare aws-lc-sys v0.30.0 by @justsmth in #829

New Contributors

• @atouchet made their first contribution in #817
• @theswiftfox made their first contribution in #832
• @soundofspace made their first contribution in #834

Full Changelog: v1.13.1...v1.13.2

aws-lc-rs v1.13.1

What's Changed

• Implement AsRef<[u8]> for UnparsedPublicKey by @Stupremee in #790
• Support for target x86_64-pc-windows-gnullvm by @justsmth in #702
• Improved support for riscv64gc-unknown-linux-gnu by @kxxt in #774
• aws-lc-sys now aligns w/ AWS-LC v1.51.2 by @justsmth in #806

Build Improvements

• Build latancy for aarch64-apple-darwin reduced by ~25% by @justsmth in #797
• Improved environment variable support by @justsmth in #763
• Assorted fixes for Windows compilation by @amyspark in #778

Issues Being Resolved

• Invalid numeric argument '/Wextra' with MSVC, how to build with Clang? -- #571
• Duplicate symbols in libaws_lc_0_28_2_crypto.a -- #795

Other Merged PRs

• Document that BINDGEN_EXTRA_CLANG_ARGS can be used by @justsmth in #781
• Bump aws-lc-sys to v0.28.1 by @justsmth in #782
• Test packaging w/ SSL build by @justsmth in #784
• Bump aws-lc-sys to v0.28.2 by @justsmth in #785
• Bump aws-lc-fips-sys to v0.13.6 by @justsmth in #786
• Add new include search path folder for no-cmake build because of upstream AWS-LC change #2324 by @torben-hansen in #792
• Fix clippy by @justsmth in #793
• Update for s2n-bignum-imported by @justsmth in #794
• Update MacOS GH runners by @justsmth in #798
• Realign aws-lc-sys v0.29.0 w/ AWS-LC v1.51.1 by @justsmth in #804
• Fix rustls integ tests by @justsmth in #807

New Contributors

• @amyspark made their first contribution in #778
• @kxxt made their first contribution in #774
• @Stupremee made their first contribution in #790

Full Changelog: v1.13.0...v1.13.1

aws-lc-rs v1.13.0

What's Changed

• Support serializing RsaSubjectPublicKey to/from X509 by @justsmth in #742
• ML-DSA support in unstable module by @justsmth in #690
• Remove Kyber, KDF from unstable module by @justsmth in #747

Build improvements

• Fix CMake submodule warning by @justsmth in #730
• Prefixing applied to all external symbols in aws-lc-sys:
  • Align aws-lc-sys v0.27.2 w/ AWS-LC v1.48.5 by @justsmth in #740
• Improve cross-build support to x86_64-pc-windows-gnu:
  • Include Go source in aws-lc-sys crate by @justsmth in #754
• Support build using CMake 4.0:
  • Bump aws-lc-fips-sys to v0.13.5 by @justsmth in #760
  • Regenerate aws-lc-sys @ v1.48.3 by @skmcgrail in #734
• CI for x86_64-unknown-illumos build target:
  • Try to support illumos by @LecrisUT in #709

Issues Being Resolved

• implement encoding::AsDer<PublicKeyX509Der<'a>> for rsa::PublicKey -- #741
• -sys: include aws-lc/crypto/err/err_data_generate.go in published crates -- #752
• Failing to cross build for x86_64-pc-windows-gnu -- #753
• Failure to build with CMake 4 -- #755

Other Merged PRs

• Update rustls integ test by @justsmth in #717
• Bump aws-lc-fips-sys to v0.13.4 by @justsmth in #731
• Test script for bindings pregeneration by @justsmth in #732
• No libssl cross test for arm-linux-androideabi by @justsmth in #739
• aws-lc-sys: output only one library by @justsmth in #749
• Align aws-lc-sys v0.28.0 w/ AWS-LC 1.49.0 by @justsmth in #757
• Bump to aws-lc-rs v1.13.0 by @justsmth in #758

New Contributors

• @LecrisUT made their first contribution in #709

Full Changelog: v1.12.6...v1.13.0

aws-lc-rs v1.12.6

What's Changed

• Align aws-lc-sys v0.27.0 w/ AWS-LC v1.48.2 by @justsmth in #726
• No paste dependency by @justsmth in #724
• Pregenerated bindings for riscv64gc-unknown-linux-gnu by @justsmth in #720

Build improvements

• Improve handling of CFLAGS by @justsmth in #712

Issues Being Resolved

• Could not compile on Windows with crate rustls with config debug="limited" #707
• -sys: issues with CFLAGS from environment being passed through to CMake #710
• Pregenerate bindings for riscv64 #714
• Prefixed BoringSSL symbols are re-exported when linked into a shared library #715
• CMakeLists.txt wrong minimum required version #716
• paste - no longer maintained #722

Other Merged PRs

• Support new randomness generation in AWS-LC by @torben-hansen in #708
• Run compiler tests on ubuntu-22.04 by @justsmth in #718

Full Changelog: v1.12.5...v1.12.6

aws-lc-rs v1.12.5

v1.12.5

What's Changed

Bug fix

• Support PKCS8 in agreement::PrivateKey::from_private_key_der by @justsmth in #713

Full Changelog: v1.12.4...v1.12.5

aws-lc-rs v1.12.4

What's Changed

Bug fix

• Verify nid after parsing EC by @justsmth in #705

Other Merged PRs

• Prepare release v1.12.4 by @justsmth in #706

Issues Being Closed

• 0.12.3 from_private_key_der() accepts incorrect EcdsaSigningAlgorithm for PKCS8 DER -- #704

Full Changelog: v1.12.3...v1.12.4

aws-lc-rs v1.12.3

What's Changed

• Implement From<&PublicKey> for PublicKeyComponents by @djc in #698
• Expose Ed25519PublicKey by @justsmth in #695

Build improvements

• Improve support for alpine linux by @justsmth in #675
• Avoid fips MacOS failure due to -Woverriding-option by @justsmth in #678
• Build script handling of OPT_LEVEL='s' by @justsmth in #694

Issues Being Resolved

• Compile failure targeting RPi2 armv7ve in [email protected] - #681
• Building for Windows (x86_64-pc-windows-msvc) with opt-level="s" causes link errors - #691
• ring interoperability issues with RSA - #697

Other Merged PRs

• Prepare aws-lc-fips-sys v0.13.2 by @justsmth in #668
• Cleanup EVP_PKEY serialization by @justsmth in #669
• Fix metadata by @justsmth in #670
• Fix RustRover insight by @justsmth in #671
• Formatting: Change import granularity to "Module" by @justsmth in #672
• Prepare aws-lc-fips-sys v0.13.3 by @justsmth in #684
• Prepare aws-lc-sys v0.25.1 by @justsmth in #685
• Fix regression in EcdsaKeyPair::from_private_key_der by @justsmth in #686
• Update README.md by @justsmth in #687
• Prepare aws-lc-sys v0.26.0 by @justsmth in #688
• EVP_PKEY refactoring for keygen/sign/verify; Start of ML-DSA impl by @justsmth in #689
• Exclude Rust scripts from workspace by @justsmth in #699
• Realign aws-lc-sys v0.26.0 w/ AWS-LC v1.46.0 by @justsmth in #701
• Prepare release v1.12.3 by @justsmth in #700

New Contributors

• @djc made their first contribution in #698

Full Changelog: v1.12.2...v1.12.3

aws-lc-rs v1.12.2

What's Changed

• Implement from_seed_unchecked for Ed25519KeyPair by @paolobarbolini in #663

Build bug fix

• aws-lc-rs v1.12.1 depended on functions added in aws-lc-fips-sys v0.13.1, but it still listed a dependence on v0.13.0. This has been fixed in v1.12.2 by @justsmth #666

Issues being resolved

• Construct Ed25519KeyPair from just a raw private key seed #662

New Contributors

• @paolobarbolini made their first contribution in #663

Full Changelog: v1.12.1...v1.12.2