Skip to content

Commit ed5c2cc

Browse files
xuganyu96xuganyu96
authored
0.15.0 release candidate 1 (#2295)
* draft for release notes Signed-off-by: Ganyu (Bruce) Xu <[email protected]> * bumped version number for 0.15.0 release candidate 1 Signed-off-by: Ganyu (Bruce) Xu <[email protected]> * example command Signed-off-by: Ganyu (Bruce) Xu <[email protected]> * Full release notes with every commit in git log Signed-off-by: Ganyu (Bruce) Xu <[email protected]> * deprecated noregress scripts; open-quantum-safe/profiling has been deprecated; benchmarking is now done on GitHub Action Signed-off-by: Ganyu (Bruce) Xu <[email protected]> * updated release notes to include latest PR Signed-off-by: Ganyu (Bruce) Xu <[email protected]> * Added "Release candidate 1" mentions where appropriate [full tests] [extended tests] Signed-off-by: Ganyu (Bruce) Xu <[email protected]> * removed confusing pull request entry; nonam3e's association with Ingonyama Signed-off-by: Ganyu (Bruce) Xu <[email protected]> --------- Signed-off-by: Ganyu (Bruce) Xu <[email protected]>
1 parent 52169a1 commit ed5c2cc

File tree

6 files changed

+83
-187
lines changed

6 files changed

+83
-187
lines changed

‎CMakeLists.txt‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -43,9 +43,9 @@ set(CMAKE_C_STANDARD_REQUIRED ON)
4343
set(CMAKE_POSITION_INDEPENDENT_CODE ON)
4444
set(CMAKE_C_VISIBILITY_PRESET hidden)
4545
set(OQS_VERSION_MAJOR 0)
46-
set(OQS_VERSION_MINOR 14)
47-
set(OQS_VERSION_PATCH 1)
48-
set(OQS_VERSION_PRE_RELEASE "-dev")
46+
set(OQS_VERSION_MINOR 15)
47+
set(OQS_VERSION_PATCH 0)
48+
set(OQS_VERSION_PRE_RELEASE "-rc1")
4949
set(OQS_VERSION_TEXT "${OQS_VERSION_MAJOR}.${OQS_VERSION_MINOR}.${OQS_VERSION_PATCH}${OQS_VERSION_PRE_RELEASE}")
5050
set(OQS_COMPILE_BUILD_TARGET "${CMAKE_SYSTEM_PROCESSOR}-${CMAKE_HOST_SYSTEM}")
5151
set(OQS_MINIMAL_GCC_VERSION "7.1.0")

‎RELEASE.md‎

Lines changed: 77 additions & 87 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,4 @@
1-
liboqs version 0.14.0
2-
=====================
3-
4-
About
5-
-----
1+
# liboqs version 0.15.0-rc1
62

73
The **Open Quantum Safe (OQS) project** has the goal of developing and prototyping quantum-resistant cryptography. More information on OQS can be found on our website: https://openquantumsafe.org/ and on Github at https://github.com/open-quantum-safe/.
84

@@ -24,85 +20,79 @@ liboqs can also be used in the following programming languages via language-spec
2420
- Python 3, via https://github.com/open-quantum-safe/liboqs-python
2521
- Rust, via https://github.com/open-quantum-safe/liboqs-rust
2622

27-
Release notes
28-
=============
29-
30-
This is version 0.14.0 of liboqs. It was released on July 10, 2025.
31-
32-
This release contains a security fix for secret-dependent branching in HQC. It introduces support for SNOVA, a NIST Additional Signatures Round 2 candidate, and a new optimized implementation of SHA3 using AVX-512VL instructions. Additionally, this is the first liboqs release to include the [stable 1.0.0 version of PQ Code Package's mlkem-native](https://github.com/pq-code-package/mlkem-native/releases/tag/v1.0.0).
33-
34-
This release also introduces a number of improvements to testing and infrastructure. The OQS project is now publishing benchmarking data on https://openquantumsafe.org/benchmarking and code coverage data on https://coveralls.io/github/open-quantum-safe/liboqs.
35-
36-
Deprecation notice
37-
==================
38-
39-
This will be the last release of liboqs to include Dilithium (that is, the NIST Round 3 version of Dilithium, prior to its standardization by NIST as ML-DSA in FIPS 204). Applications should switch to ML-DSA (FIPS 204). Please contact us if you have any concerns.
40-
41-
Security issues
42-
===============
43-
44-
- CVE-2025-52473: Disabled compiler optimizations for HQC to avoid secret-dependent branches. Thank you to Zhenzhi Lai and Zhiyuan Zhang from from the University of Melbourne and the Max Planck Institute for Security and Privacy for identifying the issue.
45-
46-
What's New
47-
----------
48-
49-
This release continues from the 0.13.0 release of liboqs.
50-
51-
### Key encapsulation mechanisms
52-
53-
- HQC: Disabled compiler optimizations to avoid secret-dependent branching in certain configurations. HQC remains disabled by default.
54-
- ML-KEM: Updated the default ML-KEM implementation to [PQCP's mlkem-native v1.0.0](https://github.com/pq-code-package/mlkem-native/releases/tag/v1.0.0).
55-
56-
### Digital signature schemes
57-
58-
- New API: added an API function to check if a signature scheme supports signing with a context string.
59-
- SNOVA: added [SNOVA](https://snova.pqclab.org/) from NIST Additional Signature Schemes Round 2.
60-
61-
### Other changes
62-
63-
- Added an AVX512VL-optimized backend for SHA3.
64-
- Improved memory management throughout the codebase.
65-
66-
---
67-
68-
Detailed changelog
69-
------------------
70-
71-
## What's Changed
72-
* Switch to dev mode after 0.13.0 release by @praveksharma in https://github.com/open-quantum-safe/liboqs/pull/2125
73-
* Restrict -Wno-maybe-uninitialized to GCC and fix stack size typo by @alraddady in https://github.com/open-quantum-safe/liboqs/pull/2111
74-
* Promote @SWilson4 from Committer to Maintainer [skip ci] by @SWilson4 in https://github.com/open-quantum-safe/liboqs/pull/2120
75-
* Update Nix flake inputs by @aidenfoxivey in https://github.com/open-quantum-safe/liboqs/pull/2126
76-
* Change cuPQC upstream repo by @praveksharma in https://github.com/open-quantum-safe/liboqs/pull/2115
77-
* Integrate SNOVA into liboqs by @vacuas in https://github.com/open-quantum-safe/liboqs/pull/2109
78-
* Update ACVP vectors to latest release by @abhinav-thales in https://github.com/open-quantum-safe/liboqs/pull/2131
79-
* Add a function to check if context string is supported by @M-AlNoaimi in https://github.com/open-quantum-safe/liboqs/pull/2142
80-
* Skip failing CI test by @dstebila in https://github.com/open-quantum-safe/liboqs/pull/2157
81-
* Use OQS_MEM_cleanse() instead of memset() by @Hussain1811 in https://github.com/open-quantum-safe/liboqs/pull/2158
82-
* Check for NULL dereference before using secure free by @Hussain1811 in https://github.com/open-quantum-safe/liboqs/pull/2151
83-
* Update mlkem-native to v1.0.0 by @mkannwischer in https://github.com/open-quantum-safe/liboqs/pull/2146
84-
* test: Use secure free for freeing secret key objects by @Hussain1811 in https://github.com/open-quantum-safe/liboqs/pull/2149
85-
* tests: Remove unused variables by @Hussain1811 in https://github.com/open-quantum-safe/liboqs/pull/2152
86-
* Wycheproof by @h2parson in https://github.com/open-quantum-safe/liboqs/pull/2145
87-
* tests: Check OQS_STATUS of RNG and fstore functions by @Hussain1811 in https://github.com/open-quantum-safe/liboqs/pull/2153
88-
* Adjust constant-time test exception for mlkem-native by @mkannwischer in https://github.com/open-quantum-safe/liboqs/pull/2162
89-
* Continuous Benchmarking using Github Actions by @pablo-gf in https://github.com/open-quantum-safe/liboqs/pull/2134
90-
* test: Add basic kem fuzz testing by @nathaniel-brough in https://github.com/open-quantum-safe/liboqs/pull/2133
91-
* Increase alert threshold for continuous benchmarking by @pablo-gf in https://github.com/open-quantum-safe/liboqs/pull/2166
92-
* Benchmarking comments only on alerts by @dstebila in https://github.com/open-quantum-safe/liboqs/pull/2168
93-
* Adding code coverage by @aidenfoxivey in https://github.com/open-quantum-safe/liboqs/pull/2148
94-
* Add AVX512VL-Optimized SHA3/SHAKE Implementations by @mdcornu in https://github.com/open-quantum-safe/liboqs/pull/2167
95-
* Zeroize memory in SHA3 implementation by @aidenfoxivey in https://github.com/open-quantum-safe/liboqs/pull/2171
96-
* Disable compiler optimizations for HQC by @SWilson4 in https://github.com/open-quantum-safe/liboqs/commit/4215362acbf69b88fe1777c4c052f154e29f9897
97-
* liboqs 0.14.0 release candidate 1 by @SWilson4 in https://github.com/open-quantum-safe/liboqs/pull/2180
98-
* Document public / internal API split [skip ci] by @SWilson4 in https://github.com/open-quantum-safe/liboqs/pull/2182
99-
100-
## New Contributors
101-
* @alraddady made their first contribution in https://github.com/open-quantum-safe/liboqs/pull/2111
102-
* @vacuas made their first contribution in https://github.com/open-quantum-safe/liboqs/pull/2109
103-
* @M-AlNoaimi made their first contribution in https://github.com/open-quantum-safe/liboqs/pull/2142
104-
* @Hussain1811 made their first contribution in https://github.com/open-quantum-safe/liboqs/pull/2158
105-
* @h2parson made their first contribution in https://github.com/open-quantum-safe/liboqs/pull/2145
106-
* @mdcornu made their first contribution in https://github.com/open-quantum-safe/liboqs/pull/2167
107-
108-
**Full Changelog**: https://github.com/open-quantum-safe/liboqs/compare/0.13.0...0.14.0
23+
# Release notes
24+
Release candidate 1 for liboqs 0.15.0 was released on Oct 22, 2025.
25+
26+
## Deprecation notice
27+
liboqs 0.15.0 is the last version to officially support SPHINCS+. SPHINCS+ will be removed in the 0.16.0 release and replaced by SLH-DSA. liboqs 0.15.0 also removes support for Dilithium.
28+
29+
## Security issues
30+
None reported
31+
32+
<!--- git log HEAD...0.14.0 --->
33+
## Significant changes
34+
- **Integrated SLH-DSA implementation from [pq-code-package/slhdsa-c](https://github.com/pq-code-package/slhdsa-c/)**
35+
- SLH-DSA ACVP tests [#2237](https://github.com/open-quantum-safe/liboqs/pull/2237)
36+
- Integrate SLH-DSA-C Library [#2175](https://github.com/open-quantum-safe/liboqs/pull/2175)
37+
- Added NTRU back [#2176](https://github.com/open-quantum-safe/liboqs/pull/2176)
38+
- Removed all Dilithium implementations ([#2275](https://github.com/open-quantum-safe/liboqs/pull/2275))
39+
- Replaced SPHINCS+ with SLH-DSA for CMake build option `OQS_ALGS_ENABLED=STD` ([#2290](https://github.com/open-quantum-safe/liboqs/pull/2290))
40+
- Updated CROSS to version 2.2 [#2247](https://github.com/open-quantum-safe/liboqs/pull/2247)
41+
- Included DeriveEncapsulation functionality (Issue #2135) [#2221](https://github.com/open-quantum-safe/liboqs/pull/2221)
42+
- Integrated ML-KEM implementation from ICICLE-PQC [#2216](https://github.com/open-quantum-safe/liboqs/pull/2216)
43+
44+
## Bug fixes
45+
- Fixed incorrect import in OV-III-pkc_skc ([#2299](https://github.com/open-quantum-safe/liboqs/pull/2299))
46+
- Fixed incorrect actual signature length in signature full-cycle speed test ([#2293](https://github.com/open-quantum-safe/liboqs/pull/2293))
47+
- Fixed ICICLE ML-KEM integration ([#2288](https://github.com/open-quantum-safe/liboqs/pull/2293))
48+
- Disabled strict aliasing on SPHINCS+-SHAKE ([#2264](https://github.com/open-quantum-safe/liboqs/pull/2264))
49+
- Fixed typo in `test_kem.c` ([#2281](https://github.com/open-quantum-safe/liboqs/pull/2281))
50+
- Fixed uninitialized `length_encaps_seed` for NTRU implementations ([#2266](https://github.com/open-quantum-safe/liboqs/pull/2266))
51+
<!-- NOTES: #2258 was overwritten by #2288 and thus omitted from release notes for the sake of clarity -->
52+
<!-- - Patched ICICLE ML-KEM for deterministic encapsulation ([#2258](https://github.com/open-quantum-safe/liboqs/pull/2258)) -->
53+
- Changed 64 bit add to 32 bit add to wrap on 32 bit counter for AES-CTR AES-NI implementation [#2252](https://github.com/open-quantum-safe/liboqs/pull/2252)
54+
- Improved random number generator security [#2225](https://github.com/open-quantum-safe/liboqs/pull/2225)
55+
- Avoided invalid compiler options for MSVC [#2239](https://github.com/open-quantum-safe/liboqs/pull/2239)
56+
- Added Classic McEliece sanitization patch [#2218](https://github.com/open-quantum-safe/liboqs/pull/2218)
57+
58+
## Miscellaneous
59+
- Deprecated `noregress` scripts ([#2295](https://github.com/open-quantum-safe/liboqs/pull/2295))
60+
- Updated no-pass explanation for constant-time testing ([#2294](https://github.com/open-quantum-safe/liboqs/pull/2294))
61+
- Fixed weekly test failures in GitHub Action ([#2285](https://github.com/open-quantum-safe/liboqs/pull/2294))
62+
- Improved algorithm support readability in README.md ([#2286](https://github.com/open-quantum-safe/liboqs/pull/2286))
63+
- Re-enabled all ACVP tests ([#2283](https://github.com/open-quantum-safe/liboqs/pull/2283))
64+
- Moved continuous benchmarking to weekly tests ([#2276](https://github.com/open-quantum-safe/liboqs/pull/2276))
65+
- Linked to contribution wishlist from CONTRIBUTING.md ([#2273](https://github.com/open-quantum-safe/liboqs/pull/2273))
66+
- Added content:read permission to scorecard workflow ([#2261](https://github.com/open-quantum-safe/liboqs/pull/2261))
67+
- Added guidance and questions on generative AI use ([#2269](https://github.com/open-quantum-safe/liboqs/pull/2269))
68+
- Moved `linux_arm_emulated` to extended tests [#2236](https://github.com/open-quantum-safe/liboqs/pull/2236)
69+
- Fixed pluralization in docs: "key encapsulation mechanisms (KEMs)" [#2255](https://github.com/open-quantum-safe/liboqs/pull/2255)
70+
- Fixed permissions for poutine_analysis job [#2246](https://github.com/open-quantum-safe/liboqs/pull/2246)
71+
- Disabled testing on Travis CI [#2248](https://github.com/open-quantum-safe/liboqs/pull/2248)
72+
- Upgraded Jinja to 3.1.6 [#2214](https://github.com/open-quantum-safe/liboqs/pull/2214)
73+
- Updated license info for ML-KEM [#2250](https://github.com/open-quantum-safe/liboqs/pull/2250)
74+
- Fixed typos across codebase [#2244](https://github.com/open-quantum-safe/liboqs/pull/2244)
75+
- Restructured basic checks [#2233](https://github.com/open-quantum-safe/liboqs/pull/2233)
76+
- Fixed code scanning workflow [#2217](https://github.com/open-quantum-safe/liboqs/pull/2217)
77+
- Changed Nix install action to verified [#2212](https://github.com/open-quantum-safe/liboqs/pull/2212)
78+
- Removed `armel` comment [#2231](https://github.com/open-quantum-safe/liboqs/pull/2231)
79+
- Removed `armel` support from `PLATFORMS.md` [#2232](https://github.com/open-quantum-safe/liboqs/pull/2232)
80+
- Added Poutine SASL [#2213](https://github.com/open-quantum-safe/liboqs/pull/2213)
81+
- Updated nixpkgs from 24.05 to 25.05 [#2187](https://github.com/open-quantum-safe/liboqs/pull/2187)
82+
- Added Custom Timeout to CI [#2189](https://github.com/open-quantum-safe/liboqs/pull/2189)
83+
- Updated ACVP to 1.1.0.40 [#2172](https://github.com/open-quantum-safe/liboqs/pull/2172)
84+
- Switched to dev mode for 0.14.1 [#2199](https://github.com/open-quantum-safe/liboqs/pull/2199)
85+
86+
## New contributors
87+
- Ganyu (Bruce) Xu (@xuganyu96)
88+
- Ethan Li (@lir2002)
89+
- @nonam3e (associated with Ingonyama)
90+
- Saito Masataka (@saitomst)
91+
- @max-p-log-p
92+
- Vibhav Tiwari (@vibhav950)
93+
- Dmitry (@mdqst)
94+
- Rodrigo Martín (@RodriM11)
95+
- @sukrucildirr
96+
- Kitsios Konstantinos (@kitsiosk)
97+
98+
<!-- TODO: include full changelog statement at full release -->

‎SECURITY.md‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,8 +8,8 @@ Using any code prior to 0.12.0 is strongly discouraged due to a [known security
88

99
| Version | Supported |
1010
| ------- | ------------------ |
11-
| 0.14.0 | :white_check_mark: |
12-
| < 0.14 | :x: |
11+
| 0.15.0 | :white_check_mark: |
12+
| < 0.15 | :x: |
1313

1414
## Reporting a Vulnerability
1515

‎scripts/noregress.py‎

Lines changed: 0 additions & 20 deletions
This file was deleted.

‎scripts/noregress.sh‎

Lines changed: 0 additions & 74 deletions
This file was deleted.

‎src/CMakeLists.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -142,7 +142,7 @@ set_target_properties(oqs
142142
ARCHIVE_OUTPUT_DIRECTORY "${PROJECT_BINARY_DIR}/lib"
143143
LIBRARY_OUTPUT_DIRECTORY "${PROJECT_BINARY_DIR}/lib"
144144
VERSION ${OQS_VERSION_TEXT}
145-
SOVERSION 8
145+
SOVERSION 9
146146
# For Windows DLLs
147147
RUNTIME_OUTPUT_DIRECTORY "${PROJECT_BINARY_DIR}/bin")
148148

0 commit comments

Comments
 (0)