You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: CHANGELOG.md
+14-3
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,20 @@ All notable changes to this project will be documented in this file.
5
5
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
6
6
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
7
7
8
-
## [Unreleased]
8
+
## [0.3.1] - 2023-04-10
9
+
We strongly recommend updating to 0.3.1 if you use or plan to use Clang >=14 to compile libsecp256k1, e.g., Xcode >=14 on macOS has Clang >=14. When in doubt, check the Clang version using `clang -v`.
10
+
11
+
#### Security
12
+
- Fix "constant-timeness" issue with Clang >=14 that could leave applications using libsecp256k1 vulnerable to a timing side-channel attack. The fix avoids secret-dependent control flow and secret-dependent memory accesses in conditional moves of memory objects when libsecp256k1 is compiled with Clang >=14.
13
+
14
+
#### Added
15
+
- Added tests against [Project Wycheproof's](https://github.com/google/wycheproof/) set of ECDSA test vectors (Bitcoin "low-S" variant), a fixed set of test cases designed to trigger various edge cases.
16
+
17
+
#### Changed
18
+
- Increased minimum required CMake version to 3.13. CMake builds remain experimental.
19
+
20
+
#### ABI Compatibility
21
+
The ABI is compatible with version 0.3.0.
9
22
10
23
## [0.3.0] - 2023-03-08
11
24
@@ -25,7 +38,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
25
38
- Removed the configuration header `src/libsecp256k1-config.h`. We recommend passing flags to `./configure` or `cmake` to set configuration options (see `./configure --help` or `cmake -LH`). If you cannot or do not want to use one of the supported build systems, pass configuration flags such as `-DSECP256K1_ENABLE_MODULE_SCHNORRSIG` manually to the compiler (see the file `configure.ac` for supported flags).
26
39
27
40
#### ABI Compatibility
28
-
29
41
Due to changes in the API regarding `secp256k1_context_static` described above, the ABI is *not* compatible with previous versions.
30
42
31
43
## [0.2.0] - 2022-12-12
@@ -45,7 +57,6 @@ Due to changes in the API regarding `secp256k1_context_static` described above,
45
57
- Module `schnorrsig`: renamed `secp256k1_schnorrsig_sign` to `secp256k1_schnorrsig_sign32`.
46
58
47
59
#### ABI Compatibility
48
-
49
60
Since this is the first release, we do not compare application binary interfaces.
50
61
However, there are earlier unreleased versions of libsecp256k1 that are *not* ABI compatible with this version.
0 commit comments