Rscrypto

v0.4.1 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 4d Secrets & Credentials

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

aead asm blake2 blake3 checksums crc32c

+7 more

cryptography ed25519 no-std rust simd wasm x25519

Affected surfaces

auth crypto_tls

Summary

AI summary

Updates 📦 Other Changes, auth, and 📝 Documentation across a mixed release.

Type	Severity	Summary	CVE
Security	High	Hardens HMAC pads against AArch64 SVE division vulnerabilities. Hardens HMAC pads against AArch64 SVE division vulnerabilities. Source: llm_adapter@2026-06-13 Confidence: high	—
Feature
Feature	Medium	Adds ECDSA P-256/P-384 signing and constant‑time coverage. Adds ECDSA P-256/P-384 signing and constant‑time coverage. Source: llm_adapter@2026-06-13 Confidence: high	—
Feature	Low	Routes RSA blinding inverse through fixed scratch buffer. Routes RSA blinding inverse through fixed scratch buffer. Source: llm_adapter@2026-06-13 Confidence: high	—
Feature	Low	Adds ECDSA DudeCT diagnostics and target‑scoped constant‑time policy in CI. Adds ECDSA DudeCT diagnostics and target‑scoped constant‑time policy in CI. Source: llm_adapter@2026-06-13 Confidence: high	—
Performance	Low	Routes macOS aarch64 HKDF‑SHA256 through SHA2 compression for benchmark scaling. Routes macOS aarch64 HKDF‑SHA256 through SHA2 compression for benchmark scaling. Source: llm_adapter@2026-06-13 Confidence: high	—
Bugfix	Low	Disables native RISC‑V Rust cache restore in CI. Disables native RISC‑V Rust cache restore in CI. Source: llm_adapter@2026-06-13 Confidence: high	—

Full changelog

make public docs user-facing and add ECDSA migration guides benchmarks: refresh 2026-06-12 benchmark evidence (4a3f4e8)

auth: route RSA blinding inverse through fixed scratch (a33fc67)
auth: route macOS aarch64 HKDF-SHA256 through SHA2 compression hashes: batch Apple SHA3 Keccak absorb blocks bench: scale README perf chart axis from benchmark data benchmarks: refresh 2026-06-12 benchmark evidence (f9ab35f)
auth: harden HMAC pads against AArch64 SVE division ci: disable native RISC-V Rust cache restore (62be628)
auth: harden ECDSA P-256/P-384 CT backends ci: add ECDSA DudeCT diagnostics and target-scoped CT policy (82db892)
auth: add ECDSA P-256/P-384 signing and CT coverage (f24375d)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Rscrypto

Get notified when new releases ship.

About Rscrypto