⛰️ Features

• Add Signature::verify_key_third_party - (91f8a02)
• [breaking] Improve handling of large RSA keys - (466ec9d)
• [breaking] Decryption support for draft-wussler-openpgp-forwarding (#637) - (1e6ac17)

🐛 Bug Fixes

• Handle edge case in NormalizedReader LF mode - (caf31af)

🚜 Refactor

• In text signatures, don't normalize single \r characters (#650) - (410c844)

📚 Documentation

• Update status information in README (#645) - (f92caf5)
• Expand "users" section (#646) - (cfe71ab)
• Simplify README example code; minor tweaks (#647) - (035d2f6)
• Add example + references for encrypt_to_key on Builder - (dfe1f01)

⚙️ Miscellaneous Tasks

• Bump MSRV to 1.88 - (ad00ed9)
• Happier clippy - (a02cf93)
• [breaking] Drop unintended visibilities - (204c51f)

Cleanup

• [breaking] Drop some high-level semantics functions from the API - (0f58ea1)

⛰️ Features

• (deps) Update bitfields to 1.0 (#588) - (617f6e0)
• Helpers for improved string handling - (80977ca)
• Adds signature::Signer compatibility wrappers - (854387a)
• [breaking] Improve Signature api - (500c52e)
• Add EcdsaPublicParams::curve and is_supported (#586) - (7d20b3e)
• Improve and expand string APIs (#587) - (4687bcf)
• Decryption of v5 SKESK (GnuPG proprietary) - (a5a9f93)
• Decryption of packet type 20 AEAD format (GnuPG proprietary) - (ab0deb8)
• Implement several standard library extension traits for Fingerprint (#600) - (e0357f2)
• [breaking] Configurable signature type for user id/attribute third party certifications - (e9847b5)
• Allow custom signature subpacket configuration in message builder (#610) - (3542021)
• Allow user-provided session key in message builder (#611) - (f168ff3)
• Handle utf-8 literal data in message builder (#612) - (85439d2)
• Implement signing in DetachedSignature - (5298f1a)
• Support optional handling of some malformed artifacts (#636) - (e8798c1)

🐛 Bug Fixes

• Handle parsing of unknown PKESK packets (#568) - (09a6b1e)
• Handle PQC algorithms in PublicKeyTrait::is_*_key (#589) - (9a558f8)
• Make user id self certifications as CertPositive - (45a318a)
• Make user id self certifications as CertPositive - (9cec3bb)
• Always produce IssuerFingerprint subpacket for signatures (#609) - (d2275c1)
• Disable crc24 check while dearmoring, by default (#604) - (e7825d4)
• Message::Encrypted may contain zero ESKs (#615) - (f376798)
• Skip non-critical packets in message reader - (c60d2b6)
• If ops metadata doesn't match signature, don't validate (#616) - (a9038e3)
• Csf handling for mixed CR+LF and LF endings (#626) - (7c64f67)
• Limit length of DSA public parameters (#627) - (26734bb)
• Use correct key size when using s2k derive_key (#644) - (3bd7801)

🚜 Refactor

• Restructure Tag ranges to align with RFC 9580 - (b08c08a)
• Rename StandaloneSignature to DetachedSignature - (47d0581)
• Use bare signature packets in CleartextSignedMessage - (3f7b661)
• Minor code cleanup (#635) - (cb2c08a)

📚 Documentation

• Update FAQ entry about PQC (#566) - (aaea3c6)
• Fix top level example in README (#598) - (89ce8b7)
• Typo fix (#608) - (d945332)
• Add examples of key generation and encryption/decryption (#601) - (cccb248)
• Examples README (#631) - (850cf82)
• Notes on weak hash algorithms in SECURITY_STATUS.md - (c64708e)
• Some OpenPGP context, outline rPGP's scope - (90ea61d)
• Move information about features to README (#642) - (e38cafd)

⚡ Performance

• Avoid double buffering in aead decryptor (#576) - (c8e8035)
• [breaking] Improve encrypt and decrypt performance - (c359bea)

🧪 Testing

• (fuzz) Adjust to rPGP API (#621) - (cec6cc0)
• (fuzz) Some improvements to the fuzz tests (#633) - (2d571f8)
• Impl proptest for encrypted data packets (#606) - (5af9c10)

⚙️ Miscellaneous Tasks

• Run Windows tests with the specified target triple - (8dd4843)
• Happy clippy - (7bf62ef)
• Cleanup crate-type (#594) - (8250edb)

Adapter

• Expose the public key (#603) - (9b83ac8)

Cleanup

• Rename Tag::GnupgAead to GnupgAeadData (#624) - (ffa34ad)
• Rename GnupgAeadConfig to GnupgAeadDataConfig (#641) - (1b6fbc2)

⛰️ Features

• Update to draft-ietf-openpgp-pqc-10 (#565) - (01a9643)

🚜 Refactor

• Cleanup the interface of crypto::*::SecretKey - (45e1ea8)

⛰️ Features

• Impl Deref for pgp::crypto::ed25519::SecretKey (#562) - (e5d44a2)

🐛 Bug Fixes

• Skip padding packets analogously to marker packets (#563) - (d667b67)

Errors

• Lower enum size from 120 bytes to 80 (#561) - (490fc22)

⛰️ Features

• Implement PQC draft 08 - (a843ebf)
• Add support for V6 keygen (#539) - (33097df)
• Implement PublicKeyAlgorithm::is_pqc (#552) - (6e6fa24)
• Imprint function - (c17d370)
• Implement primary key binding signing; cleanup fn names - (976a03c)
• Update pqc tests and links to draft-ietf-openpgp-pqc-09 - (7dfdf40)

🐛 Bug Fixes

• (message) Remove done state in sym_encrypted reader - (9c78e99)
• Make KeyDetails::new public again (#557) - (cff8ea2)
• Check primary key binding signature for signing capable subkeys - (cd4ca99)
• Produce and handle embedded primary key binding (backsig) - (af4fb28)

🚜 Refactor

• Move subkey binding creation to packet - (4834bde)

📚 Documentation

• Add a bit of text (#532) - (e83f4e9)
• Add doctest example for listing User IDs in a key (#553) - (21c735b)

🧪 Testing

• Generate key with signing capable subkey, check embedded signature - (e4cc899)

Cleanup

• Simplify SignatureConfig creation (#559) - (9c1c3c0)

⛰️ Features

• Implement TryFrom for Signed{Public,Secret}Key - (f9e7694)
• [breaking] Implement feature gate for x448 - (e16fa47)
• Update deps - (8222112)

🐛 Bug Fixes

• Correctly deal with multi buffer reads in dearmoring - (7637f18)

🚜 Refactor

• Remove unused feature flags - (d800fb5)

📚 Documentation

• Update changelog - (2cdd934)
• Add information about ROS audit to security status - (651bb28)

🧪 Testing

• Add cargo fuzz testing harnesses - (de9dcf1)
• Move some slow tests to ignore, to speed up default tests - (7d16c1c)
• Split up key tests for better speed - (3bc007f)
• Split up tests more - (9abb7fa)

⚙️ Miscellaneous Tasks

• Clippy fixes - (116568b)
• Drop rust-toolchain (#449) - (3a8267a)
• Remove beta workflows - (51727ad)
• Remove duplicated check tasks - (f21bf0c)
• Remove even more duplicated checks - (1a3b8d6)
• Remove duplicated wasm checks - (fef441b)
• Use nextest to run tests - (3b4e22b)
• Add Cargo.lock - (e6a6864)

🐛 Bug Fixes

• Fix CVE-2024-53857 "Potential Resource Exhaustion when handling Untrusted Messages"

📚 Documentation

• Update changelog - (d9aef6a)

⛰️ Features

• Derive Hash for KeyId (#437) - (779b76d)

🐛 Bug Fixes

• Fix CVE-2024-53856: "Panics on Malformed Untrusted Input"
• Make strip_leading_zeros_vec() work correctly - (57e11c5)
• Csf normalization for signing - (8439a6d)
• Extend is_signing_key() and is_encryption_key() for RFC 9580 algorithms (#434) - (a1d9d5c)
• Enable the zeroize feature for argon2 and sha1-checked (#440) - (0c45660)

🚜 Refactor

• Optimize Display implementation for BlockType - (00b5027)
• Merge write_packet_len into write_packet_length - (33dcc83)

🧪 Testing

• Avoid writing to the crate source unnecessarily during tests (#431) - (3a1bb5c)

⚙️ Miscellaneous Tasks

• Remove unused and erratic end_of_line() fn (#421) - (69ab41c)
• Relax dependencies - (c6662a3)
• Adjust allowed licenses to match what we're using (#438) - (910d9af)
• Use prepend for changelog gen - (7a60d1a)