Skip to content

Releases: forgesworn/ring-sig

v3.0.1

12 Apr 20:27

Choose a tag to compare

Bug Fixes

  • bump vite to 7.3.2 and picomatch to 4.0.4 (security) (deps)

v3.0.0

30 Mar 18:25

Choose a tag to compare

3.0.0 (2026-03-30)

  • fix!: reject non-canonical scalars >= curve order N in hexToScalar (8eddf4f)

BREAKING CHANGES

  • hexToScalar now throws for values >= N instead of
    silently reducing. Prevents non-canonical signature encodings.

v2.0.0

25 Mar 11:47

Choose a tag to compare

2.0.0 (2026-03-25)

  • feat!: upgrade to @noble/curves v2 and @noble/hashes v2 (8d9346f)

BREAKING CHANGES

  • @noble/curves upgraded from v1 to v2. Import paths now require .js suffix if consuming from source. Published dist/ is unaffected.

v1.0.2

20 Mar 09:32

Choose a tag to compare

1.0.2 (2026-03-20)

Bug Fixes

  • correct copyright to ForgeSworn (74d4aa3)

v1.0.1

18 Mar 18:50

Choose a tag to compare

1.0.1 (2026-03-18)

Bug Fixes

  • correct broken URLs in SECURITY.md and CONTRIBUTING.md (803beaa)
  • harden input validation — case-normalise ring, type guards, key pair check (c2ce9ce)
  • pin GitHub Actions to commit SHAs for supply chain integrity (3c3688a)
  • regenerate lockfile to match renamed package (0b72e48)
  • resolve merge conflict — correct package name with released version (b3c1a4d)

v1.0.0

18 Mar 14:24

Choose a tag to compare

1.0.0 (2026-03-18)

Bug Fixes

  • security audit — domain handling, input validation, length-prefixed hashing (b5815ce)

Features

  • add crypto utilities and error classes (910ec23)
  • add LSAG linkable ring signatures with tests (170ac17)
  • add SAG ring signatures with tests (bf25cda)
  • expose public API (8a73a6b)