From 0299ec9593c704f27ca31405c7c0097dcaf79fe0 Mon Sep 17 00:00:00 2001 From: Tony Arcieri Date: Thu, 22 Oct 2026 18:50:15 -0600 Subject: [PATCH] ctutils v0.4.4 --- Cargo.lock | 2 +- cmov/Cargo.toml | 1 + ctutils/CHANGELOG.md | 8 ++++++++ ctutils/Cargo.toml | 3 ++- 4 files changed, 12 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 3258b9e2..311adfb4 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -84,7 +84,7 @@ dependencies = [ [[package]] name = "ctutils" -version = "0.4.3" +version = "0.4.4" dependencies = [ "cmov", "proptest", diff --git a/cmov/Cargo.toml b/cmov/Cargo.toml index 57ebb2aa..a530fac7 100644 --- a/cmov/Cargo.toml +++ b/cmov/Cargo.toml @@ -9,6 +9,7 @@ repository = "https://github.com/RustCrypto/utils" license = "Apache-2.0 OR MIT" keywords = ["constant-time", "crypto", "intrinsics"] categories = ["cryptography", "hardware-support", "no-std"] +exclude = ["checkct"] description = """ Conditional move CPU intrinsics which are guaranteed on major platforms (ARM32/ARM64, x86/x86_64, RISC-V) to execute in constant-time and not be rewritten as branches by the compiler. Provides diff --git a/ctutils/CHANGELOG.md b/ctutils/CHANGELOG.md index 9afda62e..2867e143 100644 --- a/ctutils/CHANGELOG.md +++ b/ctutils/CHANGELOG.md @@ -4,6 +4,14 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## 0.4.4 (2026-10-23) +### Security +- Fix and verify `Choice::to_*_mask` constant-time codegen ([#1567]) +- Fix constant-time `u128` comparisons on 32-bit targets ([#1568]) + +[#1567]: https://github.com/RustCrypto/utils/pull/1567 +[#1568]: https://github.com/RustCrypto/utils/pull/1568 + ## 0.4.3 (2026-10-06) ### Changed - Make `Choice::{to_bool, to_u8}` into `const fn` ([#1547]) diff --git a/ctutils/Cargo.toml b/ctutils/Cargo.toml index 9c1d7595..5b2f5051 100644 --- a/ctutils/Cargo.toml +++ b/ctutils/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "ctutils" -version = "0.4.3" +version = "0.4.4" authors = ["RustCrypto Developers"] edition = "2024" rust-version = "1.87" @@ -9,6 +9,7 @@ repository = "https://github.com/RustCrypto/utils" license = "Apache-2.0 OR MIT" keywords = ["constant-time", "crypto", "intrinsics"] categories = ["cryptography", "no-std"] +exclude = ["checkct"] description = """ Constant-time utility library with selection and equality testing support targeting cryptographic applications. Supports `const fn` where appropriate. Built on the `cmov` crate which provides