Version 1.0.21
Breaking Changes
crypto_core_ed25519_is_valid_point()now properly rejects small-order points outside the main subgroup — verify your Ed25519 validation logic if you rely on the old behavior
Security Fixes
- Fixed
crypto_core_ed25519_is_valid_point()to reject invalid points - Added memory fences after AEAD MAC verification to prevent speculative plaintext access...