From ffefd16b980fd5ac43c60578ac13c32287a4f2c4 Mon Sep 17 00:00:00 2001 From: UneBaguette <28904802+UneBaguette@users.noreply.github.com> Date: Thu, 2 Jul 2026 14:47:47 +0200 Subject: [PATCH] chore: bump to v1.0.0-rc.0, implement zeroize for deps and license fix --- CHANGELOG.md | 6 ++++++ Cargo.toml | 12 ++++++------ README.md | 2 +- src/ciphersuite.rs | 8 ++------ src/common.rs | 8 ++------ src/error.rs | 8 ++------ src/group/elliptic_curve.rs | 8 ++------ src/group/mod.rs | 8 ++------ src/group/ristretto.rs | 8 ++------ src/group/tests.rs | 8 ++------ src/lib.rs | 8 ++------ src/oprf.rs | 8 ++------ src/poprf.rs | 8 ++------ src/serialization.rs | 8 ++------ src/tests/cfrg_vectors.rs | 8 ++------ src/tests/mock_rng.rs | 8 ++------ src/tests/mod.rs | 8 ++------ src/tests/parser.rs | 8 ++------ src/tests/test_cfrg_vectors.rs | 8 ++------ src/voprf.rs | 8 ++------ 20 files changed, 47 insertions(+), 109 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 4e888c0..e5b74ac 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,11 @@ # Changelog +## 1.0.0-rc.0 (July 2, 2026) + +* Added missing license in Cargo manifest +* Implement `zeroize` feature for `digest`, `hybrid-array` and `sha2` +* Replaced license appendix in files while keeping original copyright + ## 1.0.0-pre.1 (July 2, 2026) * Simplified ciphersuite trait diff --git a/Cargo.toml b/Cargo.toml index b5974e5..839dcfc 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -4,12 +4,12 @@ categories = ["no-std", "algorithms", "cryptography"] description = "An implementation of a verifiable oblivious pseudorandom function (VOPRF)" edition = "2024" keywords = ["oprf", "voprf", "cryptography", "oblivious-prf"] -license = "MIT" +license = "MIT OR Apache-2.0" name = "voprf-vx" readme = "README.md" repository = "https://github.com/vexahub/voprf-vx/" rust-version = "1.87" -version = "1.0.0-pre.1" +version = "1.0.0-rc.0" [features] alloc = [] @@ -24,18 +24,18 @@ std = ["alloc"] [dependencies] curve25519-dalek = { version = "5.0.0-rc", default-features = false, features = ["rand_core", "zeroize"], optional = true } derive-where = { version = "1", features = ["zeroize-on-drop"] } -digest = "0.11" +digest = { version = "0.11", features = ["zeroize"] } displaydoc = { version = "0.2", default-features = false } elliptic-curve = { version = "0.14", features = [ "sec1", ] } hash2curve = "0.14" -hybrid-array = "0.4" -rand_core = { version = "0.10", default-features = false, features = [] } +hybrid-array = { version = "0.4", features = ["zeroize"] } +rand_core = { version = "0.10", default-features = false } serde = { version = "1", default-features = false, features = [ "derive", ], optional = true } -sha2 = { version = "0.11", default-features = false, optional = true } +sha2 = { version = "0.11", default-features = false, features = ["zeroize"], optional = true } p256 = { version = "0.14.0-rc", default-features = false, features = ["hash2curve", "oprf"], optional = true } subtle = { version = "2.6", default-features = false } zeroize = { version = "1.5", default-features = false } diff --git a/README.md b/README.md index bb5d1dd..f15eb6c 100644 --- a/README.md +++ b/README.md @@ -16,7 +16,7 @@ Installation Add the following line to the dependencies of your `Cargo.toml`: ``` -voprf = { package = "voprf-vx", version = "1.0.0-pre.0" } +voprf = { package = "voprf-vx", version = "1.0.0-rc.0" } ``` ### Minimum Supported Rust Version diff --git a/src/ciphersuite.rs b/src/ciphersuite.rs index 969fc7b..16fb392 100644 --- a/src/ciphersuite.rs +++ b/src/ciphersuite.rs @@ -1,10 +1,6 @@ +// SPDX-License-Identifier: MIT OR Apache-2.0 +// Copyright (c) VexaHub and contributors. // Copyright (c) Meta Platforms, Inc. and affiliates. -// -// This source code is dual-licensed under either the MIT license found in the -// LICENSE-MIT file in the root directory of this source tree or the Apache -// License, Version 2.0 found in the LICENSE-APACHE file in the root directory -// of this source tree. You may select, at your option, one of the above-listed -// licenses. //! Defines the CipherSuite trait to specify the underlying primitives for VOPRF diff --git a/src/common.rs b/src/common.rs index ba0fc9f..7eacd71 100644 --- a/src/common.rs +++ b/src/common.rs @@ -1,10 +1,6 @@ +// SPDX-License-Identifier: MIT OR Apache-2.0 +// Copyright (c) VexaHub and contributors. // Copyright (c) Meta Platforms, Inc. and affiliates. -// -// This source code is dual-licensed under either the MIT license found in the -// LICENSE-MIT file in the root directory of this source tree or the Apache -// License, Version 2.0 found in the LICENSE-APACHE file in the root directory -// of this source tree. You may select, at your option, one of the above-listed -// licenses. //! Common functionality between multiple OPRF modes. diff --git a/src/error.rs b/src/error.rs index 9f5e6a3..6e0238d 100644 --- a/src/error.rs +++ b/src/error.rs @@ -1,10 +1,6 @@ +// SPDX-License-Identifier: MIT OR Apache-2.0 +// Copyright (c) VexaHub and contributors. // Copyright (c) Meta Platforms, Inc. and affiliates. -// -// This source code is dual-licensed under either the MIT license found in the -// LICENSE-MIT file in the root directory of this source tree or the Apache -// License, Version 2.0 found in the LICENSE-APACHE file in the root directory -// of this source tree. You may select, at your option, one of the above-listed -// licenses. //! Errors which are produced during an execution of the protocol diff --git a/src/group/elliptic_curve.rs b/src/group/elliptic_curve.rs index 4344f9d..3de4b80 100644 --- a/src/group/elliptic_curve.rs +++ b/src/group/elliptic_curve.rs @@ -1,10 +1,6 @@ +// SPDX-License-Identifier: MIT OR Apache-2.0 +// Copyright (c) VexaHub and contributors. // Copyright (c) Meta Platforms, Inc. and affiliates. -// -// This source code is dual-licensed under either the MIT license found in the -// LICENSE-MIT file in the root directory of this source tree or the Apache -// License, Version 2.0 found in the LICENSE-APACHE file in the root directory -// of this source tree. You may select, at your option, one of the above-listed -// licenses. use core::ops::{Add, Mul}; use digest::block_api::BlockSizeUser; diff --git a/src/group/mod.rs b/src/group/mod.rs index 75bb9bd..625f338 100644 --- a/src/group/mod.rs +++ b/src/group/mod.rs @@ -1,10 +1,6 @@ +// SPDX-License-Identifier: MIT OR Apache-2.0 +// Copyright (c) VexaHub and contributors. // Copyright (c) Meta Platforms, Inc. and affiliates. -// -// This source code is dual-licensed under either the MIT license found in the -// LICENSE-MIT file in the root directory of this source tree or the Apache -// License, Version 2.0 found in the LICENSE-APACHE file in the root directory -// of this source tree. You may select, at your option, one of the above-listed -// licenses. //! Defines the Group trait to specify the underlying prime order group diff --git a/src/group/ristretto.rs b/src/group/ristretto.rs index 714801c..5c0b97b 100644 --- a/src/group/ristretto.rs +++ b/src/group/ristretto.rs @@ -1,10 +1,6 @@ +// SPDX-License-Identifier: MIT OR Apache-2.0 +// Copyright (c) VexaHub and contributors. // Copyright (c) Meta Platforms, Inc. and affiliates. -// -// This source code is dual-licensed under either the MIT license found in the -// LICENSE-MIT file in the root directory of this source tree or the Apache -// License, Version 2.0 found in the LICENSE-APACHE file in the root directory -// of this source tree. You may select, at your option, one of the above-listed -// licenses. use core::num::NonZeroU16; diff --git a/src/group/tests.rs b/src/group/tests.rs index 58737ce..4408279 100644 --- a/src/group/tests.rs +++ b/src/group/tests.rs @@ -1,10 +1,6 @@ +// SPDX-License-Identifier: MIT OR Apache-2.0 +// Copyright (c) VexaHub and contributors. // Copyright (c) Meta Platforms, Inc. and affiliates. -// -// This source code is dual-licensed under either the MIT license found in the -// LICENSE-MIT file in the root directory of this source tree or the Apache -// License, Version 2.0 found in the LICENSE-APACHE file in the root directory -// of this source tree. You may select, at your option, one of the above-listed -// licenses. //! Includes a series of tests for the group implementations diff --git a/src/lib.rs b/src/lib.rs index a1aef14..165c00a 100644 --- a/src/lib.rs +++ b/src/lib.rs @@ -1,10 +1,6 @@ +// SPDX-License-Identifier: MIT OR Apache-2.0 +// Copyright (c) VexaHub and contributors. // Copyright (c) Meta Platforms, Inc. and affiliates. -// -// This source code is dual-licensed under either the MIT license found in the -// LICENSE-MIT file in the root directory of this source tree or the Apache -// License, Version 2.0 found in the LICENSE-APACHE file in the root directory -// of this source tree. You may select, at your option, one of the above-listed -// licenses. //! An implementation of a verifiable oblivious pseudorandom function (VOPRF) //! diff --git a/src/oprf.rs b/src/oprf.rs index 488c93b..b346835 100644 --- a/src/oprf.rs +++ b/src/oprf.rs @@ -1,10 +1,6 @@ +// SPDX-License-Identifier: MIT OR Apache-2.0 +// Copyright (c) VexaHub and contributors. // Copyright (c) Meta Platforms, Inc. and affiliates. -// -// This source code is dual-licensed under either the MIT license found in the -// LICENSE-MIT file in the root directory of this source tree or the Apache -// License, Version 2.0 found in the LICENSE-APACHE file in the root directory -// of this source tree. You may select, at your option, one of the above-listed -// licenses. //! Contains the main OPRF API diff --git a/src/poprf.rs b/src/poprf.rs index 7f12169..20921c5 100644 --- a/src/poprf.rs +++ b/src/poprf.rs @@ -1,10 +1,6 @@ +// SPDX-License-Identifier: MIT OR Apache-2.0 +// Copyright (c) VexaHub and contributors. // Copyright (c) Meta Platforms, Inc. and affiliates. -// -// This source code is dual-licensed under either the MIT license found in the -// LICENSE-MIT file in the root directory of this source tree or the Apache -// License, Version 2.0 found in the LICENSE-APACHE file in the root directory -// of this source tree. You may select, at your option, one of the above-listed -// licenses. //! Contains the main POPRF API diff --git a/src/serialization.rs b/src/serialization.rs index ecaa8d6..0262be1 100644 --- a/src/serialization.rs +++ b/src/serialization.rs @@ -1,10 +1,6 @@ +// SPDX-License-Identifier: MIT OR Apache-2.0 +// Copyright (c) VexaHub and contributors. // Copyright (c) Meta Platforms, Inc. and affiliates. -// -// This source code is dual-licensed under either the MIT license found in the -// LICENSE-MIT file in the root directory of this source tree or the Apache -// License, Version 2.0 found in the LICENSE-APACHE file in the root directory -// of this source tree. You may select, at your option, one of the above-listed -// licenses. //! Handles the serialization of each of the components used in the VOPRF //! protocol diff --git a/src/tests/cfrg_vectors.rs b/src/tests/cfrg_vectors.rs index f535c9e..ebd620e 100644 --- a/src/tests/cfrg_vectors.rs +++ b/src/tests/cfrg_vectors.rs @@ -1,10 +1,6 @@ +// SPDX-License-Identifier: MIT OR Apache-2.0 +// Copyright (c) VexaHub and contributors. // Copyright (c) Meta Platforms, Inc. and affiliates. -// -// This source code is dual-licensed under either the MIT license found in the -// LICENSE-MIT file in the root directory of this source tree or the Apache -// License, Version 2.0 found in the LICENSE-APACHE file in the root directory -// of this source tree. You may select, at your option, one of the above-listed -// licenses. //! The VOPRF test vectors taken from: //! https://www.rfc-editor.org/rfc/rfc9497#appendix-A diff --git a/src/tests/mock_rng.rs b/src/tests/mock_rng.rs index af4d695..2cc946b 100644 --- a/src/tests/mock_rng.rs +++ b/src/tests/mock_rng.rs @@ -1,10 +1,6 @@ +// SPDX-License-Identifier: MIT OR Apache-2.0 +// Copyright (c) VexaHub and contributors. // Copyright (c) Meta Platforms, Inc. and affiliates. -// -// This source code is dual-licensed under either the MIT license found in the -// LICENSE-MIT file in the root directory of this source tree or the Apache -// License, Version 2.0 found in the LICENSE-APACHE file in the root directory -// of this source tree. You may select, at your option, one of the above-listed -// licenses. use alloc::vec::Vec; use core::cmp::min; diff --git a/src/tests/mod.rs b/src/tests/mod.rs index 71e7089..7bfdd3b 100644 --- a/src/tests/mod.rs +++ b/src/tests/mod.rs @@ -1,10 +1,6 @@ +// SPDX-License-Identifier: MIT OR Apache-2.0 +// Copyright (c) VexaHub and contributors. // Copyright (c) Meta Platforms, Inc. and affiliates. -// -// This source code is dual-licensed under either the MIT license found in the -// LICENSE-MIT file in the root directory of this source tree or the Apache -// License, Version 2.0 found in the LICENSE-APACHE file in the root directory -// of this source tree. You may select, at your option, one of the above-listed -// licenses. mod cfrg_vectors; mod mock_rng; diff --git a/src/tests/parser.rs b/src/tests/parser.rs index 5d41829..c0e803f 100644 --- a/src/tests/parser.rs +++ b/src/tests/parser.rs @@ -1,10 +1,6 @@ +// SPDX-License-Identifier: MIT OR Apache-2.0 +// Copyright (c) VexaHub and contributors. // Copyright (c) Meta Platforms, Inc. and affiliates. -// -// This source code is dual-licensed under either the MIT license found in the -// LICENSE-MIT file in the root directory of this source tree or the Apache -// License, Version 2.0 found in the LICENSE-APACHE file in the root directory -// of this source tree. You may select, at your option, one of the above-listed -// licenses. use alloc::string::{String, ToString}; use alloc::vec::Vec; diff --git a/src/tests/test_cfrg_vectors.rs b/src/tests/test_cfrg_vectors.rs index 99c96aa..6bd4558 100644 --- a/src/tests/test_cfrg_vectors.rs +++ b/src/tests/test_cfrg_vectors.rs @@ -1,10 +1,6 @@ +// SPDX-License-Identifier: MIT OR Apache-2.0 +// Copyright (c) VexaHub and contributors. // Copyright (c) Meta Platforms, Inc. and affiliates. -// -// This source code is dual-licensed under either the MIT license found in the -// LICENSE-MIT file in the root directory of this source tree or the Apache -// License, Version 2.0 found in the LICENSE-APACHE file in the root directory -// of this source tree. You may select, at your option, one of the above-listed -// licenses. use alloc::string::String; use alloc::vec; diff --git a/src/voprf.rs b/src/voprf.rs index ebf43fd..49c3222 100644 --- a/src/voprf.rs +++ b/src/voprf.rs @@ -1,10 +1,6 @@ +// SPDX-License-Identifier: MIT OR Apache-2.0 +// Copyright (c) VexaHub and contributors. // Copyright (c) Meta Platforms, Inc. and affiliates. -// -// This source code is dual-licensed under either the MIT license found in the -// LICENSE-MIT file in the root directory of this source tree or the Apache -// License, Version 2.0 found in the LICENSE-APACHE file in the root directory -// of this source tree. You may select, at your option, one of the above-listed -// licenses. //! Contains the main VOPRF API -- 2.39.5