0.0.10, 11 October 2026

Dependency updates across the workspace, and refreshed GitHub Actions in CI and the release workflow.
kyberlib and kyberlib-wasm 0.0.10 published on crates.io, with SLSA build provenance for the kyberlib crate.

0.0.9, 3 August 2026

Security: replaced the atty dependency, pulled in by the constant-time benchmark harness, with a small compatibility crate built on the standard library's IsTerminal, removing RUSTSEC-2021-0145 from the dependency graph.
Pinned zeroize_derive to 1.4.2 so the locked dependency graph still builds on Rust 1.74.

The release that moved kyberlib to FIPS 203 ML-KEM. Keys and ciphertexts from 0.0.6 do not work with it; see the migration guide.

Implements FIPS 203 ML-KEM in place of CRYSTALS-Kyber Round 3.
Declares Rust 1.74 as the minimum version and moves to the 2021 edition.
Splits the project into a workspace, with WebAssembly bindings in the separate kyberlib-wasm crate.
Keypair is no longer Copy, and secret material is zeroised on drop unconditionally.
Removes the git dependency on commons and the unused pqc_core, rlg and tokio dependencies.
Every public item is documented, enforced with #![deny(missing_docs)].

CRYSTALS-Kyber Round 3 reference and AVX2 implementations, validated against the Round 3 known-answer tests, dual-licensed under MIT and Apache-2.0.

Every change is in CHANGELOG.md, and the releases are on GitHub and crates.io.