Version 1.3.2

1.3.2 (2025-01-20)

Changed

• Upgraded aws-lc-rs to 1.12.1

Misc

• x86 (32-bits) wheels are now automatically published to PyPI for both Linux (i686) and Windows (win32). (#45)

Version 1.3.1

1.3.1 (2025-01-15)

Changed

• Updated pyo3 from 0.23.3 to 0.23.4

Version 1.3.0

1.3.0 (2025-01-01)

Changed

• Post-Quantum key-exchange Kyber 768 Draft upgraded to standard Module-Lattice 768.
• Version negotiation no longer logged as INFO. Every logs generated will always be DEBUG level.
• Converted our test suite to run on Pytest instead of unittest.
• Migrated pyo3 from 0.20.3 to 0.23.3

Fixed

• Clippy warnings in our Rust code.
• Rust code may panic due to lack of proper result unpacking on the cryptographic calls. Now any error will
  raise exception CryptoError instead.
• Negotiating post-quantum key exchange (server side).

Added

• noxfile.
• miscellaneous serialize/deserialize for Certificate, and OCSPResponse.
• Initial support for Python 3.13 freethreaded experimental build.

Version 1.2.1

1.2.1 (2024-10-15)

Fixed

• Large HTTP headers cannot be encoded to be sent.

Changed

• Upgrade aws-lc-rs to v1.10.0
• Update rustls to v0.23.14

Version 1.2.0

1.2.0 (2024-09-28)

Added

• Support for informational response 1XX in HTTP/3. The event InformationalHeadersReceived has been added to reflect that.

Changed

• Update rustls v0.23.12 to v0.23.13 along with dependents.

Version 1.1.0

1.1.0 (2024-09-20)

Added

• Support for Post-Quantum KX Kyber768 (NIST Round 3) with X25519.
• Backport "QUIC Version 2".
  "Rework packet encoding to support different protocol versions" aiortc@bd3497c
  "Add encryption for QUIC v2" aiortc@abf5189
  "Refactor retry / version negotiation handling" aiortc@70dd040
  "Add support for version_information transport parameter" aiortc@a59d9ad
  "Check Chosen Version matches the version in use by the connection" aiortc@a59d9ad

Changed

• Insert GREASE in KX, TLS Version and Ciphers.
• Backport "Only buffer up to 512 KiB of pending CRYPTO frames" aiortc@174a2eb
• Backport "Improved path challenge handling" aiortc@b507364
• Backport "Limit the number of pending connection IDs marked for retirement." aiortc@4f73f18
• Backport "During address validation, count the entire received datagram" aiortc@afe5525
• Update aws-lc-rs v1.8.1 to v1.9.0
• Default supported signature algorithms to: ECDSA_SECP256R1_SHA256, RSA_PSS_RSAE_SHA256, RSA_PKCS1_SHA256, ECDSA_SECP384R1_SHA384, RSA_PSS_RSAE_SHA384, RSA_PKCS1_SHA384, RSA_PSS_RSAE_SHA512, RSA_PKCS1_SHA512, ED25519.

Fixed

• Certificate fingerprint matching.
• Backport upstream urllib3/urllib3#3434: util/ssl: make code (certificate fingerprint matching) resilient to missing hash functions.
  In certain environments such as in a FIPS enabled system, certain algorithms such as md5 may be unavailable.

Misc

• Backport "Use is for type comparisons" aiortc@5c55e0c
• Postpone annotations parsing with from __future__ import annotations everywhere in order to simplify type annotations.

Version 1.0.9

1.0.9 (2024-08-17)

Changed

• Bump aws-lc-rs from version 1.7.3 to 1.8.1
• Bump rustls from 0.23.8 to 0.23.12

Fixed

• Incomplete Cargo manifest that can lead to a build error on specific platforms #37

Added

• Explicit support for Python 3.13

Version 1.0.8

1.0.8 (2024-06-13)

Added

• Support for Windows ARM64 pre-built wheel in CD pipeline.

Changed

• Lighter build requirements by refactoring our Rust / Cargo dependencies.

Version 1.0.7

1.0.7 (2024-05-08)

Fixed

• Decryption error after receiving long (quic) header that required key derivation.

Version 1.0.6

1.0.6 (2024-05-06)

Changed

• Further improved the reliability of the qpack encoder/decoder.