confium 0.2.0 → 0.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6d39e1a2e73e52614bf8b6d41c3f0f798b794c08d575cd67ddbfc7f1935a47ef
-  data.tar.gz: 21fdba648e4d72df7a3ceda358481778bbcfd741dc31bba35fe31cc8147c5c16
+  metadata.gz: 975eebface92795a6a5493274a696fae3bd9bc451fdd8011be74af8ab5bf7b9b
+  data.tar.gz: a0b92a831f5391175e789fbc02ad5e674d097b20d92e1fd7059cc91890a9fbc8
 SHA512:
-  metadata.gz: 77f5d64871d7870c749f1ead130665433ee6a60bfd5382238f10281e9c473c547a7571e227e27ccbae116530eb812755ce9304bd42a83f5b3d4e9e4b2618ba45
-  data.tar.gz: 77010b37fd365b3bb6189d49c8561763640986794e755d92df1a621ad0b7652fda226cac5f7a9fd570dbdc1f56d8fddf144d52f960a271da0cfe27f211903a69
+  metadata.gz: 244d4c7edcafe5cc22234cc3ad58676f765e8b840c22b1427817d3ed6e33f22cb5f57415cc2fdc7dccf7faa2bad217ec50ede0ea6a4bfd859ae3ea61ed6e5c25
+  data.tar.gz: 8a71c86a8b467209b49e1526d0be8a9c35d528e339851db5703e7a0e64993c70d6d68ea8198c8c22649daa1e3688fabaad8d9d2eb8a32dfb2502ca225e4fb38e

data/CHANGELOG.md

@@ -0,0 +1,152 @@
+# Changelog
+
+## [0.3.1] — 2026-08-21
+
+Native platform gems (linux x86_64/aarch64, macOS x86_64/arm64,
+Windows x64-mingw-ucrt) ship alongside the source gem — `gem install`
+no longer needs a Rust toolchain on those platforms.
+
+### Added
+
+- ERS archival binding (`Confium::EvidenceRecord`, RFC 4998) and the
+  `CONFIUM_LIB` explicit dylib path override.
+- Audit log bindings with sign-triggered autofire and an Enumerable
+  `MemorySink`.
+- Typed error hierarchy across all subsystems with native-error
+  coercion.
+- CMP20/GG18 in-process threshold ECDSA (`Confium::TC::Cmp20`,
+  `Confium::TC::Gg18`) and TC share files with the documented
+  envelope shape.
+- Twenty worked examples plus the examples and CNML-profile guides.
+
+### Fixed
+
+- The PKI CSR spec no longer shells out to the openssl CLI (it
+  generated its fixture with a key file that was never created).
+- CI: first `.rubocop.yml`, Ruby-3.1-compatible lockfile, and a test
+  matrix matching the shipped platforms.
+
+## [0.3.0] — 2026-08-04
+
+Synced with Confium Rust workspace v0.3.0 (product restructuring).
+
+### Changed
+
+- **Rust edition bumped to 2024** (was 2021). Requires Rust 1.85+.
+- **All confium dependencies now from crates.io** (removed path deps for
+  `confium-tc-cmp20` and `confium-tc-gg18`). `gem install confium` now works
+  without a local workspace checkout.
+- **Version synced to 0.3.0** (was 0.1.0) to match the workspace version.
+
+### Added
+
+- Dependencies on newly published shared crypto crates:
+  `confium-tc-core`, `confium-crypto-vss`, `confium-crypto-zk`,
+  `confium-privacy`, `confium-observability`.
+
+### Migration from 0.1.0
+
+- Update `Gemfile`: `gem "confium", "~> 0.3"`
+- Ensure Rust 1.85+ is installed (`rustup update stable`)
+- Run `bundle exec rake compile` to rebuild the native extension
+
+## [0.1.0] — 2026-07-27
+
+First public release of the Ruby bindings. Replaces the previous FFI-based
+prototype with a Rust native extension built via `rb_sys` + `magnus`
+(parsanol-ruby pattern). The extension is compiled at `gem install` time
+and exposes the high-value Confium subsystems directly to Ruby.
+
+### Added
+
+- **Native extension scaffold** (`ext/confium_native/`). cdylib built via
+  `rb_sys` and `magnus`; required by `lib/confium.rb` at load time.
+  `Confium::Native.version`, `Confium::Native.loaded?`, and
+  `Confium.core_version` provide a smoke-test surface.
+
+- **`Confium::Transparency::MerkleTree`** — append-only RFC 6962 Merkle
+  tree. `#append(artifact_hash)`, `#root`, `#length`, `#empty?`,
+  `#inclusion_proof(seq)`. `Confium::Transparency::InclusionProof` with
+  `#sequence`, `#steps`, `#verify(root)`.
+
+- **`Confium::Composite`** — PQ-migration composite signatures.
+  `.generate_ed25519_keypair`, `.sign_ed25519(private_key, message)`.
+  `Confium::Composite::Signature.new(components)` + `#verify(message)` +
+  `#component_count` + `#algorithms`.
+  `Confium::Composite::VerificationResult#all_verified?` + `#per_component`.
+
+- **`Confium::Attributes`** — attribute-based threshold-signing policy DSL.
+  `.parse(expr)` + `Confium::Attributes::Predicate#satisfied_by?(signers)`.
+  `Confium::Attributes::Signer.new` + `#add(key, value)` + `#has?(key)` +
+  `#values(key)`. DSL covers `min_count`, `min_distinct`, `any`, `all`,
+  `none`, `and`, `or`, `not`.
+
+- **`Confium::PKI::Certificate`** — X.509 v3 certificate parse + inspect.
+  `.from_der(binary)` / `.from_pem(string)`. `#to_der`, `#to_pem`,
+  `#fingerprint_sha256`, `#serial_hex`, `#not_before`, `#not_after`,
+  `#valid_at?(iso8601)`, `#public_key_bytes`.
+
+- **`Confium::PKI::CSR`** — PKCS#10 certificate signing request.
+  `.from_der` / `.from_pem` / `#to_der` / `#to_pem`.
+
+- **`Confium::PKI::CMS::SignedData`** — JSON-backed RFC 5652 model.
+  `.from_json` / `#to_json` / `#signer_count` / `#content_type` /
+  `#content` / `#certificate_count` / `#certificate_at(index)`.
+
+- **`Confium::PKI::CMS::Content`** — value object for optional content.
+  `#bytes`, `#length`.
+
+- **`Confium::PKI::XMLDSig`** — Canonical XML (RFC 3076) and Exclusive
+  C14N. `.canonicalize(xml)`, `.canonicalize_exclusive(xml)`.
+
+- **`Confium::Identity::Actor`** — actor identity from JSON.
+  `.from_json` / `#to_json` / `#actor_id` / `#actor_type` / `#quorum_id` /
+  `#registered_at` / `#expires_at` / `#certificate_count`.
+  `Confium::Identity.actor_types` returns the six canonical role strings
+  (`manufacturer`, `testing_lab`, `issuing_authority_officer`,
+  `biml_director`, `quorum_coordinator`, `verifier`).
+
+- **`Confium::Config::Manifest`** — deployment manifest parse + validate.
+  `.from_toml` / `#deployment_name` / `#operator` / `#manifest_version` /
+  `#tier_count` / `#tier_name_at` / `#quorum_count` / `#validate` /
+  `#valid?`.
+
+- **`Confium::TC::FrostP256`** — real P-256 Shamir + ECDSA.
+  `.generate_keypair`, `.split_secret(secret, t, n)`,
+  `.recover_secret([{x:, y:}, ...])`, `.sign(private_key, message)`.
+  `Confium::TC::FrostP256::Share#x` / `#y_bytes`.
+
+- **`Confium::TC::ElGamalP256`** — threshold ElGamal-P256 KEM.
+  `.encapsulate(public_key)` → `{ ciphertext: { c1:, c2: }, shared_secret: }`,
+  `.partial_decrypt(party_index, share_bytes, ciphertext)`,
+  `.aggregate_partials(partials, threshold, ciphertext)`.
+
+### Changed
+
+- `confium.gemspec` switched from `ffi` (pure-Ruby FFI to C ABI) to
+  `rb_sys` (Rust native extension). Required Ruby version bumped to 3.1.
+- `lib/confium.rb` now requires `confium_native/confium_native` instead
+  of declaring autoloads for hand-written FFI wrappers.
+- All binary inputs and outputs use `Encoding::ASCII_8BIT` Strings
+  (binary), the idiomatic Ruby shape for cryptographic data.
+
+### Removed
+
+- The `ffi`-based modules (`Confium::FFI`, `Confium::CFM`, `Confium::Lib`,
+  `Confium::Crypto`, `Confium::Digest`) — replaced by the magnus-based
+  classes above. Old spec files deleted.
+
+### Known limitations
+
+- v0.1.0 ships as a **source gem** — `gem install` requires Rust + cargo
+  on the host. Cross-platform binary gems for Linux/Windows via
+  `rake-compiler-dock` will follow in v0.2.0.
+- The threshold-cryptography surface covers Shamir + Lagrange + ECDSA +
+  threshold ElGamal. Full multi-party FROST/CMP20/GG18 session
+  orchestration (the async coordinator) is not yet exposed — lands in
+  v0.2.0.
+- The composite-signature surface verifies Ed25519 components only.
+  ML-DSA-65 / SLH-DSA verifiers will land when the underlying Rust
+  crates ship.
+- RBS type signatures in `sig/` are not yet provided — planned for v0.2.0
+  once the API stabilizes.