confium 0.3.4-aarch64-linux → 0.5.0-aarch64-linux
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +77 -0
- data/Cargo.lock +12 -432
- data/README.adoc +6 -10
- data/lib/confium/audit/otlp_sink.rb +103 -0
- data/lib/confium/audit.rb +2 -0
- data/lib/confium/composite.rb +39 -1
- data/lib/confium/openpgp.rb +138 -16
- data/lib/confium/tc/coordinator.rb +23 -10
- data/lib/confium/tc/network_coordinator.rb +208 -0
- data/lib/confium/tc.rb +8 -1
- data/lib/confium/version.rb +1 -1
- data/lib/confium.rb +29 -8
- data/lib/confium_native/3.1/confium_native.so +0 -0
- data/lib/confium_native/3.2/confium_native.so +0 -0
- data/lib/confium_native/3.3/confium_native.so +0 -0
- data/lib/confium_native/3.4/confium_native.so +0 -0
- data/lib/confium_native/4.0/confium_native.so +0 -0
- metadata +6 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: ad579f91609ef6278f316116a4d3cb759630a3213ec76e0d551734b39095d604
|
|
4
|
+
data.tar.gz: 44eaa33389fa635608f8fdc37e734a072000452ce74cc4ea9ad95d48473ca55e
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: b5f97a071f1d11b5e1c6ef37d6354bf3693d670333bf25ae1f8b975e8d3d838e3fd1cba7289b91a2c88a804bcc6927aae7c99cc607aedeccf3564c2841f8fdc8
|
|
7
|
+
data.tar.gz: 353cb5d0ba57ae96dc964302c40bf63df1a7911577f9b36f2866cb799e6ed76d56c137a783effb66f2f600bef5a40dc2e8175b683d1e204e2bd853cd17f4f754
|
data/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,82 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## [0.5.0] — 2026-08-24
|
|
4
|
+
|
|
5
|
+
### Added
|
|
6
|
+
|
|
7
|
+
- **Ruby 4.0 support** — Windows ships an exact `4.0` ABI window;
|
|
8
|
+
every platform install-checks on Ruby 4.0; the test matrix gains
|
|
9
|
+
4.0 legs. (There is no Ruby 3.5 — 4.0 is the successor line.)
|
|
10
|
+
- **Multi-host threshold signing**: `Confium::TC::NetworkCoordinator`
|
|
11
|
+
(TCP service, NDJSON + hex wire protocol) + `Confium::TC::SignerClient`
|
|
12
|
+
— signers on separate machines submit commitments and shares;
|
|
13
|
+
aggregation runs the real CMP20/GG18 combine and returns an
|
|
14
|
+
OpenSSL-verifiable signature. Plain TCP for loopback/private
|
|
15
|
+
networks; the upstream noise transport replaces it later.
|
|
16
|
+
- **OpenTelemetry export**: `Confium::Audit::OtlpSink` ships every
|
|
17
|
+
audit record to an OTLP collector over OTLP/HTTP JSON (logs
|
|
18
|
+
signal, stdlib-only, failures drop-and-report).
|
|
19
|
+
- `Confium::Composite::Signature#to_json` — instances remember their
|
|
20
|
+
source (components or a canonical JSON document) and re-serialize
|
|
21
|
+
losslessly, completing the JSON transport symmetry.
|
|
22
|
+
|
|
23
|
+
### Fixed
|
|
24
|
+
|
|
25
|
+
- `Confium::TC::Coordinator` now aggregates REAL threshold-ECDSA
|
|
26
|
+
signatures: once the threshold is met, it runs the CMP20 or GG18
|
|
27
|
+
combine (selected per session via `scheme:`) and returns a 64-byte
|
|
28
|
+
signature verifiable under the quorum public key. Previously
|
|
29
|
+
`aggregate` concatenated the share bytes — a placeholder that
|
|
30
|
+
returned garbage. Unknown sessions below-threshold now raise
|
|
31
|
+
`Confium::ThresholdError`.
|
|
32
|
+
- `Confium::TC::Coordinator` and `ShareFile` were unreachable after
|
|
33
|
+
`require "confium"`: the TC namespace file that registers them
|
|
34
|
+
never loaded because the native extension pre-defines
|
|
35
|
+
`Confium::TC` (the same orphaned-module trap PKI had). The
|
|
36
|
+
namespace file is now eager-required; `TC::Session` stays lazy —
|
|
37
|
+
it wraps the engine via FFI and needs the external libconfium
|
|
38
|
+
dylib.
|
|
39
|
+
|
|
40
|
+
## [0.4.1] — 2026-08-24
|
|
41
|
+
|
|
42
|
+
### Fixed
|
|
43
|
+
|
|
44
|
+
- **Windows platform gems load on every supported Ruby.** A PE
|
|
45
|
+
import names the version-specific ruby DLL
|
|
46
|
+
(`x64-ucrt-ruby330.dll`), so the shared 3.3 window could not load
|
|
47
|
+
under 3.4 (Windows error 126). Windows gems now carry an exact
|
|
48
|
+
window per Ruby (3.1-3.4); the loader prefers the exact minor and
|
|
49
|
+
falls back to the shared 3.3 window on other platforms. The
|
|
50
|
+
mingw runtime is embedded (`-static-libgcc`).
|
|
51
|
+
- 0.4.0 shipped as a source gem only — its platform publish was
|
|
52
|
+
correctly blocked by the failing Windows install-check; the
|
|
53
|
+
platform gems first appear here.
|
|
54
|
+
|
|
55
|
+
## [0.4.0] — 2026-08-23
|
|
56
|
+
|
|
57
|
+
### Changed
|
|
58
|
+
|
|
59
|
+
- **The native extension is pure Rust — the vendored RNP stack
|
|
60
|
+
(librnp + Botan + json-c, a full C/C++ build) is gone.** It was
|
|
61
|
+
compiled into every install but used only for ASCII armor, which
|
|
62
|
+
is now implemented in pure Ruby (RFC 9580 §6, byte-for-byte
|
|
63
|
+
compatible with the previous output; differential vectors in
|
|
64
|
+
spec/fixtures/openpgp_armor_vectors.json). Source builds now need
|
|
65
|
+
only a Rust toolchain — no C compiler, no cmake, and no network
|
|
66
|
+
fetch of C sources — and compile in ~2 minutes instead of ~15.
|
|
67
|
+
|
|
68
|
+
### Added
|
|
69
|
+
|
|
70
|
+
- **Windows (`x64-mingw-ucrt`) and musl Linux
|
|
71
|
+
(`x86_64-linux-musl`, `aarch64-linux-musl`) platform gems**,
|
|
72
|
+
unblocked by the dependency removal: pure Rust builds natively
|
|
73
|
+
under mingw and in Alpine containers (aarch64 under QEMU). All
|
|
74
|
+
are install-checked on every supported Ruby before publishing,
|
|
75
|
+
and Windows joins the test matrix.
|
|
76
|
+
- `Confium::OpenPGP.dearmor` now verifies the CRC-24 checksum and
|
|
77
|
+
raises `Confium::ParseError` on malformed blocks (previously a
|
|
78
|
+
bare rnp failure).
|
|
79
|
+
|
|
3
80
|
## [0.3.4] — 2026-08-23
|
|
4
81
|
|
|
5
82
|
### Fixed
|