Releases v0.7.0

[johnnyt]

Added

• Error test vector validation suite with 4,240 negative test cases (Implement Negative Test Case Validation (Error Vectors) #77)
• Compressed EC public key decompression for P-256 and P-384 curves (Implement Negative Test Case Validation (Error Vectors) #77)
• Multi-curve ECDSA signature verification supporting SHA-256/secp256r1 and SHA-384/secp384r1 (Implement Negative Test Case Validation (Error Vectors) #77)
• API mismatch test validating unsigned-only streaming decryption mode (Implement Negative Test Case Validation (Error Vectors) #77)
• Comprehensive error categorization (bit flip, truncation, API mismatch, other) (Implement Negative Test Case Validation (Error Vectors) #77)
• Full test vector runner executing 2,861 success test vectors via complete decrypt flow (Implement Full Test Vector Runner for Success Cases #76)
• Comprehensive test coverage for all 11 ESDK algorithm suites including committed suites (0x0478, 0x0578)
• Test vector filtering helpers (success/error tests, raw key tests, encryption algorithm filters)
• Automatic test vector execution in CI with caching for performance
• EDK-based key name extraction for accurate keyring configuration
• Non-AWS encryption examples for local key usage without AWS credentials (Add Non-AWS Encryption Examples (Raw AES & RSA) #74)
• Raw AES example demonstrating all key sizes (128/192/256-bit) with encryption context
• Raw RSA example with all 5 padding schemes and PEM key loading from environment variables
• Multi-keyring local example showing key redundancy and rotation patterns
• API Stability Policy guide documenting semantic versioning and breaking change policy (Complete Hex Docs Organization for v1.0.0 #72)
• Comprehensive module grouping in Hex docs for all keyrings, CMMs, caching, and streaming modules (Complete Hex Docs Organization for v1.0.0 #72)
• User guides for Getting Started, Choosing Components, and Security Best Practices (Create User Guides for v1.0.0 #73)
• Automated testing for guide code examples with extraction and validation (Create User Guides for v1.0.0 #73)
• Advanced feature examples demonstrating streaming, caching, and required encryption context (Add Advanced Feature Examples (Streaming, Caching, Required EC) #75)
• Streaming file encryption example with 10MB test file and memory-efficient processing
• Caching CMM example showing 2x performance improvement for high-throughput scenarios
• Required Encryption Context example enforcing mandatory context keys for compliance

Changed

• README updated for v1.0.0 preparation with pre-release messaging removed (Update README for Stable v1.0.0 Release #79)
• Feature list converted to clean presentation without checkmark indicators (Update README for Stable v1.0.0 Release #79)
• Test statistics updated to reflect current 852 passing tests (Update README for Stable v1.0.0 Release #79)
• Documentation section added with links to guides, examples, and API reference (Update README for Stable v1.0.0 Release #79)
• Test vectors now run by default when available, improving from 91.8% to 92.6% code coverage (Implement Full Test Vector Runner for Success Cases #76)
• Header authentication now uses full encryption context with required key filtering for spec compliance (Implement Full Test Vector Runner for Success Cases #76)
• Algorithm suite deprecation warnings removed for cleaner test output (Implement Full Test Vector Runner for Success Cases #76)
• Consolidated CHANGELOG entries to improve readability and scannability (Simplify CHANGELOG by Consolidating Entries #81)
• Enhanced streaming module documentation with usage guidance, memory efficiency details, and verification handling (Complete Hex Docs Organization for v1.0.0 #72)
• Examples reorganized into complexity-based subdirectories (01_basics, 02_advanced, 03_aws_kms) (Add Advanced Feature Examples (Streaming, Caching, Required EC) #75)
• Examples README updated with category-based navigation and quick start commands

Fixed

• ECDSA signature verification now handles compressed EC public keys (0x02/0x03 prefix) (Implement Negative Test Case Validation (Error Vectors) #77)
• Signature verification uses correct hash algorithm and curve based on algorithm suite (Implement Negative Test Case Validation (Error Vectors) #77)
• Header body serialization to include version/type bytes in AAD computation per spec (Implement Full Test Vector Runner for Success Cases #76)
• Required encryption context filtering in header authentication tag computation (Implement Full Test Vector Runner for Success Cases #76)
• CMM test vector helpers to extract key names from EDK provider_info (Implement Full Test Vector Runner for Success Cases #76)
• Dialyzer typespec for compute_header_auth_tag/4 to allow nil for optional parameter (Implement Full Test Vector Runner for Success Cases #76)
• RSA keyring PEM loading to correctly decode keys using pem_entry_decode instead of der_decode (Add Non-AWS Encryption Examples (Raw AES & RSA) #74)
• All KMS examples updated to use correct Client API format (map-based return values)
• Client module now supports Caching CMM in dispatch clauses for encryption and decryption (Add Advanced Feature Examples (Streaming, Caching, Required EC) #75)