sha512

commit 6c03e0c9f2e7f27712249b0b30f5f6c55a53480e
parent e545a728557312021554908959cc428007de1019
Author: Jared Tobin <jared@jtobin.io>
Date:   Mon,  6 Jul 2026 13:43:49 -0230

release: v0.2.4

Diffstat:
M
CHANGELOG
 | 
5
+++++
M
ppad-sha512.cabal
 | 
2
+-

2 files changed, 6 insertions(+), 1 deletion(-)
diff --git a/CHANGELOG b/CHANGELOG
@@ -1,5 +1,10 @@
 # Changelog
 
+- 0.2.4 (2026-07-06)
+  * Reverts the unrolled MAC comparison introduced in 0.2.3, which was
+    found to introduce timing variation on both aarch64 and x86-64 when
+    compiled via the LLVM backend (the NCG backend was unaffected).
+
 - 0.2.3 (2026-07-06)
   * The constant-time 'Eq' on 'MAC' now folds over the two buffers
     directly, rather than materialising an intermediate ByteString
diff --git a/ppad-sha512.cabal b/ppad-sha512.cabal
@@ -1,6 +1,6 @@
 cabal-version:      3.0
 name:               ppad-sha512
-version:            0.2.3
+version:            0.2.4
 synopsis:           The SHA-512 and HMAC-SHA512 algorithms
 license:            MIT
 license-file:       LICENSE