Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

0.3.0 - 2026-08-04

Switch from bincode to postcard for serialization. The bincode crate is no longer maintained. Note that this causes a binary incompatibility with previous versions of the cmz crate. That is, previous versions and this one will not interoperate.

By default, when serializing a CMZCredential, skip the private key. That way, you don't accidentally send the private key if the issuer creates a credential completely on its own (not via a typical credential issuing protocol) and sends it to the client. Thanks to Morgan Hill from Radically Open Security.

Add serialize_with_privkey and deserialize_with_privkey if you explicitly do want to keep the private key when serializing a CMZCredential (for example, if the issuer is saving a credential to its own storage).

Add set_keypair function to CMZ credentials. This function sets both the private and public keys, without recomputing the public key from the private key. Using this function saves computation when you have both keys at hand.
The new dump feature enables the corresponding dump feature of the sigma_compiler crate.

Don't serialize an 8-byte length header in front of each Scalar and Point, which makes the generated proofs noticeably shorter.
Depend on sigma-compiler version 0.2.0

Remove nondeterministic order of generated statements in the call to the sigma_compiler macro. We need the generated statements to be identical, not just equivalent (e.g., the same statements in a different order) because the order of the elements in the proof depends on the order of the statements.
Don't use WnafBase multiplication at this time. It's both not constant time, and also in some cases slower than the regular multiplication (at least with Ristretto).