• new: Crypt::ASN1
  
• new: Crypt::AuthEnc::SIV
  
• new: Crypt::AuthEnc::XChaCha20Poly1305
  
• new: Crypt::Cipher::SM4
  
• new: Crypt::Digest::TurboSHAKE
  
• new: Crypt::Digest::KangarooTwelve
  
• new: Crypt::PK::Ed448
  
• new: Crypt::PK::X448
  
• new: Crypt::Stream::XChaCha
  
• new: Crypt::Stream::XSalsa20
  
• Crypt::PK::Ed25519 - new functions: sign_message_ctx, verify_message_ctx, sign_message_ph, verify_message_ph
  
• Crypt::Digest: object digest accessors now finalize the object; use reset() before reuse
  
• Crypt::Mac + Crypt::AuthEnc: finalized-object lifecycle is now enforced consistently
  
• security/hardening fixes across Digest/Mac/AuthEnc/Mode/Stream/PK/PRNG
  
• fixes related to wycheproof test suite
  
• documentation cleanup & improvements
  
• support for RFC 8702 RSA-PSS-SHAKE128/256 and ECDSA-SHAKE128/256
  
• support for FRP256v1 elliptic-curve
  
• bundled libtomcrypt update branch:develop (commit: 8b5af49b 2026-05-06)