mlkem-0.2.2.0: CHANGELOG.md

# Changelog for `mlkem`

## 0.2.2.0 - 2026-06-28

* Clearing buffers containing secrets is more resilient and takes into account
  the possibility of asynchronous exceptions

* Improve optimizations a bit more.  Sometimes vector rewrite rules were not
  triggered early enough to fuse polynomial allocations at element level.

* Modular reduction and constant-time selection now use an arithmetic shift
  instead of a logical shift.  This makes no difference with LLVM but saves one
  instruction with the NCG.

## 0.2.1.0 - 2026-05-28

* Function `generateOpen` is added to return not only the key pair but also the
  seed that was used

* Optimizations to remove intermediate allocations where possible

## 0.2.0.0 - 2026-03-26

* Flag `use_crypton` is now enabled by default.  It requires crypton >= 1.1.1
  and changes the dependency to `ram` instead of `memory`

* Dependency to `basement` is replaced with `primitive`

## 0.1.1.0 - 2025-11-30

* Fixed encoding and decoding on big-endian architectures

* Fall back to bytes when the architecture does not support unaligned memory
  access

## 0.1.0.0 - 2025-11-02

* First version. Released on an unsuspecting world.