# Changelog
- 0.2.0 (2026-08-01)
* Addresses a couple of minor issues detected by an LLM scan:
* Fixes a bug that could lead shl1_c# to produce a malformed Choice
that would behave incorrectly for negation or selection.
* Each Montgomery domain's 'signum' implementation was broken,
producing R^-1 instead of the proper in-domain 'one'. Now these
return the appropriate values.
Also clarifies a few Haddocks, on the suggestions of the same scan.
- 0.1.6 (2026-08-01)
* The eq_{word,wide,wider}# functions now return a mask, instead of a
bit, inside the resulting Choice value.
- 0.1.5 (2026-06-07)
* Improves constant-time modular inverse performance on the Montgomery
'Curve' module by about 2x, and on the 'Scalar' module by about 1.5x.
- 0.1.4 (2026-05-22)
* Adds variable-time comparison functions to Data.Word.Wider.
- 0.1.3 (2025-12-28)
* Makes some backward-incompatible API tweaks to Data.Choice:
* 'from_word_mask# is now 'from_full_mask#'
* 'from_word#' is now 'from_bit#'
- 0.1.2 (2025-12-27)
* Fixes an API mistake made in the v0.1.1 release.
- 0.1.1 (2025-12-27)
* Contains miscellaneous hardening and API refinements to v0.1.1.
- 0.1.0 (2025-12-21)
* Initial release, supporting wide, wider, and secp256k1-related
Montgomery-form words with supporting constant-time operations.