# Changelog
- 0.4.3 (2026-07-06)
* The constant-time 'Eq' on 'MAC' now folds over the two buffers
directly, rather than materialising an intermediate ByteString
holding their XOR on the heap. Semantics are unchanged.
* Improves the performance of constant-time MAC comparison.
- 0.4.2 (2026-05-16)
* Features order-of-magnitude performance improvements, especially
on ARM platforms where NEON intrinsics are available.
- 0.4.1 (2025-12-28)
* Bumps the ppad-fixed lower-bound version and tests with GHC 9.10.3.
- 0.4.0 (2025-12-27)
* Switches from variable-size 'Integer' to fixed-width words and
constant-time primitives supplied by ppad-fixed. The implementation now
runs about 25x faster and in time constant with respect to secrets.
- 0.3.0 (2025-06-21)
* The 'mac' function is now total, returning 'Nothing' when supplied
with an invalid-length one-time key.
- 0.2.0 (2025-03-10)
* Fix a bug in which small produced MAC's were not being padded to 128
bits.
- 0.1.0 (2025-03-09)
* Initial release, supporting the Poly1305 MAC.