v0.2.3 released

This is a small release that improves the hdkey module. It makes its API more robust and ensures that the private key is properly dropped.

It also reuses the assertBytes utility from @noble/hashes to avoid duplication.

v0.2.2 released

A small release in preparation for a security audit.

The only significant change it includes is an upgrade to @noble/hashes.

v0.2.1 released

This is a small update that just replaces noble-* dependencies with their new @noble/* versions.

v0.2.0: fewer dependencies, smaller bundle, easier to use, and more secure

We just released a new version of the package, which has been rewritten using newer dependencies for all the cryptographic primitives.

The main difference is that the new dependencies are written in TypeScript, targeting more modern systems (i.e. using native bigint), and portable (i.e. not using Node.js APIs). This changes lead to a much smaller library, with less dependencies (which means more secure), and easier to use in the web.

Please, take a look at the README to learn how to upgrade, wand what you should do if you need to target older systems.

Huge thanks to @paulmillr who not only made this rewrite, but also implemented all the cryptographic primitives, and is coordinating the audit.

Security considerations

This version hasn't been audited yet. An audit will be conducted before the end of the year, but consider this experimental for now.

Once the project has been audited, we'll release v1.0.0.

What's Changed

• Rewrite the package. Use 3 deps instead of 39+ by @paulmillr in #6

New Contributors

• @paulmillr made their first contribution in #6

Full Changelog: v0.1.3...v0.2.0