cipherstash · vitaminc-release-plz · Jul 18, 2026
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -17,7 +17,7 @@ members = [
 
 [workspace.package]
 documentation = "https://docs.rs/vitaminc"
-version = "0.2.0-pre.1"
+version = "0.2.0-pre.2"
 repository = "https://github.com/cipherstash/vitaminc"
 authors = [
   "Dan Draper <dan@cipherstash.com>",

diff --git a/packages/aead/CHANGELOG.md b/packages/aead/CHANGELOG.md
@@ -7,6 +7,31 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 ## [Unreleased]
 
 
+### Documentation
+
+- docs(aead),refactor(encrypt): address decrypt-path review findings
+- docs(aead),test(encrypt): document ContextTag limits; add negative-AAD tests
+
+### Features
+
+- re-introduce ContextTag on the revised Cipher/Decipher traits
+- add ContextTag::context + decrypt/decrypt_with_aad helper
+- implement Encrypt/Decrypt for the Equatable controlled type
+
+### Refactoring
+
+- thread AAD through the decrypt path to mirror encrypt
+- align ContextTag::aad_with arg order with encrypt_with_aad
+- address ContextTag decrypt-helper review
+
+### Testing
+
+- close Tier-1 cargo-mutants gaps (ConstantTimeEq, PAE invariant)
+- close remaining Tier-1 cargo-mutants gaps (ts_ne, zeroize, read_nonce, hlist CI)
+- address code-review findings on the Tier-1 mutation fixes
+- test(aead),test(encrypt): close ContextTag coverage gaps from review
+
+
 ### Documentation
 
 - rewrite READMEs for revised Cipher/Decipher traits

diff --git a/packages/aead/Cargo.toml b/packages/aead/Cargo.toml
@@ -12,8 +12,8 @@ keywords.workspace = true
 categories.workspace = true
 
 [dependencies]
-vitaminc-protected = { version = "0.2.0-pre.1", path = "../protected" }
-vitaminc-random = { version = "0.2.0-pre.1", path = "../random" }
+vitaminc-protected = { version = "0.2.0-pre.2", path = "../protected" }
+vitaminc-random = { version = "0.2.0-pre.2", path = "../random" }
 
 bytes = { version = "^1", features = ["serde"] }
 serde = { workspace = true }

diff --git a/packages/async-traits/CHANGELOG.md b/packages/async-traits/CHANGELOG.md
@@ -1,5 +1,10 @@
 
 
+### Documentation
+
+- fix fabricated APIs, wrong metadata, and stale claims; add SECURITY.md
+
+
 
 
 

diff --git a/packages/async-traits/Cargo.toml b/packages/async-traits/Cargo.toml
@@ -13,5 +13,5 @@ categories.workspace = true
 rust-version.workspace = true
 
 [dependencies]
-vitaminc-protected = { version = "0.2.0-pre.1", path = "../protected" }
-vitaminc-traits = { version = "0.2.0-pre.1", path = "../traits" }
+vitaminc-protected = { version = "0.2.0-pre.2", path = "../protected" }
+vitaminc-traits = { version = "0.2.0-pre.2", path = "../traits" }
diff --git a/packages/encrypt/CHANGELOG.md b/packages/encrypt/CHANGELOG.md
@@ -1,5 +1,41 @@
 
 
+### Documentation
+
+- correct stale #181 zeroize note on Aes256Cipher::open
+- docs(aead),refactor(encrypt): address decrypt-path review findings
+- docs(aead),test(encrypt): document ContextTag limits; add negative-AAD tests
+- fix fabricated APIs, wrong metadata, and stale claims; add SECURITY.md
+
+### Features
+
+- expose Aes256Cipher::decipher to construct a Decipher
+- re-introduce ContextTag on the revised Cipher/Decipher traits
+- add ContextTag::context + decrypt/decrypt_with_aad helper
+
+### Miscellaneous
+
+- rustfmt context_tag test to satisfy CI
+
+### Performance
+
+- borrow AAD per seq/map element instead of cloning
+
+### Refactoring
+
+- thread AAD through the decrypt path to mirror encrypt
+- tidy decrypt AAD path per code review
+- align ContextTag::aad_with arg order with encrypt_with_aad
+- address ContextTag decrypt-helper review
+
+### Testing
+
+- split test-module cfg so cargo-mutants skips it
+- add positive AAD roundtrip for the sequence path
+- test(aead),test(encrypt): close ContextTag coverage gaps from review
+- cover Equatable AEAD round-trip and tamper axes
+
+
 ### Documentation
 
 - rewrite READMEs for revised Cipher/Decipher traits

diff --git a/packages/encrypt/Cargo.toml b/packages/encrypt/Cargo.toml
@@ -12,9 +12,9 @@ keywords.workspace = true
 categories.workspace = true
 
 [dependencies]
-vitaminc-aead = { version = "0.2.0-pre.1", path = "../aead" }
-vitaminc-protected = { version = "0.2.0-pre.1", path = "../protected" }
-vitaminc-random = { version = "0.2.0-pre.1", path = "../random" }
+vitaminc-aead = { version = "0.2.0-pre.2", path = "../aead" }
+vitaminc-protected = { version = "0.2.0-pre.2", path = "../protected" }
+vitaminc-random = { version = "0.2.0-pre.2", path = "../random" }
 
 zeroize = { workspace = true }
 
@@ -46,7 +46,7 @@ _test-rust-crypto-backend = ["dep:aes-gcm"]
 hlist = ["vitaminc-aead/hlist"]
 
 [dev-dependencies]
-vitaminc-protected = { path = "../protected", version = "0.2.0-pre.1", features = ["arbitrary"] }
+vitaminc-protected = { path = "../protected", version = "0.2.0-pre.2", features = ["arbitrary"] }
 quickcheck = "1.1.0"
 quickcheck_macros = "1.2.0"
 

diff --git a/packages/kms/CHANGELOG.md b/packages/kms/CHANGELOG.md
@@ -1,5 +1,15 @@
 
 
+### Documentation
+
+- fix fabricated APIs, wrong metadata, and stale claims; add SECURITY.md
+
+### Miscellaneous
+
+- bump aws-sdk-kms from 1.107.0 to 1.109.0
+- bump aws-config from 1.8.17 to 1.8.18
+
+
 ### Miscellaneous
 
 - bump aws-sdk-kms from 1.106.0 to 1.107.0

diff --git a/packages/kms/Cargo.toml b/packages/kms/Cargo.toml
@@ -12,9 +12,9 @@ keywords.workspace = true
 categories.workspace = true
 
 [dependencies]
-vitaminc-async-traits = { version = "0.2.0-pre.1", path = "../async-traits" }
-vitaminc-traits = { version = "0.2.0-pre.1", path = "../traits" }
-vitaminc-protected = { version = "0.2.0-pre.1", path = "../protected" }
+vitaminc-async-traits = { version = "0.2.0-pre.2", path = "../async-traits" }
+vitaminc-traits = { version = "0.2.0-pre.2", path = "../traits" }
+vitaminc-protected = { version = "0.2.0-pre.2", path = "../protected" }
 aws-sdk-kms = "1.109.0"
 aws-config = "1.8.18"
 

diff --git a/packages/password/CHANGELOG.md b/packages/password/CHANGELOG.md
@@ -1,5 +1,10 @@
 
 
+### Documentation
+
+- fix fabricated APIs, wrong metadata, and stale claims; add SECURITY.md
+
+
 
 
 

diff --git a/packages/password/Cargo.toml b/packages/password/Cargo.toml
@@ -13,5 +13,5 @@ categories.workspace = true
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
 [dependencies]
-vitaminc-random = { version = "0.2.0-pre.1", path = "../random" }
-vitaminc-protected = { version = "0.2.0-pre.1", path = "../protected" }
+vitaminc-random = { version = "0.2.0-pre.2", path = "../random" }
+vitaminc-protected = { version = "0.2.0-pre.2", path = "../protected" }
diff --git a/packages/permutation/CHANGELOG.md b/packages/permutation/CHANGELOG.md
@@ -1,5 +1,15 @@
 
 
+### Fixes
+
+- thread T: Zeroize bound and drop Copy for #181
+
+### Refactoring
+
+- borrow in invert() instead of cloning the key
+- single-source into_inner_unchecked; document drop-glue guarantees
+
+
 
 ### Fixes
 

diff --git a/packages/permutation/Cargo.toml b/packages/permutation/Cargo.toml
@@ -12,8 +12,8 @@ keywords.workspace = true
 categories.workspace = true
 
 [dependencies]
-vitaminc-protected = { version = "0.2.0-pre.1", path = "../protected", features = ["bitvec"] }
-vitaminc-random = { version = "0.2.0-pre.1", path = "../random" }
+vitaminc-protected = { version = "0.2.0-pre.2", path = "../protected", features = ["bitvec"] }
+vitaminc-random = { version = "0.2.0-pre.2", path = "../random" }
 
 bitvec = { workspace = true }
 rand = { workspace = true }

diff --git a/packages/protected-derive/CHANGELOG.md b/packages/protected-derive/CHANGELOG.md
@@ -2,6 +2,7 @@
 
 
 
+
 ### Fixes
 
 - remove circular dev-dependency between vitaminc-protected and vitaminc

diff --git a/packages/protected/CHANGELOG.md b/packages/protected/CHANGELOG.md
@@ -1,5 +1,20 @@
 
 
+### Documentation
+
+- fix fabricated APIs, wrong metadata, and stale claims; add SECURITY.md
+
+### Fixes
+
+- zeroize controlled types on drop ([#181](https://github.com/cipherstash/vitaminc/pull/181))
+
+### Refactoring
+
+- move instead of copy in flatten_array
+- single-source into_inner_unchecked; document drop-glue guarantees
+- make move_inner_out a safe fn via an unsafe trait
+
+
 
 ### Miscellaneous
 

diff --git a/packages/protected/Cargo.toml b/packages/protected/Cargo.toml
@@ -22,7 +22,7 @@ digest = "0.11.2"
 subtle = "2.6.1"
 
 quickcheck = { version = "1.1.0", optional = true }
-vitaminc-protected-derive = { path = "../protected-derive", version = "0.2.0-pre.1" }
+vitaminc-protected-derive = { path = "../protected-derive", version = "0.2.0-pre.2" }
 
 [dev-dependencies]
 rmp-serde = "1.3.1"

diff --git a/packages/random-derives/CHANGELOG.md b/packages/random-derives/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 
 
+
 ### Miscellaneous
 
 - release v0.1.0-pre4.1

diff --git a/packages/random/CHANGELOG.md b/packages/random/CHANGELOG.md
@@ -7,6 +7,11 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 ## [Unreleased]
 
 
+### Fixes
+
+- thread T: Zeroize bound and drop Copy for #181
+
+
 
 ### Features
 

diff --git a/packages/random/Cargo.toml b/packages/random/Cargo.toml
@@ -18,8 +18,8 @@ rand = { workspace = true }
 thiserror = { workspace = true }
 zeroize = { workspace = true }
 
-vitaminc-random-derives = { version = "0.2.0-pre.1", path = "../random-derives" }
-vitaminc-protected = { version = "0.2.0-pre.1", path = "../protected" }
+vitaminc-random-derives = { version = "0.2.0-pre.2", path = "../random-derives" }
+vitaminc-protected = { version = "0.2.0-pre.2", path = "../protected" }
 
 # Wasm32: route `getrandom` to the browser/Deno crypto API. Pulled in
 # transitively via `rand` -> `getrandom 0.4`. Must be paired with the

diff --git a/packages/traits/CHANGELOG.md b/packages/traits/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 
 
+
 ### Miscellaneous
 
 - set workspace-wide MSRV to 1.75.0
Original file line number	Diff line number	Diff line change
		@@ -1,5 +1,10 @@


		### Documentation

		- fix fabricated APIs, wrong metadata, and stale claims; add SECURITY.md





Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -2,6 +2,7 @@




		### Fixes

		- remove circular dev-dependency between vitaminc-protected and vitaminc
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -3,6 +3,7 @@




		### Miscellaneous

		- release v0.1.0-pre4.1
Expand Down