+catacomb (2.6.0) experimental; urgency=medium
+
+ * catacomb: Introduce Mike Hamburg's `STROBE' syymetric encryption
+ framework, based on Keccak.
+ * catacomb: Fix KCDSA prime generation so that it makes primes of
+ exactly the right length. I think this is the last of the prime-
+ generation algorthms that needs fixing.
+ * catacomb: Inttroduce low-level key-file functions to accommodate
+ Python 3 bindings.
+ * catacomb: Support `tag:', `id:' and `type:' prefixes in `bytag' key
+ queries.
+ * catacomb-bin: Be consistent about metasyntax used to denote hash
+ function names.
+ * catacomb: Introduce fast SIMD multiplication for ARM32 and ARM64
+ platforms. I think this finally means that X86 and ARM have similar
+ levels of optimization.
+ * catacomb: Check SIMD feature bit on ARM64 before using the optimized
+ code. I don't know of any ARM64 implementations which lack SIMD
+ instructions, but the bit must be there for a reason, so I might as
+ well use it.
+ * catacomb-dev: Allow reading the current number of passes from a
+ `dsarand' object.
+ * catacomb: Prefer X84 `rdseed' instruction for quick entropy over
+ `rdrand' if it's available.
+
+ -- Mark Wooding <mdw@distorted.org.uk> Sat, 09 May 2020 17:38:45 +0100
+
+catacomb (2.5.2) experimental; urgency=medium
+
+ * Merge changes from 2.4.5.
+ * catacomb-dev: Fix ARM32 FP/SIMD register dumping.
+
+ -- Mark Wooding <mdw@distorted.org.uk> Sat, 09 May 2020 20:50:57 +0100
+
+catacomb (2.5.1) experimental; urgency=medium
+
+ * Merge changes from 2.4.4.
+
+ -- Mark Wooding <mdw@distorted.org.uk> Sun, 29 Sep 2019 17:50:59 +0100
+
+catacomb (2.5.0) experimental; urgency=medium
+
+ * catacomb: MACs based on blockciphers: PMAC1 and CMAC (also known as
+ OMAC).
+ * catacomb: Authenticated Encryption with Additional Data (AEAD)
+ schemes. Some based on blockciphers: CCM, EAX, GCM (with CPU-specific
+ acceleration), OCB1 and OCB3 (OCB2 is broken). Also Salsa20 and
+ ChaCha20 with Poly1305: the RFC7539 scheme, and the NaCl `secret_box'
+ transform.
+ * catacomb: Implement Grantham's Frobenius test. Combine it with
+ Rabin--Miller, as Baillie--PSW, for testing given primes.
+ * catacomb-bin (catcrypt): Support AEAD schemes for bulk crypto.
+ * catacomb-bin (perftest): Options for batching; report cycle counts
+ where available.
+ * Many internal improvements: better documentation, debugging, testing,
+ etc.
+
+ -- Mark Wooding <mdw@distorted.org.uk> Sat, 21 Sep 2019 21:26:44 +0100
+
catacomb (2.4.5) experimental; urgency=medium
* catacomb: Fix memory leak in key-file error handling.