# Changelog

All notable changes to Quantum-Sign will be documented in this file.

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [0.1.0] - 2024-01-XX

### 🎉 Initial Release

**Quantum-Sign: The Digital Notary Stamp That Even Quantum Computers Can't Forge**

This is the first public release of Quantum-Sign, a production-ready, pure-Rust implementation of post-quantum code signing.

### Features

- **Quantum-Resistant Signatures**: ML-DSA-87 (FIPS 204) implementation providing Level-5 security
- **Pure Rust**: Zero unsafe code with `#![forbid(unsafe_code)]` throughout
- **Quorum Signing**: M-of-N threshold signatures for critical operations
- **Offline Verification**: Complete verification without network access
- **Policy Engine**: Comprehensive policy enforcement with FIPS-only defaults
- **Supply Chain Security**: Strictly crates.io-only dependencies
- **Trust Management**: SPKI-based trust store with deterministic KID generation
- **Canonical CBOR**: Deterministic `.qsig` format for reproducible signatures

### Security

- FIPS 204 ML-DSA implementation
- HMAC-DRBG (SP 800-90A) with continuous health tests
- Constant-time operations
- Automatic zeroization of sensitive data
- Domain separation for all cryptographic operations
- Path traversal protection

### Crates Published

- `qs-drbg` v0.1.0 - NIST SP 800-90A compliant HMAC-DRBG
- `qs-crypto` v0.1.0 - Core cryptographic primitives
- `qs-policy` v0.1.0 - Policy engine with FIPS compliance
- `qs-format` v0.1.0 - CBOR signature format
- `qs-verify` v0.1.0 - Standalone verification (placeholder)
- `qs-tsp` v0.1.0 - RFC 3161 timestamping (stub)
- `qs-transparency` v0.1.0 - Transparency log support (stub)
- `quantum-sign-cli` v0.1.0 - Command-line interface

### Known Limitations

- Timestamping and transparency log operations are stubbed (future implementation)
- Only ML-DSA-87 is currently supported (SLH-DSA planned)
- Windows builds require additional testing

### Contributors

- Sicarii <sic.tau@pm.me> - Author and maintainer

---

For security issues, please email sic.tau@pm.me with subject line "[SECURITY] Quantum-Sign".