First stable release. API should remain stable now.

ed25519, ed448: changed API

• context is now an option in sign and verify
• zip215 is a new verify option that allows to conform to RFC8032 when false. For true it will instead match ZIP215.
• Added edwardsToMontgomery function

bls12-381: changed API

• CURVE is no longer exposed, it was an internal property. Use G1.CURVE, G2.CURVE
• Fields have been moved into fields: {Fp, Fp2, Fp6, Fp12, Fr} property
• See README for new usage

weierstrass: improved DER decoding. Validate curve creation
Updated Wycheproof vectors to v0.9
hash-to-curve: restrict expand to xmd and xof

Full Changelog: 0.9.1...1.0.0

• Fix React Native like environments: remove bigint literals
• weierstrass, edwards: make points expose typescript x, y
• edwards: add toRawBytes to typescript type

Full Changelog: 0.9.0...0.9.1

• CURVE.P is now CURVE.p
• abstract/modular: Fp is now Field
• weierstrass: simplified weierstrassPoints initialization

Full Changelog: 0.8.3...0.9.0

Update hashes and devDependencies

Full Changelog: 0.8.2...0.8.3

• Common.js support has been brought back
• Stark curve extracted into a separate package

Full Changelog: 0.8.1...0.8.2

Invalid release, re-published as 0.8.2

Full Changelog: 0.8.0...0.8.1

• ESM-only; remove support for common.js modules
• ECDSA: remove scalar blinding
• Stark: more methods
• secp256k1: Fix schnorrGetExtPubKey y coordinate
• secp256k1 Schnorr: remove getExtendedPublicKey
• ristretto255: fix equality testing

Full Changelog: 0.7.3...0.8.0

• hash-to-curve improvements

Full Changelog: 0.7.2...0.7.3

• Move p192, p224 from main pkg
• montgomery: add randomPrivateKey

Full Changelog: 0.7.1...0.7.2

Montgomery improvements