COOLJAPAN

Posts tagged #tls

6 posts

Aug 6, 2026 · 10 min

OxiCrypto 0.3.0 Released — All 12 FIPS 205 SLH-DSA Parameter Sets, TLS 1.3 AEAD Negotiation, and a Bcrypt Panic-DoS Fixed

OxiCrypto 0.3.0 completes the FIPS 205 SLH-DSA parameter-set matrix (all 12 of 12), ships a new negotiate_aead TLS 1.3 cipher-suite resolver alongside negotiate_mac/negotiate_sig/negotiate_kex, adds coverage-guided fuzzing across AEAD/MAC/PQ/KDF, gives every sub-crate a runnable example, and fixes a byte/char-boundary panic-DoS in bcrypt verification — the sovereign Pure Rust cryptography layer for the COOLJAPAN ecosystem.

releaseoxicryptopure-rust
Aug 6, 2026 · 8 min

OxiTLS 0.3.0 Released — Leaf-Only-Chain OCSP False-Rejections Fixed, HPKE LabeledExpand Panic Eliminated

OxiTLS 0.3.0 fixes an OCSP staple false-rejection on leaf-only certificate chains, converts an HPKE LabeledExpand panic into a propagated Result, and adds three new fuzz targets covering its own hand-rolled TLS parsers — 364 tests passing, the sovereign Pure Rust TLS layer for the COOLJAPAN ecosystem.

releaseoxitlspure-rust
Jul 17, 2026 · 9 min

OxiTLS 0.2.1 Released — RUSTSEC-2026-0104 Eliminated, OCSP Replay Bypass Closed, SCT Parsing Fixed

OxiTLS 0.2.1 eliminates RUSTSEC-2026-0104 by forking its Pure-Rust CryptoProvider into a webpki-free oxitls-rustcrypto-provider crate, closes an OCSP staple replay bypass, and fixes SCT parsing — 443 tests passing, the sovereign Pure Rust TLS layer for the COOLJAPAN ecosystem.

releaseoxitlspure-rust
Jun 22, 2026 · 7 min

OxiTLS 0.2.0 — A Pure Rust TLS Transport Stack, No OpenSSL, No ring

OxiTLS is the COOLJAPAN Pure Rust TLS transport stack — a NoFFI replacement for OpenSSL, native-tls, and the ring / aws-lc-rs C-and-assembly crypto backends. TLS 1.3 and 1.2, mTLS, ALPN, session resumption, OCSP stapling, post-quantum key exchange, and a Pure-Rust CryptoProvider by default. The transport-security foundation under OxiHTTP, OxiQUIC, and OxiRPC.

releaseoxitlspure-rust
Jun 16, 2026 · 7 min

OxiGDAL 0.1.6 Released — The Last C Dependency Falls: Pure Rust SQLite, TLS, and Three New Formats

OxiGDAL 0.1.6 eliminates rusqlite/libsqlite3-sys and ring from the workspace — SQLite now runs on oxisql-sqlite-compat (Limbo) and TLS on OxiTLS, making the default build 100% C/FFI-free. Plus GPX/KML/TopoJSON formats, non-UTF-8 DBF encoding, Delaunay triangulation, HDF5 v2/v3 superblocks, terrain GLCM/geomorphons/cost-distance, batch QC validators, and W-TinyLFU caching. 78 crates, 18 drivers, 14,605 tests.

releaseoxigdalgdal
Apr 26, 2026 · 10 min

AmateRS 0.2.0 Released — UPDATE Queries, OCSP Revocation, JWT Expansion, GPU Detection, and the First End-to-End FHE Examples

AmateRS is a distributed database with Fully Homomorphic Encryption that computes on encrypted data without ever decrypting it server-side. 0.2.0 — our biggest changelog yet — adds UPDATE queries with atomic rollback, query-result caching, OCSP revocation, JWT algorithm expansion, GPU detection, graceful shutdown, and 3 end-to-end FHE examples.

releaseamatersfhe