v0.5.3

[tarcieri]

Added

• BoxedUint: heap-allocated fixed-precision integers (#221)
• extra-sizes feature (#229)
• U4224 and U4352 (#233)
• Zeroizing support for DynResidue (#235)
• cmp_vartime, ct_cmp (#238)
• Expose Montgomery form in Residue/DynResidue (#239)
• Make Uint::pow work with different sized exponents (#251)
• Expose wrapping_neg (#252)
• Make concat, split, and multiply work with different sized operands (#253)
• U16384 and U32768 (#255)
• Uint::{inv_mod, inv_mod2k_vartime} (#263)
• const fn constructors for NonZero<Uint> and NonZero<Limb> (#266)
• Constant-time Uint::shr() and Uint::shl() (#267)
• Subtle trait impls for DynResidue and DynResidueParams (#269)

Changed

• Modular inversion improvements (#263)

Fixed

• serdect usage (#222)
• Enforce valid modulus for DynResidueParams (#240)
• Enforce valid modulus for Residue and associated macros (#243)
• Make Uint::{from_be_hex, from_le_hex} constant-time (#254)
• Remove conditionals in Uint::saturating_add() and saturating_mul() (#256)
• More logical checks in the Uint::random_mod() test (#256)
• Mark sqrt for renaming, to explicitly describe it as vartime (#256)