fix security flaw in hqc

CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 2024-12-11
+* `pqcrypto-hqc` was updated to addresss a security flaw in decapsulation.
+
 ## 2024-10-24
 * `pqcrypto-kyber` and `pqcrypto-dilithium` are retired and replaced by `pqcrypto-mlkem` and `pqcrypto-mldsa`, respectively.
 * `pqcrypto-falcon` now separates Falcon into the "compressed" mode and the "padded" variants. The "compressed" variant likely produces shorter signatures than the max size.

implementations.yaml

@@ -1,6 +1,6 @@
 ---
 
-pqcrypto_version: 0.18.0
+pqcrypto_version: 0.18.1
 traits_version: 0.3.5
 
 kems:
@@ -50,7 +50,7 @@ kems:
         implementations: [clean, avx2]
         doctest: no
   hqc:
-    version: 0.2.0
+    version: 0.2.1
     implementations: [clean]
     schemes:
       - name: hqc-128

pqcrypto-hqc/Cargo.toml

@@ -2,7 +2,7 @@
 name = "pqcrypto-hqc"
 description = "Post-Quantum Key-Encapsulation Mechanism hqc"
 readme = "README.md"
-version = "0.2.0"
+version = "0.2.1"
 authors = ["Thom Wiggers <[email protected]>"]
 edition = "2021"
 license = "MIT OR Apache-2.0"

pqcrypto/Cargo.toml

@@ -2,7 +2,7 @@
 name = "pqcrypto"
 description = "Post-Quantum cryptographic primitives"
 readme = "README.md"
-version = "0.18.0"
+version = "0.18.1"
 authors = ["Thom Wiggers <[email protected]>"]
 edition = "2021"
 license = "MIT OR Apache-2.0"
@@ -15,7 +15,7 @@ categories = ["cryptography"]
 pqcrypto-traits = { path = "../pqcrypto-traits", version = "0.3.5" }
 pqcrypto-mlkem = { path = "../pqcrypto-mlkem", version = "0.1.0", optional = true }
 pqcrypto-classicmceliece = { path = "../pqcrypto-classicmceliece", version = "0.2.0", optional = true }
-pqcrypto-hqc = { path = "../pqcrypto-hqc", version = "0.2.0", optional = true }
+pqcrypto-hqc = { path = "../pqcrypto-hqc", version = "0.2.1", optional = true }
 pqcrypto-mldsa = { path = "../pqcrypto-mldsa", version = "0.1.0", optional = true }
 pqcrypto-falcon = { path = "../pqcrypto-falcon", version = "0.4.0", optional = true }
 pqcrypto-sphincsplus = { path = "../pqcrypto-sphincsplus", version = "0.7.0", optional = true }