Changelog

v0.7.2 (2026-06-04)

Fix Elixir 1.20 type violations
Make sure ECDSA.valid?/3 and Schnorr.valid?/3 always return a boolean
Fix MuSig2 public nonce, aggregate nonce, and partial signature wire-size serialization to avoid returning uninitialized NIF memory tails
Harden MuSig2 invalid-input handling by making key aggregation caches and signing sessions process-local resources instead of raw opaque binaries
Make MuSig2 secret nonce consumption concurrency-safe so only one concurrent partial_sign/4 call can use a secnonce resource
Ensure Schnorr signing and x-only pubkey NIF error paths erase keypair stack data before returning
Expose libsecp256k1's default hashed ECDH API through Secp256k1.ecdh/2
Improve API documentation with ExDoc callouts explaining libsecp256k1-specific APIs versus Erlang :crypto

Fixed unchecked enif_alloc_binary() return values that could cause undefined behavior under memory pressure
Fixed memory leaks on error paths in MuSig2 NIFs
Hardened secure_erase to use memory barriers, preventing compiler optimization of secret wiping
Fixed NIF hot upgrade support: context is now properly initialized and MuSig resource types are taken over
Upgrade lib to version v0.7.1