0.2.0

What's Changed

• Add GitHub actions CI workflow by @diego-juicebox in #1
• Start agent, HSM, store, actors with cluster initialization by @diego-juicebox in #2
• Add client request path, including load balancers by @diego-juicebox in #3
• MerkleRadix Tree by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/4
• Verify Merkle Proof by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/5
• agent: Fix out-of-order log appends by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/6
• Merkle refactors by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/7
• Move read out of Tree and into new agent module by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/8
• verify tree invariants during tests by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/9
• Create additional HSM groups by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/10
• hsm: Reject requests when the partition doesn't own the uid by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/11
• fix incorrect leaf deletion when re-inserting the same key/value by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/12
• Add TreeOverlay by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/13
• Add prefix to InteriorNode hash + tests by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/14
• Add ownership transfer protocol by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/15
• Add split tree operation to Merkle Tree. by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/16
• UserId refactor To TenantId/UserId/RecordId by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/17
• Merkle Tree Integration by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/18
• Replace DataChange enum with Option by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/19
• use RecordId directly as key type in merkle tree by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/20
• Change MerkleHasher to plain Sha256 from Hmac by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/21
• Update main to insert some records before splitting the groups by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/22
• Secure Value Recovery integration with MVP by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/23
• Change client-loadbalancer network from Actix to HTTP by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/24
• Delete reference server by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/25
• Port agent from actix to hyper by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/27
• Support arbitrary split/merge on merkle tree by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/26
• Support tree merge during transfer in by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/28
• Breakup merkle source by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/29
• http'ify interface to store by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/30
• Fix bugs related to removing old items from the store by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/31
• Remove Delta type by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/32
• bigtable hello world by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/33
• Track Prefix+Hash as node identity through StoreDelta & Store by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/34
• Make TreeStoreReader an async trait by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/35
• add path_lookup to TreeStoreReader trait by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/36
• Http'ify HSM by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/38
• Replace in-memory store with Bigtable by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/37
• Add work-around for hyper bug relating to RST's from server by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/39
• Small misc by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/41
• remove hash from LeafNode / InteriorNode structs by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/40
• Encrypt leaf by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/43
• Bigtable follow up by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/44
• Move HSM to own process by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/45
• Cross compile/test to 32bit PowerPC by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/48
• Split out separate hsmcore crate in workspace by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/49
• Make load balancer and agent separate processes by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/50
• Build hsmcore without std by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/51
• Switch to ciborium for serialization (no_std friendly) by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/52
• make hsmcore no_std by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/53
• remove third party bitvec from hsmcore and impl our own by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/54
• Some hsmcore refactors to enable entrust impl's by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/55
• Add HSM benchmark by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/56
• Fix proof crash from benchmark by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/57
• Defer bigtable deletes so slow concurrent readers can access nodes by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/58
• Entrust HSM & Agent implementations by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/60
• free up some space on CI image by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/62
• Attempt graceful recovery from SEEWorld crash by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/61
• lb refresh on schedule instead of per request by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/63
• Make tree overlay configurable by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/65
• log hsm execution time at hsm client & entrust transport by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/64
• improve read_last_log_entry by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/67
• Add OpenTelemetry tracing by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/66
• instrument entrust inner rpc by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/68
• client: Rename "password" to "tag" to match docs by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/69
• Instrument collect_captures and some minor instrumentation tweaks. by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/71
• Replace GetRandom with rand traits by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/72
• Standardize quorum voting by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/73
• CI: Make clippy check tests, too by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/76
• move authtoken handling (prep for noisy) by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/77
• Update bigtable createTable calls so they work on real bigtable by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/78
• Allow bigtable prj/inst to be set on cmdline. deal with data/admin URL differences. by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/79
• HSM metrics reporting by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/74
• Client/LB connection should use HTTPS by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/80
• Reload TLS cert/key on SIGHUP by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/81
• remove HsmRpcError from ClientError by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/84
• Migrate demo and other references to be based off the sdk by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/83
• Bigtable v2 updates for log by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/85
• Bigtable integration tests by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/86
• Integrate Noise for client-HSM communication by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/87
• Bigtable Service discovery updates. by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/89
• Add support for running swift demo by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/88
• attempt to reduce mac CI time by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/90
• ensure CI fails when demo fails by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/91
• Hsm read/write state by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/93
• Switch AuthToken to being a base64-encoded JWT by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/94
• Initial version of cluster manager by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/95
• Fix flaky bigtable test by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/96
• add --keep-alive flag to the demo_runner by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/99
• Authenticate with Google Cloud (for Bigtable) by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/100
• fix timing issue in transfer affecting demo_runner by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/98
• Bulk capture by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/101
• Get client auth keys from Secret Manager by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/103
• Improve Bigtable read chunk processing by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/105
• Switch to local fork of gcp_auth, etc by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/104
• Agent driven NVRAM writing & updated commit handling. by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/102
• WASM demo by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/106
• Trim the prefix of the in-memory log at commit time by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/107
• Fix vuln alert for h2 0.3.16 by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/110
• cache peer lookups in commit loop by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/108
• Move towards crypto we plan to use by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/111
• Add support for pin hashing by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/113
• Return guesses remaining in Recover2Response by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/109
• support client migrations by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/114
• Group Leadership transfer by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/112
• Add script to build and upload code to Google Cloud Storage by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/116
• breakup cluster.rs by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/117
• Split load balancer into new crate, minor improvements by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/118
• Update to latest sdk repo version by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/119
• Cleanup client errors by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/115
• Update sdk submodule hash by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/121
• Small service discovery improvements by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/124
• EntrustAgent: load signed userdata from a file by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/123
• Ensure agent request futures run to completion by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/126
• Entrust Agent/HSM Have an explicit startup phase by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/122
• New Register + Recover Protocol by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/120
• Add snapshot tests for usage by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/125
• pin PowerPC CI to known good rust nightly build by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/127
• Move entrust host bindgen + helpers to own module by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/128
• Support software realm compatible SDK by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/129
• NVRAM Initialization tool for Entrust HSMs by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/131
• refactor realm keys by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/132
• Disallow transferring ownership from a group to itself by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/134
• reject large requests by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/130
• Improve various log and error messages by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/135
• Combine http_hsm binary into agent by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/133
• Expand cluster-cli tool to be able to manage and use clusters by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/136
• Set HTTP timeout by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/138
• Entrust: Create and use security world keys for realm keys by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/137
• Add cluster_bench benchmark by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/139
• refuse SEEJobs larger than 1MB by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/140
• Check record_id & proof key match by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/142
• Use random nonce for leaf node encryption by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/141
• Move deriving realm keys out to software hsm agent by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/143
• move demo runner port by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/145
• Add nvram re-init option, add dev feature by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/144
• track some bigtable append metrics and send them to Datadog. by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/146
• delete some TODO's that were done by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/149
• Fix assimilate bugs by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/147
• Misc diagnostics improvements by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/148
• Move things into new agent_core and software_agent crates by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/150
• Update x25519-dalek and VOPRF, which both use curve25519-dalek by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/151
• Add metrics for commit latency & index by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/152
• Log in json format if not a tty by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/153
• cluster-cli: Fix groups display with unavailable HSMs by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/154
• Improve tracing by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/155
• Add Load Balancer request metrics by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/156
• Add constants for RecordId sizes by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/157
• quieten down http error logging by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/158
• trace more stuff in entrust-agent by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/160
• Illegal metrics client improvements by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/159
• Paging of SEEJob responses by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/162
• have services exit the process on a panic by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/166
• Use RealmId as auth token audience by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/164
• Send Oprf Seed instead of key during registration by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/165
• Add basic unit tests to hsm app by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/167
• Add Merkle tree node cache on agents by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/168
• Update clap dependency by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/170
• loam.me -> juicebox.xyz by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/171
• Secret share salt across realms by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/172
• cluster_bench: Add intentionally invalid auth benchmark option by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/174
• Improve merkle tree node serialization by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/173
• cluster_bench: Add http(s) pool option (--conn-pool) by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/175
• cluster_bench: Allow CLI control over generated usernames by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/176
• Add service-check option to cluster_bench by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/177
• agent: Add last log entry cache by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/178
• Allow configuring SDK with json by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/179
• Fix module comment (make latest Clippy happy) by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/181
• Add docs for HSM RPCs by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/180
• Add overview and code structure to README by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/182
• Update sdk submodule by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/183
• Marshall bytes more efficiently by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/184
• Revise how HSMs create and join realms/groups to prevent operator error by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/185
• Add sharks benchmark by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/187
• Generate merkle tree graphs for whitepaper by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/186
• protocol changes by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/188
• load_balancer: Add a /livez endpoint that always returns 200 by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/191
• generate tenant accounting metrics by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/190
• include partition ownership/size in workload scoring for the cluster manager by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/196
• entrust: get rnd() in big chunks by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/193
• Update merkle tree hashing based on audit/paper feedback by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/197
• don't recursively panic if abort() doesn't work by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/195
• add limit on response of nvram read by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/194
• sample traces at a lower rate for busy background tasks by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/201
• Update SDK, which no longer uses secrecy by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/204
• rename dirs entrust-XX to entrust_XX by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/206
• rename cluster-cli to cluster_cli by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/207
• Move cluster manager to its own crate by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/209
• Limit size of load balancer request without buffering the entire thing in memory first by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/210
• Deal with bigtable connections getting closed on us during writes. by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/205
• Only write to NVRAM if the state has changed by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/211
• Switch from is-terminal crate to std::io::IsTerminal by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/218
• write user record consistently by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/216
• Updates to constructing MACs by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/217
• pad serialized user records by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/215
• Use hashbrown with either randomized hasher or explicit opt-out by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/219
• merkle tree paper by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/223
• Clean up and do some TODOs by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/224
• Service discovery updates by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/227
• Move http_client and demo to sdk by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/225
• Move some more code to support integration tests by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/226
• Get rid of 'threadsafe-futures' feature by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/228
• Repro reorg by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/229
• Setup reproducable builds using docker image by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/232
• Revised protocol to be derivative of JKKX16 with secret sharing over Curve25519 by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/230
• Extract hsm_api out of hsmcore by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/231
• rename hsmcore to hsm_core by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/233
• Update mac construction by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/234
• delete orphaned file by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/235
• scripts for pushing a full entrust build to GS for deployment by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/236
• Additional unit tests by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/237
• make padded user record larger to deal with varint encoding of u16's by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/238
• More tests by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/239
• Don't register LB in service discovery by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/240
• reproducible_builds: Take Entrust ZIP file as input, etc by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/242
• Migrate protocol to align with JKKX17 by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/244
• Add support for signed oprf public keys by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/245
• Use new juicebox-sdk-oprf crate by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/246
• Remove tracing in HSM app.rs by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/247
• Support SDK crate reorganization by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/248
• Fix/improve some build stuff by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/251
• Add ability to stepdown a group to the cluster_cli tool by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/250
• Leadership append battle tests & fixes by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/249
• fix recording of NVRAM length by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/252
• Hsm_core cleanup by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/253
• Run entrust_agent with --reinitialize for typical tests by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/255
• record pre-padded size by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/257
• collect & publish entrust stats by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/254
• Updates for Entrust SDK/firmware 13.3 by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/256
• merge entrust13.3 branch into main by @diego-juicebox in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/258
• HSM Panic handler by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/259
• Hsm core tests by @simon-loam in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/260
• Return 426 error for SDKs with old version by @Imperiopolis in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/261

New Contributors

• @Imperiopolis made their first contribution in https://github.com/juicebox-systems/juicebox-hsm-realm/pull/83

Full Changelog: https://github.com/juicebox-systems/juicebox-hsm-realm/commits/0.2.0