NEWS for the sigsum-c 1.1.0 release

	This is a minor update of the sigsum-c library. The new
	version is fully compatible with with version 1.0.0 with one
	minor exception, see below.

	The shared library name is libsigsum.so.0.1, with unchanged
	soname libsigsum.so.0.

	Incompatible change:

	* The list of of cosignatures in struct sigsum_proof is now
	  sorted by witness key hash. Out of order cosignatures are
	  ignored, making verification of some otherwise valid proofs
	  return failure. The required sorting is taken care of by
	  sigsum_proof_parse, but applications that populate a
	  sigsum_proof by other means must be updated accordingly.

	New features:

	* New configure flag --disable-tools, to not build and install
	  the sigsum-c-verify tool. Contributed by Florian Larysch.

	Improvements:

	* The returned error message from sigsum_proof_verify now
	  makes a distinction between problems with the log signature
	  and problems with the leaf signature.

NEWS for the sigsum-c 1.0.0 release

	This is the initial release of the sigsum-c library. For API
	documentation, see doc/sigsum-c.md, for build instructions,
	see README.md.

	When building a shared library from this release, the library
	name is libsigsum.so.0.0, with soname libsigsum.so.0.

	Main features:

	* Support for parsing the ASCII representation of Sigsum
	  policy files, Sigsum proofs, and OpenSSH public key files.

	* Support for verifying Sigsum proofs. The main verification
	  functions are written with constrained embedded systems in
	  mind. They work with a bytecode representation of the
	  policy's quorum rule, and do not require use of the ASCII
	  representation.

	* A command line tool sigsum-c-verify, intended to be
	  compatible with the sigsum-verify tool from the sigsum-go
	  package (the main missing feature in sigsum-c-verify is
	  support for named policies).
