v0.3.2          Beset on all sides by gamers

    Fixed:
      * TPM2 key creation on AMD Ryzen 5 7600X firmware TPMs
        (reported and validated by Lars Strojny)
        (https://twitter.com/lstrojny/status/1599182208752766976)
      * "Encryption failed" from libzfs when ^Ding in passphrase prompt

    Changed:
      * TPM2 Primary key name hash from SHA1 to SHA256,
        p.a. to recent tpm2-tss and tpm2-tools
      * TPM2 CreatePrimary parameters now explicitly fully configured
      * "0..23" TPM range to "[0, 23]" in manual
      * Render lists with correct widths in manual
      * swtpm "build" -> "install", since it's in Debian now

    New:
      * Style of Debian repo signing recommended in README

    Internal:
      * Simplified ingesting passphrase from helper

v0.3.1          Say you love me and I love the sound

    Fixed:
      * Accent instead of literal ~ in manuals
      * Missing includes for recent libstdc++

    Changed:
      * Manual paper size in tag artifact to A4
      * Needless awk -F\t -> cut
      * Needless sort | uniq -> LC_ALL=C sort -u

    Internal:
      * Deprecation warnings for the old OpenSSL hash streaing APIs silenced

v0.3.0          Slap the fuck out the deacon, he's reachin' for that book

    Fixed:
      * -u typoed as -y in zfs-tpm-list.8 OPTIONS

    New:
      * Integration with zfs-mount-generator(8):
        zfs-load-key@.service instances can now load tzpfms keys

    Changed:
      * TZPFMS_{VERSION,DATE} in the Makefile
        can now originate from the environment

v0.2.0          Don't you worry, pretty baby, we all run out of time

    Backward compatibility notes:
      * tzpfms <=0.1 can (obviously) not unseal PCR-backed keys
      * tzpfms <=0.1 can't load TPM2 keys
        in (PCR policy || passphrase) mode,
        nor properly clear them im either PCR modes,
        attempting to use the entire "0xHANDLE;alg:bank+alg:bank"
        metadata string as the handle

    Fixed:
      * Overlong shell pipelines, mostly inherited from ZFS initrd scripts
      * Literal %-formats to use proper PRI* macros for external types
      * Dead library dependency elimination on
      * Version injexion into manuals

    Changed:
      * Manuals now written in mdoc, not ronn, proof-read,
        and using sensible dataset names
      * Passphrase prompts always include dataset name/TPM back-end
      * TPM2 key creation metadata from
        "dataset RFC3339 version" to "stamp.ns dataset version"
      * Flags to include -g, link step to never invoke $STRIP
      * Cmdline dialect to not force POSIXLY_CORRECT
        and reject extraneous arguments
      * password => passphrase in manuals

    Removed:
      * Authors list from manuals
      * SEE ALSOs pointing to the git repository

    New:
      * Note when to regenerate the initrd manually for TPM1.X
      * ZFS 2.[01] compatibility note
      * $TZPFMS_PASSPHRASE_HELPER,
        running an external program to get a password;
        integrated with plymouth/systemd in initrd scripts
      * TZPFMS_PASSPHRASE_HELPER{,_MAN} make tunables,
        controlling the default (unset) value
      * tpm2_dictionarylockout in initrd, to match tpm_resetdalock
      * PCR binding with zfs-tpm*-change-key -P

    Internal:
      * CI uses apt-get instead of apt
      * Fold error setting into return line
      * Use parse_uint() from voreutils
        instead of hand-rolling std::from_chars()

v0.1.0          Initial release
