diff --git a/proxmox-auth-api/Cargo.toml b/proxmox-auth-api/Cargo.toml
index a92d3af3..789967ee 100644
--- a/proxmox-auth-api/Cargo.toml
+++ b/proxmox-auth-api/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "proxmox-auth-api"
-version = "0.3.5"
+version = "0.4.0"
 authors.workspace = true
 edition.workspace = true
 license.workspace = true
diff --git a/proxmox-auth-api/debian/changelog b/proxmox-auth-api/debian/changelog
index e193aa9f..93ab6b62 100644
--- a/proxmox-auth-api/debian/changelog
+++ b/proxmox-auth-api/debian/changelog
@@ -1,3 +1,17 @@
+rust-proxmox-auth-api (0.4.0) bookworm; urgency=medium
+
+  * move to hmac signing for csrf tokens
+
+  * use constant time comparison for csrf tokens
+
+  * add ability to use hmac singing in keyring
+
+  * move to Ed25519 signatures
+
+  * move signing into the private key
+
+ -- Proxmox Support Team <support@proxmox.com>  Wed, 22 May 2024 15:58:54 +0200
+
 rust-proxmox-auth-api (0.3.5) bookworm; urgency=medium
 
   * implement `Display` for `Realm{, Ref}`
diff --git a/proxmox-auth-api/debian/control b/proxmox-auth-api/debian/control
index b29df45e..f9e111e1 100644
--- a/proxmox-auth-api/debian/control
+++ b/proxmox-auth-api/debian/control
@@ -29,10 +29,10 @@ Provides:
  librust-proxmox-auth-api+default-dev (= ${binary:Version}),
  librust-proxmox-auth-api-0-dev (= ${binary:Version}),
  librust-proxmox-auth-api-0+default-dev (= ${binary:Version}),
- librust-proxmox-auth-api-0.3-dev (= ${binary:Version}),
- librust-proxmox-auth-api-0.3+default-dev (= ${binary:Version}),
- librust-proxmox-auth-api-0.3.5-dev (= ${binary:Version}),
- librust-proxmox-auth-api-0.3.5+default-dev (= ${binary:Version})
+ librust-proxmox-auth-api-0.4-dev (= ${binary:Version}),
+ librust-proxmox-auth-api-0.4+default-dev (= ${binary:Version}),
+ librust-proxmox-auth-api-0.4.0-dev (= ${binary:Version}),
+ librust-proxmox-auth-api-0.4.0+default-dev (= ${binary:Version})
 Description: Tickets, API and Realm handling - Rust source code
  Source code for Debianized Rust crate "proxmox-auth-api"
 
@@ -52,8 +52,8 @@ Depends:
  librust-serde-json-1+default-dev
 Provides:
  librust-proxmox-auth-api-0+api-dev (= ${binary:Version}),
- librust-proxmox-auth-api-0.3+api-dev (= ${binary:Version}),
- librust-proxmox-auth-api-0.3.5+api-dev (= ${binary:Version})
+ librust-proxmox-auth-api-0.4+api-dev (= ${binary:Version}),
+ librust-proxmox-auth-api-0.4.0+api-dev (= ${binary:Version})
 Description: Tickets, API and Realm handling - feature "api"
  This metapackage enables feature "api" for the Rust proxmox-auth-api crate, by
  pulling in any additional dependencies needed by that feature.
@@ -66,17 +66,17 @@ Depends:
  librust-proxmox-auth-api-dev (= ${binary:Version}),
  librust-const-format-0.2+default-dev,
  librust-lazy-static-1+default-dev (>= 1.4-~~),
- librust-proxmox-schema-3+api-macro-dev (>= 3.1.0-~~),
- librust-proxmox-schema-3+api-types-dev (>= 3.1.0-~~),
- librust-proxmox-schema-3+default-dev (>= 3.1.0-~~),
+ librust-proxmox-schema-3+api-macro-dev (>= 3.1.1-~~),
+ librust-proxmox-schema-3+api-types-dev (>= 3.1.1-~~),
+ librust-proxmox-schema-3+default-dev (>= 3.1.1-~~),
  librust-regex-1+default-dev (>= 1.5-~~),
  librust-serde-1+default-dev,
  librust-serde-1+derive-dev,
  librust-serde-plain-1+default-dev
 Provides:
  librust-proxmox-auth-api-0+api-types-dev (= ${binary:Version}),
- librust-proxmox-auth-api-0.3+api-types-dev (= ${binary:Version}),
- librust-proxmox-auth-api-0.3.5+api-types-dev (= ${binary:Version})
+ librust-proxmox-auth-api-0.4+api-types-dev (= ${binary:Version}),
+ librust-proxmox-auth-api-0.4.0+api-types-dev (= ${binary:Version})
 Description: Tickets, API and Realm handling - feature "api-types"
  This metapackage enables feature "api-types" for the Rust proxmox-auth-api
  crate, by pulling in any additional dependencies needed by that feature.
@@ -93,8 +93,8 @@ Depends:
  librust-pam-sys-0.5+default-dev
 Provides:
  librust-proxmox-auth-api-0+pam-authenticator-dev (= ${binary:Version}),
- librust-proxmox-auth-api-0.3+pam-authenticator-dev (= ${binary:Version}),
- librust-proxmox-auth-api-0.3.5+pam-authenticator-dev (= ${binary:Version})
+ librust-proxmox-auth-api-0.4+pam-authenticator-dev (= ${binary:Version}),
+ librust-proxmox-auth-api-0.4.0+pam-authenticator-dev (= ${binary:Version})
 Description: Tickets, API and Realm handling - feature "pam-authenticator"
  This metapackage enables feature "pam-authenticator" for the Rust proxmox-auth-
  api crate, by pulling in any additional dependencies needed by that feature.
@@ -110,8 +110,8 @@ Depends:
  librust-percent-encoding-2+default-dev (>= 2.1-~~)
 Provides:
  librust-proxmox-auth-api-0+ticket-dev (= ${binary:Version}),
- librust-proxmox-auth-api-0.3+ticket-dev (= ${binary:Version}),
- librust-proxmox-auth-api-0.3.5+ticket-dev (= ${binary:Version})
+ librust-proxmox-auth-api-0.4+ticket-dev (= ${binary:Version}),
+ librust-proxmox-auth-api-0.4.0+ticket-dev (= ${binary:Version})
 Description: Tickets, API and Realm handling - feature "ticket"
  This metapackage enables feature "ticket" for the Rust proxmox-auth-api crate,
  by pulling in any additional dependencies needed by that feature.