Verified Commit c38f3846 authored by Alyssa Ross's avatar Alyssa Ross Committed by Katharina Fey
Browse files

Update RustCrypto crates

blake2 0.8.1 fixed an issue where HMAC-BLAKE2 results were just
completely wrong.  Naturally we have to update our tests, because we
were testing we got an incorrect value!

This upgrades to the latest version of blake2.  There are more recent
versions of pbkdf2 and hmac, but here I've chosen to go to the latest
versions that are compatible with the latest version of crypto-mac
supported by blake2.

Fixes: CVE-2019-16143
parent 392e6fd8
......@@ -10,9 +10,9 @@ authors = ["Katharina Fey <kookie@spacekookie.de>"]
[dependencies]
rand = "0.5"
pbkdf2 = "0.2"
blake2 = "0.7"
hmac = "0.6"
pbkdf2 = "0.4"
blake2 = "0.9"
hmac = "0.8"
base64 = "0.9"
serde = "1.0"
......
......@@ -65,6 +65,6 @@ mod workflow {
#[test]
fn printers() {
let k1 = Key::from_pw(KeyType::Aes128, "192837465", "jane");
assert_eq!(&format!("{:?}", k1), "Key: type: Aes128 – \"Mvd0jg==\"");
assert_eq!(&format!("{:?}", k1), "Key: type: Aes128 – \"4HaDrA==\"");
}
}
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment