- 28 Feb, 2021 10 commits
-
-
Katharina Fey authored
-
Katharina Fey authored
-
-
-
(CVE is about stack consumption -- probably not relevant to our use in tests.) Fixes: CVE-2019-25001
-
This is the same version of base64 as used by pbkdf2.
-
This is the same version of rand as used by pbkdf2.
-
blake2 0.8.1 fixed an issue where HMAC-BLAKE2 results were just completely wrong. Naturally we have to update our tests, because we were testing we got an incorrect value! This upgrades to the latest version of blake2. There are more recent versions of pbkdf2 and hmac, but here I've chosen to go to the latest versions that are compatible with the latest version of crypto-mac supported by blake2. Fixes: CVE-2019-16143
-
miscreant is deprecated in favour of aes-siv (according to the author -- this doesn't seem to be publicly documented yet). Additionally, with the version of miscreant we were using it wasn't even possible to resolve the development dependencies, because it depended on sutble 0.3.0, which has been yanked. One thing to note is that aes-siv enforces the nonce length (to 96 bits in our case). Before we were passing in a whole 512-bit key, which AFAICT miscreant happily accepted.
-
0.4.0-beta depends on subtle 0.3.0, which has been yanked.
-
- 15 Sep, 2018 3 commits
-
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
- 28 Jun, 2018 4 commits
-
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
- 26 Jun, 2018 2 commits
-
-
Katharina Fey authored
-
Katharina Fey authored
-
- 25 Jun, 2018 21 commits
-
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-
Katharina Fey authored
-