Alyssa Ross authored Feb 27, 2021 and Katharina Fey committed Feb 28, 2021

(CVE is about stack consumption -- probably not relevant to our use in
tests.)

Fixes: CVE-2019-25001

Alyssa Ross authored Feb 27, 2021 and Katharina Fey committed Feb 28, 2021

This is the same version of base64 as used by pbkdf2.

Alyssa Ross authored Feb 27, 2021 and Katharina Fey committed Feb 28, 2021

This is the same version of rand as used by pbkdf2.

Alyssa Ross authored Feb 27, 2021 and Katharina Fey committed Feb 28, 2021

blake2 0.8.1 fixed an issue where HMAC-BLAKE2 results were just
completely wrong.  Naturally we have to update our tests, because we
were testing we got an incorrect value!

This upgrades to the latest version of blake2.  There are more recent
versions of pbkdf2 and hmac, but here I've chosen to go to the latest
versions that are compatible with the latest version of crypto-mac
supported by blake2.

Fixes: CVE-2019-16143

Alyssa Ross authored Feb 27, 2021 and Katharina Fey committed Feb 28, 2021

miscreant is deprecated in favour of aes-siv (according to the author --
this doesn't seem to be publicly documented yet).  Additionally,
with the version of miscreant we were using it wasn't even possible to
resolve the development dependencies, because it depended on sutble
0.3.0, which has been yanked.

One thing to note is that aes-siv enforces the nonce length (to 96
bits in our case).  Before we were passing in a whole 512-bit key,
which AFAICT miscreant happily accepted.

Alyssa Ross authored Feb 27, 2021 and Katharina Fey committed Feb 28, 2021

0.4.0-beta depends on subtle 0.3.0, which has been yanked.