Commit graph

2283 commits

Author SHA1 Message Date
Michael Rosenberg
8319adbff4
Bumped MSRV to 1.56.1 and added some documentation about semver (#218)
Also fixed benchmark build
2022-10-16 18:51:26 -04:00
Alex Xiong
9638ab40a5
Made ExpandedSecretKey private to avoid signing key oracle (#205)
This fix eliminates a scenario where a user misuses the `ExpandedSecretKey` API
in a way that leaks the user's secret key. In short, if a user sends
`ExpandedSecretKey::sign(sk, msg, pk1)` followed by
`ExpandedSecretKey::sign(sk, msg, pk2)`, where `pk1 != pk2`, a passive
adversary [can easily][0] derive `sk`. To mitigate this, we remove the API
entirely.

[0]: https://github.com/MystenLabs/ed25519-unsafe-libs
2022-10-15 15:04:03 -04:00
Isis Lovecruft
c3ed99bf93
Bump curve25519-dalek version to 4.0.0-pre.2. 2022-02-16 21:26:01 +00:00
Isis Lovecruft
f78215308a
Merge branch 'develop' into release/4.0 2022-02-16 20:57:44 +00:00
Isis Lovecruft
8abb22bcaf
Merge branch 'main' into develop 2022-02-16 20:55:36 +00:00
Isis Lovecruft
0d49dfacf6
Merge remote-tracking branch 'dalek/main' into main 2022-02-16 20:55:08 +00:00
Isis Lovecruft
f7381ac64c
Pin zeroize dependency to >=1, <1.4 to relax bounds for downstreams.
As suggested by @tarcieri in #362. See also commit b6a7406.
2022-02-16 20:52:33 +00:00
isis agora lovecruft
6820effb44
Merge pull request #381 from bitmold/patch-1
Update README.md
2022-02-01 23:58:18 +00:00
Isis Lovecruft
2ef1429665
Merge branch 'feature/digest-sha2-v0.10' into release/4.0 2022-02-01 23:53:44 +00:00
Isis Lovecruft
f9f0384aee
Bump sha2 and digest dependencies to 0.10. 2022-02-01 23:48:11 +00:00
Isis Lovecruft
71acc842c3
Merge branch 'develop' into release/4.0 2022-02-01 23:30:54 +00:00
Isis Lovecruft
bf95fcba24
Merge branch 'main' into develop 2022-02-01 23:30:13 +00:00
Isis Lovecruft
b6a7406c73
Pin zeroize dependency to =1.3.0 to maintain MSRV 1.41. 2022-02-01 23:29:41 +00:00
Isis Lovecruft
b131092c9b
Merge branch 'develop' into release/4.0 2022-02-01 23:28:22 +00:00
bitmold
b06df0376c
Update README.md
master -> main
2022-02-01 02:15:31 -05:00
Isis Lovecruft
3fc0108d7d
Merge branch 'release/2.0.0-pre.1' into release/2.0 2021-09-23 20:42:19 +00:00
Isis Lovecruft
ab38e36a4c
Update CHANGELOG. 2021-09-23 19:53:53 +00:00
Isis Lovecruft
73d4c2fe93
Update x25519-dalek version to 2.0.0-pre.1. 2021-09-23 19:53:44 +00:00
Isis Lovecruft
20d276ac14
Merge branch 'fix/msrv-1.51' into release/2.0 2021-09-23 19:15:51 +00:00
Isis Lovecruft
164563d79e
Update MSRV documentation in README. 2021-09-23 19:09:28 +00:00
Isis Lovecruft
841b3a65de
Relax version constraints for zeroize dependency. 2021-09-23 19:08:11 +00:00
Isis Lovecruft
8f3e4b1960
Bump MSRV to 1.51 for zeroize dependency. 2021-09-23 19:07:44 +00:00
Isis Lovecruft
9d7bccbd8e
Bump x25519-dalek version to 2.0.0-pre.0. 2021-09-15 01:07:48 +00:00
Isis Lovecruft
26c168b719
Merge branch 'release/2.0' into release/2.0.0-pre.0 2021-09-15 00:46:08 +00:00
Isis Lovecruft
db1640aa99
Merge branch 'develop' into release/2.0 2021-09-15 00:45:22 +00:00
Isis Lovecruft
8224a21489
Also run Github actions CI on PRs for releases. 2021-09-15 00:43:59 +00:00
Isis Lovecruft
6be61f178b
Remove unnecessary rand_core getrandom feature. 2021-09-15 00:16:58 +00:00
Isis Lovecruft
2bc5763103
Update CHANGELOG for 2.0.0-pre.0. 2021-09-15 00:13:09 +00:00
isis agora lovecruft
e870a3d8d6
Merge pull request #64 from PaulGrandperrin/patch-1
Update rand_core to 0.6
2021-09-15 00:06:49 +00:00
Isis Lovecruft
b1871b38b7
Merge branch 'main' into develop 2021-09-14 23:53:22 +00:00
Isis Lovecruft
53bb1a3989
Merge branch 'release/1.2' into main 2021-09-14 23:53:15 +00:00
Isis Lovecruft
ea047a218f
Bump x25519-dalek version to 1.2. 2021-09-14 23:08:36 +00:00
Isis Lovecruft
179986ac67
Update CHANGELOG for 1.2. 2021-09-14 23:08:22 +00:00
isis agora lovecruft
b6f7de1e4c
Merge pull request #71 from isislovecruft/feature/noise-secrets
Implement reused secret keys for Noise/X3DH/etc protocols
2021-09-14 22:47:04 +00:00
Isis Lovecruft
eef4de41c0
Disambiguate what kind of key in docstring. 2021-09-14 22:34:41 +00:00
Isis Lovecruft
edb9ec984e
Document that ReusableSecret is preferrable for Noise protocols. 2021-09-14 22:33:31 +00:00
Isis Lovecruft
588e48f8f2
Make ReusableSecret derive Clone. 2021-09-14 20:24:12 +00:00
Isis Lovecruft
3924797b59
Add note to StaticSecret that EphemeralSecret is recommended. 2021-09-14 20:23:38 +00:00
isis agora lovecruft
254e43debf
Merge pull request #78 from isislovecruft/feature/contributory-behaviour-check
Implement optional contributory behaviour check
2021-09-14 20:13:24 +00:00
Isis Lovecruft
91babd286f
Add a #[must_use] to the was_contributory check. 2021-09-14 19:51:02 +00:00
Isis Lovecruft
ad461f4f0f
Merge branch 'feature/github-actions' into main 2021-09-14 01:08:27 +00:00
Isis Lovecruft
ce37a8a047
Merge remote-tracking branch 'spacejam/tyler_optimize_compilation' into main 2021-09-14 01:07:25 +00:00
Isis Lovecruft
10cef49824
Add CI via Github actions. 2021-09-14 01:04:53 +00:00
isis agora lovecruft
da109a8e0f
Merge pull request #178 from gbaranski/fix/rust-analyzer-completions
fix: remove rust-analyzer breaking line
2021-09-14 00:08:22 +00:00
isis agora lovecruft
c17df35541
Merge pull request #175 from matteomonti/patch-1
Update README.md
2021-09-13 23:54:28 +00:00
isis agora lovecruft
86db7c9853
Merge pull request #168 from huitseeker/thread-fiat-backends
Threads the `fiat_{u64,u32}_backend` features through the feature set
2021-09-13 23:52:49 +00:00
isis agora lovecruft
37c5aaa020
Merge pull request #79 from isislovecruft/feature/github-actions
Add GitHub actions for CI and MSRV testing
2021-09-13 23:50:11 +00:00
Isis Lovecruft
18323afd63
Bisect to determine MSRV. 2021-09-13 23:44:57 +00:00
Isis Lovecruft
df03a9da16
Merge branch 'feature/github-actions' into main 2021-09-13 23:42:27 +00:00
Isis Lovecruft
a0a6c57f9e
Bisect to determine MSRV. 2021-09-13 22:38:34 +00:00