summaryrefslogtreecommitdiffstats
path: root/Cargo.lock
AgeCommit message (Collapse)Author
2023-06-22openpgp: Honor `OPENSSL_NO_OCB` build parameter.Wiktor Kwapisiewicz
- If OpenSSL is built with the `OPENSSL_NO_OCB` directive it will not have OCB. - Stop advertising OCB as supported in that case. - Use GCM as the default algorithm if OCB is not available. - Tested by appending `println!("cargo:rustc-cfg=osslconf=\"{}\"", "OPENSSL_NO_OCB");` to build.rs. - See https://github.com/sfackler/rust-openssl/pull/1952
2023-06-21openpgp: Fix compilation on wasm.Milo Moisson
2023-06-15net: Use z-base-32 instead of zbase32 for a permissive licenseDylan Aïssi
zbase32 is distributed under LGPL-3+ which is incompatible with some projects. Use the MIT licensed implementation z-base-32 instead. Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>
2023-05-22openpgp: Implement GCM mode.Justus Winter
- The Galois/Counter mode for block ciphers is a FIPS-approved AEAD mode. It will be added to the upcoming OpenPGP standard so that we have a FIPS-compliant subset of OpenPGP.
2023-05-22openpgp: Implement OCB mode using the Nettle backend.Justus Winter
- Nettle 3.9 and up support the authenticated encryption mode OCB.
2023-05-19autocrypt: Release 0.25.1.autocrypt/v0.25.1Neal H. Walfield
* Notable fixes - A parser bug was fixed. We classify this as a low-severity issue, because Rust correctly detects the out-of-bounds access and panics. If an attacker controls the input, they may be able to use this bug to cause a denial of service.
2023-05-17buffered-reader: Release 1.2.0.buffered-reader/v1.2.0Neal H. Walfield
* Changes in 1.2.0 ** Notable changes - BufferedReader::copy is like std::io::copy, but more efficient. * Notable fixes - A parser bug was fixed. We classify this as a low-severity issue, because Rust correctly detects the out-of-bounds access and panics. If an attacker controls the input, they may be able to use this bug to cause a denial of service.
2023-05-16openpgp: Release 1.16.0.openpgp/v1.16.0Neal H. Walfield
2023-05-16Update Cargo.lock.Neal H. Walfield
2023-05-16autocrypt: Upgrade base64.Neal H. Walfield
- Upgrade base64 to version 0.21.
2023-05-16net: Upgrade base64.Neal H. Walfield
- Upgrade base64 to version 0.21.
2023-05-16openpgp: Upgrade base64.Neal H. Walfield
- Upgrade base64 to version 0.21.
2023-05-05openpgp: Release 1.15.0openpgp/v1.15.0Neal H. Walfield
2023-05-05openpgp: Remove foreign-types-shared dependencyNeal H. Walfield
- It's not used.
2023-05-05openpgp: Upgrade criterionNeal H. Walfield
2023-05-05openpgp: Update Cargo.lockNeal H. Walfield
2023-05-03openpgp: Update rust-crypto dependenciesNeal H. Walfield
- Note: `x25519-dalek` is broken. It depends on zeroize `=1.3`, but crates like rsa depend on newer versions of zeroize. - See https://github.com/WebAssembly/wasi-crypto/issues/63 , https://github.com/dalek-cryptography/x25519-dalek/issues/92 . - Resolve this by using `x25519-dalek-ng`, which fixes this issue. This is a common workaround, and is also used by, for instance OpenMLS: https://github.com/openmls/openmls/blob/3ff090fd4881cb796d4688f7f174929a7521dbf1/openmls_rust_crypto/README.md?plain=1#L3 - Fixes #910.
2023-05-03openpgp: Update win-crypto-ng to 0.5Neal H. Walfield
- Fixes #1014
2023-04-17Bump bindgen to 0.63.0.Justus Winter
- Also bump syn so that we can get bindgen 0.63. - This fixes a build error that we have seen on mingw builds: https://gitlab.com/sequoia-pgp/sequoia/-/jobs/4122192520
2023-03-25openpgp: Update lalrpop to 0.19.9 to clean up deprection warningJeong YunWon
2023-03-24net: Release 0.27.0net/v0.27.0Neal H. Walfield
2023-03-23openpgp: Release 1.14.0openpgp/v1.14.0Neal H. Walfield
2023-03-21openpgp: Cache fingerprint calculations.Justus Winter
- Fixes #645.
2023-03-20openpgp: Add check for CAST5.Wiktor Kwapisiewicz
- OpenSSL can be compiled with no support for CAST5. - This will be indicated by setting `osslconf` variable to `OPENSSL_NO_CAST`. - See https://github.com/sfackler/rust-openssl/pull/1786
2023-03-15openpgp: Bump nettle to 7.2.2.Justus Winter
- Notably, this zeros symmetric encryption keys in memory once we're done encrypting or decrypting.
2023-03-13openpgp: Bump botan to 0.10.1 to avoid raising our MSRV.Justus Winter
2023-03-08openpgp: Add a new backend based on the Botan cryptographic library.Justus Winter
2023-02-23sq: Move to https://gitlab.com/sequoia-pgp/sequoia-sqJustus Winter
- From now on, development will take place in its own repository at https://gitlab.com/sequoia-pgp/sequoia-sq. The first commit there is b89c172c1d6a2a78b4b4807ce6c4af14d418f0a6.
2023-02-21sq: Release 0.28.0.sq/v0.28.0Justus Winter
- This is the last release of the sq frontend from this repository. Development will continue here: https://gitlab.com/sequoia-pgp/sequoia-sq
2023-02-21sq: Avoid deprecated chrono interfaces.Justus Winter
- Also bump chrono to 0.4.23 so that we can use DateTime::date_naive. - The bump was necessary because cargo publish will use the newest version as opposed to the one recorded in Cargo.lock. The locked version neither has DateTime::date_naive, nor does it deprecate the old interface.
2023-02-02ipc: Release 0.30.1.ipc/v0.30.1Neal H. Walfield
2023-02-01ipc: Release 0.30.0.ipc/v0.30.0Neal H. Walfield
2023-01-26net: Switch to OpenSSL for DNSSEC validation.Wiktor Kwapisiewicz
2023-01-11net: Release 0.26.0.net/v0.26.0Justus Winter
2023-01-11autocrypt: Release 0.25.0.autocrypt/v0.25.0Justus Winter
2023-01-07ipc: Make gnupg::KeyPair usable in async contexts.Justus Winter
- See if we are executing under a tokio async runtime, and if so, start a new one on a different thread. - This works around a design problem with the openpgp::crypto::{Signer, Decryptor} traits that use sync functions, but our implementation of the traits is async. We used to unconditionally start a tokio runtime and block to hide the async nature of the implementation, but that leads to panics if the current thread is already managed by a tokio runtime. This is a really easy mistake to make, and is not detected by the type system.
2023-01-06openpgp: Release v1.13.0.openpgp/v1.13.0Neal H. Walfield
2023-01-06buffered-reader: Release 1.1.4.buffered-reader/v1.1.4Neal H. Walfield
2023-01-06buffered-reader: Set the buffer size using an environment variableNeal H. Walfield
- If the environment variable `SEQUOIA_BUFFERED_READER_BUFFER` is set, and we are able to parse it as a usize, use it as the default buffer size.
2022-12-23ipc: Bump clap to 3.Justus Winter
2022-12-22openpgp: Add OpenSSL cryptographic backend.Wiktor Kwapisiewicz
- Adds the backend behind `crypto-openssl` feature. - Add CI configuration to run tests with the new backend. - See #333.
2022-12-13openpgp: Release 1.12.0.openpgp/v1.12.0Neal H. Walfield
2022-11-18openpgp: Release 1.11.0.openpgp/v1.11.0Neal H. Walfield
2022-11-07ipc: Release 0.29.0.Nora Widdecke
2022-09-29openpgp, sq: Update dependency rpassword to 6.Nora Widdecke
- rpassword underwent some rework. The successor of read_password_from_tty seems to be prompt_password, relevant commits to rpassword: - e6023757df00a67a1e16796db50c5ffad41b6268 - 2edf6cee07573ec4aa86531e6177ee90331d5c60
2022-09-20sq: write out manual pages for sqLars Wirzenius
Generate an all-in-one manual page sq.1, and a separate manual page for each leaf level subcommand: sq-armor.1, seq-key-generate.1, etc. We've previously had a grouping of subcommands per top level subcommand: all sub-subcommands of "sq key" would go into sq-key.1. However, I found that to be hard to follow, as a reader. I prefer either all in one, or just the one subcommand in a page. Use custom code to generate the manual page, in sq/src/man.rs, because I wasn't happy with clap_mangen output, and wanted something more idiomatic. The custom code is a little specific for sq, and may or may not be possible to use for other programs. To trigger manual page generation, run sq with SQ_MAN set to the name of a directory where the manual pages should be written, when running sq. This was an easier way to do this than a new, hidden subcommand ("sq generate-man" or something like that). Add the roff crate as a dependency. It's used to generate troff source code for manual pages. Generating correct troff is tricky enough that there's no point in doing it manually. Move the "SEE ALSO" section in the "after_help" text for "sq verify" into the "before_help" so that it doesn't end up as plain text in the manual page. This was an easier change than making the "sq help text markup" parser in sq/src/man.rs understand the SEE ALSO heading. Sponsored-by: pep.foundation
2022-09-16sq: port to new SubplotLars Wirzenius
Update the dependency on Subplot to 0.5.0. Subplot 0.5.0 requires document metadata (title, bindings files, etc) to be in its own YAML file, where previous versions required it to be embedded in Markdown (still as YAML). Move the metadata to sq.subplot and fix what breaks. Sponsored-by: pep.foundation
2022-09-15net: Add support for DANE certificate retrieval.Wiktor Kwapisiewicz
- Add dane::get. - Make EmailAddress functions pub(crate) to use them from the DANE module. - Add tests for generating correct FQDN. - See #865.
2022-07-29sq: update dependencies on Subplot creates to new releaseLars Wirzenius
This will let `sq` not depend on `clap` version 2, even transitively. Sponsored-by: pep.foundation
2022-07-19sq: Release 0.27.0.sq/v0.27.0Justus Winter
generated by cgit v1.2.3 (git 2.25.1) at 2024-08-27 02:24:27 +0000