rust-crypto icon indicating copy to clipboard operation
rust-crypto copied to clipboard

Published 20 hours ago • verified publisher icon DaGenix

Add deprecation warning

Open DavidBM opened this issue 3 years ago • 2 comments

Hi!

So this crate in wonderful and helped a lot some time ago.

Said that, newest commit in this project dates from 5 years ago. Sometimes, when searching things like "scrypt rust" in search engines you get this repository as first result, which is dangerous as it wasn't maintained for 5 year now. See also: https://rustsec.org/advisories/RUSTSEC-2016-0005.html

I think at least this project can show a deprecation warning in the Readme in order to point to https://github.com/RustCrypto/ which is properly maintained.

Hope this PR comes well. And thanks for all the Job done on this crate.

DavidBM avatar Oct 21 '20 13:10 DavidBM

@DavidBM thanks for this notice. It helped me to distinguish pros and cons in this question: https://stackoverflow.com/questions/70701405/what-sha256-rust-implementation-take-for-no-std-embedded-device

dobromyslov avatar Jan 13 '22 18:01 dobromyslov

The @RustSec project has filed RUSTSEC-2016-0005 as an advisory that rust-crypto is unmaintained.

The advisory suggests several alternatives.

tarcieri avatar Apr 29 '22 14:04 tarcieri