PAKEs

PAKEs copied to clipboard

SRP: Use constant time comparisons of secrets

5

In `srp/src/server.rs` for example, we see ```rust if user_proof == d.result().as_slice() { ``` where the types are byte slices, `&[u8]`. I suspect that the same kind of thing appears throughout...

jpgoldberg

Dependencies are outdated

6

See https://deps.rs/repo/github/RustCrypto/PAKEs and https://github.com/magic-wormhole/magic-wormhole.rs/issues/114

piegamesde

no_std?

5

I'd like to start working on optional no_std support, is there anything major preventing this, and if not, is it the sort of thing you would like to see merged?

fmckeogh

deps: update to newer rand/hkdf crates

8

I don't know what the Rust convention is, but when I see `cargo outdated` telling me that there are newer versions of dependencies that we might use, I'm tempted to...

warner

Bumps [num-traits](https://github.com/rust-num/num-traits) from 0.2.17 to 0.2.19. Changelog Sourced from num-traits's changelog. Release 0.2.19 (2024-05-03) Upgrade to 2021 edition, MSRV 1.60 The new Float::clamp limits values by minimum and maximum Contributors:...

dependabot[bot]

Bump to pre-releases

1

- password-hash =0.6.0-pre.0 - digest =0.11.0-pre.8 - curve25519-dalek =4.2.0-pre - scrypt =0.12.0-pre.0 - sha1 =0.11.0-pre.3 - sha2 =0.11.0-pre.3 - hkdf =0.13.0-pre.3

baloo

Bumps [num-bigint](https://github.com/rust-num/num-bigint) from 0.4.4 to 0.4.5. Changelog Sourced from num-bigint's changelog. Release 0.4.5 (2024-05-06) Upgrade to 2021 edition, MSRV 1.60 Add const ZERO and implement num_traits::ConstZero Add modinv methods for...

dependabot[bot]

Bumps [postcard](https://github.com/jamesmunns/postcard) from 1.0.8 to 1.0.10. Release notes Sourced from postcard's releases. v1.0.10 What's Changed Check that target supports atomic pointer operations before defining max size for Arc by @​sjudson...

dependabot[bot]