Brian Smith

There should be a way to indicate how long a crate has been unmaintained

1

Most of the "$crate has been unmaintained" advisories are for crates that have sat around for a while without any clear indication of maintenance and then after months somebody gets...

Revert "optimize constant_time_conditional_memxor for gcc".

4

This reverts commit 9b3ef1b3d34d09c40b999d05ca6a92c77a9345e3. It seems like the casts in the loop violate strict aliasing rules. This may result in a performance regression when GCC is used instead of Clang,...

ec/suite_b: Remove redundant assertion.

1

This eliminates the last `should_panic` test.

cpu/aarch64/windows: Use libstd instead of windows_sys.

6

Eliminate the windows-sys dependency on Aarch64. We believe there is no use for `no_std` support for this target.

Only `chunk_by` and `izip!` are used, and it is easy to replace both, to avoid the dependency.

Lock down GitHub Actions Security

2

Do for Rustls what we propose for ring in briansmith/ring#1256. I have submitted PR #676 to do the bare minimum of the GitHub Actions hardening. We still need to follow...

See #640. It seems like it is very easy to accidentally skip calling `if rd.any_left()` after parsing some input. If that check is skipped then unparsed garbage may remain, and/or...