serde-encrypt

serde-encrypt copied to clipboard

build(deps): update postcard requirement from 0.7 to 1.0

1

Updates the requirements on [postcard](https://github.com/jamesmunns/postcard) to permit the latest version. Changelog Sourced from postcard's changelog. 1.0.0 -> Unreleased Nothing, yet! 1.0.0-alpha.4 -> 1.0.0 Added experimental derive features Made Flavor fields...

dependabot[bot]

Updates the requirements on [chacha20poly1305](https://github.com/RustCrypto/AEADs) to permit the latest version. Commits 9496510 chacha20poly1305 v0.8.2 (#362) eb28f19 aes-gcm v0.9.4 (#361) 82d7c9b Relax subtle and zeroize requirements (#360) 5a019ea build(deps): bump aes...

dependabot[bot]

``` error[E0658]: const generics are unstable --> /home/runner/.cargo/registry/src/github.com-1ecc6299db9ec823/postcard-0.7.3/src/accumulator.rs:65:34 | 65 | pub struct CobsAccumulator { | ^ | = note: see issue #74878 for more information error[E0658]: const generics are...

laysakura

build(deps): update crypto_box requirement from 0.6 to 0.7

1

Updates the requirements on [crypto_box](https://github.com/RustCrypto/nacl-compat) to permit the latest version. Commits See full diff in compare view Dependabot will resolve any conflicts with this PR as long as you don't...

dependabot[bot]

https://cloud.google.com/kms/docs/additional-authenticated-data

laysakura

Random nonces are not secure

1

Via https://github.com/laysakura/serde-encrypt/blob/9ba98fa857464e2e75c017407c0a1345d697b896/src/traits/serde_encrypt_public_key.rs#L60 While the probability can be astronomically low given a large enough nonce, the probability that a nonce will be reused still exists when it is random. Reusing a...

alcore

feat test: different cipher-text with the same plain-text

2

especially the first encryption in a process.

laysakura

https://docs.rs/crypto_box/0.6.0/crypto_box/#in-place-usage-eliminates-alloc-requirement

laysakura

feat: Specify padding size from user to mitigate analysis that rely on the exact size of encrypted payload

1

from reddit comment: https://www.reddit.com/r/rust/comments/nz2mq1/release_serdeencrypt_publickey_sharedkey/h1nzhcb/?utm_source=reddit&utm_medium=web2x&context=3

laysakura

laysakura