Tony Arcieri

Crate Trustworthiness

2

I think the issue of "which crates can we trust", where trust is some sort of crate reputation system, came up a lot in the discussions I participated in so...

Better dependency injection syntax

1

The current dependency injection syntax is pretty gnarly and looks like this: ```rust #[derive(Component, Debug)] #[component(inject = "init_foo(depname::Foo)")] #[component(inject = "init_bar(depname::Bar)")] pub struct MyComponent { pub fn init_foo(&mut self, foo:...

rust: `const fn` support

4

I've started work integrating the Rust output from fiat-crypto into the [RustCrypto `p384` crate](https://github.com/RustCrypto/elliptic-curves/tree/master/p384). One of the biggest hurdles I've encountered is that in our other elliptic curve crates we...

Feature request: OpenSSL::PKey::RSA#size

14

It would be nice to be able to introspect on the sizes of RSA keys: ``` pry(main)> key.size NoMethodError: undefined method `size' for # ``` Here is an ugly way...

Communication channels

29

This is a tracking issue to discuss what communication channels we should use going forward. Open questions: 1. Chat: should we set up a Discord/Matrix/Zulip for this group? Should we...

As proposed by @ernestkissiedu, this is a tracking issue for putting together a vision document, inspired by what @nikomatsakis proposed for async Rust: https://blog.rust-lang.org/2021/03/18/async-vision-doc.html

We could potentially adapt the [ECDSA public key recovery algorithm implemented in `k256`](https://github.com/RustCrypto/elliptic-curves/blob/c48ae66/k256/src/ecdsa/recoverable.rs#L177-L193) into a generic implementation which works with any elliptic curve. It could use [`ecdsa::RecoveryId`](https://docs.rs/ecdsa/latest/ecdsa/struct.RecoveryId.html) as an input...

signature: `Keypair` design problems

2

The `Keypair` crate probably should've received more design work prior to its initial release. This is a tracking and discussion issue for problems around the design. #1107 relaxed the trait...

It would be nice to be able to zeroize the stack, particularly being able to track how deep the stack grew while executing a particular section of code, and then...

This guide enumerates the minimum settings required to slow attackers to