trussed icon indicating copy to clipboard operation
trussed copied to clipboard

Published 20 hours ago • verified publisher icon trussed-dev

Upgrade dependencies

Open sosthene-nitrokey opened this issue 2 years ago • 2 comments

sosthene-nitrokey avatar Oct 06 '22 09:10 sosthene-nitrokey

This PR updates all dependencies. This is required to use recent versions of Zeroize because chacha20 v0.7 has an upper bound to 1.4.

sosthene-nitrokey avatar Oct 06 '22 09:10 sosthene-nitrokey

We need to check that the postcard update does not break anything

sosthene-nitrokey avatar Oct 12 '22 15:10 sosthene-nitrokey

Please rebase and drop the postcard update and revert commits.

robin-nitrokey avatar Feb 13 '23 12:02 robin-nitrokey

I rebased it.

sosthene-nitrokey avatar Feb 13 '23 15:02 sosthene-nitrokey

Thanks! When updating our fork, I realized that updating blake2 breaks the HmacBlake2s mechanism. This will probably cause the CI to fail. It should be easy to fix by replacing Hmac<blake2::Blake2s> with SimpleHmac<blake2::Blake2s256> and removing the unused NewMac import.

robin-nitrokey avatar Feb 13 '23 15:02 robin-nitrokey

I rebased it on top of latest main. This upgrades all dependencies that can be upgraded without issues.

  • Bitflags will be upgraded in a separate PR (looks like it's much less straightforward than the other ones.
  • Postcard is not updated to not break compatibility with deployed firmware.

sosthene-nitrokey avatar Apr 14 '23 08:04 sosthene-nitrokey