From 054c5f785d21344a2ef8517c26956a9be55b9503 Mon Sep 17 00:00:00 2001
From: Ilka Schulz <ilka@rosenpass.eu>
Date: Tue, 9 Jun 2026 18:52:56 +0200
Subject: [PATCH] migrate from paste to pastey due to
 https://osv.dev/vulnerability/RUSTSEC-2024-0436

---
 Cargo.lock           | 10 ++++++++--
 Cargo.toml           |  2 +-
 oqs/Cargo.toml       |  2 +-
 oqs/src/kem_macro.rs |  2 +-
 rosenpass/Cargo.toml |  2 +-
 5 files changed, 12 insertions(+), 6 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 2ea5d5d7..1159fdb2 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1666,6 +1666,12 @@ version = "1.0.15"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a"
 
+[[package]]
+name = "pastey"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2ee67f1008b1ba2321834326597b8e186293b049a023cdef258527550b9935b4"
+
 [[package]]
 name = "pin-project-lite"
 version = "0.2.17"
@@ -1952,7 +1958,7 @@ dependencies = [
  "log",
  "memoffset",
  "mio",
- "paste",
+ "pastey",
  "procspawn",
  "rand 0.10.1",
  "rosenpass-cipher-traits",
@@ -2039,7 +2045,7 @@ name = "rosenpass-oqs"
 version = "0.1.0"
 dependencies = [
  "oqs-sys",
- "paste",
+ "pastey",
  "rosenpass-cipher-traits",
  "rosenpass-constant-time",
  "rosenpass-secret-memory",
diff --git a/Cargo.toml b/Cargo.toml
index 3159791c..933c1547 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -36,7 +36,7 @@ base64ct = { version = "1.6.0", default-features = false }
 zeroize = "1.8.1"
 memoffset = "0.9.1"
 thiserror = "2"
-paste = "1.0.15"
+pastey = "0.2.3"
 env_logger = "0.11.10"
 toml = "1.1.2"
 static_assertions = "1.1.0"
diff --git a/oqs/Cargo.toml b/oqs/Cargo.toml
index 481dc8cc..4549c089 100644
--- a/oqs/Cargo.toml
+++ b/oqs/Cargo.toml
@@ -14,7 +14,7 @@ rust-version = "1.88.0"
 rosenpass-cipher-traits = { workspace = true }
 rosenpass-util = { workspace = true }
 oqs-sys = { workspace = true }
-paste = { workspace = true }
+pastey = { workspace = true }
 
 [dev-dependencies]
 rosenpass-secret-memory = { workspace = true }
diff --git a/oqs/src/kem_macro.rs b/oqs/src/kem_macro.rs
index 9117dd77..ee786c15 100644
--- a/oqs/src/kem_macro.rs
+++ b/oqs/src/kem_macro.rs
@@ -2,7 +2,7 @@
 
 /// Generate bindings to a liboqs-provided KEM
 macro_rules! oqs_kem {
-    ($name:ident, $algo_trait:path) => { ::paste::paste!{
+    ($name:ident, $algo_trait:path) => { ::pastey::paste!{
         #[doc = "Bindings for ::oqs_sys::kem::" [<"OQS_KEM" _ $name:snake>] "_*"]
         mod [< $name:snake >] {
             use rosenpass_cipher_traits::primitives::{Kem, KemError};
diff --git a/rosenpass/Cargo.toml b/rosenpass/Cargo.toml
index 5cacc8f1..e5c1bc7d 100644
--- a/rosenpass/Cargo.toml
+++ b/rosenpass/Cargo.toml
@@ -55,7 +55,7 @@ anyhow = { workspace = true }
 static_assertions = { workspace = true }
 memoffset = { workspace = true }
 thiserror = { workspace = true }
-paste = { workspace = true }
+pastey = { workspace = true }
 log = { workspace = true }
 env_logger = { workspace = true }
 serde = { workspace = true }