dependabot[bot] and GitHub
d97b04d19d
chore(deps): bump base64 from 0.22.1 to 0.23.0
...
Bumps [base64](https://github.com/marshallpierce/rust-base64 ) from 0.22.1 to 0.23.0.
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md )
- [Commits](https://github.com/marshallpierce/rust-base64/compare/v0.22.1...v0.23.0 )
---
updated-dependencies:
- dependency-name: base64
dependency-version: 0.23.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-27 02:18:19 +00:00
Ilka Schulz and GitHub
5c8810a96e
chore(deps): bump the weekly-cargo-patches group with 2 updates ( #911 )
2026-07-20 12:01:18 +02:00
dependabot[bot] and GitHub
ac6ecd69eb
chore(deps): bump tokio from 1.52.3 to 1.53.0
...
Bumps [tokio](https://github.com/tokio-rs/tokio ) from 1.52.3 to 1.53.0.
- [Release notes](https://github.com/tokio-rs/tokio/releases )
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.52.3...tokio-1.53.0 )
---
updated-dependencies:
- dependency-name: tokio
dependency-version: 1.53.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-19 12:30:23 +00:00
dependabot[bot] and GitHub
f7ad36a515
chore(deps): bump the weekly-cargo-patches group with 2 updates
...
Bumps the weekly-cargo-patches group with 2 updates: [thiserror](https://github.com/dtolnay/thiserror ) and [anyhow](https://github.com/dtolnay/anyhow ).
Updates `thiserror` from 2.0.18 to 2.0.19
- [Release notes](https://github.com/dtolnay/thiserror/releases )
- [Commits](https://github.com/dtolnay/thiserror/compare/2.0.18...2.0.19 )
Updates `anyhow` from 1.0.103 to 1.0.104
- [Release notes](https://github.com/dtolnay/anyhow/releases )
- [Commits](https://github.com/dtolnay/anyhow/compare/1.0.103...1.0.104 )
---
updated-dependencies:
- dependency-name: thiserror
dependency-version: 2.0.19
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: weekly-cargo-patches
- dependency-name: anyhow
dependency-version: 1.0.104
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: weekly-cargo-patches
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-19 12:30:03 +00:00
Ilka Schulz
ff2eff2300
cargo update
2026-07-16 10:07:16 +02:00
Ilka Schulz
a13f859f4d
upgrade dependency env_logger
2026-06-30 09:58:00 +02:00
Ilka Schulz
46f8d62895
upgrade dependency assert_tv
2026-06-30 09:56:35 +02:00
Ilka Schulz
fa997d63b6
upgrade dependency anyhow from 1.0.102 to 1.0.103 (fixes UB advisory https://github.com/dtolnay/anyhow/issues/451 )
2026-06-30 09:54:54 +02:00
Ilka Schulz
4282ae5c70
cargo update
2026-06-23 09:56:20 +02:00
dependabot[bot] and GitHub
78d9cfed42
chore(deps): bump log from 0.4.32 to 0.4.33
...
Bumps [log](https://github.com/rust-lang/log ) from 0.4.32 to 0.4.33.
- [Release notes](https://github.com/rust-lang/log/releases )
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/log/compare/0.4.32...0.4.33 )
---
updated-dependencies:
- dependency-name: log
dependency-version: 0.4.33
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-22 23:13:19 +00:00
Ilka Schulz
4a9738614e
upgrade dependency zerocopy to 0.8
2026-06-20 14:26:17 +02:00
Ilka Schulz
74463e618c
upgrade allocator-api2{-tests} to v0.3
2026-06-20 13:04:14 +02:00
Ilka Schulz
0508cbc64e
remove procspawn dependency from crates which do not use it anyways
2026-06-20 11:44:02 +02:00
leemeo3 and Ilka Schulz
cf7c9a25c9
Use shake without sha3
...
Rebase the sha3 upgrade work onto current main, take the digest traits from the shake crate, and remove the direct sha3 dependency from the graph.
2026-06-15 15:07:03 +02:00
Ilka Schulz
168160dc8a
upgrade zeroize to 1.9
2026-06-15 13:22:34 +02:00
Ilka Schulz
38c0320ff6
upgrade test_bin from 0.5 to 0.6
2026-06-15 13:21:44 +02:00
leemeo3 and Karolin Varner
bdd3e49af7
Remove atomic-polyfill from dependency graph
2026-06-13 12:24:28 +02:00
Ilka Schulz
bddf44ecc9
upgrade dependency: signal-hook-mio
2026-06-09 12:16:22 +02:00
Ilka Schulz
7d52584d40
upgrade dependency: test_bin
2026-06-09 11:35:29 +02:00
Ilka Schulz
b5fd6b96db
upgrade dependency: home
2026-06-09 11:04:11 +02:00
Ilka Schulz
565cf1bf2d
upgrade dependency: signal-hook
2026-06-09 11:01:43 +02:00
Ilka Schulz
0a87ab13a6
upgrade dependency: clap_mangen
2026-06-09 10:59:05 +02:00
Ilka Schulz
54ddf3d0ec
upgrade dependency rtnetlink and fix regressions
2026-06-09 10:24:21 +02:00
dependabot[bot] and GitHub
23cf9a8eff
chore(deps): bump hex-literal from 0.4.1 to 1.1.0
...
Bumps [hex-literal](https://github.com/RustCrypto/utils ) from 0.4.1 to 1.1.0.
- [Commits](https://github.com/RustCrypto/utils/compare/hex-literal-v0.4.1...hex-literal-v1.1.0 )
---
updated-dependencies:
- dependency-name: hex-literal
dependency-version: 1.1.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-08 23:13:41 +00:00
Ilka Schulz
fd82409870
upgrade dependency: command-fds
2026-06-08 17:42:05 +02:00
Ilka Schulz
3a5ac78c03
upgrade dependency: criterion
2026-06-08 17:17:12 +02:00
Ilka Schulz
4a5d032161
upgrade dependency: toml
2026-06-08 17:14:13 +02:00
Ilka Schulz
d854d0b3e5
upgrade dependency: env_logger
2026-06-08 17:14:13 +02:00
Ilka Schulz
039c8ef341
cargo update
2026-06-08 13:53:02 +02:00
Ilka Schulz
e0e9362046
also remove libcrux as it is no longer needed
2026-06-08 11:06:38 +02:00
Ilka Schulz
be2b002fe4
remove libcrux-* (see PR for reasons) but leave libcrux and libcrux-test-utils in
2026-06-08 10:58:13 +02:00
Ilka Schulz
475d69333d
upgrade netlink dependency
2026-06-07 15:52:13 +02:00
Ilka Schulz
f0a4526426
upgrade thiserror and genetlink
2026-06-07 14:50:15 +02:00
Ilka Schulz
8d2b23d73e
cargo update --workspace tempfile
2026-06-07 14:01:44 +02:00
Ilka Schulz
78664898fd
upgrade rustix (old version not compatible with Rust edition2024 anymore, )
2026-06-07 13:56:33 +02:00
Ilka Schulz
c658c7258b
crate ctrl-async has been renamed to ctrlc
2026-06-07 13:52:21 +02:00
Ilka Schulz
e733a5575e
upgrade oqs-sys from 0.9.1 to 0.11.0
2026-06-07 12:37:35 +02:00
Ilka Schulz
eec3ee6308
cargo: update rand to 0.10.1 (required by security advisory)
2026-06-07 10:29:09 +02:00
Karolin Varner and Ilka Schulz
8c2b60f898
fix: Security updates
2026-05-14 19:44:58 +02:00
wucke13 and Karolin Varner
55ab57a1d0
fix: remove TODO via update of assert_tv
...
Before the fix from https://github.com/aminfa/assert_tv/issues/1 ,
`assert_tv` wouldn't pass through `#[cfg_attr(miri, ignore)]`. Now that
it is fixed, this works, thus we have one less miri test case failing.
Signed-off-by: wucke13 <wucke13+github@gmail.com >
2025-09-05 16:22:02 +02:00
Karolin Varner
3c6a3a3735
fix: Upgrade stacker
...
Potentially fixes issues with flaky tests using stacker.
2025-09-05 16:12:11 +02:00
Amin Faez
223fbd551f
feat: Derandomize the rosenpass protocol by adding testvectors
...
- Introduced a new module `test_vector_sets.rs` containing test vector definitions for deterministic protocol testing.
- Added a new test file `test_vector_crypto_server.rs` to validate the protocol implementation using captured internal randomness.
- Added serialization and deserialization of `Secret`, `Public`, and `PublicBox` types in `serialization.rs`.
- Added necessary dependencies in `Cargo.toml` for test vectors: assert_tv, serde and base64
- Updated audit records in `audits.toml` and `imports.lock` for new dependencies.
2025-08-28 11:41:58 +02:00
dependabot[bot] and GitHub
5b8760cb46
chore(deps): bump libfuzzer-sys from 0.4.9 to 0.4.10
...
Bumps [libfuzzer-sys](https://github.com/rust-fuzz/libfuzzer ) from 0.4.9 to 0.4.10.
- [Changelog](https://github.com/rust-fuzz/libfuzzer/blob/main/CHANGELOG.md )
- [Commits](https://github.com/rust-fuzz/libfuzzer/compare/0.4.9...0.4.10 )
---
updated-dependencies:
- dependency-name: libfuzzer-sys
dependency-version: 0.4.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-08 23:13:08 +00:00
dependabot[bot] and GitHub
83ad7652bc
chore(deps): bump anyhow from 1.0.96 to 1.0.98
...
Bumps [anyhow](https://github.com/dtolnay/anyhow ) from 1.0.96 to 1.0.98.
- [Release notes](https://github.com/dtolnay/anyhow/releases )
- [Commits](https://github.com/dtolnay/anyhow/compare/1.0.96...1.0.98 )
---
updated-dependencies:
- dependency-name: anyhow
dependency-version: 1.0.98
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-07 23:44:29 +00:00
Karolin Varner and GitHub
de72e4a2a1
Use serde for JSON-encoding benchmark data ( #667 )
2025-08-07 16:40:16 +02:00
dependabot[bot] and Karolin Varner
b905c0aa06
chore(deps): bump log from 0.4.26 to 0.4.27
...
Bumps [log](https://github.com/rust-lang/log ) from 0.4.26 to 0.4.27.
- [Release notes](https://github.com/rust-lang/log/releases )
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/log/compare/0.4.26...0.4.27 )
---
updated-dependencies:
- dependency-name: log
dependency-version: 0.4.27
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-07 16:03:32 +02:00
Jan Winkelmann (keks) and Jan Winkelmann
7908359eab
Use serde for JSON-encoding benchmark data
2025-08-06 17:58:38 +02:00
Karolin Varner
3c0e167347
fix(rosenpass): Integrate signal handlers with mio
...
With this commit, rosenpass uses a signal handler based on the signal-hook-mio crate.
Even though, in this commit, no rosenpass-rp code is touched, this also
fixes the signal handling in rosenpass-rp. The way rosenpass is
integrated in rp is a bit of a hack – it just directly embeds
rosenpass in the same process (though on a dedicated thread). For this
reason, rp now just inherits rosenpass' signal handlers. The
rosenpass event_loop() will terminate. The main loop of `rp` just spends
most of the time waiting for rosenpass itself to finish, and exits when
it finishes.
Unfortunately, this means we are not using signalfd(2)[^0]; the
signal-hook-mio crate appears to use a pipe-based mechanism to deliver
events to mio instead.
This may not be such a bad thing, as signalfd has some severe drawbacks
with respect to subprocesses and masked signals[^1].
Fixes : #358 (https://github.com/rosenpass/rosenpass/issues/385 )
Fixes : #522 (https://github.com/rosenpass/rosenpass/issues/522 )
Fixes : #678 (https://github.com/rosenpass/rosenpass/pull/678 )
[^0]: https://unixism.net/2021/02/making-signals-less-painful-under-linux/
[^1]: https://ldpreload.com/blog/signalfd-is-useless?reposted-on-request
2025-08-04 08:44:15 +02:00
Karolin Varner
6f6fdef542
chore(rp): Rename crate rp -> rosenpass-rp
2025-08-04 08:44:15 +02:00
Karolin Varner
c689f8e78a
feat(rp): Enable logging
2025-08-04 08:44:15 +02:00